Iptables is used to set up, maintain, and inspect the tables of IP packet filter rules in the Linux kernel.
0
votes
1answer
14 views
How do I know if iprules are used?
I followed this:
How to save rules of the iptables?
And created this "/etc/iptables.rules":
# Generated by iptables-save v1.4.12 on Sun May 19 18:42:18 2013
*filter
:INPUT ACCEPT [429624:571594561]
...
2
votes
1answer
22 views
Internet connection sharing without Network Manager
I followed these instructions for setting up a shared internet connection with iptables. Specifically, I:
Added a network interface for my second NIC in /etc/network/interfaces like so:
auto eth1
...
0
votes
0answers
11 views
Wifi hotspot service on Precise without disabling ufw firewall?
I've been using 12.04 LTS for a while, and for my own sanity and security, I've configured my ufw firewall to deny all incoming, and for outgoing just allow these ports:
TCP 80, 443 for web-browsing
...
1
vote
0answers
37 views
Masquerading doesn't work between Ubuntu and Windows Server
Me and 2 other computer science students are working together on a school project.
One of our goals is to connect Windows Server 2008 to the internet through Ubuntu.
Everything is virtual using ...
0
votes
1answer
38 views
Something is closing port 443?
I have Ubuntu 12.04 Server installed and serving a Ruby on Rails app with Apache and Passenger. I'm using iptables to control traffic. Yesterday, I setup Apache to use SSL for the site. After setting ...
0
votes
1answer
27 views
I can ping some host but not all from network on OpenVPN tun
I have a network I want to connect to which is behind a firewall (iptables). On the same PC there's the OpenVPN server. It's directly connected to the Internet. I can connect to the server through ...
-1
votes
0answers
15 views
help in translating Ip filter rules to windows [closed]
am trying to set up squid on windows but the guide am following was specifically for ubuntu so at a point i had to deal with iptables rules below:
iptables -t nat -A PREROUTING -i eth0 -p tcp ...
0
votes
1answer
44 views
redirect traffic from 2 Ubuntu external NICs to specific internal hosts
I am having problems redirecting incoming traffic to 2 external facing interfaces on my Ubuntu 12.10 server to 2 separate internal hosts. I am able to redirect incoming traffic on my eth0 just fine to ...
0
votes
0answers
24 views
Cannot get Samba past firewall
I have two interfaces. One (eth0, 192.168.1.x) is my network, my internet connection. I pay for my own because of bandwidth issues. The other (eth1, 192.168.0.x) is the other occupants' LAN that I ...
0
votes
1answer
108 views
Iptables on Ubuntu Server does not open ports
Does Iptables need ufw to work?
I tried unsuccessfully open 4447 on my ubuntu server 12.10 using iptables.
Did:
server:~# iptables -A INPUT -p tcp --dport 4447 -m state --state ...
0
votes
1answer
92 views
UFW 'default deny incoming' doesn't work
I have UFW enabled, 'default deny incoming' set and no any additional rules, but I still can access all ports from other PCs.
I have to manually block each port. What can be wrong?
0
votes
1answer
399 views
iptables doesn't redirect http traffic to my Squid proxy!
I arranged a transparent Squid proxy which listens to port 3128 on localhost, to block some web sites.
I've tested the proxy using Firefox, and it works.
Then I ran this, hoping to redirect all the ...
0
votes
1answer
70 views
Iptables proxy host on port
I have 2 servers from 2 different companies
The first server is a VPS where i host my websites (lets say it has IP 5.5.5.5)
The second server is a Minecraft server (lets say it has IP 6.6.6.6)
On my ...
0
votes
0answers
132 views
Make sure torrents only transfer over openVPN with iptables or ufw
My set up:
Headless Ubuntu server 12.04 in a virtualbox, deluge and openVPN. The problem is that if the VPN goes down deluge will continue over my normal connection, this should not be possible.
I ...
2
votes
0answers
69 views
Webmin Port Forwarding
I have not been able to figure this out at all.
I have 1 Lan IP address and 5 external static IPs:
eth0: 10.0.0.1 - internal lan ip and router IP.
eth1: xx.xx.xx.217 - external
eth2: xx.xx.xx.218 - ...
0
votes
2answers
98 views
Forward [open] Ports 7777; 2106
Hi i am new to Ubuntu (12.10) x64
Trying to forward ports for gameserver on my pc (Lineage II)
Ports are opened in UFW
Ports are opened in my Router
Even if i disable UFW others still cant login to ...
-1
votes
4answers
88 views
Simply safe internet access
Is it necessary to configure a firewall like iptables or firestarter
when the goal is only to surf safely?
