Iptables is a module that provides the Linux operating system functions of firewall, NAT and logging of data traveling over a computer network.

learn more… | top users | synonyms

1
vote
1answer
975 views

loopback error, home network

I've setup my router to forward port 80 through to my computer, so I can access it from a dyndns.org domain. The domain and the ip both seem to be totally working, externally (can access it from ...
1
vote
1answer
2k views

DD-WRT OpenVPN client - cannot get “lan” connected device to route traffic

I have OpenVPN client setup on DD-WRT openvpn small. client connects and can use traceroute to verify everything is tunneling out the openvpn connection. ip_forward is 1. iptables -t nat -A ...
1
vote
1answer
155 views

How to setting up iptables for traffic fowarding on port 80 from specific sources

Im running a web server on port80, but i want traffic coming from ip 212.333.111.222 on port 80 to be fowarded to port 9020 on the same server that my web server is rinning at that is my sshd port
1
vote
1answer
258 views

One website not connecting over shared connection

A website is not opening on a computer that's connected via shared connection (not exactly "shared"). Pinging the website gets Packet filtered message. The setup of my home network is done by Ubuntu ...
1
vote
0answers
31 views

Limit connections per second with iptables/ufw

How can I tweak the following entries to allow more requests per second? Maximum hitcount is 20 if you do not edit some other config files. The entry of my /etc/ufw/before.rules file -A ...
1
vote
2answers
81 views

Openvpn connects and responds to ping but no internet access

I have an openvpn server running on raspian and a tunnelblick client on osx. I can connect to the VPN just fine but I have no intenet access. The server responds to ping just fine and the port is open ...
1
vote
1answer
25 views

Iptables: Filtering string encrypted by ssl

I need to filter (send to BANRULES set) incoming http/https packets with a certain string (matchword). I do it easy when ssl is not in use (port 80): iptables -A INPUT -p tcp -m tcp --dport 80 -m ...
1
vote
1answer
33 views

How to forward http request to a proxy server?

I have an Internet Linux server and my client computer (running windows) accesses internet via a SSH tunnel to the the server. Now for some reason this server can only accesses internet by a http ...
1
vote
0answers
37 views

Nodejs remote debugging ports closed

I have a problem with nodejs remote debugging. I'm using centos on remote server and phpstorm on my PC. When I open putty I type the command: node --debug-brk=5858 main_server.js, and get the ...
1
vote
1answer
42 views

Debian 7 - iptables 'filter' not supported?

Am attempting to forward/ masquerade connections from WLAN0 to ETH0 as follows: sudo iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE sudo iptables -A FORWARD -i eth0 -o wlan0 -m state --state ...
1
vote
0answers
25 views

Preserve NAT mappings across reboot

My Linux router is able to reboot and reconnect all network interfaces pretty fast (~10 seconds, thanks to systemd and a SSD disk), and comes up with the same IP addresses. Unfortunately the reboot ...
1
vote
1answer
37 views

Trouble with last DROP rule in iptables

Let's say I want four ports to be opened for any incoming packets so I made this ruleset: #> iptables -L -v Chain INPUT (policy ACCEPT 20 packets, 1190 bytes) pkts bytes target prot opt in ...
1
vote
1answer
87 views

Make application use specific network interface

I have an openvpn connection and I need it to work only for one application, this app uses an specific local port. I used route-nopull on my openvpn config file and then: ip route add default via ...
1
vote
1answer
26 views

Filtered port with virtual server setup on a NAT

I have a Symphony SY602 ADSL router and I want configure a dynamic DNS to access my system remotely. I made a NAT virtual server in routers configuration and this is what I configured: Server Name ...
1
vote
1answer
184 views

How to force Google safesearch on entire network

I've a problem filtering web searches on Google domains. Currently I've a linux openVPN Server running with openDNS "family block". I can block a lot of websites with dangerous content and it's ok. ...
1
vote
0answers
649 views

OpenVPN won't connect from remote location

I set up OpenVPN on a linux machine in my basement. I'm able to connect from my Windows 8.1 machine without an issue when I'm connected to the local network. In this instance, I set the config file ...
1
vote
1answer
153 views

allow incoming ssh with openvpn client

I have set up an OpenVPN client on my home router. The moment the tunnel goes up, I can no longer ping my router from the internet using its WAN_IP. I would like to allow certain incoming connections ...
1
vote
0answers
28 views

