Iptables is used to set up, maintain, and inspect the tables of IP packet filter rules in the Linux kernel.

learn more… | top users | synonyms

0
votes
0answers
4 views

ip packet forwarding in Debian

I have physical network setup with machine A<---->B<----->C..IP and ethernet configurations are summarized as following: A(eth0: 10.10.10.2)<--->(eth0: 10.10.10.3)B(eth1: ...
0
votes
0answers
13 views

Ubuntu on Chromebook - How to add iptables_nat to special kernel?

I am running this modified version of Ubuntu on my Acer C720 Chromebook. Recently I've tried installing Docker, but it seems that this special version of Ubuntu lacks iptables_nat: eir@asgard:~$ sudo ...
0
votes
1answer
22 views

Ubuntu Server 14.04 Drop UDP packet

I use Ubuntu server as part of my system and now I have seen something interesting. I have a router that sends me ethernet 802.11 packets. I generate this packet in the router and then send it under ...
1
vote
0answers
18 views

opening port 80 on AWS

I created a AWS EC2 VPS(ubuntu v14) on which I want to open port 80 so that my website can run. But unfortunately, I am not able to open port 80. For this, I first ran the command: $ sudo iptables ...
0
votes
0answers
12 views

UFW blocking 169.254.0.0 (link-local / apipa) addresses?

When using iftop on my wlan0 interface, there are a few link-local addresses connecting. How and where can I filter these connections? I have very specific UFW rules blocking 169.254.0.0/16, but I ...
0
votes
0answers
26 views

Redirect all traffic except DNS

I successfully setup Ubuntu server up & running. Server configuration: tun0 192.168.99.1/24 NAT Enabled Note that client able to communicate with server. ping 192.168.99.1 Now I stuck at ...
0
votes
2answers
37 views

How to allow this connection on the Firewall?

I am trying to connect my Ubuntu Web Server to my Ubuntu Storage Server using NFS (Network File System). But when I try to mount a Storage Server to the Web Server, I get a "Connection Timeout" ...
1
vote
1answer
22 views

Iptables and Postfix

Examine configuration of Postfix and iptables, what will be response of mail server and why? First: main.cf mynetwork=127.0.0.1/8 smtpd_sender_restrictions=permit_inet_interfaces iptables ...
0
votes
0answers
24 views

Virtual Machine can not ping to internet but still use apt-get update?

I'm installing VMware version 11 on Windows 7 Pro to create Virtual machines. VMs is running Ubuntu 14.04. My problem is I can not ping from the virtual machines to the Internet (8.8.8.8). but still ...
0
votes
0answers
18 views

14.04 How to unblock UDP ports and UDP packets?

I'm use and Ubuntu Server, and I use it an Asterisk 11. But I have to unblocking the UDP Port 5089 and port for UDP packets in the range of 16384-16482. Also, I need to disable "SPI" in my firewall. ...
1
vote
1answer
21 views

How can i make both iptables/ip6tables run at startup?

I have two differents set of rules in two files, one is dedicated to ipv4 and the other for ipv6. To make them persistant I use the if-pre-up/if-post-down script : #! /bin/sh iptables-restore < ...
2
votes
1answer
51 views

Change iptables log format

Is it possible to change the log format of iptables ? I want to add the ssh_client in the log. I have already made an iptables rule for outgoing ssh iptables -I OUTPUT -p tcp --dport 22 -j LOG ...
0
votes
0answers
56 views

Ubuntu Port Scan , Security concerns

Scan results of my ubuntu 14.04 $ nmap 127.0.0.1 Starting Nmap 6.40 ( http://nmap.org ) at 2015-05-02 08:43 IST Nmap scan report for localhost (127.0.0.1) Host is up (0.0021s latency). Not shown: ...
0
votes
1answer
29 views

How to load a iptable matching module? Or is it required to load it expressly? Some related questions

I am running Ubuntu 14.04 LTS. I believe the following shows which iptables matching modules are loaded: sudo cat /proc/net/ip_tables_matches Question: I see conntrack listed three times. Why? ...
0
votes
1answer
37 views

Do iptables support jitter simulation?

I'm using 14.04.1-Ubuntu. I'm trying to find out if iptables supports creating jitter, like it does for packet loss. I'm using iptables -A INPUT -m statistic --mode random --probability 0.02 -j ...
0
votes
1answer
62 views

How to use my ubuntu server as router?

