Questions tagged [iptables]
Iptables is a module that provides the Linux operating system functions of firewall, NAT and logging of data traveling over a computer network.
1,616
questions
0
votes
0answers
23 views
firewalld failed since installing docker
Firewalld has been writing the following errors in the logs since installing Docker:
WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w10 -t filter -F DOCKER' failed: iptables: No chain/target/match by ...
2
votes
1answer
19 views
Terminate or bust natted connection
I have a problem with natted connection on linux.
I'm using Debian 10, and iptables to do some SNAT to force all my packets outgoing from eth0 to a specific UDP port to use a specific IP attached to ...
0
votes
0answers
27 views
iptables, limit openvpn forwarding for specific destination sub-nets
I'm attempting to setup a openvpn server, which runs 2 different instances of openvpn, to provide access to different vpc subnets.
If users are connected to the 10.6.0.0/24, they should have access ...
0
votes
0answers
5 views
Iptables rule lock me out
I found this security rule, but when I use it, it lock me out. I wonder why others recommend this one when it is not so perfect obviously? Perhaps, the rule have some errors?
/sbin/iptables -t raw -A ...
0
votes
0answers
10 views
Block with iptables
I tried to block all connection except from one specific ip with iptables:
Allow all from one ip
sudo iptables -A INPUT -s %MY_IP% -j ACCEPT
Denied all
sudo iptables -A INPUT -j REJECT
But after the ...
0
votes
0answers
8 views
Change originating IP address if the destination IP is a certain IP
Using windows boxes.
I have a webserver on a windows box, that has three IP addresses.
Internal management, data and external
The webserver uses the data IP for communication between the subsystems.
...
-3
votes
0answers
17 views
Please re-edit iptables to ip6tables rules [closed]
/sbin/iptables -t mangle -A PREROUTING -s 224.0.0.0/3 -j DROP
/sbin/iptables -t mangle -A PREROUTING -s 169.254.0.0/16 -j DROP
/sbin/iptables -t mangle -A PREROUTING -s 172.16.0.0/12 -j DROP
/sbin/...
0
votes
0answers
10 views
Android: how to find application locking xtables? [migrated]
I have Pixel Experience (Android 10) installed on my Redmi K20. + Magisk 21.4.
In terminal I enter command iptables -t mangle -L -n | grep TTL which throws Another app is currently holding the xtables ...
0
votes
1answer
26 views
iptables on DD-wrt to bypass VPN outgoing port 993
I'm using the DD-wrt, openVPN client and NordVPN.
I recently found out NordVPN blocks Email ports like secure Imap port 993.
Ive been trying to create a rule in my DD-wrt commands, and i can't seem to ...
0
votes
0answers
13 views
What is being logged in iptables with these entries?
I have a server behind a hardware firewall supplied by the phone company. I'm logging these entries with iptables. I don't expect any public IP address from outside the USA to be accessing the server.
...
0
votes
0answers
14 views
Route all traffic of one interface (local: eth0) to another interface (tun0) & vice versa including broadcast in Debian Linux for specific port
I am using eth0 port on my device to connect multiple 3rd party devices on same subnet. On my device, I have also initialized VPN Interface (tun0) to connect it externally. Locally (eth0) all devices ...
0
votes
0answers
11 views
socat tee very laggy/stuttery?
I have to implement a videorecorder on a networker. In order to do that I need to duplicate the unicast Stream from the camera to 2 hosts.
I've tried the following:
socat - udp4-listen:53260,fork,...
0
votes
0answers
54 views
OpenVPN but one user by VPN
I expose here my project.
I have a server running a ubuntu.
The server is set up with multiple VPN connection (tun0, tun1, tun2 ect)
I use this to launch my VPNs:
sudo systemctl start openvpn-client@...
0
votes
1answer
28 views
How to change destination-IP from packets through iptables?
I managed to duplicate the data through:
Sudo iptables –t mangle –A PREROUTING –p udp –d 192.168.2.100 –dport 53260 –j TEE –gateway 192.168.2.80
Linux at 192.168.2.80 receives the packets, however the ...
0
votes
0answers
16 views
iptables: only allow specific mac addresses
I hope someone here can help me out with this as it's probably a really easy setup.
I am on centos 8 -- disabled firewalld and installed iptables-services.
I have one physical interface with a bridge ...
0
votes
0answers
35 views
how to get udp unicast to two hosts?
The two hosts need to have to same ip.
My solution at the moment is a port mirror, but the problem is as mentioned the duplicate of the ip address, I think. I couldn't find a way to disable the IP-...
