Iptables is a module that provides the Linux operating system functions of firewall, NAT and logging of data traveling over a computer network.

learn more… | top users | synonyms

3
votes
0answers
2k views

How do I configure DD-WRT to forward IPSec traffic to an internal server to support a road warrior configuration?

I use dd-wrt as my home router setup and that's been working fine. Now I wanted to figure out a way to be able to use my iPad to set up a IPSec tunnel to my home network while I'm on the road. PPTP ...
2
votes
0answers
49 views

Block all outgoing traffic for a User running Wine apps

Good day, I'm using a lot of WINE apps under Linux which work just fine, but one thing I am specifically looking for right now is to block their access to the internet (outgoing), with exception of ...
2
votes
0answers
109 views

How to forward ports through ssh and nat to another machine

I have a problem when using ssh port forwarding and nat simoultaneously. Situation: Machine A runs a webserver on port 8080 Machine B is a raspberry pi which works like a little router. It has two ...
2
votes
0answers
582 views

Route outgoing VPN traffic through local transparent proxy

I have a Digital Ocean droplet (similar to an Amazon EC2 instance) running Ubuntu Server 12.04.3 x64 with both strongswan 5.1.1 (built from source) and squid 3.4.2 (also built from source) installed. ...
2
votes
0answers
160 views

Limit bandwidth on HTTP downloads based on file size

Is there a way to limit lets say in iptables or any proxy solution/software if a user is downloading a filesize that is greater than lets say 20MB it will limit his entire download at 2KB/s? ...
2
votes
0answers
252 views

Centos iptables blocks after reboot

I have a Centos5 installation with kvm on my server. I am using nat portforwarding to ssh my virtual machines. I have several iptables rules and saved then in /etc/sysconfig/iptables. After reboot, I ...
2
votes
0answers
660 views

How do you add a MAC-based routing whitelist with DD-WRT and the OpenVPN client?

I have an OpenVPN client set up on my DD-WRT home router which maintains a VPN into my workplace. Slight problem: I don't want random lusers who access my wireless AP to have access to my company's ...
1
vote
0answers
36 views

Iptables error :libipt_cgroup.so doesn't exist while using net_cls.classid in net_cls cgroup subsystem

In kernel document doc/cgroup/net_cls.txt, it introduces the function of net_cls.classid, and show an example of netfilter (iptables) using this tag to perform actions. the command of iptables is: ...
1
vote
0answers
50 views

Can't connect to web server from outside my network

I have a Debian-based server that I would like to be able to access from the Internet (no domain name yet, I'm just trying to get it working for now). I already have port forwarding set up on my ...
1
vote
0answers
92 views

Conntrack/NAT's port mapping for a specific port breaks whenever that port's service is shutdown for too long. How can I fix this?

Linux Gentoo 3.13.6-hardened-r3 #1 SMP Sat Apr 12 09:17:25 EDT 2014 x86_64 Intel(R) Core(TM)2 CPU 6300 @ 1.86GHz GenuineIntel GNU/Linux hardened with grsecurity and selinux with a strict policy in ...
1
vote
0answers
57 views

How to stream WiFi cameras over a Linux gateway to my laptop using iptables?

My setup is as follows: Linux gateway has one WLAN configured as WiFi client (192.168.0.100) to a Linksys WiFi AP(192.168.0.1). There are three WiFi cameras connected as WiFi clients (192.168.0.101, ...
1
vote
0answers
190 views

Synergy client won't connect, despite open port?

I want to use a Debian KDE desktop computer (network name bradbury) as the server, and a Windows 7 laptop (network name Clarke) as the client. I have used this setup before without problems, but then ...
1
vote
0answers
36 views

Determine if an uplink interface is usable

I have a firewall system that is served by two uplinks to different ISPs. I'm using shorewall to manage the firewall; it load-balances traffic over both interfaces with connection tracking. All that ...
1
vote
0answers
92 views

“iptables -P OUTPUT DROP” blocks DDWRT's web interface

When I do iptables -P OUTPUT DROP it blocks DDWRT's web interface. That is I am not able to access http://192.168.1.1 via Firefox. I put this rules before changing the chain policy to drop: ...
1
vote
0answers
151 views

using iptables to filter vboxnet (virtualbox host only network)

Im trying to use iptables to filter the traffic coming from a guest OS running on virtualbox. The guest is configured to use a host only adapter for the network, and my Ubuntu host is configured to ...
1
vote
0answers
66 views