+---+ eth1- *.1.6| S | =========| | |PC1|private net -------------------- ...
0
votes
0answers
21 views

IPtables logging… continues after command is commented and old rules flushed

I have the following iptables script. I do a sudo to execute it but before doing so I run a sudo iptables -F to flush all old rules. Yet, there are entries with prefix of iptables2: #iptables -t nat ...
0
votes
1answer
27 views

How to setup IPTABLES for logging/monitoring usage while using a DSL with a dynamically assigned IP

I am trying to set up a system to do NAT and other iptables-stuff (like logging, firewall, monitoring, etc.). The ISP provides a dynamic IP address and the DSL modem does NAT. I have the following ...
1
vote
1answer
19 views

Can iptables log be directed to different log files in different iptables command?

Can I have something like this: iptables -A INPUT -i em1 -j LOG --log-prefix='iptables1: ' iptables -t nat -A PREROUTING -i em1 -j LOG --log-prefix='iptables2: ' Here I have different log files ...
0
votes
0answers
37 views

Redirecting iptables log works but logging continues in kern.log file too

Yes, I have gone through similar questions asked. My problem is that I am able to log the iptables log in another file. However, the log entries also get logged in kern.log file. I have the following ...
0
votes
0answers
27 views

Gufw log: rejected, denied and allowed connections

I have got Gufw installed, and I have set some firewall rules so that it rejects and allows certain IP addresses. And although I have set it so that it logs-all, I cannot seem to find anywhere where ...
0
votes
0answers
17 views

Two different Networks, 2xRouter some routing Fail need help!

I have some problems with my Settings, if someone can check it and analyze whats wrong. NETWORKPLAN MY current settings: /etc/network/interfaces Wan auto eth0 iface eth0 inet dhcp LAN auto eth1 ...
0
votes
1answer
116 views

Referanceing venet0:0 and venet0:1 in iptables on OpenVZ

I have an Ubuntu vps that is hosted with openvz. For a while now I have had trouble using the interface names in iptables, such as: (edited) -A INPUT -i venet0:0 -p tcp -m tcp --dport 80 -j ACCEPT ...
2
votes
1answer
98 views

Ubuntu 14.04 as router Destination Network unreachable

I am fightning with this for like 10 days now i really need to ask you guys, i hope someone has 5 mins time to explain me what i am doing wrong! For the start i wanted to configurate a router for my ...
0
votes
1answer
62 views

Preventing port scanning

I want to prevent my server from being port scanning from Internet and if port scanning occurs, block source IP address for several minutes. Below my current iptables config: Lilith> iptables ...
1
vote
0answers
54 views

Dnsmasq and Iptables for routing

I'm using a Raspberry Pi with two ethernet ports as a router. The network looks like this. "Internet" <--(…)--> Fritz!Box <--(172.16.x.y)--> [eth1, dhcp] Raspberry Pi [eth0, static] ...
0
votes
0answers
38 views

unable to start (Ubuntu server 14.04) iptables service it show “Unrecognized service”

Ubuntu server 14.04 iptables service start shows: Unrecognized service
0
votes
0answers
24 views

Web service only responding to local request

I have a webservice that listen on port 5678 on a remote ubuntu machine. netstats: tcp 0 0 0.0.0.0:5678 0.0.0.0:* LISTEN 10605/node I don't have any ...
1
vote
0answers
62 views

Using iptables to redirect all traffic to my localhost

So I've just installed DD-WRT on my router and I wanted to redirect all http requests to my local host located at 192.168.1.50 (port 80) but I'm unable to find any way of doing this. I've tried doing ...
0
votes
1answer
47 views

'iptables -S' to be accessed by www-data

I've had a look around on Ask Ubuntu and can't find an answer to what I'm looking for. Basically, I have an admin panel for a website I run and recently just installed fail2ban, which has made my ...
2
votes
0answers
77 views

Host to Guest one way connection issue

I have guest run on my machine on qemu with configuration: /usr/local/kvm/bin/qemu-system-x86_64 -enable-kvm -cpu host -smp 8 -hda ${TEST_VIRT_ENV_IMAGE} -m 4096 -netdev user,id=user.0 -device ...
1
vote
0answers
24 views

UFW open range is still blocked

I have opened up a range of ports using UFW. The rules in question are shown below (output of sudo ufw status numbered). I have restarted UFW since I added the rule, yet in lnav I still see log ...
0
votes
1answer
147 views

How to route transmission traffic

Trying to get Transmission to only use my wifi interface (wlan0), while everything else uses ethernet (eth0). I was able to bind Transmission to the wlan0 IP but can't get it to work unless I ...
1
vote
0answers
76 views

how to open a port under Ipv4 instead of Ipv6

How I can open a port under Ipv4 instead of Ipv6 on ubuntu tcp 0 0 127.0.0.1:3306 0.0.0.0:* LISTEN - tcp 0 0 127.0.1.1:53 ...
0
votes
0answers
75 views

ufw on ubuntu doesn't work, how to deactivate plesk firewall?

