Iptables is a module that provides the Linux operating system functions of firewall, NAT and logging of data traveling over a computer network.

learn more… | top users | synonyms

1
vote
0answers
15 views

Route all packets on port 80 from inside a vm to kali linux on another vm

I'm trying to route all packets on port 80 to kali linux so that I can ssl strip them but I cannot see to setup the iptables correctly to force all the packets to go to my other Vm. [ Virtual Machine ...
0
votes
1answer
13 views

iptables on debian blocking git pull, http api requests etc

I am using IPTables on an API server to block all incoming traffic except for SSH, HTTP and HTTPS. I need to have full access on the loopback interface to run beanstalkd amongst other things, and need ...
2
votes
2answers
2k views

How to use iptables to connect proxy server

In my company, all http and https must connect to a proxy server, which means we must set proxy in our web browser. Our department has an internal network (192.168.0.xxx). I use a Linux server as ...
2
votes
2answers
2k views

iptables firewall only allows internet traffic if source port of 80 is allowed

I am configuring an iptables firewall, currently just to allow http and https traffic. It is working but under a particularly strange rule - I must allow incoming connections with a source port of ...
1
vote
1answer
33 views

How to force Google safesearch on entire network

I've a problem filtering web searches on Google domains. Currently I've a linux openVPN Server running with openDNS "family block". I can block a lot of websites with dangerous content and it's ok. ...
0
votes
1answer
51 views

No internet through OpenVPN

I am having trouble with my OpenVPN setup. I have a Linode box with an OpenVPN server installed on it and I managed to get Tunnelblick to establish a vpn connection from my mac. I followed this guide ...
1
vote
1answer
1k views

Forward connections on 0.0.0.0:80 to 127.0.0.1:9091

I'm trying to set up a tor-relay. In order to allow tor to present a static web page explaining what it is I want the server to listen on port 80 and 443. In order to allow tor to use ...
0
votes
1answer
34 views

Why my iptables configuration for port-knocking does not work?

I implemented the following iptables rules on my test server for a course. The firewall shuts down and I cannot access port 22. However, after knocking on the ports 1111, 2222 and 3333 in that order - ...
1
vote
0answers
115 views

Segregating/Separating a device (ATT 3G Microcell) from internal network without using DMZ

I would like to put the ATT 3G Microcell in an isolated network from a network that has the rest of my devices, by which I mean I want the ATT 3G Microcell to only be able to access the Internet, but ...
1
vote
2answers
69 views

Iptables rules to only whitelist SIP providers

I have an Asterisk box sitting behind an ADSL router/modem. There are no other services on the Asterisk box, just telephony. I am getting a lot of traffic which I think are SIP probes. I've ...
0
votes
0answers
56 views

OpenVPN won't connect from remote location

I set up OpenVPN on a linux machine in my basement. I'm able to connect from my Windows 8.1 machine without an issue when I'm connected to the local network. In this instance, I set the config file ...
2
votes
2answers
3k views

iptables gives me the error “can't initialize iptables NAT”

I am trying to use iptables and it is giving me the following error root@vikkyhacks:~# iptables -t NAT -L iptables v1.4.18: can't initialize iptables table `NAT': Table does not exist (do you need to ...
0
votes
0answers
12 views

iptable definitions for routing and defence

I'm attempting to configure a firewall on my laptop that allows for routing. The main trick is, I don't want to allow for connections to be made that do not fall under the ESTABLISHED,RELATED ...
2
votes
2answers
5k views

Deny all incoming connections with iptables?

I want to make some simple iptables rules to deny all incoming connections and allow outgoing. How can I do that?
0
votes
0answers
17 views

Port mirroring without TEE

I have a home router running OpenWRT 12.09.1. The package list for this version does not have iptables-mod-tee. I am familiar that I could set up a port mirroring using: #-A POSTROUTING -t mangle -o ...
0
votes
1answer
11 views

Trying to configure iptables on Slackware 10

I am trying to configure iptables on a Slackware 10 machine. This Slackware version is required in my class - so I cannot upgrade it. After compiling it, I want to configure iptables - however, it ...
0
votes
1answer
41 views

