Iptables is used to set up, maintain, and inspect the tables of IP packet filter rules in the Linux kernel.

learn more… | top users | synonyms

0
votes
0answers
12 views

Port Forwarding with Virt Manager

I am running a Xen hypervisor on top of Ubuntu 14.04 desktop. One of my Xen connections is to a Windows 8 VM hosted on the local machine. I connect to the VM with Virt Manager. I would like to be ...
0
votes
1answer
10 views

Ubuntu noob, problem with IP masquerading; “Error saving the document ufw”?

I'm a noob and I'm used to the limited version of Ubuntu offered on TAILS, never did anything really technical with it, so i'm a complete noob here. I installed Ubuntu on my laptop. I have an UFW ...
1
vote
1answer
22 views

Packet redirection based upon traffic type

Overview : Is there anything like ufw or iptables that will accept a packet on a port, but then redirect that packet locally depending on the type of packet it is? More info : I have a web server ...
1
vote
0answers
27 views

14.04 LTS / Routing with 2 WAN Lines … on Dom-0 Xen host drives me nuts

Short note: Well I think I might have a solution but need to prove it first. Regarding the NAT on the Hardwarerouters to each WAN-line seem just to do NAT for its own subnet, so I will simply need ...
0
votes
2answers
27 views

Setup iptable with preventing ab -n 100000 -c 1000

I would like to setup basic firewall rules with iptables. The goal is to reject flood requests per IP. Like "ab -n 100000 -c 1000 " There are only 2 rules: iptables -A INPUT -p tcp --dport 80 -i ...
0
votes
1answer
51 views

Open a port on Ubuntu 14.04

I have seen similar threads, but they didn't help me. I am using Ubuntu 14.04.2 LTS (GNU/Linux 2.6.32-042stab108.5 x86_64) on my VPS. I ran a node.js application on port 9000, but this port is ...
1
vote
1answer
42 views

IP forwarding Ubuntu

For my work we have a testing space with a Ubuntu server which is also a router. Yesterday we placed a new in the rack and our meaning was to make it a webserver which is accessible from the internet. ...
1
vote
0answers
42 views

how to block torrent traffic on ubuntu server?

I want to block all P2P (including bittorrent) traffic going through my Ubuntu Server. I have tried : Blocking certain strings, but it's not effective or user friendly Blocking IPs that resolve to ...
2
votes
2answers
49 views

How to find out where iptables rules come from?

I used to have my own set of iptables rules on my Ubuntu 14.04 LTS installation. This was residing in /etc/network/if-pre-up.d/iptables. Now, apparently after another apt-get dist-upgrade it looks ...
0
votes
2answers
60 views

Open port 80 on Ubuntu server

I'm just starting out in ubuntu/linux, and have some trouble opening port 80 for incoming connections. I ran the sudo ufw allow80/tcp command, and when I run sudo ufw status the result looks like ...
1
vote
1answer
486 views

Crashplan on headless Ubuntu 14.04 - remote GUI not working

I'm having issues getting Crashplan remote GUI working correctly on my headless Ubuntu 14.04 servers. This is what I've tried so far; Followed this guide to produce a SSH tunnel - ...
1
vote
0answers
33 views

Conntrack: How to track connection in one direction

I have the following iptables rule. iptables -A POSTROUTING -o vEth0 -j MASQUERADE I want conntrack to to track connections that are going out of vEth0. And with the above rule I'm able to do that. ...
1
vote
0answers
24 views

server cs1.6 vps amazon ubuntu dont work

I have a problem with my amazon Ubuntu VPS. I tried to open cs1.6 server. I opened a port 27015 :iptables -I INPUT -p udp --dport 27015 -j ACCEPT and it's done. I put this command in putty : ...
0
votes
0answers
22 views

IP PORT forward request through VPN

I premise I'm not a network expert, so please don't blame me if I'm going to write something fool. I applied the instructions here: IP/PORT forward requests to another server to make the same ...
0
votes
0answers
25 views

Webmin Linux Firewall NAT and Packet Filtering

Can someone explain to me the difference between these two? Like in NAT and Packet Filtering there are rules for both incoming and outgoing packets. I do not really understand their differences. What ...
0
votes
0answers
34 views

Setup router, iptables to access website via Domain Name in local network problem

I have a problem with iptables / bind9. Topology: My local PC: DNS set to: 88.220.77.193 VirtualBox with: ROUTER: eth0 : 88.220.77.193 255.255.255.0 to the Internet; eth1 : 192.168.100.254 ...
0
votes
1answer
33 views

