Iptables is used to set up, maintain, and inspect the tables of IP packet filter rules in the Linux kernel.

learn more… | top users | synonyms

-1
votes
0answers
15 views

Ubuntu hostapd/routing no Internet Access

i followed following tutorial (First One, manual) on how to get hostapd running on a ubuntu machine: How to setup an Access Point mode Wi-Fi Hotspot? Im running Mint 17 on my System and had to use an ...
0
votes
0answers
12 views

Allowing Longview in UFW firewall; how do these iptable rules translate to UFW-commands?

Linode has some documentation on allowing its product "longview" to go through the firewall. It offers two commands for iptables: iptables -I INPUT -s longview.linode.com -j ACCEPT iptables -I OUTPUT ...
1
vote
1answer
20 views

dport is not working on iptables command

In terminal I type : iptables -A INPUT --dport 443 -j DROP And it tells me : iptables v1.4.21: unknown option "--dport" what is wrong with --dport?
0
votes
0answers
19 views

ufw rules don't block deluge

I'm trying to keep deluged on my headless Ubuntu Server 14.04.1 from functioning when the server isn't connected to a VPN (I know many threads exist discussing the best way to accomplish that; I'm not ...
0
votes
1answer
31 views

linux gateway / firewall IPtables config

The KVM host is acting as a gateway / firewall for all of the virtual machine's it runs. It has a /26 public IP space configured on LAN interface em1: 1.1.1.1/26 It has a /30 rfc1918 IP configured on ...
1
vote
1answer
18 views

Can Using Git over SSH be distinguished from normal SSH traffic?

So, I set up my iptables configuration so that repeated attempts to SSH into my private server cause a blacklist. # iptables -N SSH # iptables -A INPUT -p tcp --dport ssh -m conntrack --ctstate NEW ...
0
votes
2answers
48 views

Restricting internet access of some client systems of LAN to a few websites using ubuntu gateway

How to limit internet access of most systems in my LAN to a few websites and block all the other websites? Also want to bypass that restrictions for some systems. All systems have static IP address ...
0
votes
2answers
26 views

Can I use iptables to forward vm guest requests to host

This is a bit complicated, but I have a Windows 7 vm (virtualbox) and I need create a persistent connection to the MySQL instance on my host machine. Binding... I can do this using mysql address ...
0
votes
0answers
40 views

routing through ubuntu server

Im having issues with routing from Windows/Linux/Mac machine through server and from desired interface out. So this is my configuration: My example will be Ubuntu -> Ubuntu -> out First machine: ...
0
votes
1answer
36 views

How to allow a WAN connection via a forward port?

My home internet connection has a static IP address (eg: 123.123.123.123) I have configured my router to forward port 9000 to an internal host (192.168.1.101), which is running Ubuntu 14-04. I run ...
0
votes
0answers
6 views

Is there a backport of ulogd2 for 12.04 precise?

I have a server with Ubuntu 12.04 running on Rackspace cloud, configured to use the latest kernel. A week ago or so I rebooted the server and it booted on a new kernel 3.17.1 (that had been released ...
0
votes
1answer
51 views

iptables - unable to initialize table filter

I have a firewall file saved in /etc/firewall.conf. Everything is ok, I can use it for "iptables-restore /etc/firewall.conf" with success. So, starting from this file, I created a php script(that ...
0
votes
0answers
15 views

No able to connect to WiFi after installing iptables-persistent

I am using ubuntu 14.04. I was trying out how to add entries to iptables. I executed the following commamd. sudo iptables -A INPUT -p tcp --dport 80 -j ACCEPT To persistent the above changes I ...
0
votes
0answers
26 views

Using iptables to detecting SSLv2 and SSLv3 initial connection packets, drop them, and log them

This is going to sound like an odd issue, but I'm trying to detect SSLv2 and SSLv3 connection attempts, log the packets so I can find the source for those IPs, and then drop the packets silently. Is ...
1
vote
0answers
28 views

Blocking specific programs from accessing the internet isn't working (iptables / apparmor) [closed]

I'm using this guide to try to block a few programs from sending or receiving data from anything other than 127.0.0.1, but it's not working. First off, the suggested way of only allowing an IP block ...
0
votes
0answers
14 views

What is wrong with knockd?

