Iptables is a module that provides the Linux operating system functions of firewall, NAT and logging of data traveling over a computer network.

learn more… | top users | synonyms

2
votes
1answer
121 views

IPSet with IP6Tables ERROR

Can someone please solve my headache and tell me how to fix this? [root@www ~]# ip6tables -I INPUT -m set --match-set blacklist6 src -J DROP ip6tables v1.4.7: Couldn't load match ...
0
votes
0answers
80 views

rails ssl setup on Amazon EC2

Environment Amazon EC2 CentOS Rails 4.0.4 SSL certificates installed Chef My Rails config In my environment .rb (staging.rb and production.rb) I added this config.force_ssl = true Started ...
1
vote
2answers
130 views

Iptables rules to only whitelist SIP providers

I have an Asterisk box sitting behind an ADSL router/modem. There are no other services on the Asterisk box, just telephony. I am getting a lot of traffic which I think are SIP probes. I've ...
1
vote
0answers
181 views

Allow internet access to intranet only users using Nginx on Ubuntu

I need to allow some users who only have access to the intranet to access one specific internet site. I'm doing this by using Nginx as a reverse proxy. To test this, I would like to block all internet ...
0
votes
0answers
69 views

How do I “socksify” IPv6 TCP connections?

For IPv4, one can use REDIRECT iptables target and redsocks/tcpsocks. How to do the same for IPv6? I've tried ip6tables -t mangle -A PREROUTING -d 2600:: -p tcp --dport 80 -j TPROXY --on-port 4455, ...
0
votes
1answer
77 views

Redirect ports with iptables

I need to do redirect port 443 on all interfaces to 8080 on one interface using iptables on a box with 2 NICs. I also need to block pretty much anything else on those interfaces. Here is my iptables ...
3
votes
0answers
261 views

Block all outgoing traffic for a User running Wine apps

Good day, I'm using a lot of WINE apps under Linux which work just fine, but one thing I am specifically looking for right now is to block their access to the internet (outgoing), with exception of ...
0
votes
1answer
180 views

block network access to a domain (ubuntu)

I have a few ubuntu servers in various geographies. I want to block all outgoing connections from all ubuntu machines (all processes) to several domains, e.g. www.server.com. I know iptables can block ...
0
votes
3answers
62 views

outgoing ssh fails from only one machine on lan to outside network

I have multiple servers in my LAN (which I'll refer to as Box1), and they are all able to make outgoing SSH connections, except one that stopped recently, which I'll refer to as Box2 (actually, I'm ...
0
votes
2answers
240 views

Wifi sharing over eth0

There are a lot of tutorials how to share network connection with your usb wifi adapter and I tried lots of them but it is still not working. Can you please help me with my problem. Here is my network ...
0
votes
0answers
145 views

iptables error “FIX ME! implement getprotobyname() bionic/libc/bionic/stubs.c”

When I do this rule, the error shows up iptables -A INPUT -p tcp -m tcp -m multiport ! --dports 80,443 -j DROP I've also found some solutions. getprotobyname() just converts protocol names like tcp ...
0
votes
1answer
146 views

Cant connect to eth0 after wlan0 sharing with iptables

I wanted my Ubuntu server to act as a wifi hotspot. So I set up hostapd to allow wifi connections. I then setup dnsmasq to provide the DHCP settings. I then added the following iptables rules, so ...
0
votes
1answer
1k views

OpenWRT and iptables: redirect all traffic from ip1 to ip2

I'm aware of other questions with the same topic, but I couldn't get it to work. I'd like to forward inside my local network all traffic from ip1 to ip2. Only from inside the network, no outside. I ...
1
vote
3answers
16k views

How to block all ports except 80,443 with iptables? [duplicate]

Blocking all ports(in and out) is easy but it's hard with the word "except". I don't know any rules that satisfies the condition. PS: I know this question is nothing new. But in fact, I didn't find ...
0
votes
0answers
269 views

Route incoming traffic from VPN Clients through localhost-proxy on VPN server?

I’m still quite a newbie to Linux in general and I want to learn by establishing useful projects. My actual project is for a vpn-server to get rid of ads, cookies etc. for all clients. Meaning: No ...
2
votes
3answers
3k views

Limit incoming connections using iptables per IP

I need to limit access to some port per IP. Let's say 5 connections per minute - not more. I've seen iptables recent, connlimit and limit, but all of them are not fitting exactly what I need. ...
1
vote
5answers
1k views

How to forward traffic using iptables rules?