Conntrack gets incorrect forwarding rules for outgoing protocol 41

I'm trying to forward protocol 41 (ipv6-in-ipv4) for an HE tunnel through a WRT54G running Tomato 1.28. Tomato 1.28 is running a 2.4 kernel that knows absolutely nothing about protocol 41, except that ...
1
vote
1answer
65 views

allow incoming ssh with openvpn client

I have set up an OpenVPN client on my home router. The moment the tunnel goes up, I can no longer ping my router from the internet using its WAN_IP. I would like to allow certain incoming connections ...
0
votes
1answer
31 views

Using IPtables to redirect IP address range to port range

I'm trying to set up an IPtables rule that will forward all packets to a /22 range to a single IP and port for debugging purposes. Based on the question here Using iptables to redirect ip address I ...
1
vote
2answers
2k views

unable to connect to localhost:80 after installing nginx

I just installed nginx by doing sudo yum install nginx and I'm unable to connect to it on port 80. I tried stopping iptables by doing sudo service iptables start and was still unable to connect. I'm ...
0
votes
0answers
16 views

Becoming a VPN router in Arch Linux

I want to be able to set my computer as the router (or "default gateway") on any device on my network and have it go through my VPN, eliminating the need for a VPN client on that device. I do echo 1 ...
2
votes
1answer
46 views

Iptables redirecting

I have set up a Personal hotspot using Hostapd. But this hotspot is not connected to the internet but I do have Apache installed on it. What I am trying to achieve is to redirect all the clients (that ...
2
votes
1answer
40 views

When writing an iptables save file by hand, how does one calculate the packet-counter and byte-counter values?

I am attempting to write a 22MB iptables rule-set file, the very kind that is generated with the iptables-save command, except endlessly long. Understandably, this takes a prohibitive amount of time. ...
0
votes
1answer
771 views

What do these numbers mean in the output of iptable-save?

In the output of iptables-save # Generated by iptables-save v1.3.8 on Sun Mar 14 19:42:45 2010 *filter :INPUT ACCEPT [328764:37367248] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [324693:28884726] COMMIT # ...
1
vote
0answers
28 views

How can I efficiently filter Dos packets? [duplicate]

I have recently been the victim of some Dos attacks. The facts : I received a very high amount of packets saturating my connection and preventing me from accessing the Internet during one hour ...
2
votes
1answer
2k views

How to use NAT iptables rules for hostapd

My PC is equipped with two net interfaces - wlan0 and eth0. I want to use WiFi port as access point on wlan0. So i use hostapd facility and it works properly in routing mode in local network. Users ...
0
votes
1answer
36 views

Iptables to forward HTTPS traffic to remote HTTPS proxy

My goal is to use Iptables to take all traffic going to my server on port 443 and forward it to a remote HTTPS proxy server. So basically if I was to use my ip of 192.168.1.142:443 as a SSL proxy it ...
3
votes
1answer
2k views

Allow access from outside network with dmz and iptables

I'm having a problem with my home network. So my setup is like this: In my Router (using Ubuntu desktop v11.04), I installed squid proxy as my transparent proxy. So I would like to use dyndns ...
1
vote
3answers
3k views

iptables syntax to forward remote desktop requests to a virtual machine on CentOS host

I can rdesktop into a VM running Windows XP hosted on my CentOS 5.4 machine from the hosting machine and work just fine using the private address (192.168.122.65), but I now need to allow remote ...
0
votes
0answers
20 views

Open ports for Age of empires in ubuntu router using iptables

The purpose of this question is to learn how to correctly use iptables. As I am currently living in the dormitories in the University and I am using a small netbook as a router to provide wifi in my ...
-1
votes
0answers
35 views

How to set DNS correctly in a network namespace?

I try to set a network namespace and visit internet inside this network namespace. ip netns add netns1 ip link add A type veth peer name B ip link set B netns netns1 brctl addbr bridge0 ip addr add ...
2
votes
1answer
3k views

DD-WRT firewall rule configuration

I'm using DD-WRT on my linksys router. I want to limit each user on my network to 200 connections at any given time. Does anyone know the rules I enter the firewall in DD-WRT admit panel. I tried ...
1
vote
1answer
146 views

IPTables module ip_tables not found for root

We got a custom build Linux distribution from a vendor, which is not shipped with iptables enabled. root@xxxx:~# iptables -L modprobe: FATAL: Module ip_tables not found. iptables v1.4.21: can't ...
0
votes
0answers
20 views

Special type of DMZ?

