Iptables is used to set up, maintain, and inspect the tables of IP packet filter rules in the Linux kernel.

learn more… | top users | synonyms

2
votes
2answers
55 views

iptables forward port error - No chain/target/match by that name

I am trying to configure iptables on my Ubuntu 12.04 LTS server to forward port 443 to 8443. But when I run this command: sudo iptables -A PREROUTING -p tcp --dport 443 -j REDIRECT --to-ports 8443 ...
0
votes
0answers
9 views

How do I open ports for Asterisk and SIP?

How do I know whether port 5060, for SIP, is open on localhost? thufir@mordor:~$ thufir@mordor:~$ nmap localhost Starting Nmap 6.47 ( http://nmap.org ) at 2016-06-29 23:09 PDT Nmap scan report for ...
1
vote
1answer
18 views

iptables rule traverse order

Here is partial output of my iptables: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 22866 ...
0
votes
1answer
19 views

Forwarding VPN clients to internet

I have following configuration. OpenVPN server on a cloud(Ubuntu 14.04) with static IP( example 50.60.70.80 on eth0). Linux and Windows clients are successfully connected to VPN (VPN static IP's - ...
0
votes
0answers
36 views

nmap scan on Ubuntu results in odd result

1. I ran an nmap scan on my system and this was the out put. hobbit@hobbit-OptiPlex-GX520:~$ nmap -v sU sT 127.0.0.1 Starting Nmap 7.01 ( https://nmap.org ) at 2016-06-25 20:08 IST Initiating Ping ...
0
votes
0answers
20 views

Sharing through Iptables stopped working

I have a server connected with the internet and the local network. The configurations are: eth0 - 192.168.10.1 eth1 - 192.168.0.6 (Internet) When I wanted to share the internet with other computers,...
0
votes
1answer
20 views

Do iptables rules I put in place on my admin account carry over to a newly created standard user account?

Do iptables rules I put in place on my admin account carry over to a newly created standard user account? Is there a way to verify this?
1
vote
1answer
45 views

Sharing connection - IPTABLES

I've been trying to configure IPTABLES in my server so I can share the internet from the server with another machine. The server IP is 192.168.10.1 (eth0), the connection is coming from 192.168.0.6 (...
0
votes
0answers
9 views

How to make ipt_netflow sending flows info each 5 second?

Help me please. How to make ipt_netflow sending information about flows each 5 seconds? and take all information about opened and closed ports
3
votes
1answer
29 views

Redirect iptables logging to another logfile

I have followed the recipe by @Gilles in this answer. I succeeded, but the problem is that the iptables logging now goes into 3 log files, syslog, kern.log and iptables.log. Ideally, I want the ...
0
votes
2answers
29 views

UFW on Ubuntu 16, strange behaviour

I am moving from ubuntu 14 to 16 and have been getting some odd behaviour with ufw. ufw status ufw allow 22 ufw enable My connection gets lost. I am not seeing this behaviour in ufw on ubuntu 14. ...
0
votes
0answers
14 views

Prevent Outbound IP Address spoof

We have multiple computers running Ubuntu Desktop, all connected to same Router. Using UFW firewall, all inbound and outbound ports are blocked on these Desktops, except for only one outbound port (...
0
votes
0answers
21 views

figthing with firewall configuration and samsung network printer in Networking & Wireless

I've configured my Samsung SCX-3205W printer and scanner in Ubuntu 15.10 and everything worked fine until I've turned on firewall. After some forums reading and some fighting I've discovered that it's ...
0
votes
0answers
20 views

Redirect all traffic to other server

I have 2 servers: one with DDoS protection and another one without it. I want to redirect all traffic (FTP, TCP, UDP) to the second server through the DDoS protected server, so that I have DDoS ...
0
votes
0answers
30 views

Ubuntu 14.04 LTS Dropping incoming connections randomly

first of all I'd like to state that I am near noob when it comes to anything in linux. So I've rented a dedicated machine as part of moving my game servers to better location, and so did the trouble ...
0
votes
1answer
30 views

Ubuntu server - port forwarding

I need to redirect from http port 80 to elsewhere to specific page, which running on port 9090/somepage. In short: Need redirect x.x.x.x:80 -> x.x.x.x:9090/page I tried to do by command iptable, ...
0
votes
0answers
42 views

How to use iptables to prevent repeated attacks on port 80?

