Iptables is a module that provides the Linux operating system functions of firewall, NAT and logging of data traveling over a computer network.

learn more… | top users | synonyms

2
votes
1answer
597 views

Combination of NAT, DHCP, and OpenVPN on lubuntu 14.04

Okay, so I've got a set up, where eth0 my internal IP address (192.168.1.3) it has been configured as my default gateway using the iptables this sudo sysctl -w net.ipv4.ip_forward=1 sudo ...
0
votes
1answer
66 views

iptables: Is it dangerous to filter by source port?

I would like to run a stateless firewall setup and I currently have the following rules: #Do not track any packet *raw :PREROUTING ACCEPT [0:0] -A PREROUTING -j NOTRACK COMMIT #Actual firewall rules ...
0
votes
1answer
117 views

IPTables and PPTPd

I'm trying to add the line -A POSTROUTING -i ppp0 -j MASQUERADE to my IPTables in order to allow VPN to have access to the entire internal and external network (eth0, and eth1), but when I try to ...
0
votes
1answer
254 views

iptables --append FORWARD required for routing between NIC alias IPs?

I have an ubuntu box with a single NIC. In order to bind a number of services (like apache, dnsmasq, etc), I have bound them to different alias's (e.g. eth0:0, etc), some of which are on completely ...
0
votes
1answer
183 views

How to add iptable support to the kernel (for Wheezy/Sid release)

I am running an ARM processor (similar to the raspberry pi) and my kernel doesnt natively support iptables. If I run apt-get install iptables, it successfully installs but NAT tables are unable to be ...
3
votes
4answers
2k views

IP forwarding from one interface to another on Debian 7

Background The Debian 7 that I run has the following interfaces wlan3 == Internet connection 85.5.48.64/24 wlan2 == act as an AP (hostapd) 192.168.5.1/24 I run the following settings on the ...
0
votes
1answer
50 views

Firewall rule for local, interactive users?

I want to add a firewall rule that applies to a local interactive user. The intention is to clamp down the box, and only allow web and mail related connections, and update service connections. On ...
0
votes
1answer
59 views

Run shell script on incoming network package

I have a bit of a weird question. I have a setup where a Raspberry Pi (running that debian) sits next to a door in my office and is connected to the network. The idea now is that if somebody inside ...
0
votes
1answer
279 views

How do I fix these iptables?

I am trying to setup my networks firewall, and am having trouble because i keep getting kicked out of SSH because of mistakes. Here's what I currently have: # Custom Rules iptables -F iptables -X ...
7
votes
1answer
5k views

Mirror Port via iptables

I have a dedicated Linux (Debian 7.5) root server, with a number of guests set up. The guests are KVM instances, and get network access via bridge-utils (NAT, internal IPs, use the host as a gateway). ...
0
votes
1answer
277 views

Why is change to iptables not taking effect?

Im trying to setup OpenVPN to use Tor as a proxy in Liberte. When I run openvpn as root, I get the following response: Tue May 13 15:15:18 2014 Attempting to establish TCP connection with ...
2
votes
1answer
66 views

Help with iptables

I recently installed Oracle Linux 6 on a home server, and I've been having trouble with allowing ports past the firewall (iptables). I've tried adding ports with the command iptables -I INPUT -p tcp ...
4
votes
0answers
149 views

Iptables error :libipt_cgroup.so doesn't exist while using net_cls.classid in net_cls cgroup subsystem

In kernel document doc/cgroup/net_cls.txt, it introduces the function of net_cls.classid, and show an example of netfilter (iptables) using this tag to perform actions. the command of iptables is: ...
0
votes
2answers
42 views

Why are these iptable rules keeping me from browsing the internet? (allowing 80,443,53)

This is for my home machine. Here are the rules: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) num pkts bytes target prot opt in out source destination 1 ...
0
votes
0answers
1k views

iptables: Allowing multicast & other traffic on LAN, not to WAN

I have a Linux 3.10 machine functioning as a NAT router between the wlan0 LAN and the eth0 WAN. I would like to allow all communication between machines on the LAN (they are trustworthy) and allow ...
0
votes
1answer
129 views

iptables eth0 wlan0 bridge not working

I am trying to allow an embedded system to share the wireless of my laptop. The embedded system is an A20 Olinuxino Micro running Debian and my Laptop has Ubuntu 12.04. I tried this which has worked ...
1
vote
1answer
64 views

