Iptables is used to set up, maintain, and inspect the tables of IP packet filter rules in the Linux kernel.

learn more… | top users | synonyms

0
votes
1answer
10 views

IPTABLES - Forwarding 80 to 8080 to vagrant's apache

I was trying to forward my 80 access to 8080 with IPTABLES without success, then I read this answer And it finally worked for me, after all the IPTABLES configurations I tried this command made it.. ...
1
vote
2answers
26 views

iptables/netfilter: What's the difference between PREROUTING and FORWARD?

I am trying to understand how this system works and I have problems to understand the difference between using NAT PREROUTING or filter FORWARD. From what I understand, the PREROUTE can send the ...
2
votes
1answer
22 views

loading “explicit” iptables rules on boot or interface up

I'like to load iptables rules on boot or interface going up on Ubuntu. Made a search on StackExchange and other places and looks like the most commonly agreed approach is either use ...
-1
votes
0answers
27 views

Opening a scoket in Kali linux using bash scripts trouble [on hold]

I know who to open a TCP or UDP socket in Ubuntu, by the following command : exec 3<>/dev/tcp/google.com/80 (for example) we can open a TCP socket on port of 80, but in Kali Linux there's no ...
0
votes
0answers
12 views

set up iptables of poptop pptp on ubuntu

The VPS I bought have an additional ip address, which is shows as eth0:0. I want my pptp users to use this ip to access internet. but I don't know how to do it. I am using this right now -A ...
0
votes
1answer
41 views

Trying to block YouTube

I've tried two different commands in IPTables to block YouTube. They briefly work, but then, hours later, or the next day, I test it again, only to find that it comes through when I DON'T want it to. ...
1
vote
1answer
27 views

Configuring NAT with ufw instead iptables

I want to apply this iptables rule: iptables -t nat -A PREROUTING -d 87.13.180.182 -j DNAT --to-destination 192.168.0.13 (87blabla is my public ip and 192blabla is my private ip). People ...
0
votes
1answer
24 views

Can't connect from outside to my apache webserver using a free dynamic dns and IP

I am running ubuntu 12.04 and a web server apache v.2.2 on port 80.My connection to internet is based on a dynamic ip and in order to connect to my web server I want to use a free dynamic dns ...
-1
votes
1answer
55 views

How to open local apache website to the world? [closed]

I'm trying to enable HTTP port to be accessible from outside of my network. I currently have a public IP from my ISP. Do I need to set this up using iptables? sudo iptables -vL -n Chain INPUT ...
-1
votes
0answers
35 views

iptables for mitmproxy doesn't show traffics

I want to direct my traffics from my Adnroid device into mitmproxy . I have installed mitmproxy and its cert file on my device correctly and working but when i put my loptops ip into my android device ...
0
votes
1answer
24 views

How would I use ulogd2 on Ubuntu with IPv6?

I am trying to make use of ulogd2 (package ulogd version 2.0.3-1ubuntu2) on my Ubuntu server and I run into the problem that ip6tables fails: $ ip6tables -A INPUT -m limit --limit 5/sec --limit-burst ...
0
votes
1answer
27 views

How to redirect URL:PORT traffic to multiple external IP:Port?

Currently, I'm using iptables to redirect incoming requests for "website.com:27015" to "xx.xx.xx.xx:27015". Problem is, since iptables redirects via the port 27015, I can only redirect to one single ...
0
votes
0answers
23 views

VSFTPD acess only localhost

I configured a ftp server but I can't acess it. If I try ftp localhost in server terminal it works but if I try ftp SERVERIP it doesn't work....neither from filezilla. The server doesn't have ...
0
votes
1answer
22 views

Unable to run iptables commands

When I try running sudo iptables -L (or any other iptables related command) I receive the following error: modprobe: ERROR: could not insert 'ip_tables': Cannot allocate memory iptables v1.4.21: ...
1
vote
1answer
238 views

How can I open port 80?

I'm new in Ubuntu, and I'm trying to open port 80. I have already set my router in order to do so, and I also set ufw. Status: active To Action From [ 1] 22/tcp ...
1
vote
1answer
54 views

Forwarding ports with iptables not working?

I have an ubuntu server (14.04.1) which is asking as a router for my network. It has an internet facing interface, eth0, and a second interface, eth1, for connecting to my 10.0.0.0 network. I am ...
0
votes
3answers
82 views

Where are my iptables?