How can I efficiently filter Dos packets? [duplicate]

I have recently been the victim of some Dos attacks. The facts : I received a very high amount of packets saturating my connection and preventing me from accessing the Internet during one hour ...
1
vote
0answers
83 views

Site to Site VPN - Openswan and CISCO A2A

Below is the diagram that the VPN connection between Openswan server and CISCO A2A. client A and B are remote hosts with static ips. client X and Y are behind the Cisco firewall. I can see ...
1
vote
1answer
66 views

Open ports in Ubuntu 13.10 server

Im setting up a realtime gameserver fps-game, and then i need to configure ports. Just to mention, i will setup multiple servers for this game on the same ip address, which means i must open multiple ...
1
vote
0answers
377 views

Intermittent disconnections when using OpenVPN over SSH tunnel; possible iptables issue?

I've recently set up a Debian Wheezy server with OpenVPN to help out some friends in areas where internet censorship is a problem (including the blocking of VPN traffic in general). To overcome this, ...
1
vote
0answers
152 views

iptables configuration on Windows Azure (CentOS 6.5) for endpoint load-balanced set

I created 2 VMs (CentOS6.5) on Windows Azure for Postgresql database and HA cluster, everything works fine except when I set iptables service on, the endpoint load-balanced set is down. for security ...
1
vote
2answers
89 views

Iptables rules to only whitelist SIP providers

I have an Asterisk box sitting behind an ADSL router/modem. There are no other services on the Asterisk box, just telephony. I am getting a lot of traffic which I think are SIP probes. I've ...
1
vote
0answers
162 views

Allow internet access to intranet only users using Nginx on Ubuntu

I need to allow some users who only have access to the intranet to access one specific internet site. I'm doing this by using Nginx as a reverse proxy. To test this, I would like to block all internet ...
1
vote
5answers
653 views

How to forward traffic using iptables rules?

I am new to iptables and I have been doing Google searches for a few days now without finding a good solution to this problem. I have computer A with a public ip address (say 192.0.2.1) that can ...
1
vote
1answer
41 views

Add IPtables rule by script at the request of another computer

I wonder, is it possible to make an script, which adds rule in iptables by request from other pc? I mean, script "knows" what to do, but addres for rule comes from request. And how do you think it ...
1
vote
1answer
83 views

Bitbucket SSH and iptables

I'm a newbie in iptables to be honest. I have some basic rules. Everything is blocked by default. iptables -t filter -F iptables -t filter -X iptables -t filter -P INPUT DROP iptables -t filter -P ...
1
vote
1answer
57 views

Transparently proxifying certain devices on the network

I'm using my computer as wireless access point and router to my home network using hostapd under Ubuntu 14.04. I want to transparently proxify certain wifi devices in the network (identified by their ...
1
vote
1answer
759 views

iptables blocking all traffic even with ports opened

Simple as I can put it: I can't access my servers with iptables enabled, with default rules. Need to disable iptables to get access. Trying to find the cause. Only difference in setup type is layer3 ...
1
vote
0answers
163 views

Can't connect to web server from outside my network

I have a Debian-based server that I would like to be able to access from the Internet (no domain name yet, I'm just trying to get it working for now). I already have port forwarding set up on my ...
1
vote
0answers
221 views

Conntrack/NAT's port mapping for a specific port breaks whenever that port's service is shutdown for too long. How can I fix this?

Linux Gentoo 3.13.6-hardened-r3 #1 SMP Sat Apr 12 09:17:25 EDT 2014 x86_64 Intel(R) Core(TM)2 CPU 6300 @ 1.86GHz GenuineIntel GNU/Linux hardened with grsecurity and selinux with a strict policy in ...
1
vote
0answers
141 views

Segregating/Separating a device (ATT 3G Microcell) from internal network without using DMZ

I would like to put the ATT 3G Microcell in an isolated network from a network that has the rest of my devices, by which I mean I want the ATT 3G Microcell to only be able to access the Internet, but ...
1
vote
0answers
161 views

How to stream WiFi cameras over a Linux gateway to my laptop using iptables?

My setup is as follows: Linux gateway has one WLAN configured as WiFi client (192.168.0.100) to a Linksys WiFi AP(192.168.0.1). There are three WiFi cameras connected as WiFi clients (192.168.0.101, ...
1
vote
0answers
679 views

Synergy client won't connect, despite open port?