So I have a standard modem-router setup all great to go, my Modem gives an IP Address from my provider via DHCP according to my Mac address. All is good. However, I now want to expose a new virtual ...
0
votes
1answer
20 views

Set block time with iptables

I have the following rules in ufw, for iptables: -A ufw-user-input -p tcp --dport 80 -m state --state NEW -m recent --set -A ufw-user-input -p tcp --dport 80 -m state --state NEW -m recent --update ...
0
votes
1answer
36 views

Will an inbound iptables rule in ddwrt on port 443 break https?

I want to run a vnc repeater service on my home ddwrt router. Due to the possibility of friends/family asking for support in unknown network environments, I'd like the host-repeater application to run ...
2
votes
3answers
1k views

Limit incoming connections using iptables per IP

I need to limit access to some port per IP. Let's say 5 connections per minute - not more. I've seen iptables recent, connlimit and limit, but all of them are not fitting exactly what I need. ...
0
votes
0answers
26 views

Iptables intercepting traffic

I have 3 servers on the network (Server 1: 10.0.0.1, Proxy server: 10.0.0.2, Server 3: 10.0.0.3) and I would like to intercept the traffic going through the proxy server from Server 1 to Server 3. ...
0
votes
0answers
44 views

Iptables redirection to squid proxy server

I'm trying to setup filtering through a squid proxy however I'm having trouble getting my router to send all traffic to the proxy using iptables. I've currently got it setup such that there is the ...
0
votes
0answers
31 views

Access lxc container services from other lxc containers via host

I've got a laptop with Ubuntu 14 Desktop. The laptop has WLAN connection to my LAN and is managed by network manager. Of cause, the laptop a nic (eth0), too, but it is not connected. I use this laptop ...
0
votes
2answers
77 views

Is it possible to force DNS for certain devices with iptables?

I'm trying to use iptables to force DNS for certain devices (Shibby Tomato on Asus RT-N66U). I haven't found anything online describing such a configuration. The closest I could find was this: # For ...
0
votes
0answers
139 views

iptables not starting on CentOS 6

I am running CentOS release 6.5 (Final) and cannot figure out why my iptables is not starting. I may have executed some other command to permanently prevent the start up of iptables; I do not ...
0
votes
1answer
17 views

iproute2: How do i connect one machine to the internet via another

I have the following setup: A > 169.254.8.125/16 <--(ad-hoc)--> 169.254.9.109/16 < B > 192.168.178.21/24 <--(wifi)--> 192.168.178.1/24 < AP/router > internet I want to connect A to the ...
0
votes
1answer
20 views

iptables - I'm losing control over the box by adding new rule to the config

My set up is the following: Internet uplink (200Mbit) DMZ (1GB ethernet) Internal network (1gb internet) Log interface My gateway is serving around 600 clients with 1400 iptables rules in ...
2
votes
1answer
1k views

Match multiple strings in iptables

I have 2 strings, and i wish to queue the packet if it contains both the strings ( something like ("jsh"&&"gjhyg")), i tried following ways, but they don't seem to work: sudo iptables -A ...
0
votes
1answer
78 views

Configure iptables firewall to allow DHCP, DNS, HTTP, SMTP, FTP, IMAP, POP, and Squid ports – deny all other services.

Configure iptables firewall to allow DHCP, DNS, HTTP, SMTP, FTP, IMAP, POP, and Squid ports – deny all other services. 1 pc for router ( place firewall) 1 pc for server ( place web,dhcp,ftp,etc)
0
votes
1answer
100 views

Difference between iptables default policy to `DROP` and inserting a seperate policy in input chain to DROP all connections

I'm trying to DROP all incoming connections to my server, except from particular networks. At the same time I want to keep all outgoing connections from my server to external network (any network over ...
-1
votes
1answer
44 views

cant run php FastCGI in arch

I have a PhpStorm IDE in Manjaro(Arch base Linux). I install php and php-fpm from repository and config PhpStorm with php. PhpStorm can know php and that version. but when i run my php code in ...
0
votes
4answers
55 views

IPtables keeps resetting rules and blocking almost everything

Every time I reset IPtables, the rules keep coming back in about 10 minutes, blocking everything besides port 22 and 80. When I do a "iptables-save", I see this I can't find out where it's coming ...
2
votes
2answers
3k views

Iptables redirect to localhost?

Suppose I have a network with a server routing all connections from inside the network to the Internet. How can I set up iptables so that instead of routing incoming connections to the Internet, it ...