I am trying to implement port knocking for ssh service on my personal server. I have two other public services that will always be open. My iptables rules look like this: Chain INPUT (policy DROP 0 ...
0
votes
1answer
22 views

Weird IP cpnnections on default install

I install 14.04 in a VM. I created a log using these instructions and did stuff on my computer. I grep out DST=192 and =lo. I saw two ip addresses. 224.0.0.251 and 91.189.92.11. 224.0.0.251 appears ...
0
votes
1answer
25 views

iptables and expressing your IP address to the rules dynamically

I've been recently spending my time refining my iptable rules to be a little more robust than Ark linuxs Simple stateful firewall to include defense against some other known and nefarious attacks. One ...
0
votes
0answers
41 views

HTTP request using IPtables doesn't work for captive portal!

I am trying to make a simulation of a captive portal on 3 virtual machines (VM Ware) for my school project this week. Setup 1 = Ubuntu client 2 = Ubuntu server (router) 3 = Ubuntu server (captive ...
0
votes
1answer
14 views

IPtables client - server(router) error

I've got a school assessment this week. Let me explain how my environment is: 1 Router (Have DHCP + giving an ip to the client) Has NAT for Internet 1 Client (Can only have internet acccess via the ...
0
votes
0answers
112 views

Iptables PREROUTING to redirect port 80 through varnish not working

I try to use iptables to keep Varnish on port 8080 and Apache on port 80 and just preroute everything coming in at port 80 to port 8080. It isn't working. When I call the site on port 8080 everything ...
0
votes
1answer
175 views

Acting as a reverse proxy for raw TCP packets

I'm trying to use an OVH node as a reverse proxy for several minecraft servers(mostly for DDoS protection and firewall customisation). The minecraft hosts are also running ubuntu, either 12.04 or ...
0
votes
0answers
17 views

Using ufw as a firewall between network segments

I've been using Ubuntu server 12.04 as a router and it worked. Now I'm trying to add some security using ufw. I enabled the ipv4-forwarding feature in the configuration file and added a rule ...
0
votes
0answers
27 views

Does ufw restore iptables settings after a reboot?

Ubuntu 14.04 on a virtual machine I can't log in via my PC anymore after I rebooted. This machine does not accept incoming connections, there is non ftp, no web pages. It runs perl programs and ...
1
vote
0answers
37 views

How do I share my wlan0 internet connection to eth0 using command line and config files?

I understand how it is done using the GUI (1, 2, 3), but I need to do MANUALLY using linux command (iptables, ebtables ...). I have been struggling with this for days, and I can seem to get it right. ...
0
votes
0answers
30 views

After setting up pre/post-routing, why is my port forwarding still now working?

I am set up with 3 virtual machines - a gateway, server, and client. We are tasked with setting up iptables on the Gateway to forward HTTP, SSH, and FTP traffic from the Client to the Gateway to the ...
0
votes
0answers
34 views

3.13.0-37-generic basic router repeatable issue - packet loss

I have two desktop PCs and I wish to use them as a simple router between two LAN segments. I am not using NAT, SNAT, DNAT, and all my iptables tables/chains policy are ACCEPT. With iptables wide open ...
0
votes
1answer
68 views

Iptables troubles

I used webwin for iptables management and reset the firewall over webmin (to clear out all the old stuff). I also disabled the feature Activate at book. After that I installed iptables-persistent for ...
0
votes
0answers
39 views

Make Proxy Server with arno-iptables-firewall

I am trying to configure arno-iptables-firewall to work with transparent squid but no success. browsing is ok using local configured proxy on the computer but can make the arno-iptables-firewall to ...
2
votes
0answers
121 views

Port redirection for a specific (dynamic) IP using iptables script

What I want: Incoming TCP and UDP connections on port 900 from the resolving IP address of myip.dyndns.org (dynamic IP) should redirect to port 5050 on the local machine. All other IP addresses ...
0
votes
0answers
7 views

iptables like leflexive

is there any options to implement like leflexive acl (They are generally used to allow outbound traffic and to limit inbound traffic in response to sessions that originate inside the router. ) ?
0
votes
0answers
14 views

Iptables like reflexive acl

Is there any iptables implementation like reflexive acl ? and how do you provide your security using iptables
0
votes
0answers
22 views

What is UFW's approach towards rules order for overlapping rules?