I want to use a Debian KDE desktop computer (network name bradbury) as the server, and a Windows 7 laptop (network name Clarke) as the client. I have used this setup before without problems, but then ...
1
vote
1answer
95 views

Unable to ping server

I have a Linux server that seems to have lost the ability to respond to a ping.. I recently installed Nagios on another system and need to have this Ubuntu server answer up to a ping.. I'm using ...
1
vote
0answers
225 views

Access to a NATed LAN Network without public ip address using VPN and Apache Virtual Host

my question is: I need to access from the outside to a DVR that in my LAN has the local ip: 192.168.1.x I have multiple LANs located in 3 different places not connected each other at the moment. I am ...
1
vote
1answer
619 views

What does this iptables rule mean: tcp flags:0x06/0x02 TCPMSS clamp to PMTU?

What does this iptables rule mean: tcp flags:0x06/0x02 TCPMSS clamp to PMTU? Doing iptables -vnL on my DD-WRT router shows the following rule in the FORWARD chain: TCPMSS tcp -- * * 0.0.0.0/0 ...
1
vote
1answer
571 views

How to create a local-remote-local tunnel to a specific port using ssh

I'm able to establish an ssh connection from my windows computer (localhost - eth1) to my linux computer (remotehost - eth0) by doing: ssh user@192.168.1.100 Instead of using that, because I use ...
1
vote
1answer
117 views

iptables password protection followup

This is a follow up on my other post about this iptables: plaintext password protection I could not get help in the old topic...I just really need some help... Here is the command I tried, something ...
1
vote
1answer
126 views

Use IPTables to force TCP packets over router

To test a TCP-stack program, I need to get the TCP packets via the router. When I try to connect to my server program via the router, the OS does not hit the router as the destination IP is the same ...
1
vote
0answers
142 views

“iptables -P OUTPUT DROP” blocks DDWRT's web interface

When I do iptables -P OUTPUT DROP it blocks DDWRT's web interface. That is I am not able to access http://192.168.1.1 via Firefox. I put this rules before changing the chain policy to drop: ...
1
vote
0answers
194 views

using iptables to filter vboxnet (virtualbox host only network)

Im trying to use iptables to filter the traffic coming from a guest OS running on virtualbox. The guest is configured to use a host only adapter for the network, and my Ubuntu host is configured to ...
1
vote
0answers
221 views

Ping through GRE tunnel discarded between 2 interfaces of a router - Ping does not reach subnet

I have an interesting issue that I hope someone can help with. I am trying to create a GRE tunnel between 2 routers (running Linux Ubuntu 12.04) and pass traffic between 2 subnets trough this tunnel. ...
1
vote
1answer
218 views

excluding port from VPN client

I use hidemyass which is a vpn service. I use it for privacy reasons. The main purpose of the VPN is for my web browsing. How can I exclude certain ports from using the VPN connection? For example: ...
1
vote
1answer
1k views

Sharing OpenVPN to specified IP-range on the local LAN

Is it possible and how to share OpenVPN (currently Anonine) -connection to specified IP-addresses on the local LAN? Local LAN consist windows- and linux machines and Android devices. Current setup, ...
1
vote
0answers
73 views

Define IPTABLES rule

I am working with a linux based UTM appliance and have some disagreement with the client on the operation. THere is a standard GUI to configure port forwards in the firewall but for some reason he ...
1
vote
1answer
230 views

Adding a custom SSH port to Ubuntu 12.04 LTS through UFW

I am trying to configure a Ubuntu 12.04 based VPS and I have changed my ssh port from 22 to 803 and everything worked fine. After this I've installed UFW and now I can't login using SSH. Before I ...
1
vote
0answers
245 views

iptables load balancing for TLS with request routing on the same connection

I am trying to set up iptables rules for TLS connection. I have three internal IP in my machine and I route requests coming on public IP at port 443 to each of these internal IP in RR. -A PREROUTING ...
1
vote
0answers
144 views

nc connection refused even on loopback

I'm working on an embedded linux system, which appears to be networked correctly and is running ssh (dropbear) and rpcbind. I'm setting up a server application on it, and every single thing I try ...
1
vote
1answer
3k views

Redirect incoming https to local ip with iptables

I have a router with 1 network interface (eth0, public ip) and an alias for eth0:0, local ip 192.168.1.1. I want to redirect all incoming https (443) traffic to another server. I tried it with ...