Iptables is a module that provides the Linux operating system functions of firewall, NAT and logging of data traveling over a computer network.

learn more… | top users | synonyms

1
vote
0answers
68 views

Lubuntu UFW does not respond

I have been using ubuntu for a long time. Nowadays, I wanted explore lubuntu. However, I cannot configure ufw. Actually I can but it does not respond. Basically, I cannot get the result of "ufw ...
1
vote
1answer
238 views

iptables, redirect from ip address to loopback

I have an Apache web server listening in 127.0.0.1:63280 eth0 has IP: 172.200.200.200.1, and try to connect from workstation IP 172.200.200.200 iptables -t nat -A PREROUTING -s 172.200.200.200.1 -p ...
0
votes
1answer
311 views

Prevent device from reaching WAN traffic (MAC address for example) - OpenWRT

I want to forbid a device on my network from accessing the internet. Computers still have to communicate with the device, and vice versa. OpenWRT version: OpenWrt Attitude Adjustment 12.09
0
votes
1answer
215 views

How can I detect long-lived connections and mark them for shaping

I would like to detect TCP connections which have been open for more than one minute (or for greater than N bytes, or M packets), so I can classify them as bulk traffic ("downloads") and de-prioritise ...
1
vote
1answer
118 views

How iptables behaves on timezone change?

I have doubt how iptables keep changing the info in iptables when timezone is change. I am using iptables s v 1.4.8 I have blocked one IP with following details # date Thu Jun 6 12:46:42 IST ...
1
vote
0answers
113 views

Change UDP port with iptables for VPN clients

What I want to do is say that for all UDP connections on interface ppp0 that have a destination port of 53, change that destination port to 1053. I am attempting to change the destination port of UDP ...
0
votes
1answer
562 views

Iptables drop forward packets to specific host

I am having trouble isolating a specific host from others on my lan. What I am trying to do is only allow communication between 192.168.0.2. and 192.168.0.8 as well as not allow any other host to ...
7
votes
2answers
5k views

No idea what is listening on port 80 in OS X

I'm on OSX Mountain Lion 10.8.3, and I've freshly rebooted my Mac. I want to start a service (like Apache on port 80), but there is already something going on with port 80: telnet localhost 80 ...
0
votes
1answer
118 views

Can iptables be used to convert a single-homed host into a NAT server?

I have an Internet-enabled machine, HostA, with one NIC. I have another machine, HostB, with one NIC that is not Internet-enabled. I would like HostB to be able to share HostA's Internet-connection. ...
0
votes
1answer
241 views

How do I drop the entire INPUT chain from iptables?

On Linux, I've been building a malicious IP list. I assume the DDOS is now gone. How do I drop the entire INPUT chain from iptables, without affecting the FORWARD or OUTPUT chains?
0
votes
1answer
66 views

Linux gateway / DNAT: restrict to certain interfaces

I have various machines with a number of network interfaces: eth0: a local LAN eth1: sometimes used for the connection to the Internet gateway ppp0: Modem uplink as an alternative to eth1 tun0: ...
2
votes
1answer
147 views

Allow shell access for key holders OR password login for whitelisted IP addresses

As a first line of defense against brute-force attacks, I've restricted SSH login attempts with TCP wrappers (denying access by default, and maintaining an IP whitelist in /etc/hosts.allow). However, ...
1
vote
1answer
771 views

Limit UDP outbound traffic to loopback (localhost) instead of eth0

Atm i'm testing it on Ubuntu Server at VMware Workstation + Windows 7 local host with bridged connection. Later this has to go to live server. I have VLC streaming video file on Ubuntu with cvlc ...
0
votes
2answers
33 views

Problems in creating rules in iptable

Hello to all :) I need a little help with creating a rules. Im starting to learn iptables and firewalls but I have some questions. I need to allow HTTP communication only from PcA to PcB./ My code is: ...
1
vote
2answers
490 views

How do I route a port range in a linux host to a guest VM?