Ip forwarding to another subnet

Right now i am working on testing a MAAS setup (physical hardware). I have deployed juju and can access it within the network (10.0.3.0). I have two interfaces eth0, internet facing, eth1 where ...
0
votes
0answers
32 views

Route packets between 3 subnets (nics) on same server

I have 3 subnets on my one server which acts as the router/gateway (10.1.10.0, 172.16.1.0, 172.16.2.0). All three subnets are assigned to their own NICs on the server. eth0 (10.x.x.x) is my ...
0
votes
1answer
54 views

Packets getting dropped after clearing rp_filter

I see certain packets in tcpdump and not able to trace whats happening to them. I did set rp_filter to 0 and log_martians to 1 on all interfaces. I enabled traces in iptables as well. root@sindhu# ...
0
votes
0answers
25 views

Iptable rules filtering from ip address to interface

By default I have an implicit deny on my ubuntu firewall but I want to make the ip address 10.1.10.201 have a few privileges. I want it to have ssh and telnet capabilities to contact the external ...
1
vote
0answers
25 views

regenerate iptables from “iptables -L”after disk failure

My system disk failed catastrophically. I've replaced and mostly restored the OS on a new disk but all I have for my iptables is the output from iptables -L. Is there a way to automatically recreate ...
0
votes
1answer
21 views

VPN server on ubuntu enabling NAT problem! please help

Hi I am trying to Create a vpn server on a vps which is running ubuntu percise 12.04. I have already installed pptpd and I have enabled ip forwarding but when I try to enable NAT with this command : ...
0
votes
1answer
45 views

Iptable ordering of commands

When adding a new rule in iptable I want it to be the first command to be executed, which means it will go on top of the rules list. What do I have to add in the command to change its position on the ...
0
votes
1answer
29 views

Iptables HTTP not working on computer

By default I have an implicit deny so I used these two commands to try to enable http on ip address 10.1.10.201 but I cannot access any websites. sudo iptables -A INPUT -p tcp -s 10.1.10.201 --dport ...
0
votes
0answers
44 views

Cannot 'Ping' my server from client in PPTP VPN?

Recently i set up a server and a client using PPTP VPN . I can connect to the server,but cannot do anything else. I cannot Ping,SSH to the server from client and vice versa. For setting Iptables for ...
0
votes
1answer
27 views

IPtables command to block specific port for certain ip

I want to block certain services such as ftp, telnet, http for a certain ip address. What command will I execute in order to achieve this. The only command I have tried is sudo iptables -A INPUT -s ...
0
votes
1answer
64 views

Clean install of Apache but can't access it via lan client

I've been fighting this issue for a couple days now and am at whits end, so any help would be great. I have several computers in the office. One is now a Ubuntu Server that I'm setting up for a ...
0
votes
1answer
52 views

iptable rules works sometimes only

I have blocked an attacker IP that was sending me lots of UDP packets. iptables -I INPUT 1 -s IP_OF_ATTACKER -j DROP This rule was working all fine. iptables -nvL --line-numbers 22G traffic was ...
0
votes
1answer
30 views

Block all but one ip address

I need to allow access to only one IP address and block the rest, so I wrote the following: sudo iptables -F sudo iptables -A INPUT -s ipaddress -j ACCEPT sudo iptables -A INPUT -j DROP sudo iptables ...
1
vote
1answer
17 views

Options missing from iptable man page

I was looking at iptables man pages. But I did not find anything about --sport and --dport. --sport is short for --source-port --dport is short for --destination-port Why are those options ...
1
vote
0answers
8 views

Local iptables nat redirection not working [duplicate]

I'm trying to install mitmproxy. To use it as a transparent proxy, I need to enable ip forwarding and use iptables to setup nat redirection. It doesn't appear to be working. I'm able to make requests ...
0
votes
1answer
58 views

iptables allow just internet connection

let me explain what I did before; # Only INPUT policy DROP, others are ACCEPT sudo iptables -P INPUT DROP sudo iptables -A INPUT -p tcp --sport 80 -j ACCEPT I also try this; for these ports to 443 ...
0
votes
0answers
26 views

Redirection using Apache with scala website

My aim to redirect xxxxx.com to www.xxxxx.com. Website is running through scala play framework and Apache is used for redirection. What i did and its not working: Server infrastructure: Scala play ...
0
votes
0answers
79 views

Restrict Deluge to tun0 only but allow Deluge Web UI over eth0

After many searches I have been able to restrict deluge network traffic to only the VPN interface tun0 using the following command: sudo iptables -A OUTPUT -m owner --uid-owner deluge \! -o tun0 -j ...
0
votes
1answer
21 views