I need to enable UFW in my Ubuntu 14.04 Server having these conditions: - I want to deny all incoming and outgoing on all ports (and protocols) but: - I want to allow all incoming and outgoing on a ...
0
votes
0answers
57 views

iptables : ssh output redirection

I'm trying to configure iptables to redirect ssh output, but to test I first configure tcp redirection like this: protocol : tcp source IP : 127.0.0.1 source port : 69 destination ip : anywhere ...
0
votes
0answers
84 views

problem with Openvpn on openVZ VPS

Ok guys. I finally joined this forum after lond educational journey of linux :) I'm advocate of making research on my own before asking questions. But after several days of trying to figure this out I ...
0
votes
0answers
99 views

Routing with virtual interfaces

How do I setup Ubuntu Server (14.04.01) with public eth0 and private eth1 to act as a router for multiple public/private IP pairs. eth0: 200.0.0.2 eth0:1: 200.0.0.3 eth1: 192.168.0.1 ...
0
votes
0answers
104 views

How do I bridge the eth0 (ethernet) and eth1 (WiFi_Ap)?

I am in the WiFi test embedded board. The ethernet port eth0 is connected to the Internet. The interface eth1 is caused due to the WiFi chip. The Access Point can be used as a WiFi eth1 is. We use ...
0
votes
1answer
46 views

How do I remove all the ufw chains from iptables?

I've removed ufw and I want to get rid of all the chains it leaves behind. How can I do that easily?
0
votes
0answers
25 views

Writing exceptions in ufw to the default forwarding policy

I've tried setting DEFAULT_FORWARD_POLICY in /etc/default/ufw to both REJECT and ACCEPT and then writing rules to create exceptions to the default forward policy. No matter what I do, it appears to ...
0
votes
1answer
117 views

Setup NAT on Ubuntu 14.04

I'm trying to insert my desktop between an appliance and the rest of the network to monitor the traffic coming off of it due to some security concerns. I'd like to setup NAT so that the devices behind ...
1
vote
1answer
78 views

How do I set up a firewall/iptables using rc.firewall?

I am new to Ubuntu and am having a bit of trouble getting my firewall set up for my Network Security class. We are set up with 3 virtual machines - a Gateway, a Server, and a Client. We are supposed ...
0
votes
0answers
30 views

Ubuntu Server low client dowload speed

In the work we have a Ubuntu server 14.04 working as a proxy server, dhcp and Firewall, we assigns the clients Ips Manually in the dhcp for each Mac Address. The most of the clients go out through ...
1
vote
1answer
77 views

The server cant resolve host names

Please help with the following problem. Server is running under Ubuntu 14.04 server 32x. IP tables: INPUT DROP [0:0] :FORWARD DROP [0:0] :OUTPUT ACCEPT [0:0] -A INPUT -p icmp -j ACCEPT ...
0
votes
0answers
39 views

Shows :::18332 instead of 0.0.0.0:8332, what means that?

What means ::: in front of a port (where usually the IP should be) when doing netstat? It shows :::18332 instead of 0.0.0.0:18332 and I can't connect to that port from the outside. This is for ...
0
votes
0answers
20 views

Iptables doesn't change the destination ip

I have a simple iptables rule: iptables -t nat -A PREROUTING -i eth2 -p tcp --dport 3389 -j DNAT --to 192.168.10.102 Note that my default gateway to internet is eth1 (eth2 is a secondary link). In ...
0
votes
1answer
106 views

Redirect iptables to apache without internet connection

I have set up a Personal hotspot using Hostapd. But this hotspot is not connected to the internet but I do have Apache installed on it. What I am trying to achieve is to redirect all the clients (that ...
0
votes
0answers
23 views

webstorm website connecting remotely

I am new to Ubuntu and to webstorm so please bare with me if its very basic question. I am trying to connect to the website run by webstorm on Ubuntu from Windows 8.1 PC ...
2
votes
0answers
34 views

How do I find which OS layer (iptables, rp_filter, etc) is dropping a packet?

Let's say that I'm running a ping towards a machine and I see from tcpdump that the icmp echo reply is being received at the ethernet port but the ping program is not getting it. So I know that ...
0
votes
0answers
190 views

Why can I not install iptables?

linux newbie seeks help please! I've set up a VPS as a mail server using dovecot and postfix and I'm trying to install iptables to secure the box a bit more however when I do I get the following ...
1
vote
2answers
67 views

How can I prevent being locked out after changing the iptables default policy?

I am working on a experiment when I (client) ssh a gateway and run sudo iptables --policy INPUT DROPthen the gateway doesn't accept any communucation(or input) from my client. By running sudo iptables ...