Iptables is used to set up, maintain, and inspect the tables of IP packet filter rules in the Linux kernel.

learn more… | top users | synonyms

0
votes
0answers
11 views

Redirect all traffic except DNS

I successfully setup Ubuntu server up & running. Server configuration: tun0 192.168.99.1/24 NAT Enabled Note that client able to communicate with server. ping 192.168.99.1 Now I stuck at ...
0
votes
2answers
33 views

How to allow this connection on the Firewall?

I am trying to connect my Ubuntu Web Server to my Ubuntu Storage Server using NFS (Network File System). But when I try to mount a Storage Server to the Web Server, I get a "Connection Timeout" ...
-1
votes
0answers
14 views

ufw default iptables -L [on hold]

Is there somewhere explained all the iptables -L rules that ufw is creating by default? For compliance reasons I need to document everything (not just the ufw status) and at the moment it feels much ...
1
vote
1answer
19 views

Iptables and Postfix

Examine configuration of Postfix and iptables, what will be response of mail server and why? First: main.cf mynetwork=127.0.0.1/8 smtpd_sender_restrictions=permit_inet_interfaces iptables ...
0
votes
0answers
19 views

Virtual Machine can not ping to internet but still use apt-get update?

I'm installing VMware version 11 on Windows 7 Pro to create Virtual machines. VMs is running Ubuntu 14.04. My problem is I can not ping from the virtual machines to the Internet (8.8.8.8). but still ...
0
votes
0answers
13 views

14.04 How to unblock UDP ports and UDP packets?

I'm use and Ubuntu Server, and I use it an Asterisk 11. But I have to unblocking the UDP Port 5089 and port for UDP packets in the range of 16384-16482. Also, I need to disable "SPI" in my firewall. ...
1
vote
1answer
20 views

How can i make both iptables/ip6tables run at startup?

I have two differents set of rules in two files, one is dedicated to ipv4 and the other for ipv6. To make them persistant I use the if-pre-up/if-post-down script : #! /bin/sh iptables-restore < ...
2
votes
1answer
30 views

Change iptables log format

Is it possible to change the log format of iptables ? I want to add the ssh_client in the log. I have already made an iptables rule for outgoing ssh iptables -I OUTPUT -p tcp --dport 22 -j LOG ...
0
votes
0answers
47 views

Ubuntu Port Scan , Security concerns

Scan results of my ubuntu 14.04 $ nmap 127.0.0.1 Starting Nmap 6.40 ( http://nmap.org ) at 2015-05-02 08:43 IST Nmap scan report for localhost (127.0.0.1) Host is up (0.0021s latency). Not shown: ...
0
votes
1answer
23 views

How to load a iptable matching module? Or is it required to load it expressly? Some related questions

I am running Ubuntu 14.04 LTS. I believe the following shows which iptables matching modules are loaded: sudo cat /proc/net/ip_tables_matches Question: I see conntrack listed three times. Why? ...
0
votes
1answer
29 views

Do iptables support jitter simulation?

I'm using 14.04.1-Ubuntu. I'm trying to find out if iptables supports creating jitter, like it does for packet loss. I'm using iptables -A INPUT -m statistic --mode random --probability 0.02 -j ...
0
votes
1answer
57 views

How to use my ubuntu server as router?

+---+ eth1- *.1.6| S | =========| | |PC1|private net -------------------- ...
0
votes
0answers
19 views

IPtables logging… continues after command is commented and old rules flushed

I have the following iptables script. I do a sudo to execute it but before doing so I run a sudo iptables -F to flush all old rules. Yet, there are entries with prefix of iptables2: #iptables -t nat ...
0
votes
1answer
20 views

How to setup IPTABLES for logging/monitoring usage while using a DSL with a dynamically assigned IP

I am trying to set up a system to do NAT and other iptables-stuff (like logging, firewall, monitoring, etc.). The ISP provides a dynamic IP address and the DSL modem does NAT. I have the following ...
1
vote
1answer
18 views

Can iptables log be directed to different log files in different iptables command?

Can I have something like this: iptables -A INPUT -i em1 -j LOG --log-prefix='iptables1: ' iptables -t nat -A PREROUTING -i em1 -j LOG --log-prefix='iptables2: ' Here I have different log files ...
0
votes
0answers
32 views

Redirecting iptables log works but logging continues in kern.log file too

Yes, I have gone through similar questions asked. My problem is that I am able to log the iptables log in another file. However, the log entries also get logged in kern.log file. I have the following ...
0
votes
0answers
27 views

Gufw log: rejected, denied and allowed connections

I have got Gufw installed, and I have set some firewall rules so that it rejects and allows certain IP addresses. And although I have set it so that it logs-all, I cannot seem to find anywhere where ...
0
votes
0answers
17 views

Two different Networks, 2xRouter some routing Fail need help!