For me, there is no need to open any port (i.e. samba, etc.).
2
votes
1answer
134 views
How can set these iptables rules to run at startup
I usually run my iptables rules whenever I login. From the terminal I type ;
sudo sh firewall.sh
Setting up my sister's computer, I want to give her some basic firewall protection. She wont be ...
0
votes
2answers
116 views
fail2ban or denyhosts to block invalid username login attempts
Is there a way to automatically block IP address when a user tries to login as any invalid username? I already have:
[ssh]
enabled = true
port = ssh
filter = sshd
logpath = /var/log/auth.log
...
0
votes
0answers
59 views
Why is drop box always trying and failing to connect to me on a high port in iptables logs?
Continually getting message in logs:
IPTables Packet Dropped: IN=eth1 OUT= MAC=c4:17:fe:65:51:f8:20:76:00:aa:98:78:08:00
SRC=199.47.216.148 DST=192.168.1.102 LEN=218 TOS=0x00 PREC=0x00 TTL=54 ...
1
vote
0answers
83 views
Ipatables rules to prevent unsafe connections on VPN drop, but how to allow reconnection to VPN again?
I have a script which blocks unsafe disconnections to the internet when my VPN service fails/drops/disconnects, it works well. However I can only start this script when it has already established the ...
1
vote
1answer
270 views
iptables and skype
Does anyone here use iptables with skype? The only way I have been able to get it working so far is to allow all the high ports- something like
iptables -A OUTPUT -p UDP --dport 1024:65535 -j ACCEPT
...
1
vote
3answers
130 views
How to add an IP(all ports) and how to remove that ip?
I need to connect to my computer remotely(all ports), but that ip changes. I have everthing figured out on how the comp woukd know my current ip, but i don't know how to add an ip on all ports and ...
1
vote
1answer
117 views
How to allow PPTP VPN access through APF firewall
I'm attempting to connect to a PPTP VPN. I have opened ports 47 and 1723 in the ingress rules. When APF is turned on, it fails. When APF is turned off, it works fine. I have turned on as many logging ...
0
votes
1answer
70 views
Want some advanced configuration with ufw
I've read the ubuntu developer docs regarding the ufw here, but couldn't find what I was looking for. It allows me to set rules for controlling in/out traffic based on source IP or port numbers, but ...
0
votes
0answers
66 views
Alter iptables on disabling UFW
I already added a rule on nat table in /etc/ufw/before.rules :
*nat
# masquerade rule for virtual box guests
-A POSTROUTING -s 192.168.56.0/24 -j MASQUERADE
COMMIT
after running:
root@parsoon:~# ...
3
votes
1answer
78 views
How To Find Size Of Internal Routing Table Efficiently?
I need to know how we can find the size of the kernel routing table.
I have knowledge that the routing table is stored in /proc/net/route
I am presently using wc to count the number of characters in ...
1
vote
0answers
45 views
Shared internet connection - console equvalent
I know how to share ethernet connection (bridged with wifi) with Network Manager GUI.
Now I'm trying to do the same from console (Ubuntu server 12.04).
The steps I did for now:
Connected to wifi via ...
0
votes
2answers
229 views
Configuration of iptables (verfication, actives services, allow FTP)
I’m experimenting with IPT's (iptables) in Xubuntu.
First experimentation wato allow all OUTPUT traffic and block all INPUT except already existing TCP connections can somebody verify if these are ...
1
vote
2answers
133 views
iptables forwarding all excluding local server
These are the rules I am using:
iptables --flush
iptables --table nat --flush
iptables --delete-chain
iptables --table nat --delete-chain
iptables --table nat --append POSTROUTING --out-interface ...
3
votes
2answers
199 views
Error message when entering iptables command (table does not exist)
I have been trying to install Spotify, but when logging in I get a message saying I have an error 101. This appears to be related to either my proxy settings or to my firewall. Following instructions ...
0
votes
0answers
63 views
traffic shaping of locally generated packets
I have PC (PC1) with two outgoing interfaces, and a laptop (L1) that can be reachable through both the interfaces of PC1.
I want to control the traffic that is locally generated on PC1 for L1, by ...
0
votes
0answers
52 views
setup bridge firewall
I want to setup bridge on ubuntu 12.04
something like this
LAN --> ubuntu bridge -->default gateway-->Internet
do I need 2 eth interface?
can I setup using ethernet to connect to LAN and wlan to ...