Define IPTABLES rule

I am working with a linux based UTM appliance and have some disagreement with the client on the operation. THere is a standard GUI to configure port forwards in the firewall but for some reason he ...
1
vote
0answers
213 views

iptables load balancing for TLS with request routing on the same connection

I am trying to set up iptables rules for TLS connection. I have three internal IP in my machine and I route requests coming on public IP at port 443 to each of these internal IP in RR. -A PREROUTING ...
1
vote
0answers
85 views

nc connection refused even on loopback

I'm working on an embedded linux system, which appears to be networked correctly and is running ssh (dropbear) and rpcbind. I'm setting up a server application on it, and every single thing I try ...
1
vote
0answers
124 views

NAT routing command in windows

Is there any specific command in windows which do the following task: I want to modify the source IP address in the packet whose Destination IP is not in the private LAN, i.e., I have a virtual ...
1
vote
0answers
201 views

I need some help proof reading my IPtables rules, my rules seem to work but I cannot be sure

Like the title says, I need some help proof reading my iptable rules, my rules seem to work but I cannot be sure. My set up is as follows: ISP ---> cable modem ---> Ethernet switch ---> ...
1
vote
0answers
174 views

NAT router sends RST to a server where a NAT'ed client is connected to

As I tried to remove some Ethernet wires in my home network, I took an older notebook with Linux and tried to use it as some kind of Ethernet-2-WiFi-NAT-router (Wi-Fi card can't act as bridge, so I ...
1
vote
0answers
71 views

Lubuntu UFW does not respond

I have been using ubuntu for a long time. Nowadays, I wanted explore lubuntu. However, I cannot configure ufw. Actually I can but it does not respond. Basically, I cannot get the result of "ufw ...
1
vote
0answers
115 views

Change UDP port with iptables for VPN clients

What I want to do is say that for all UDP connections on interface ppp0 that have a destination port of 53, change that destination port to 1053. I am attempting to change the destination port of UDP ...
1
vote
0answers
240 views

Advanced QoS on prioritized first packages set by ISP

I have the following problem my ISP (Fibertel from Argentina) accelerates, 'enhances' the first 6.8 megabytes of downstream transfer and it's seems the first 1.8 megabytes of upstream transfer. This ...
1
vote
0answers
383 views

tc/netem and iptables: Delay traffic only from specified ip and port

I have a Ubuntu Router with 2 network interfaces. eth0 is the private network and eth1 is the internet. What I want is the following: All packages (mostly udp) comming from a specified private ip ...
1
vote
0answers
131 views

How to unblock jabber on TI ADSL router with iptables

I have old but reliable Texas Instruments ADSL router. Board AR7RD; BUILD=061005; VERSION=3.7.1 If that matters... One thing that bothers me is that it somehow blocking my jabber (Pidgin ...
1
vote
0answers
109 views

No output returned when curl ing any URL in Red Hat 6 but the same url works in lynx browser

I am trying to install some packages in Python using easy install. But i get a 'Download Error' for any package i try to install. So i tried to test if internet is accessible at all from the machine ...
1
vote
0answers
247 views

IP forwarding with iptables

Suppose there are hosts A and B. A is allowed SSH access to B based on its IP address. Consider now another host C. C does not have access to B, but if we could route its traffic through A, then C ...
1
vote
0answers
397 views

iCloud stuff stops working while connected to OpenVPN

I have a fairly simple OpenVPN setup on an OpenVZ VPS with Ubuntu 11.10. Client is the Viscosity client on Mac OS X 10.8.2, and after some testing, we can rule out the client as being part of the ...
1
vote
0answers
201 views

Load-balancing: response packets not routed - iptables

I have a problem with iptables. I'm trying to setup a load balancer between 2 uplinks. I can mark packets and connections, use ip rule to choose routing table (so changing the gateway). But, when I ...
1
vote
0answers
436 views

Routing table on Linux not respected

I have a very specific problem, building a Linux VPN endpoint (with external VPN Gateway), which should route certain networks over the tunnel, others via default gateway. The Linux VPN should do a ...
1
vote
0answers
147 views

Is there a decent diagram of packet flow for a modern era (2.6+) iptables setup?

I'm currently trying to debug a particularly hairy set of DNAT based iptables rules (the UDP reply never makes it back to the original requester) and I'm struggling to visualise the packet flow ...
1
vote
0answers
115 views

How to redirect local connection to my things in IPv6 on linux?

With IPv4 I can make some program connect to my service instead of where it wants using REDIRECT and DNAT targets in OUTPUT chain in iptables (sometimes combined with -m owner) In IPv6 hovewer I ...
1
vote
0answers
275 views

How to enable iptables with verbose mode in DD-WRT?