I have some problems with my Settings, if someone can check it and analyze whats wrong. NETWORKPLAN MY current settings: /etc/network/interfaces Wan auto eth0 iface eth0 inet dhcp LAN auto eth1 ...
0
votes
1answer
81 views

Referanceing venet0:0 and venet0:1 in iptables on OpenVZ

I have an Ubuntu vps that is hosted with openvz. For a while now I have had trouble using the interface names in iptables, such as: (edited) -A INPUT -i venet0:0 -p tcp -m tcp --dport 80 -j ACCEPT ...
2
votes
1answer
87 views

Ubuntu 14.04 as router Destination Network unreachable

I am fightning with this for like 10 days now i really need to ask you guys, i hope someone has 5 mins time to explain me what i am doing wrong! For the start i wanted to configurate a router for my ...
0
votes
1answer
53 views

Preventing port scanning

I want to prevent my server from being port scanning from Internet and if port scanning occurs, block source IP address for several minutes. Below my current iptables config: Lilith> iptables ...
1
vote
0answers
35 views

Dnsmasq and Iptables for routing

I'm using a Raspberry Pi with two ethernet ports as a router. The network looks like this. "Internet" <--(…)--> Fritz!Box <--(172.16.x.y)--> [eth1, dhcp] Raspberry Pi [eth0, static] ...
0
votes
0answers
31 views

unable to start (Ubuntu server 14.04) iptables service it show “Unrecognized service”

Ubuntu server 14.04 iptables service start shows: Unrecognized service
0
votes
0answers
24 views

Web service only responding to local request

I have a webservice that listen on port 5678 on a remote ubuntu machine. netstats: tcp 0 0 0.0.0.0:5678 0.0.0.0:* LISTEN 10605/node I don't have any ...
1
vote
0answers
47 views

Using iptables to redirect all traffic to my localhost

So I've just installed DD-WRT on my router and I wanted to redirect all http requests to my local host located at 192.168.1.50 (port 80) but I'm unable to find any way of doing this. I've tried doing ...
0
votes
1answer
41 views

'iptables -S' to be accessed by www-data

I've had a look around on Ask Ubuntu and can't find an answer to what I'm looking for. Basically, I have an admin panel for a website I run and recently just installed fail2ban, which has made my ...
2
votes
0answers
75 views

Host to Guest one way connection issue

I have guest run on my machine on qemu with configuration: /usr/local/kvm/bin/qemu-system-x86_64 -enable-kvm -cpu host -smp 8 -hda ${TEST_VIRT_ENV_IMAGE} -m 4096 -netdev user,id=user.0 -device ...
1
vote
0answers
24 views

UFW open range is still blocked

I have opened up a range of ports using UFW. The rules in question are shown below (output of sudo ufw status numbered). I have restarted UFW since I added the rule, yet in lnav I still see log ...
0
votes
1answer
139 views

How to route transmission traffic

Trying to get Transmission to only use my wifi interface (wlan0), while everything else uses ethernet (eth0). I was able to bind Transmission to the wlan0 IP but can't get it to work unless I ...
1
vote
0answers
65 views

how to open a port under Ipv4 instead of Ipv6

How I can open a port under Ipv4 instead of Ipv6 on ubuntu tcp 0 0 127.0.0.1:3306 0.0.0.0:* LISTEN - tcp 0 0 127.0.1.1:53 ...
0
votes
0answers
66 views

ufw on ubuntu doesn't work, how to deactivate plesk firewall?

