Iptables is used to set up, maintain, and inspect the tables of IP packet filter rules in the Linux kernel.

learn more… | top users | synonyms

0
votes
0answers
13 views

Problem with Coovachilli and Routing

I have network like this: My Net Diagram I wanna deploy captive portal on my private VLANs. The local ip address of Ubuntu server is 192.168.100.1 on eth1 and ip address of L3 switch gateway is ...
0
votes
0answers
17 views

System performance impact of huge iptables block lists

Due to non-responsiveness to abuse reports by Chinese network operators I decided to block all of their IPs. Several other countries as well. This website's data is incomplete, but gives an example ...
0
votes
0answers
13 views

IP masquerading to share server connection isn't working

I have 2 Ubuntu servers, one has internet another doesn't I've followed manual here - https://help.ubuntu.com/community/Internet/ConnectionSharing Done setup accordingly to Ubuntu Internet Gateway ...
3
votes
1answer
18 views

block icmp requests (from fixed network)

On my linux box I've 2NICS: br0 192.168.1.0/24 (192.168.1.1 server) eth1 192.168.2.0/24 lan1 eth2 192.168.3.0/24 lan [...] there's a routing from eth1 to br0 and also from eth2 to br0 I droppped ...
1
vote
1answer
56 views

What iptables rules are needed to allow an nfs share on 16.04?

Can anyone provide the exact wording/coding I would have to add to my /etc/iptables/rules.v4 file ? The server I am working on has many complicated firewall rules, and I have determined it is for sure ...
0
votes
0answers
23 views

Restrict Internet access based on time limit and MAC address

I have created an open access point(AP) in ubuntu 14.04. Now I want that whichever device connects to my AP it gets automatically blocked after 2 hours based on mac address. I have done this to block ...
-1
votes
0answers
26 views

Ubuntu Server 16.04 as a Router & Firewall [duplicate]

what should I do? I can't save and exit with :wq or ctl+O and ctl+X
1
vote
0answers
30 views

Setup for hostapd, iptables and squid

I'm trying to set up an access point kind of similar to the ones in airports and such. So basically, people can connect to the network, land on a splash screen and then authenticate with the proxy ...
3
votes
1answer
34 views

How can I make my tftp server visible/available on my local network?

I have looked at the following questions without success: How to install and configure a tftp server on 14 04 How to setup a tftp server in ubuntu 14 04 How to install and setup tftp server in ...
1
vote
1answer
25 views

Setting up Tor as a Transparent Proxy

I have been following this guide at Tor Project. The problem is I do not know what to do with the iptables ruleset. Where do I copy it to? I've been using the Tor network for years now but only on ...
2
votes
2answers
106 views

iptables forward port error - No chain/target/match by that name

I am trying to configure iptables on my Ubuntu 12.04 LTS server to forward port 443 to 8443. But when I run this command: sudo iptables -A PREROUTING -p tcp --dport 443 -j REDIRECT --to-ports 8443 ...
0
votes
0answers
23 views

How do I open ports for Asterisk and SIP?

How do I know whether port 5060, for SIP, is open on localhost? thufir@mordor:~$ thufir@mordor:~$ nmap localhost Starting Nmap 6.47 ( http://nmap.org ) at 2016-06-29 23:09 PDT Nmap scan report for ...
1
vote
1answer
19 views

iptables rule traverse order

Here is partial output of my iptables: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 22866 ...
0
votes
1answer
27 views

Forwarding VPN clients to internet

I have following configuration. OpenVPN server on a cloud(Ubuntu 14.04) with static IP( example 50.60.70.80 on eth0). Linux and Windows clients are successfully connected to VPN (VPN static IP's - ...
0
votes
0answers
49 views

nmap scan on Ubuntu results in odd result

1. I ran an nmap scan on my system and this was the out put. hobbit@hobbit-OptiPlex-GX520:~$ nmap -v sU sT 127.0.0.1 Starting Nmap 7.01 ( https://nmap.org ) at 2016-06-25 20:08 IST Initiating Ping ...
0
votes
0answers
24 views

Sharing through Iptables stopped working

I have a server connected with the internet and the local network. The configurations are: eth0 - 192.168.10.1 eth1 - 192.168.0.6 (Internet) When I wanted to share the internet with other computers,...
0
votes
1answer
20 views

Do iptables rules I put in place on my admin account carry over to a newly created standard user account?