0
votes
0answers
179 views
Forward all web traffic From wlan0 to eth0 in iptables
There's so many howtos on how to do this, and they're all slightly different, and they all give me a headache to try and decipher...
I have a Raspberry Pi that's "bridging" eth0 to wlan0 ...
0
votes
0answers
35 views
IPtables rule to allow Lets encrypt
This message appears when I try to get Lets encrypt certificate, because the IPtables rules.
I cannot figure out which rule blocks it, so I want to append "allow" rule. Do you know the right ...
0
votes
1answer
3 views
Basic Linux Iptables firewall problem
After inputting these commands into a terminal on a host with Iptables installed, no web pages are loaded after connecting to a wireless network with internet access.
I know it's something simple but ...
0
votes
1answer
56 views
Routing between two wireless interfaces - Linux
Basically, my network looks like that
+------+
10.0.0.10 ------ 10.0.0.1=|Laptop|=11.0.0.11 ------ 11.0.0.1
(wlan0,client) (AP,wlan0)+------+(wlan1,client) (AP)...
0
votes
0answers
20 views
Open Custom ports in Ec2
I am trying to open up custom port 12345 from Ec2 instance. Here are the details.
When i do nmap on localhost i see the below
Nmap scan report for localhost (127.0.0.1)
Host is up (0.0000080s latency)....
0
votes
1answer
20 views
Access Raspberry Pi behind a NAT firewall through Internet
I have been developing projects with Raspberry Pi 4. For the current project I am running a NextCloudPi server on it. I am able to access the server using my Internal IP. I want to access it using a ...
1
vote
0answers
38 views
500 Server Error: Internal Server Error with Kathara, Docker and iptables/nftables
I want to use Kathara via "kathara lstart" but I get a 500 Server Error: Internal Server Error and I don't understand why. I'm using Docker (Preview version for Apple M1). I don't know if ...
0
votes
0answers
25 views
Iptables Forward All traffic to different interface except local inter-lan
I have two Local Area Networks (LAN).
Local LAN: 172.30.30.0/24 with gw 172.30.30.254
Remote LAN : 192.168.2.0/24 with gw 192.168.2.1
Both LAN's can communicate and ping each other devices. I have ...
1
vote
0answers
64 views
IPtables help forwarding port through WireGuard connection
I have a home server behind a carrier-NAT so I cannot forward any ports to it. I have PLEX running (in a docker container) on the server and would like to access it from outside my home network. ...
1
vote
0answers
14 views
Server connections refused when hostname used, works fine with IP
Hope someone can help. I've run a local server for a while on a Rapberry Pi 3b (Raspbian Buster) that includes a PBX server, DNSmasq and local webserver.
I recently upgraded to a Pi4 and performed a ...
0
votes
0answers
23 views
Forwarding a port to a local address using iptables
I'm running a TeamSpeak 3 server on a home server. I would like to mask the IP address of the home server so I am using a VPS as an entry point to my TeamSpeak 3 server. I found a tutorial online that ...
0
votes
1answer
31 views
Lighttpd returning from curl rather than nginx
I have been having issues with being able to reach my websites hosted on my Raspberry Pi on my home network. It was all working until recently and I can't work out what I've done to break things :(
If ...
0
votes
1answer
35 views
HTTPS connection refused after redirect on my Nginx server
I’m unable to get to my web server via HTTPS. If I try and connect on port 80 the connection is redirected to port 443 as a quick wget shows:
--2021-01-04 22:45:51-- http://corballis.co.uk/
Resolving ...
0
votes
1answer
57 views
Connect from a computer to a Raspberry connected in a second computer (RNDIS)
I have a Raspberry Pi attached to my laptop using the USB (RNDIS) so I can see the Raspberry Pi as a Network Card + Device. I can SSH from my laptop to the Raspberry Pi using the 192.168.64.1 IP. I ...
0
votes
0answers
13 views
iptables log shows blocks while being behind HW firewall
I am running Bitcoin Core 0.20.0 on Odroid box with Unbuntu 18.04. The box is behind a hardware firewall which is configured to forward and allow all incoming connections to port 8333 of the box. The ...
1
vote
1answer
61 views
Route all traffic through TUN interface
I want all my traffic go through TUN interface.
Here is the flowchart
So, as you can see, the traffic is routed to TUN iface on 10.0.0.1 address from every program. Then, the program attached to the ...
0
votes
0answers
16 views
Old ufw after.rules still effective unless reboot the machine
Not sure this is expected or something I have missed.
I am following this post to setup firewall to work wither docker:
https://github.com/chaifeng/ufw-docker
So I added the following in file /etc/ufw/...