There a is massive attack on port 80 on my Server i try to use iptable This way to banned attackers iptables -A INPUT -s 212.252.96.128 -j DROP but there are too many IPs attacking how to prevent ...
0
votes
3answers
51 views

iptables allow only certain services

I am running in my server asterisk and I would like to protect my system as much as possible. It is currently protected with fail2ban and I would like to add some more protection. Ideally I would like ...
1
vote
2answers
79 views

How to Block a range of IP address with UFW

I am trying to block a range of IP address on my Ubuntu 16.04LTS server from a specific country, i.e. China, Iran, etc. I was hoping to find a script or something I could run to easily make a ...
0
votes
0answers
15 views

TFTPD32 error when starting application

Using winetricks I installed TFTPD32 on my Ubuntu 16.04 machine. However when I try running the application I get the error: Cannot connect to service. Error 10061 (Connection refused). despite the ...
0
votes
0answers
22 views

how to run softether via ipv6?

I have setup softether on my machine and managed to run it for ipv4 addresses. i'm running it via dnsmasq. how can i do the same for ipv6 ? an e.g. of config for ipv4 here http://blog.lincoln.hk/...
0
votes
0answers
32 views

redirect traffic from server 1 to server 2 on specific ports

I am trying to redirect traffic from server 1 on IP A to server 2 on specific ports and IPs. i am using this rule as an e.g. - iptables -t nat -A PREROUTING -s 192.168.1.1 -p tcp --dport 1111 -j ...
0
votes
0answers
21 views

Masquerade over USB Ethernet Problem

I am trying to create a hotspot with a captive portal for my company. First thing I needed to do was share my internet access. So, what I am trying to do is, have internet cable plugged into eth0, ...
3
votes
1answer
54 views

Iptables block all incoming IPs

Is it possible block all incoming IP addresses, allowing only one or two IP addresses access on Ubuntu server?
0
votes
0answers
18 views

Create separate Filters per User

I am running OpenVPN on Ubuntu 14.04 (dev tun) and I can't seem to get my learn-address script to run below I would like to run the learn-address script each time a user connects to OpenVPN that ...
0
votes
1answer
66 views

Revert iptables

I created the following temporary rule that I enable occasionally but I would like to remove it without the need of restarting the machine. Can someone provide me the command? sudo iptables -t nat -...
0
votes
0answers
22 views

Use endpoint instead of IP in iptables

I am using AWS ElastiCache and I am trying to configure it so that I can access it outside of AWS. Long story short, I have to execute the following command on an Ubuntu instance (AWS NAT instance), ...
0
votes
1answer
17 views

Create a permanent rule for iptables in Ubuntu

In order to establish connection with my Ubuntu server I have to add the following rule to iptables: sudo iptables -A INPUT -p tcp --dport 80 -j ACCEPT Everything is working until I reboot the ...
0
votes
1answer
20 views

Can't SSH to machine on Local Network (time out), can SSH from ouside LAN

I have a Box 'foo' which has sshd running. I wish to ssh to this machine via Box 'bar'. Box 'foo' has the IP address 10.0.0.100 and Box 'bar' has the IP 10.0.0.109. The gateway for both of these ...
0
votes
0answers
41 views

Ubuntu on vagrant and iptables

I have an ubuntu desktop 14.04 running on a vagrant VM (virtualbox). I am trying to forward port 25 to port 2525 and I have executed the following commands: sudo sysctl net.ipv4.ip_forward=1 sudo ...
0
votes
0answers
15 views

GUFW limit access to websites

Do anyone know how I can limit access to certain websites during specific hours of the day using GUFW? If GUFW do not have this ability, what can I use instead to achieve this function?
0
votes
0answers
24 views

System Wide Proxy Setup - Must Or Optional

I would like to understand few things about system wide proxy on ubuntu. When a system wide proxy is set from network settings, does all applications (regardless from user) use this proxy or can ...
0
votes
0answers
31 views

Firewall with ability to block manually temorarily ip addresses, ports?