I am trying to redirect a certain port range in a linux host to one of its guest VMs. I would like for this redirection to apply to all the host's interfaces, including localhost. I was able to do: ...
0
votes
1answer
182 views

Updating iptables via ddclient

TL;DR Is there anything I can do to change iptables from ddclient (with user ddclient)? The story behind I have a computer that uses dyndns to be addressable from outside. Whenever the provider ...
1
vote
1answer
1k views

iptables rule for loopback interface lo

I want to test some network performance, where I need to use a tcp client to connect to a tcp server program on the same host, so I used localhost(127.0.0.1) however, when the TCP SYN is sent, it get ...
1
vote
2answers
612 views

Iptables configuration to allow Steam Client

I recently got and setup a small linux (Debian) router box. I'm adding it to an existing network to create a small subnet with specific properties, namely internet content filtering. I'm highjacking ...
1
vote
1answer
955 views

Can't connect to SSH over VPN when using 3G only

I'm having a bit of a strange problem that I'm not sure how to debug/fix. I have a Raspberry Pi connected to a Windows VPN via either a wired interface or 3G dongle. With the wired interface I can ...
0
votes
1answer
109 views

How to drop IP packets received on the default route interface when no other than default route is found?

I am setting up a router based on a linux kernel. As expected, ipv4 packets received on the interface used by default route are sent back to the same interface in case no other route is found. Is ...
0
votes
0answers
720 views

How does iptables masquerading allow to access a different local subnet?

My Linksys router (IP 192.168.1.1 inside a /24 subnet) is connected to my ADSL modem (IP 10.0.0.138 inside a /24 subnet) to establish an internet connection via PPPoE. To be able to access the modem's ...
1
vote
3answers
472 views

linux routing outbound port 80 traffic via ssh tunnel, iptables, or a simple route

I have two hosts, A and B. Host A hosts services on port 8080 and has outbound internet firewall rules allowing port 80 and 443 access to Host C. Host B is on the same subnet as Host A. Host B is ...
0
votes
1answer
703 views

using iptables to prevent RST related to a specific port

I have a program which uses libpcap to capture incoming TCP SYN packets, these SYN packets are destined for a specific port. But I have no tcp listening socket for that port, so in practice, the OS ...
0
votes
3answers
106 views

iptables rules are not in action

I have a iptable rule file, on the INPUT chain I have -A INPUT -i em1 -p tcp -m tcp --dport 54000 -j ACCEPT -A INPUT -i em1 -p tcp -m tcp --dport 30000 -j ACCEPT -A INPUT -i em1 -p udp -m udp --dport ...
1
vote
0answers
234 views

Advanced QoS on prioritized first packages set by ISP

I have the following problem my ISP (Fibertel from Argentina) accelerates, 'enhances' the first 6.8 megabytes of downstream transfer and it's seems the first 1.8 megabytes of upstream transfer. This ...
0
votes
1answer
84 views

allow redirects with iptables

with the following rules, php can't make a redirect to another file. it's freezes at the point when it gets toheader("Content-type: video/x-flv"); header("Location:" . $VIDEO); or ...
1
vote
2answers
851 views

IPtables Rules to Block IP Range

I've applied the following rules from a text file called "iptables.save" to iptables. But to my dismay, I found that the ip address 107.22.26.176 is still able to access my server via TCP. What did ...
0
votes
1answer
440 views

How to allow access to only specific IPs with Parallels VZ built-in firewall?

How can I use Parallels Virtuozzo's built-in firewall utility (called psa-firewall under the hood apparently actually psa-firewall seems to be a seperate Plesk interface - either way, it's basically a ...
0
votes
1answer
345 views

How can I add the port to iptables rules on centos?

I want to open the port 8040 on my centos, but I keep getting connection refused. This is what I have done: iptables -I INPUT -m state --state NEW -p tcp --dport 8040 -j ACCEPT iptables -I INPUT -m ...
0
votes
2answers
254 views

Iptables: Allow Internal LAN to access INTERNET

I have an internal network behind my router on eth0, and I have my router connected to the internet thorugh wlan0. I can't access the internet from inside the lan, how can I fix this? wlan0: ...
-1
votes
1answer
121 views

Configure IPTables [duplicate]

We have RHEL 5.0 squid proxy in our office. Our LAN is 172.20.12.0 /24 n/w. Proxy ip is 172.20.12.4 /24 . I want to share Internet through proxy. Most importantly: Suppose I have flushed the ...
-1
votes
1answer
488 views

LInux squid proxy

We have RHEL 5.0 squid proxy in our office. Our LAN is 172.20.12.0 /24 n/w. proxy ip is 172.20.12.4 /24 . I want to share internet through proxy. Most importantly: I want to give full access to ...
1
vote
1answer
607 views

iptables status enabled after restart even after disabling

I am disabling iptables on Oracle Linux 6 with these commands. setenforce 0 service iptables stop service ip6tables stop chkconfig—level 123456 iptables off chkconfig—level 123456 ip6tables off ...
0
votes
1answer
524 views