I want to log all packets to messages through iptables. Can you help me how to set verbose mode in DD-WRT. Just DYI, I have optware installed to store the large messages file and do log rotation.
1
vote
0answers
141 views

Linux route/IPtables with internal VM network

I am having some trouble figuring this all out. I have Windows 7 [10.10.30.1] ROUTER [eth0=192.168.4.134 eth1=10.10.30.254] Ubuntu [192.168.4.143] I can ping eth0 and eth1 from Win7, and also ...
1
vote
0answers
680 views

Internet Connection Sharing bypassing MAC Filter in Ubuntu Linux

My university gives me an internet connection by Ethernet, DHCP but they have installed MAC Filtering to allow only using my PC. I have a wireless router TL-WR340GD. which has MAC address cloning ...
1
vote
0answers
689 views

Iptables port redirecting. Rule doesn't work or show up in iptabels

I'm trying to redirect some incoming TCP traffic on port 443 to port 999 with iptables in an Ubuntu VM. I am using sudo iptables -t nat -A PREROUTING -p tcp --destination-port 443 -j REDIRECT ...
1
vote
0answers
540 views

SSH login with secure IP VPN

I have a PC behind a router with port forwarding setup Port 22 for SSH which works perfectly - I can login and everything. What I am trying to do is let this PC connect to a VPN and only allow ...
1
vote
0answers
94 views

Portforwarding to VM doesnt work.. anymore

I have a windows 2k8 server vm on my Ubuntuserver which I use for i.e terraria & apache. It was working great before a little minor accident when the electricity stopped flowing through the cables ...
1
vote
0answers
98 views

How can I restrict my Virtual Machine using an iptables rule?

I am using CentOS Linux and am planning to setup a rule on my VM's iptable. I want to restrict all outgoing and incoming packets to the VM for a temporary period and allow only the DHCP packet to ...
1
vote
0answers
236 views

Can ipmasq and ufw be used together?

If both ufw and ipmasq manipulate iptables, can I use ipmasq for a quick easy setup and then use ufw afterwards to add security or will the two just trample all over the iptables "stuff"? I'm playing ...
1
vote
0answers
508 views

Why does my Tomato router seem to behave badly as time passes

I've set up a Firewall script on my Tomato router (a WRT54G 2.0, actually) that seems to behave correctly at start, but after one or two days, it seems that the script does not work anymore... The ...
0
votes
0answers
21 views

How to redirect all data through a proxy on Tomato?

My proxy is Squid as an external machine, my router is a WRT54GL with tomato, I can also install openwrt, but I prefer tomato. On the router, the firewall script I wrote this script, nicely connects ...
0
votes
0answers
8 views

How to IP redirect all requests to public ip back to router

Using OpenWrt Backfire 10.03.1 on Linksys WRT54GL. Till today my ISP's modem used to loopback all traffic with self-destination IP back to itself. (for example if my WAN IP is 8.8.8.8 and I perform ...
0
votes
0answers
17 views
+50

OpenWRT Firewarll INPUT Chain allowing everything?

I haven't done anything to my the default firewall rules except open a port for ssh from the wan and add the rules for OpenVPN as defined in this tutorial: ...
0
votes
0answers
24 views

Intermittent disconnections when using OpenVPN over SSH tunnel; possible iptables issue?

I've recently set up a Debian Wheezy server with OpenVPN to help out some friends in areas where internet censorship is a problem (including the blocking of VPN traffic in general). To overcome this, ...
0
votes
0answers
69 views

CentOS 7.x iptables

I have manually edited the /etc/sysconfig/iptables file in my CentOs 7.x installation , I have two entries and two processes running at the respective ports. I am able to telnet/access port 2181 but ...
0
votes
0answers
16 views

Why won't my proxy server connect to the internet?

I'm setting up a dedicated machine to run a transparent proxy server for my network, but for unknown reasons, clients can connect to the machine, but the internet isn't working. There seems to be a ...
0
votes
0answers
19 views

How to correctly configure iptables on a laptop?

I have run these commands (tried switching the order too) because I want to set up a firewall on my laptop so that nobody can connect to it (except of course in response to a connection I've made): ...
0
votes
0answers
44 views

udp client sending ICMP “port unreachable” when receiveing messages from the server

(Note: I moved this question from StackOverflow, because it's to be considered off-topic there, better fits here, and still unsolved) I have a udp client using luasocket, basically doing this (with a ...