Do iptables rules I put in place on my admin account carry over to a newly created standard user account? Is there a way to verify this?
1
vote
1answer
50 views

Sharing connection - IPTABLES

I've been trying to configure IPTABLES in my server so I can share the internet from the server with another machine. The server IP is 192.168.10.1 (eth0), the connection is coming from 192.168.0.6 (...
0
votes
0answers
12 views

How to make ipt_netflow sending flows info each 5 second?

Help me please. How to make ipt_netflow sending information about flows each 5 seconds? and take all information about opened and closed ports
3
votes
1answer
33 views

Redirect iptables logging to another logfile

I have followed the recipe by @Gilles in this answer. I succeeded, but the problem is that the iptables logging now goes into 3 log files, syslog, kern.log and iptables.log. Ideally, I want the ...
0
votes
2answers
40 views

UFW on Ubuntu 16, strange behaviour

I am moving from ubuntu 14 to 16 and have been getting some odd behaviour with ufw. ufw status ufw allow 22 ufw enable My connection gets lost. I am not seeing this behaviour in ufw on ubuntu 14. ...
0
votes
0answers
16 views

Prevent Outbound IP Address spoof

We have multiple computers running Ubuntu Desktop, all connected to same Router. Using UFW firewall, all inbound and outbound ports are blocked on these Desktops, except for only one outbound port (...
0
votes
0answers
32 views

figthing with firewall configuration and samsung network printer in Networking & Wireless

I've configured my Samsung SCX-3205W printer and scanner in Ubuntu 15.10 and everything worked fine until I've turned on firewall. After some forums reading and some fighting I've discovered that it's ...
0
votes
0answers
38 views

Redirect all traffic to other server

I have 2 servers: one with DDoS protection and another one without it. I want to redirect all traffic (FTP, TCP, UDP) to the second server through the DDoS protected server, so that I have DDoS ...
0
votes
0answers
37 views

Ubuntu 14.04 LTS Dropping incoming connections randomly

first of all I'd like to state that I am near noob when it comes to anything in linux. So I've rented a dedicated machine as part of moving my game servers to better location, and so did the trouble ...
0
votes
1answer
36 views

Ubuntu server - port forwarding

I need to redirect from http port 80 to elsewhere to specific page, which running on port 9090/somepage. In short: Need redirect x.x.x.x:80 -> x.x.x.x:9090/page I tried to do by command iptable, ...
0
votes
0answers
42 views

How to use iptables to prevent repeated attacks on port 80?

There a is massive attack on port 80 on my Server i try to use iptable This way to banned attackers iptables -A INPUT -s 212.252.96.128 -j DROP but there are too many IPs attacking how to prevent ...
0
votes
3answers
58 views

iptables allow only certain services

I am running in my server asterisk and I would like to protect my system as much as possible. It is currently protected with fail2ban and I would like to add some more protection. Ideally I would like ...
1
vote
2answers
97 views

How to Block a range of IP address with UFW

I am trying to block a range of IP address on my Ubuntu 16.04LTS server from a specific country, i.e. China, Iran, etc. I was hoping to find a script or something I could run to easily make a ...
0
votes
0answers
20 views

TFTPD32 error when starting application

Using winetricks I installed TFTPD32 on my Ubuntu 16.04 machine. However when I try running the application I get the error: Cannot connect to service. Error 10061 (Connection refused). despite the ...
0
votes
0answers
25 views

how to run softether via ipv6?

I have setup softether on my machine and managed to run it for ipv4 addresses. i'm running it via dnsmasq. how can i do the same for ipv6 ? an e.g. of config for ipv4 here http://blog.lincoln.hk/...
0
votes
0answers
35 views

redirect traffic from server 1 to server 2 on specific ports

I am trying to redirect traffic from server 1 on IP A to server 2 on specific ports and IPs. i am using this rule as an e.g. - iptables -t nat -A PREROUTING -s 192.168.1.1 -p tcp --dport 1111 -j ...
0
votes
0answers
26 views

Masquerade over USB Ethernet Problem

I am trying to create a hotspot with a captive portal for my company. First thing I needed to do was share my internet access. So, what I am trying to do is, have internet cable plugged into eth0, ...
3
votes
1answer
57 views