I am new to iptables and I have been doing Google searches for a few days now without finding a good solution to this problem. I have computer A with a public ip address (say 192.0.2.1) that can ...
0
votes
1answer
360 views

Asterisk server firewall script allows 2-way audio from incoming calls, but not on outgoing?

I'm running an Asterisk PBX on a virtual machine directly connected to the Internet and I really want to prevent script kiddies, l33t h4x0rz and actual hackers access to my server. The basic way I ...
0
votes
1answer
2k views

Equivalent iptables command on OS X 10.9

I want to redirect the tcp traffic temporarily to a custom port. On Linux, I use the following command: iptables -t nat -A OUTPUT -p tcp --dport 1935 -m owner \! --uid-owner root -j REDIRECT and to ...
1
vote
1answer
44 views

Add IPtables rule by script at the request of another computer

I wonder, is it possible to make an script, which adds rule in iptables by request from other pc? I mean, script "knows" what to do, but addres for rule comes from request. And how do you think it ...
0
votes
1answer
307 views

Block All Traffic and Allow from Defined IP only in IPTABLES

I want to create a gateway firewall for my network . I want to block all the internal traffic on gateway and allow it from two computers only . On gateway --> eth0 is network card in gateway PC ...
1
vote
1answer
126 views

Bitbucket SSH and iptables

I'm a newbie in iptables to be honest. I have some basic rules. Everything is blocked by default. iptables -t filter -F iptables -t filter -X iptables -t filter -P INPUT DROP iptables -t filter -P ...
0
votes
1answer
333 views

Iptables mark incoming packet - vpn routing

I have connected my home to my workplace for out of house backup reasons through OpenVPN. The connection is working nicely. At work I have 5 fixed IP addresses. Now I would like to assign one of ...
2
votes
1answer
556 views

Combination of NAT, DHCP, and OpenVPN on lubuntu 14.04

Okay, so I've got a set up, where eth0 my internal IP address (192.168.1.3) it has been configured as my default gateway using the iptables this sudo sysctl -w net.ipv4.ip_forward=1 sudo ...
0
votes
1answer
60 views

iptables: Is it dangerous to filter by source port?

I would like to run a stateless firewall setup and I currently have the following rules: #Do not track any packet *raw :PREROUTING ACCEPT [0:0] -A PREROUTING -j NOTRACK COMMIT #Actual firewall rules ...
0
votes
0answers
371 views

Routing inside Virtualbox Linux Guest on Windows Host connected to WiFI

How can I route a whole net traffic from a laptop (192.168.1.100) connected via WiFi to a router (192.168.1.1) to which I don't have access and cannot mofidy routing table, to other host in this same ...
0
votes
1answer
113 views

IPTables and PPTPd

I'm trying to add the line -A POSTROUTING -i ppp0 -j MASQUERADE to my IPTables in order to allow VPN to have access to the entire internal and external network (eth0, and eth1), but when I try to ...
0
votes
1answer
237 views

iptables --append FORWARD required for routing between NIC alias IPs?

I have an ubuntu box with a single NIC. In order to bind a number of services (like apache, dnsmasq, etc), I have bound them to different alias's (e.g. eth0:0, etc), some of which are on completely ...
0
votes
1answer
169 views

How to add iptable support to the kernel (for Wheezy/Sid release)

I am running an ARM processor (similar to the raspberry pi) and my kernel doesnt natively support iptables. If I run apt-get install iptables, it successfully installs but NAT tables are unable to be ...
3
votes
4answers
1k views

IP forwarding from one interface to another on Debian 7

Background The Debian 7 that I run has the following interfaces wlan3 == Internet connection 85.5.48.64/24 wlan2 == act as an AP (hostapd) 192.168.5.1/24 I run the following settings on the ...
0
votes
1answer
48 views

Firewall rule for local, interactive users?

I want to add a firewall rule that applies to a local interactive user. The intention is to clamp down the box, and only allow web and mail related connections, and update service connections. On ...
0
votes
1answer
58 views

Run shell script on incoming network package

I have a bit of a weird question. I have a setup where a Raspberry Pi (running that debian) sits next to a door in my office and is connected to the network. The idea now is that if somebody inside ...
0
votes
1answer
270 views

How do I fix these iptables?

I am trying to setup my networks firewall, and am having trouble because i keep getting kicked out of SSH because of mistakes. Here's what I currently have: # Custom Rules iptables -F iptables -X ...
7
votes
1answer
4k views

Mirror Port via iptables

I have a dedicated Linux (Debian 7.5) root server, with a number of guests set up. The guests are KVM instances, and get network access via bridge-utils (NAT, internal IPs, use the host as a gateway). ...
0
votes
1answer
254 views

Why is change to iptables not taking effect?