I have made a DDoS detection system that gives me info about malicious IP addresses and ports need to be blocked. Does anyone knows good solution of firewall, allowing me to do that. More automated ...
0
votes
0answers
22 views

Route traffic over different interfaces dependant on port

I have a problem I've been trying to tackle for a month now and just cannot figure it out. I've read every guide and tutorial I can find and tried all the solutions, they almost work but not quite. I'...
1
vote
1answer
40 views

How to configure simple routing between NICs

I have the following setup: Physical router Internet interface 192.168.1.1 Port forwarding of IP 1194/udp to virtual machine below Virtual machine (VM) Ubuntu 14.04.3 Server AMD64 One virtual ...
0
votes
1answer
34 views

IP tables as a basic proxy not functioning as expected

I'm trying to accomplish simple packet forwarding on an Ubuntu 14.04 server (IP=192.168.36.217) using iptables. I want to take incoming packets destined to the server on a particular port and rewrite ...
1
vote
1answer
89 views

How to block facebook

I want to try blocking facebook on my machine. I started using /etc/hosts but that doesn't catch all subdomains, so I did some research and found this (and many similar solutions) which lead to this ...
1
vote
1answer
57 views

Iptables rules slow down loggining in via SSH

I am trying to build some basic iptables rules for my VDS: iptables -A INPUT -p tcp --dport ssh -j ACCEPT iptables -A INPUT -p tcp --dport 80 -j ACCEPT iptables -A INPUT -p tcp --dport 443 -j ACCEPT ...
0
votes
1answer
38 views

VNC Server Missing and UFW disabled and iptables empty after update?

I have an Ubuntu 12.04 computer in the other room that I remote into using Remmina Remote Desktop Client and VNC on another Ubuntu 12.04 desktop. It worked about 1 month ago. Now Remmina hangs at "...
0
votes
1answer
99 views

IPTables: Block incoming traffic connection to your IP address of your virtual machine

Host OS: Ubuntu 14.04 Guest OS: Ubuntu 14.04 (Virtual Box) I want to block incoming traffic connection from Virtual machine with IPTables. I have searched, One solution I found is static IP for ...
0
votes
0answers
43 views

iptables for setting up a transparent proxy

I have set up ubuntu server 14.04 on VirtualBox with two network interfaces. auto eth0 iface eth0 inet static address 192.168.1.5 netmask 255.255.255.0 gateway 192.168.1.1 dns-...
0
votes
0answers
21 views

Bluetooth connect changes iptables behaviour

I have a very strange situation where a bluetooth connection seems to change the behavior of the iptables firewall. Let met start from the beginning: I have a Onkyo stereo amplifier with a bluetooth ...
0
votes
1answer
20 views

Install Iptables server

I'm new in Linux and I don't know what it refers with Support but I can type some commands like ls, cd, sudo apt-get it always shows up command not found. So, please someone can help me?terminal
0
votes
0answers
32 views

Knockd not recognizing knocked ports Ubuntu Server

I've got a server with knockd running. When ports 7000, 8000, and 9000 are hit, knockd is supposed to insert a rule into my iptables firewall and allow the connection to reach a port (22). For some ...
1
vote
1answer
26 views

Can't connect to my ubuntu box outside my local network (VPN)

I have an Ubuntu 14.04 server running some services on different ports. I used to be able to connect to it (via SSH, samba, and a couple web servers on different ports) using a VPN. I'll use ssh as ...
1
vote
2answers
65 views

Confiruration DNAT in iptables

I have 2 PC be created by VMWARE 1. PC1 (make iptables router): ens33 's IP: 192.168.1.5/24 (network connection is bridged) ens37 's IP: 192.168.2.2/24. (network connection is wmnet9) 2. PC2 (...
0
votes
1answer
252 views

IPtables Config to Passthrough Internet 16.04

I am struggling to finish the config on my Ubuntu 16.04 fileserver to pass on the internet connection to my HTPC. See the network layout below: [Internet] <--> [DHCP Router] <--> (eno1).[...
1
vote
0answers
269 views

Ubuntu 16.04 Tor Transparent Proxy

I want to setup an Ubuntu Server 16.04 to act as a transparent proxy for all traffic from a specific subnet to Tor. To be specific, I want all traffic on a subnet 10.20.0.0/16 when using the Ubuntu ...
1
vote
0answers
18 views

Zenmap Showing Filtered for iptables REJECT Rule

I've been recently messing around on my VMWare Ubuntu 15.10, and decided to test out my iptables and see if my Zenmap on my Windows host machine would recognize the ports being blocked. However, when ...
2
votes
1answer
51 views

How do I permanently removing a ban stored by Fail2Ban

I have two filters that have banned local addresses. I have added the addresses to ignoreip but the damage was done already and the bans are in place. Every time I reboot my computer I have to do an ...