UDP packet and firewall

I notice when I send udp packets from computer A to computer B, B can receive the upd packets correctly but if I send udp packets from computer B to computer A the udp packets are not received A and ...
1
vote
1answer
1k views

unable to connect to localhost:80 after installing nginx

I just installed nginx by doing sudo yum install nginx and I'm unable to connect to it on port 80. I tried stopping iptables by doing sudo service iptables start and was still unable to connect. I'm ...
1
vote
1answer
112 views

iptables simple forwarding setup woes

I have iptables running on a host (acting as a firewall) in a Linux namespace with only one network interface: h2-eth1 (has an IP and MAC address) I have set up my switch to forward all packets to ...
0
votes
1answer
158 views

show interfaces in iptables -L

Is there a way to show the network interfaces via iptables -L in Ubuntu 12.04? When I execute an iptables -L I get an output like this : Chain INPUT (policy DROP) target prot opt source ...
1
vote
1answer
579 views

Port-Forwarding for Click'n'Load remote usage

I've got JDownloader running on my HTPC and access it via VNC. The problem with Click'n'Load (CNL) is, JD only listens on localhost:9666 for incoming traffic, and the browser applications only send ...
3
votes
1answer
789 views

Linux iptables forward from ip1:port1 to ip2:port2

I connect thought tunnel to other machine like this: ssh user@ip -L2000:192.168.64.88:80 So on my local machine I want to configure iptables that way like I have a "native" access to ...
2
votes
1answer
249 views

Restrict the number of http and https connections from a specified IP address to ten connections per minute

How I can restrict the number of http and https connections from a specified IP address to ten per minute usingiptables commands? I’ve tried this but it is not working: iptables -A INPUT -s ...
0
votes
1answer
1k views

OpenWrt: how to give wlan clients @ 10.x Internet access via gateway @ 192.168.1.254

I want to isolate guests connecting to my Wi-Fi to the 10.0.0.x subnet, while giving them Internet access. The OpenWrt router is at 192.168.1.48 ("wifi" interface has 10.0.0.1) and my gateway is at ...
2
votes
3answers
847 views

iptables - add rules not as root

One of our servers is being hit daily by a large number of spam bots. They're not able to post any spam, but they still try and end up slowing down the server for real users. To counter this, I have ...
2
votes
2answers
318 views

How to send out some traffic via my vpn connection

I had a working setup where I could access all my work resources which are accessed via VPN going via my server previously however at some point recently this stopped working for no obvious reason. ...
1
vote
2answers
587 views

How to test IP Tables Rule (Linux Ubuntu12.04)

I wanted to ask how to test IP Table Rules. For example, I have a port number and I want to be sure that it accepts all packets. How can I do it? After I type iptables -L I see that the rule has been ...
0
votes
1answer
718 views

DD-WRT - Host-based forwarding

I would like to know if I can configure DD-WRT router, that operates as the server's network gateway, so support different forwards based on hostname (other than port 80). I've configured ...
3
votes
1answer
1k views

IP forwarding on the same network

I have a raspberry pi that I have put wifi on. I am also using its ethernet connection to bring internet to my XBox 360. I want to bridge these connections AND keep them both on the same network. For ...
0
votes
1answer
196 views

Block brute-force on server with http auth behind cloudflare proxies

My server is behind Cloudflare proxies. I have configured simple http authentication to restrict access to some server resources. I'm trying to block brute-force attacks on http auth with fail2ban. ...
0
votes
0answers
136 views

IPTables masquerading stops working

In a classical SOHO setup I am running a Debian box as router/firewall. For an unknown time now I have an issue, where the MASQUERADING on the output connection (PPPoE) stops working for one of the ...
0
votes
1answer
206 views

Iptables: allow specific ips on specific port

I am trying to allow a few IPs on port 80 and disallow all other from access port 80. Can someone suggest the iptables rules needed for this to occur?
3
votes
0answers
1k views

How do I configure DD-WRT to forward IPSec traffic to an internal server to support a road warrior configuration?

I use dd-wrt as my home router setup and that's been working fine. Now I wanted to figure out a way to be able to use my iPad to set up a IPSec tunnel to my home network while I'm on the road. PPTP ...