I ran the code: iptables-save -t nat -A PREROUTING -d 79.3.191.226 -j DNAT --to-destination 192.168.0.14 But I don't know if it worked since I cannot find the iptables file inside my directory. ...
0
votes
0answers
14 views

Redirect traffic between two Virtual Machines using iptables

The situation is this: I have an host machine running ubuntu and 2 Virtual Machines (Ubuntu and Windows) running in host-mode, so that I can see them from the host machine. Now what I want to do is ...
0
votes
0answers
28 views

Allowing Longview in UFW firewall; how do these iptable rules translate to UFW-commands?

Linode has some documentation on allowing its product "longview" to go through the firewall. It offers two commands for iptables: iptables -I INPUT -s longview.linode.com -j ACCEPT iptables -I OUTPUT ...
1
vote
1answer
45 views

dport is not working on iptables command

In terminal I type : iptables -A INPUT --dport 443 -j DROP And it tells me : iptables v1.4.21: unknown option "--dport" what is wrong with --dport?
0
votes
0answers
61 views

ufw rules don't block deluge

I'm trying to keep deluged on my headless Ubuntu Server 14.04.1 from functioning when the server isn't connected to a VPN (I know many threads exist discussing the best way to accomplish that; I'm not ...
0
votes
1answer
62 views

linux gateway / firewall IPtables config

The KVM host is acting as a gateway / firewall for all of the virtual machine's it runs. It has a /26 public IP space configured on LAN interface em1: 1.1.1.1/26 It has a /30 rfc1918 IP configured on ...
1
vote
1answer
21 views

Can Using Git over SSH be distinguished from normal SSH traffic?

So, I set up my iptables configuration so that repeated attempts to SSH into my private server cause a blacklist. # iptables -N SSH # iptables -A INPUT -p tcp --dport ssh -m conntrack --ctstate NEW ...
0
votes
2answers
101 views

Restricting internet access of some client systems of LAN to a few websites using ubuntu gateway

How to limit internet access of most systems in my LAN to a few websites and block all the other websites? Also want to bypass that restrictions for some systems. All systems have static IP address ...
0
votes
2answers
46 views

Can I use iptables to forward vm guest requests to host

This is a bit complicated, but I have a Windows 7 vm (virtualbox) and I need create a persistent connection to the MySQL instance on my host machine. Binding... I can do this using mysql address ...
0
votes
0answers
78 views

routing through ubuntu server

Im having issues with routing from Windows/Linux/Mac machine through server and from desired interface out. So this is my configuration: My example will be Ubuntu -> Ubuntu -> out First machine: ...
0
votes
1answer
59 views

How to allow a WAN connection via a forward port?

My home internet connection has a static IP address (eg: 123.123.123.123) I have configured my router to forward port 9000 to an internal host (192.168.1.101), which is running Ubuntu 14-04. I run ...
0
votes
0answers
14 views

Is there a backport of ulogd2 for 12.04 precise?

I have a server with Ubuntu 12.04 running on Rackspace cloud, configured to use the latest kernel. A week ago or so I rebooted the server and it booted on a new kernel 3.17.1 (that had been released ...
0
votes
1answer
70 views

iptables - unable to initialize table filter

I have a firewall file saved in /etc/firewall.conf. Everything is ok, I can use it for "iptables-restore /etc/firewall.conf" with success. So, starting from this file, I created a php script(that ...
0
votes
0answers
15 views

No able to connect to WiFi after installing iptables-persistent

I am using ubuntu 14.04. I was trying out how to add entries to iptables. I executed the following commamd. sudo iptables -A INPUT -p tcp --dport 80 -j ACCEPT To persistent the above changes I ...
0
votes
0answers
44 views

Using iptables to detecting SSLv2 and SSLv3 initial connection packets, drop them, and log them

This is going to sound like an odd issue, but I'm trying to detect SSLv2 and SSLv3 connection attempts, log the packets so I can find the source for those IPs, and then drop the packets silently. Is ...
1
vote
0answers
57 views

Blocking specific programs from accessing the internet isn't working (iptables / apparmor) [closed]

I'm using this guide to try to block a few programs from sending or receiving data from anything other than 127.0.0.1, but it's not working. First off, the suggested way of only allowing an IP block ...
0
votes
0answers
19 views

What is wrong with knockd?