Can't get to forward ports with Iptables

In my "router" machine I have the following /etc/network/interfaces: # The loopback network interface auto lo eth0 eth1 eth2 eth3 iface lo inet loopback # The primary network interface allow-hotplug ...
0
votes
1answer
27 views

iptables presale me to ssh access or calling methods remotely

I have a linux openwrt unit at its start I can not make a ssh access if I do iptables -F. If I iptables -L -n -v, I find several rules that are automatically inserted and it prevents me from doing ...
0
votes
0answers
15 views

virtualization and security vis PCI DSS security

I have a couple questions about the effect of virtualization and the security of both the host and guest systems. The OS on both is Ubuntu server 14.04. I opted for use of Oracle's Virtualbox. I ...
0
votes
0answers
71 views

Ubuntu on Chromebook - How to add iptables_nat to special kernel?

I am running this modified version of Ubuntu on my Acer C720 Chromebook. Recently I've tried installing Docker, but it seems that this special version of Ubuntu lacks iptables_nat: eir@asgard:~$ sudo ...
0
votes
1answer
59 views

Ubuntu Server 14.04 Drop UDP packet

I use Ubuntu server as part of my system and now I have seen something interesting. I have a router that sends me ethernet 802.11 packets. I generate this packet in the router and then send it under ...
1
vote
0answers
74 views

opening port 80 on AWS

I created a AWS EC2 VPS(ubuntu v14) on which I want to open port 80 so that my website can run. But unfortunately, I am not able to open port 80. For this, I first ran the command: $ sudo iptables ...
0
votes
0answers
31 views

UFW blocking 169.254.0.0 (link-local / apipa) addresses?

When using iftop on my wlan0 interface, there are a few link-local addresses connecting. How and where can I filter these connections? I have very specific UFW rules blocking 169.254.0.0/16, but I ...
0
votes
0answers
40 views

Redirect all traffic except DNS

I successfully setup Ubuntu server up & running. Server configuration: tun0 192.168.99.1/24 NAT Enabled Note that client able to communicate with server. ping 192.168.99.1 Now I stuck at ...
0
votes
2answers
52 views

How to allow this connection on the Firewall?

I am trying to connect my Ubuntu Web Server to my Ubuntu Storage Server using NFS (Network File System). But when I try to mount a Storage Server to the Web Server, I get a "Connection Timeout" ...
1
vote
1answer
41 views

Iptables and Postfix

Examine configuration of Postfix and iptables, what will be response of mail server and why? First: main.cf mynetwork=127.0.0.1/8 smtpd_sender_restrictions=permit_inet_interfaces iptables ...
0
votes
0answers
37 views

Virtual Machine can not ping to internet but still use apt-get update?

I'm installing VMware version 11 on Windows 7 Pro to create Virtual machines. VMs is running Ubuntu 14.04. My problem is I can not ping from the virtual machines to the Internet (8.8.8.8). but still ...
0
votes
0answers
41 views

14.04 How to unblock UDP ports and UDP packets?

I'm use and Ubuntu Server, and I use it an Asterisk 11. But I have to unblocking the UDP Port 5089 and port for UDP packets in the range of 16384-16482. Also, I need to disable "SPI" in my firewall. ...
1
vote
1answer
42 views

How can i make both iptables/ip6tables run at startup?

I have two differents set of rules in two files, one is dedicated to ipv4 and the other for ipv6. To make them persistant I use the if-pre-up/if-post-down script : #! /bin/sh iptables-restore < ...
2
votes
1answer
150 views

Change iptables log format

Is it possible to change the log format of iptables ? I want to add the ssh_client in the log. I have already made an iptables rule for outgoing ssh iptables -I OUTPUT -p tcp --dport 22 -j LOG ...
0
votes
0answers
84 views

Ubuntu Port Scan , Security concerns

Scan results of my ubuntu 14.04 $ nmap 127.0.0.1 Starting Nmap 6.40 ( http://nmap.org ) at 2015-05-02 08:43 IST Nmap scan report for localhost (127.0.0.1) Host is up (0.0021s latency). Not shown: ...
0
votes
1answer
72 views

How to load a iptable matching module? Or is it required to load it expressly? Some related questions

I am running Ubuntu 14.04 LTS. I believe the following shows which iptables matching modules are loaded: sudo cat /proc/net/ip_tables_matches Question: I see conntrack listed three times. Why? ...