Since I'm a totally newbie to server stuff but I needed to set up a vServer, I let install Ubuntu 14.04 AND Parallels Plesk on it. Now, I think it would have been better to install Ubuntu without ...
1
vote
2answers
114 views

Ubuntu 14.04 : Cannot access internet via terminal

I am able to connect to both wired and wireless networks and able to browse via a browser. So I don't think there's any network issue. However I cannot run any internet based command from my terminal ...
0
votes
0answers
102 views

iptables: write UDPv4: Operation not permitted (code=1)

I am trying to set up a stateful firewall using iptables. It is for use on my desktop machine. Below are the contents of my firewall script: #!/bin/bash iptables-save > ...
0
votes
1answer
80 views

Configure UFW to allow only established and related conections (on IPv4)

I want to configure ufw to deny everything except the related and established connections. On iptables I usually did : -P INPUT DROP -P FORWARD DROP -P OUTPUT ACCEPT -A INPUT -m state ...
1
vote
0answers
64 views

Noob user. No network (wired). Cannot ping router

Let me start by saying I am pretty new to Linux, so forgive my unavoidable noobness and thank you for readning this. I am trying to set up a good environment to learn programming and familiarize ...
0
votes
0answers
44 views

Dual Wan and lan configuration

Iam planed to configure a dual wan ubuntu router with dual lan. ie., eth0 and eth0:1. And ath0(192.168.1.1) should route through ISP 1 and eth0:1(192.168.2.1) should route through ISP 2. Please guide ...
1
vote
0answers
34 views

Transparent proxy listening on sub-interfaces

I have iptables and squid on the same box. HTTP traffic doesn't seem to be going through the transparent proxy when I change my rules on the filter table. What is the best point to filter http ...
0
votes
1answer
78 views

Errors with iptables/ipset (operation not permitted) while trying to block Chinese IPs

I'm not very experienced trying to do things like this, but I have been wanting to ban Chinese IPs from my VPS running Ubuntu (12.04 32-bit). I followed this guide, taking the time to read the ...
0
votes
0answers
39 views

Route teamviewer out secondary routing table

First question on here and im a linux newbie so please go easy =). I have a VPN tunnel that all my traffic goes through unless it is specifically told to use a different route table, vpnBypass. I ...
0
votes
1answer
100 views

“sudo iptables -L” takes a long time to load

For some reason when I try to run sudo iptables -L it takes a very long time to load. I am loading the rules from a script and it's on an Ubuntu server virtual machine through VMWare Fusion with 2MB ...
1
vote
0answers
38 views

Redirect connections from VPS to IP

I'm trying to develop my own "DNS" server using subdomains. Let' say I have this struture: VPS server with Ubuntu VPS server IP: 1.1.1.1 External computers on: 2.2.2.2 and 3.3.3.3 Subdomain ...
0
votes
0answers
34 views

Update dynamic IP and fail2ban

i have a script running via cron to allow ssh only through some known IP's. Since my Home-IP is dynamically associated i use this script running every 15min: #!/bin/bash ...
2
votes
1answer
46 views

DNS not resolving on same network only from outside - 3 days of headache already

I have a domain forwarded to my apache server let's say test.example.com. This works fine outside my home network I can reach it via mobile (4G). But on my laptop I can't reach it. Also I can't ...
0
votes
1answer
69 views

IP Tables allow HTTP and HTTPS

I am setting up a basic Firewall rules for my Laptop but I cant seem to get HTTP and HTTPS, thus using of the Webbrowser to work. My current rules are like this # 1. Delete all existing rules ...
0
votes
0answers
93 views

Restrict maximum number of independent IP connection on specific port at the same time

I set up a server as a socks5 proxy. I'd like restrict the maximum number(1 or 5 or 20) independent IP connection on specific port at the same time. I have searched on google, only see some articles ...
0
votes
0answers
28 views

Switch on Two Network Interfaces

I am trying to write script to switch between two interfaces on a Uuntu machine, wlan0 and eth0. My primary reference is: Forwarding traffic between 2 interfaces -A FORWARD -i eth0 -o wlan0 -j ...