Transparently proxifying certain devices on the network

I'm using my computer as wireless access point and router to my home network using hostapd under Ubuntu 14.04. I want to transparently proxify certain wifi devices in the network (identified by their ...
0
votes
1answer
281 views

How to share ppp0 to wlan0 with redsocks

I can't understand the meaning of this: I have a USB modem along with a USB Wifi router, and I use redsocks for ppp0. Then I want to forward the incoming connection from Wifi to redsocks. I have ...
0
votes
1answer
138 views

Ports in Linux vs Windows

I'm studying for a security class. I know that ports in Linux are tied to a process. So if I wanted to close/shutdown a port, I'd end the process that's using it. So if I'm in Windows, what's ...
1
vote
2answers
131 views

How to check/adjust SSH server on embedded board

I'm currently having difficulties connecting to an embedded board from my Linux machine through ssh. The embedded board is a FOX G20 V with a Linux OS. I've tried to connect to the board through ...
0
votes
1answer
208 views

Redirecting internal traffic to gateway's port-forwarded external endpoints directly to intranet destination

There's an intranet and CentOS-powered gateway that provides connectivity for intranet devices. Typical port-forwarding in gateway's iptables ruleset looks like this (TCP version is provided): ...
0
votes
1answer
142 views

Granular routing with iptables and iproute2 over VPN

On a host at my house I have a host for a VPN that I need for a couple of purposes. Living temporarily in Japan, it functions as a NAT for some devices so I can still use my NETFLIX and some other ...
1
vote
1answer
882 views

iptables blocking all traffic even with ports opened

Simple as I can put it: I can't access my servers with iptables enabled, with default rules. Need to disable iptables to get access. Trying to find the cause. Only difference in setup type is layer3 ...
1
vote
0answers
214 views

Can't connect to web server from outside my network

I have a Debian-based server that I would like to be able to access from the Internet (no domain name yet, I'm just trying to get it working for now). I already have port forwarding set up on my ...
3
votes
4answers
3k views

bridge does not forwarding packets centos

I am using CentOS 6.5 64 and use xen to create a virtual machine (CentOS) ifconfig [root@CentOS ~]# ifconfig eth0 Link encap:Ethernet HWaddr 08:00:27:54:B3:FA inet6 addr: ...
1
vote
0answers
403 views

Conntrack/NAT's port mapping for a specific port breaks whenever that port's service is shutdown for too long. How can I fix this?

Linux Gentoo 3.13.6-hardened-r3 #1 SMP Sat Apr 12 09:17:25 EDT 2014 x86_64 Intel(R) Core(TM)2 CPU 6300 @ 1.86GHz GenuineIntel GNU/Linux hardened with grsecurity and selinux with a strict policy in ...
0
votes
1answer
94 views

How to specify a certain device to access the Internet via the OpenVPN client of router?

Involved Devices: a VPS, a router, and several devices that connected to the router. Final Aim: Base on the OpenVPN client which has connected to the server on the VPS, specify only one local device ...
1
vote
1answer
356 views

Iptables deny access to a specific IP address not working

I'm not able to deny access to a specific IP address or deny access to a specific IP address range as well. My network environment is, I have one router which IP is (30.30.10.1) and second my hotspot ...
0
votes
1answer
2k views

Route internet traffic from openvpn tun0 to eth0

I can't figure it out. How do I give chosen VPN-users access to internet trough eth0? All server traffic goes trough eth1. The eth0 is only supposed to give VPN-users internet access on chosen ports ...
2
votes
2answers
2k views

Apache runs locally but can't be accessed from other machine

I'm running Apache 2.2.3 in a VM for a test environment on CentOS 5. Apache is running and responding to requests on the VM itself. If I run "lynx localhost" on the VM I do get my test page. When I ...
0
votes
1answer
876 views

configure iptables to block all(as much as possible) bittorrent traffic

good day all This is my current iptables setup Generated by iptables-save v1.4.7 on Wed Apr 9 13:50:31 2014 *filter :INPUT DROP [0:0] :FORWARD DROP [0:0] :OUTPUT ACCEPT [0:0] :LOGDROP - ...
1
vote
0answers
175 views

Segregating/Separating a device (ATT 3G Microcell) from internal network without using DMZ

I would like to put the ATT 3G Microcell in an isolated network from a network that has the rest of my devices, by which I mean I want the ATT 3G Microcell to only be able to access the Internet, but ...
0
votes
1answer
292 views

IPtables preventing outgoing packets

I am trying to setup firewall rules on a RHEL webserver, so that my webserver can serve up web pages and at the same time download remote files using curl/wget. Problem I am experiencing is I can only ...
0
votes
1answer
865 views

Routing internal traffic in centos to the internet using iptables

Hello friends i am struck in routing traffic from the office to internet i have a network structure like this http://asthana.me/images/ip.png I have assigned static ip to the cent os server(which ...
-1
votes
1answer
255 views

Bind incoming packets to 1 interface and outgoing packets to 2nd interface?