Im trying to setup OpenVPN to use Tor as a proxy in Liberte. When I run openvpn as root, I get the following response: Tue May 13 15:15:18 2014 Attempting to establish TCP connection with ...
2
votes
1answer
61 views

Help with iptables

I recently installed Oracle Linux 6 on a home server, and I've been having trouble with allowing ports past the firewall (iptables). I've tried adding ports with the command iptables -I INPUT -p tcp ...
3
votes
0answers
147 views

Iptables error :libipt_cgroup.so doesn't exist while using net_cls.classid in net_cls cgroup subsystem

In kernel document doc/cgroup/net_cls.txt, it introduces the function of net_cls.classid, and show an example of netfilter (iptables) using this tag to perform actions. the command of iptables is: ...
0
votes
2answers
42 views

Why are these iptable rules keeping me from browsing the internet? (allowing 80,443,53)

This is for my home machine. Here are the rules: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) num pkts bytes target prot opt in out source destination 1 ...
0
votes
0answers
1k views

iptables: Allowing multicast & other traffic on LAN, not to WAN

I have a Linux 3.10 machine functioning as a NAT router between the wlan0 LAN and the eth0 WAN. I would like to allow all communication between machines on the LAN (they are trustworthy) and allow ...
0
votes
1answer
128 views

iptables eth0 wlan0 bridge not working

I am trying to allow an embedded system to share the wireless of my laptop. The embedded system is an A20 Olinuxino Micro running Debian and my Laptop has Ubuntu 12.04. I tried this which has worked ...
1
vote
1answer
63 views

Transparently proxifying certain devices on the network

I'm using my computer as wireless access point and router to my home network using hostapd under Ubuntu 14.04. I want to transparently proxify certain wifi devices in the network (identified by their ...
0
votes
1answer
269 views

How to share ppp0 to wlan0 with redsocks

I can't understand the meaning of this: I have a USB modem along with a USB Wifi router, and I use redsocks for ppp0. Then I want to forward the incoming connection from Wifi to redsocks. I have ...
0
votes
1answer
121 views

Ports in Linux vs Windows

I'm studying for a security class. I know that ports in Linux are tied to a process. So if I wanted to close/shutdown a port, I'd end the process that's using it. So if I'm in Windows, what's ...
1
vote
2answers
128 views

How to check/adjust SSH server on embedded board

I'm currently having difficulties connecting to an embedded board from my Linux machine through ssh. The embedded board is a FOX G20 V with a Linux OS. I've tried to connect to the board through ...
0
votes
1answer
200 views

Redirecting internal traffic to gateway's port-forwarded external endpoints directly to intranet destination

There's an intranet and CentOS-powered gateway that provides connectivity for intranet devices. Typical port-forwarding in gateway's iptables ruleset looks like this (TCP version is provided): ...
0
votes
1answer
134 views

Granular routing with iptables and iproute2 over VPN

On a host at my house I have a host for a VPN that I need for a couple of purposes. Living temporarily in Japan, it functions as a NAT for some devices so I can still use my NETFLIX and some other ...
1
vote
1answer
867 views

iptables blocking all traffic even with ports opened

Simple as I can put it: I can't access my servers with iptables enabled, with default rules. Need to disable iptables to get access. Trying to find the cause. Only difference in setup type is layer3 ...
1
vote
0answers
206 views

Can't connect to web server from outside my network

I have a Debian-based server that I would like to be able to access from the Internet (no domain name yet, I'm just trying to get it working for now). I already have port forwarding set up on my ...
3
votes
4answers
2k views

bridge does not forwarding packets centos

I am using CentOS 6.5 64 and use xen to create a virtual machine (CentOS) ifconfig [root@CentOS ~]# ifconfig eth0 Link encap:Ethernet HWaddr 08:00:27:54:B3:FA inet6 addr: ...
1
vote
0answers
375 views

Conntrack/NAT's port mapping for a specific port breaks whenever that port's service is shutdown for too long. How can I fix this?

Linux Gentoo 3.13.6-hardened-r3 #1 SMP Sat Apr 12 09:17:25 EDT 2014 x86_64 Intel(R) Core(TM)2 CPU 6300 @ 1.86GHz GenuineIntel GNU/Linux hardened with grsecurity and selinux with a strict policy in ...