I am trying to implement port knocking for ssh service on my personal server. I have two other public services that will always be open. My iptables rules look like this: Chain INPUT (policy DROP 0 ...
0
votes
1answer
32 views

Weird IP cpnnections on default install

I install 14.04 in a VM. I created a log using these instructions and did stuff on my computer. I grep out DST=192 and =lo. I saw two ip addresses. 224.0.0.251 and 91.189.92.11. 224.0.0.251 appears ...
0
votes
1answer
28 views

iptables and expressing your IP address to the rules dynamically

I've been recently spending my time refining my iptable rules to be a little more robust than Ark linuxs Simple stateful firewall to include defense against some other known and nefarious attacks. One ...
0
votes
0answers
48 views

HTTP request using IPtables doesn't work for captive portal!

I am trying to make a simulation of a captive portal on 3 virtual machines (VM Ware) for my school project this week. Setup 1 = Ubuntu client 2 = Ubuntu server (router) 3 = Ubuntu server (captive ...
0
votes
1answer
22 views

IPtables client - server(router) error

I've got a school assessment this week. Let me explain how my environment is: 1 Router (Have DHCP + giving an ip to the client) Has NAT for Internet 1 Client (Can only have internet acccess via the ...
0
votes
0answers
184 views

Iptables PREROUTING to redirect port 80 through varnish not working

I try to use iptables to keep Varnish on port 8080 and Apache on port 80 and just preroute everything coming in at port 80 to port 8080. It isn't working. When I call the site on port 8080 everything ...
0
votes
1answer
280 views

Acting as a reverse proxy for raw TCP packets

I'm trying to use an OVH node as a reverse proxy for several minecraft servers(mostly for DDoS protection and firewall customisation). The minecraft hosts are also running ubuntu, either 12.04 or ...
0
votes
0answers
19 views

Using ufw as a firewall between network segments

I've been using Ubuntu server 12.04 as a router and it worked. Now I'm trying to add some security using ufw. I enabled the ipv4-forwarding feature in the configuration file and added a rule ...
0
votes
0answers
42 views

Does ufw restore iptables settings after a reboot?

Ubuntu 14.04 on a virtual machine I can't log in via my PC anymore after I rebooted. This machine does not accept incoming connections, there is non ftp, no web pages. It runs perl programs and ...
1
vote
0answers
52 views

How do I share my wlan0 internet connection to eth0 using command line and config files?

I understand how it is done using the GUI (1, 2, 3), but I need to do MANUALLY using linux command (iptables, ebtables ...). I have been struggling with this for days, and I can seem to get it right. ...
0
votes
0answers
48 views

After setting up pre/post-routing, why is my port forwarding still now working?

I am set up with 3 virtual machines - a gateway, server, and client. We are tasked with setting up iptables on the Gateway to forward HTTP, SSH, and FTP traffic from the Client to the Gateway to the ...
0
votes
0answers
39 views

3.13.0-37-generic basic router repeatable issue - packet loss

I have two desktop PCs and I wish to use them as a simple router between two LAN segments. I am not using NAT, SNAT, DNAT, and all my iptables tables/chains policy are ACCEPT. With iptables wide open ...
0
votes
1answer
86 views

Iptables troubles

I used webwin for iptables management and reset the firewall over webmin (to clear out all the old stuff). I also disabled the feature Activate at book. After that I installed iptables-persistent for ...
0
votes
0answers
61 views

Make Proxy Server with arno-iptables-firewall

I am trying to configure arno-iptables-firewall to work with transparent squid but no success. browsing is ok using local configured proxy on the computer but can make the arno-iptables-firewall to ...
2
votes
0answers
189 views

Port redirection for a specific (dynamic) IP using iptables script

What I want: Incoming TCP and UDP connections on port 900 from the resolving IP address of myip.dyndns.org (dynamic IP) should redirect to port 5050 on the local machine. All other IP addresses ...
0
votes
0answers
7 views

iptables like leflexive

is there any options to implement like leflexive acl (They are generally used to allow outbound traffic and to limit inbound traffic in response to sessions that originate inside the router. ) ?
0
votes
0answers
16 views

Iptables like reflexive acl

Is there any iptables implementation like reflexive acl ? and how do you provide your security using iptables
0
votes
0answers
24 views

What is UFW's approach towards rules order for overlapping rules?

I need to enable UFW in my Ubuntu 14.04 Server having these conditions: - I want to deny all incoming and outgoing on all ports (and protocols) but: - I want to allow all incoming and outgoing on a ...