I am have a Linux machine with 2 network interface cards, I need to use one for incoming packets, other for outgoing packets.
0
votes
1answer
79 views

Turning iptables off on development server permanently?

What would be the downsides of turning off iptables permanently on a development environment? I don't like the fact that every time I restart virtual box I must do: service iptables stop service ...
2
votes
1answer
680 views

How to forward ports through ssh and nat to another machine

I have a problem when using ssh port forwarding and nat simoultaneously. Situation: Machine A runs a webserver on port 8080 Machine B is a raspberry pi which works like a little router. It has two ...
0
votes
0answers
687 views

Chromecast and accessing Netflix from outside the US

I have given this as an answer, but there is a question involved so that's why I'll post this again. You can find the answer here: http://superuser.com/a/734838/311358 I have a computer (iMac) that ...
0
votes
1answer
163 views

Connected to vpn but can't connect to internet

I am using ubuntu 12.10 as a vps. And I am trying to configure a vps server on it. I can connect to the vpn but just can't get internet access. Maybe because I don't know how to write a iptables. ...
0
votes
0answers
39 views

Blocking an outbound port for a bridge'd nat'd inteface

eth0 and wlan0 are bridged to br0, and have access to the outside world through eth1 and NAT. I'd like to block an outbound port on wlan0, but leave it open for eth0.
0
votes
1answer
145 views

packages from router dont match iptables dnat rule

I have the follow rules to forward port 443 from external to a internal host: IF_INET=ppp0 IF_INET_IP=1.2.3.4 # Router External IP IF_LAN_IP=192.168.0.1 # Router Internal IP ...
1
vote
0answers
245 views

How to stream WiFi cameras over a Linux gateway to my laptop using iptables?

My setup is as follows: Linux gateway has one WLAN configured as WiFi client (192.168.0.100) to a Linksys WiFi AP(192.168.0.1). There are three WiFi cameras connected as WiFi clients (192.168.0.101, ...
2
votes
0answers
911 views

Synergy client won't connect, despite open port?

I want to use a Debian KDE desktop computer (network name bradbury) as the server, and a Windows 7 laptop (network name Clarke) as the client. I have used this setup before without problems, but then ...
0
votes
1answer
269 views

Editing IPTABLES nat rule in cron job

I am sitting here with an issue: I need to switch the source interface for iptables' NAT rule at a given time. I want to basically do soemthing like this - caution: concept code: #!/bin/bash if [ it ...
1
vote
1answer
113 views

Unable to ping server

I have a Linux server that seems to have lost the ability to respond to a ping.. I recently installed Nagios on another system and need to have this Ubuntu server answer up to a ping.. I'm using ...
2
votes
0answers
107 views

Determine if an uplink interface is usable

I have a firewall system that is served by two uplinks to different ISPs. I'm using shorewall to manage the firewall; it load-balances traffic over both interfaces with connection tracking. All that ...
0
votes
1answer
130 views

why iptables is accepting all in INPUT?

As we can see in this, which is the default iptables on fedora 20 $ iptables -L INPUT --line-number Chain INPUT (policy ACCEPT) num target prot opt source destination 1 ...
2
votes
1answer
1k views

How to transparently tunnel a port from IPv4 to a remote IPv6 device?

At home, I am connected with an IPv6 address and additionally, my provider provides a NAT-like setup through which I receive a public IPv4 address that I share with other customers (the reason being ...
1
vote
1answer
852 views

What does this iptables rule mean: tcp flags:0x06/0x02 TCPMSS clamp to PMTU?

What does this iptables rule mean: tcp flags:0x06/0x02 TCPMSS clamp to PMTU? Doing iptables -vnL on my DD-WRT router shows the following rule in the FORWARD chain: TCPMSS tcp -- * * 0.0.0.0/0 ...
1
vote
1answer
799 views

How to create a local-remote-local tunnel to a specific port using ssh

I'm able to establish an ssh connection from my windows computer (localhost - eth1) to my linux computer (remotehost - eth0) by doing: ssh user@192.168.1.100 Instead of using that, because I use ...