Iptables block all incoming IPs

Is it possible block all incoming IP addresses, allowing only one or two IP addresses access on Ubuntu server?
0
votes
0answers
21 views

Create separate Filters per User

I am running OpenVPN on Ubuntu 14.04 (dev tun) and I can't seem to get my learn-address script to run below I would like to run the learn-address script each time a user connects to OpenVPN that ...
0
votes
1answer
78 views

Revert iptables

I created the following temporary rule that I enable occasionally but I would like to remove it without the need of restarting the machine. Can someone provide me the command? sudo iptables -t nat -...
0
votes
0answers
28 views

Use endpoint instead of IP in iptables

I am using AWS ElastiCache and I am trying to configure it so that I can access it outside of AWS. Long story short, I have to execute the following command on an Ubuntu instance (AWS NAT instance), ...
0
votes
1answer
19 views

Create a permanent rule for iptables in Ubuntu

In order to establish connection with my Ubuntu server I have to add the following rule to iptables: sudo iptables -A INPUT -p tcp --dport 80 -j ACCEPT Everything is working until I reboot the ...
0
votes
1answer
22 views

Can't SSH to machine on Local Network (time out), can SSH from ouside LAN

I have a Box 'foo' which has sshd running. I wish to ssh to this machine via Box 'bar'. Box 'foo' has the IP address 10.0.0.100 and Box 'bar' has the IP 10.0.0.109. The gateway for both of these ...
0
votes
0answers
52 views

Ubuntu on vagrant and iptables

I have an ubuntu desktop 14.04 running on a vagrant VM (virtualbox). I am trying to forward port 25 to port 2525 and I have executed the following commands: sudo sysctl net.ipv4.ip_forward=1 sudo ...
0
votes
0answers
15 views

GUFW limit access to websites

Do anyone know how I can limit access to certain websites during specific hours of the day using GUFW? If GUFW do not have this ability, what can I use instead to achieve this function?
0
votes
0answers
26 views

System Wide Proxy Setup - Must Or Optional

I would like to understand few things about system wide proxy on ubuntu. When a system wide proxy is set from network settings, does all applications (regardless from user) use this proxy or can ...
0
votes
0answers
33 views

Firewall with ability to block manually temorarily ip addresses, ports?

I have made a DDoS detection system that gives me info about malicious IP addresses and ports need to be blocked. Does anyone knows good solution of firewall, allowing me to do that. More automated ...
0
votes
0answers
31 views

Route traffic over different interfaces dependant on port

I have a problem I've been trying to tackle for a month now and just cannot figure it out. I've read every guide and tutorial I can find and tried all the solutions, they almost work but not quite. I'...
1
vote
1answer
46 views

How to configure simple routing between NICs

I have the following setup: Physical router Internet interface 192.168.1.1 Port forwarding of IP 1194/udp to virtual machine below Virtual machine (VM) Ubuntu 14.04.3 Server AMD64 One virtual ...
0
votes
1answer
41 views

IP tables as a basic proxy not functioning as expected

I'm trying to accomplish simple packet forwarding on an Ubuntu 14.04 server (IP=192.168.36.217) using iptables. I want to take incoming packets destined to the server on a particular port and rewrite ...
1
vote
1answer
107 views

How to block facebook

I want to try blocking facebook on my machine. I started using /etc/hosts but that doesn't catch all subdomains, so I did some research and found this (and many similar solutions) which lead to this ...
1
vote
1answer
65 views

Iptables rules slow down loggining in via SSH

I am trying to build some basic iptables rules for my VDS: iptables -A INPUT -p tcp --dport ssh -j ACCEPT iptables -A INPUT -p tcp --dport 80 -j ACCEPT iptables -A INPUT -p tcp --dport 443 -j ACCEPT ...
0
votes
1answer
46 views

VNC Server Missing and UFW disabled and iptables empty after update?

I have an Ubuntu 12.04 computer in the other room that I remote into using Remmina Remote Desktop Client and VNC on another Ubuntu 12.04 desktop. It worked about 1 month ago. Now Remmina hangs at "...
0
votes
1answer
108 views

IPTables: Block incoming traffic connection to your IP address of your virtual machine

Host OS: Ubuntu 14.04 Guest OS: Ubuntu 14.04 (Virtual Box) I want to block incoming traffic connection from Virtual machine with IPTables. I have searched, One solution I found is static IP for ...