Since I'm a totally newbie to server stuff but I needed to set up a vServer, I let install Ubuntu 14.04 AND Parallels Plesk on it. Now, I think it would have been better to install Ubuntu without ...
1
vote
2answers
110 views

Ubuntu 14.04 : Cannot access internet via terminal

I am able to connect to both wired and wireless networks and able to browse via a browser. So I don't think there's any network issue. However I cannot run any internet based command from my terminal ...
0
votes
0answers
85 views

iptables: write UDPv4: Operation not permitted (code=1)

I am trying to set up a stateful firewall using iptables. It is for use on my desktop machine. Below are the contents of my firewall script: #!/bin/bash iptables-save > ...
0
votes
1answer
62 views

Configure UFW to allow only established and related conections (on IPv4)

I want to configure ufw to deny everything except the related and established connections. On iptables I usually did : -P INPUT DROP -P FORWARD DROP -P OUTPUT ACCEPT -A INPUT -m state ...
1
vote
0answers
57 views

Noob user. No network (wired). Cannot ping router

Let me start by saying I am pretty new to Linux, so forgive my unavoidable noobness and thank you for readning this. I am trying to set up a good environment to learn programming and familiarize ...
0
votes
0answers
38 views

Dual Wan and lan configuration

Iam planed to configure a dual wan ubuntu router with dual lan. ie., eth0 and eth0:1. And ath0(192.168.1.1) should route through ISP 1 and eth0:1(192.168.2.1) should route through ISP 2. Please guide ...
1
vote
0answers
31 views

Transparent proxy listening on sub-interfaces

I have iptables and squid on the same box. HTTP traffic doesn't seem to be going through the transparent proxy when I change my rules on the filter table. What is the best point to filter http ...
0
votes
1answer
68 views

Errors with iptables/ipset (operation not permitted) while trying to block Chinese IPs

I'm not very experienced trying to do things like this, but I have been wanting to ban Chinese IPs from my VPS running Ubuntu (12.04 32-bit). I followed this guide, taking the time to read the ...
0
votes
0answers
34 views

Route teamviewer out secondary routing table

First question on here and im a linux newbie so please go easy =). I have a VPN tunnel that all my traffic goes through unless it is specifically told to use a different route table, vpnBypass. I ...
0
votes
1answer
76 views

“sudo iptables -L” takes a long time to load

For some reason when I try to run sudo iptables -L it takes a very long time to load. I am loading the rules from a script and it's on an Ubuntu server virtual machine through VMWare Fusion with 2MB ...
1
vote
0answers
34 views

Redirect connections from VPS to IP

I'm trying to develop my own "DNS" server using subdomains. Let' say I have this struture: VPS server with Ubuntu VPS server IP: 1.1.1.1 External computers on: 2.2.2.2 and 3.3.3.3 Subdomain ...
0
votes
0answers
30 views

Update dynamic IP and fail2ban

i have a script running via cron to allow ssh only through some known IP's. Since my Home-IP is dynamically associated i use this script running every 15min: #!/bin/bash ...
2
votes
1answer
46 views

DNS not resolving on same network only from outside - 3 days of headache already

I have a domain forwarded to my apache server let's say test.example.com. This works fine outside my home network I can reach it via mobile (4G). But on my laptop I can't reach it. Also I can't ...
0
votes
1answer
65 views

IP Tables allow HTTP and HTTPS

I am setting up a basic Firewall rules for my Laptop but I cant seem to get HTTP and HTTPS, thus using of the Webbrowser to work. My current rules are like this # 1. Delete all existing rules ...
0
votes
0answers
88 views

Restrict maximum number of independent IP connection on specific port at the same time

I set up a server as a socks5 proxy. I'd like restrict the maximum number(1 or 5 or 20) independent IP connection on specific port at the same time. I have searched on google, only see some articles ...
0
votes
0answers
28 views

Switch on Two Network Interfaces

I am trying to write script to switch between two interfaces on a Uuntu machine, wlan0 and eth0. My primary reference is: Forwarding traffic between 2 interfaces -A FORWARD -i eth0 -o wlan0 -j ...
1
vote
1answer
31 views

Adding firewall rule makes multiple entries

I am trying to add a rule to my Ubuntu 14 iptables to allow NTP (123) though using the command for allowing Incoming Traffic on Specific Ports Basic iptables How to? Here is my command: sudo ...
1
vote
2answers
55 views

Unable to share internet via NAT connection sharing

I've been using my Jetson TK1 Remotely via ssh and NAT connection sharing as described here. Earlier everything was working perfectly, but now whenever I try to share my internet connection by running ...
0
votes
0answers
173 views

Route only traffic on specific port through VPN

I would like to route only traffic on a specific Port. In my case for torrents through a VPN. For Transmission the port is 51413 I think. I only found tutorials how to set this up on a router but I ...
1
vote
1answer
146 views

iptables - redirect DNS queries

I already have the following iptables rules applied in order to masq all of the wlan1 traffic through wlan0. *filter :INPUT ACCEPT [48:6144] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [47:6078] -A INPUT -i ...