0
votes
0answers
13 views
Can't port forward on port 25565 or any other port [duplicate]
The Problem:
I'm unable to port forward port WAN port [25565] to server [IP: 192.168.8.100:25565]
Network Info:
IP| Dynamic
Router WAN IP| 10.204.250.128
External IP| 115.164.xx.xx
Server IP(LAN)| ...
0
votes
0answers
75 views
Slow/No INternet Connection Wireguard
I've been trying to setup Wireguard up on my server. (Running Ubuntu Server 20.10). I've followed the tutorial and can connect to wireguard but I have intermittent/very slow internet when connected. ...
0
votes
0answers
15 views
Port forwarding from VPN server to server's non-VPN neighbor
I have a server with OpenVPN server installed and the service is exposed to the internet through Port Forwarding on my router. I have a device on my internal subnet that provides a webpage that I wish ...
0
votes
0answers
22 views
How to setup linux system with only one network interface to act as gateway
I have a not so uncommon setup in my local home network: 1 network with internet connection provided by dsl router device with ethernet + wifi.
Now I want to designate one of the client devices (...
0
votes
0answers
20 views
Create an iptables rule for a country where the server is behind a proxy
I have a couple of webservers behind a proxy.
I want to block an entire country from access.
The problem is that the IP of the request is in the header.
I can add a single iptable rule like:
iptables -...
1
vote
1answer
130 views
What is this UDP traffic to 230.0.0.1? And how can I block it?
My VM is of IP 192.168.3.20 in the network of 192.168.3.0/24. While running iptraf command on my machine, I am getting the response as shown in the attached image. I can't understand what kind of ...
2
votes
1answer
69 views
IPTables and SSH login problems when rules are set via a shell script
When I put these IPTables rules, I cannot access to the server via SSH. IPTables rules are not persistent, so I restart the server to have access again.
I get this error with these rules when I try to ...
0
votes
1answer
15 views
Does iptables affect existing tcp flows
I'm trying to emulate a network partition via iptables -I INPUT -s <other-ip-address> -j DROP on both nodes.
Will this affect existing tcp flows, or will it only affect subsequent ones (ie if ...
0
votes
0answers
14 views
iptables route traffic from interface to interface
I want to make me own firewall box and me configuration is right now this.
[Uplinks 45.x.x.x/21] > eth1 [Server for firewall 45.x.x.4] eth0 > [webserver 45.x.x.5]
so the webserver is open on 45....
1
vote
1answer
532 views
Using Wireguard to essentially give a machine in local network a public address from VPS
I am working on the home project and would like to give my machine essentially the public IP address that is assigned to my VPS in the cloud.
At home I have a public IP address and I have set up the ...
0
votes
1answer
32 views
Routing/NAT Linux how to (RHEL 7)
I have a device (called TANGO) with an IP address of 192.168.1.2 netmask 255.255.255.0 connected directly using GbE Link to a RHEL 7 server (called LIBRA), where I assigned a static IP on LIBRA GbE ...
0
votes
0answers
12 views
iptables not filtering after applying rules to KVM based virtual machine
I am following this serverfault post as I want the guest Centos7 Virtual Machine to access the internet but have no access to any LAN network. My Host machine is Red Hat 7. Here is the output of ...
0
votes
1answer
51 views
Iptables command analog in Windows
iptables -I FORWARD -s 192.168.1.100 -p udp --dport 27000:27200 --match string --algo kmp --string 76561198923445525 -j ACCEPT
I need simply analog of that working command within windows OS, for ...
1
vote
0answers
11 views
Forwarding WAN traffic coming in to VPN Server to VPN client and then to device on client LAN
Here's a synopsis of what I'm trying to accomplish. My Internet connection is double NAT'd and I have no ability to port forward or bridge the upstream router so that my router can accept incoming ...
0
votes
0answers
24 views
IPTABLES allow only 2 sites block all other
I was trying to allow only to 2 sites.Log any other movement of packets as well as any unauthorized access to web pages.Can you please help me?
I wrote this but it doesn't work.It blocks all the ips....
0
votes
0answers
59 views
Openvpn kill switch + port-based split-tunneling setup
Like the title suggests, I am attempting to write netfilter rules to prevent unwanted traffic to go through when vpn is down (the kill switch part). At the same time, I am trying to have some of the ...
0
votes
1answer
45 views
Port forwarding not working with iptables
I use a CentOS 7 as a gateway server. It has two network interfaces, ens28 and ens29.
The ens28 uses a private 192.168.x.x network, it is considered as the WAN. Ens29 is the LAN area with a 172.16.0.0 ...