1
vote
0answers
29 views
Facing issue in ip6table rule for port based routing management
I have 4 machine setup, M1 -> M2 -> M3 | M4. And A laptop that can be reachable through both M3 and M4.
M2 has 2 NIC conected to M3 and M4. Now I want to divide the flow coming from M1 for laptop.
...
1
vote
1answer
100 views
Migrate Debian firewall rule to Ubuntu
My old Debian firewall died and I'm migrating saved rules to Ubuntu this way:
iptables-restore < firewall_config
I get this error:
Bad argument `192.168.1.0/255.255.255.0'
Error occurred at ...
0
votes
0answers
252 views
Problems allowing outgoing multicast in ufw
I am having problems configuring the uncomplicated firewall (ufw) to allow outgoing multicast traffic. I am blocking all in and outgoing connections as the default policy. I have supplemented with the ...
-3
votes
1answer
152 views
iptables port forwarding A -> B -> A [closed]
I have a host machine(A) with lxc-container(B).
A's local ip address is 10.0.3.1 and public ip, let's say 1.2.3.4.
B's local ip address is 10.0.3.21.
I need 1.2.3.4:7999 to be forwarded to ...
2
votes
2answers
90 views
cannot establish TCP connection with VPS
Vince Stewart
I have a VPS on Ubuntu 12 and a home computer on Ubuntu 12. I have a Java application on the VPS which opens a tcp socket listening on port 4000 and also an Http listener. My ssh service ...
1
vote
0answers
348 views
iptables-persistent doesn't load rules on boot
I have few iptables rules which I want to use permanently. So I've installed iptables-persistent and save my rules in /etc/iptables/rules.v4 and /etc/iptables/rules.v6.
Also I turn on autostart for ...
0
votes
1answer
471 views
How to allow my vpn client access to remote LAN(eth1)?
My ubuntu server has two if: eth0, eth1.
eth0: Public IP
eth1: 192.168.0.2
I've configure down eth0 for a vpn server using pptpd.
The vpn ip_range is 192.168.100.234-248
#/etc/pptpd.conf
...
3
votes
2answers
339 views
Is there a rule for iptables to limit the amount of SYN packets a /24 range of IPs can send?
How can I block entire C class IP blocks when they send too many SYN packets to my ubuntu 12.04 server?
Example of what I see during a SYN flood attack:
Each different IP only sends 1 SYN packet, ...
2
votes
0answers
163 views
squid + iptables not working
I would like to make a proxy on my ubuntu VM for testing a PHP script that must use proxy.
I installed Squid and made some things with iptables command.
I wrote :
sudo iptables -A OUTPUT -p tcp ...
0
votes
0answers
54 views
Why am I unable to access certain addresses through my Ubuntu router?
I have an Ubuntu 12.04 server installation acting as a file-server, router, firewall and access point for my home network.
I'm running dnsmasq and hostapd.
The interfaces are:
eth0 217.210.x.x
...
11
votes
2answers
1k views
How to configure an OpenVPN Client Router
I am attempting to set up an OpenVPN Router so that I may connect my tablet (wireless) and Blu-Ray (wired) to a paid VPN service in another country on Ubuntu 12.10. I have successfully done this using ...
1
vote
2answers
131 views
What does this rule mean
When I run sudo iptables -L, I get:
Chain INPUT (policy ACCEPT)
target prot opt source destination
REJECT tcp -- anywhere anywhere tcp dpt:www ...
0
votes
0answers
49 views
iptables firewall to protect against automated entries
I am getting unusually large calls on my app. I have implemented CSRF Check over ajax and its working but am still getting so many calls. My guess is that someone has a script that is 'logged' in and ...
0
votes
0answers
57 views
Why can't I view a specific website?
I am a netwrok administrator at a small company (22 PCs) and i have a problem, and i don't know what could be the cause.
I can't access a specific website from the LAN.
I have a server which has 2 ...
0
votes
0answers
95 views
iptables, forwarding between interfaces
I'm trying to setup a router by hand using iptables but after a lot of examples
i've tried from google i cant get anything to work, my idea is to setup a box
inbetween my cisco and the main switch for ...
0
votes
1answer
256 views
Use a proxy which connects to the school proxy
How to get my computer use a proxy ON my computer, which connects to the school proxy ?
The reason I ask this, is because I need all programs on my computer, absolutely the whole system to go through ...
1
vote
0answers
148 views
Firewall Iptables block everything and allow vpn
I would like to block all traffic on my ubuntu server with iptables and them allow only the protocols : HTTP, HTTPS, PPTP, L2TP, SSTP and OpenVPN
I have tried many ways to do this, and I would like ...
