Iptables is used to set up, maintain, and inspect the tables of IP packet filter rules in the Linux kernel.

learn more… | top users | synonyms

1
vote
0answers
5 views

server cs1.6 vps amazon ubuntu dont work

I have a problem with my amazon Ubuntu VPS. I tried to open cs1.6 server. I opened a port 27015 :iptables -I INPUT -p udp --dport 27015 -j ACCEPT and it's done. I put this command in putty : ...
0
votes
0answers
12 views

IP PORT forward request through VPN

I premise I'm not a network expert, so please don't blame me if I'm going to write something fool. I applied the instructions here: IP/PORT forward requests to another server to make the same ...
-4
votes
0answers
23 views

Huge packet loss on openwrt [on hold]

I have a strange issue on mikrotik rb951-2hnd router. I firmwared it to openwrt a few years ago and everything worked fine. Just a few months ago I decided to update firmware. So I did it and ...
0
votes
0answers
15 views

Webmin Linux Firewall NAT and Packet Filtering

Can someone explain to me the difference between these two? Like in NAT and Packet Filtering there are rules for both incoming and outgoing packets. I do not really understand their differences. What ...
0
votes
0answers
18 views

Setup router, iptables to access website via Domain Name in local network problem

I have a problem with iptables / bind9. Topology: My local PC: DNS set to: 88.220.77.193 VirtualBox with: ROUTER: eth0 : 88.220.77.193 255.255.255.0 to the Internet; eth1 : 192.168.100.254 ...
0
votes
1answer
21 views

Ip forwarding to another subnet

Right now i am working on testing a MAAS setup (physical hardware). I have deployed juju and can access it within the network (10.0.3.0). I have two interfaces eth0, internet facing, eth1 where ...
0
votes
0answers
24 views

Route packets between 3 subnets (nics) on same server

I have 3 subnets on my one server which acts as the router/gateway (10.1.10.0, 172.16.1.0, 172.16.2.0). All three subnets are assigned to their own NICs on the server. eth0 (10.x.x.x) is my ...
0
votes
1answer
32 views

Packets getting dropped after clearing rp_filter

I see certain packets in tcpdump and not able to trace whats happening to them. I did set rp_filter to 0 and log_martians to 1 on all interfaces. I enabled traces in iptables as well. root@sindhu# ...
0
votes
0answers
21 views

Iptable rules filtering from ip address to interface

By default I have an implicit deny on my ubuntu firewall but I want to make the ip address 10.1.10.201 have a few privileges. I want it to have ssh and telnet capabilities to contact the external ...
1
vote
0answers
19 views

regenerate iptables from “iptables -L”after disk failure

My system disk failed catastrophically. I've replaced and mostly restored the OS on a new disk but all I have for my iptables is the output from iptables -L. Is there a way to automatically recreate ...
0
votes
1answer
17 views

VPN server on ubuntu enabling NAT problem! please help

Hi I am trying to Create a vpn server on a vps which is running ubuntu percise 12.04. I have already installed pptpd and I have enabled ip forwarding but when I try to enable NAT with this command : ...
0
votes
1answer
39 views

Iptable ordering of commands

When adding a new rule in iptable I want it to be the first command to be executed, which means it will go on top of the rules list. What do I have to add in the command to change its position on the ...
0
votes
1answer
21 views

Iptables HTTP not working on computer

By default I have an implicit deny so I used these two commands to try to enable http on ip address 10.1.10.201 but I cannot access any websites. sudo iptables -A INPUT -p tcp -s 10.1.10.201 --dport ...
0
votes
0answers
21 views

Cannot 'Ping' my server from client in PPTP VPN?

Recently i set up a server and a client using PPTP VPN . I can connect to the server,but cannot do anything else. I cannot Ping,SSH to the server from client and vice versa. For setting Iptables for ...
0
votes
1answer
20 views

IPtables command to block specific port for certain ip

I want to block certain services such as ftp, telnet, http for a certain ip address. What command will I execute in order to achieve this. The only command I have tried is sudo iptables -A INPUT -s ...
0
votes
1answer
42 views

Clean install of Apache but can't access it via lan client

I've been fighting this issue for a couple days now and am at whits end, so any help would be great. I have several computers in the office. One is now a Ubuntu Server that I'm setting up for a ...
0
votes
1answer
42 views

iptable rules works sometimes only

I have blocked an attacker IP that was sending me lots of UDP packets. iptables -I INPUT 1 -s IP_OF_ATTACKER -j DROP This rule was working all fine. iptables -nvL --line-numbers 22G traffic was ...
0
votes
1answer
25 views

Block all but one ip address

I need to allow access to only one IP address and block the rest, so I wrote the following: sudo iptables -F sudo iptables -A INPUT -s ipaddress -j ACCEPT sudo iptables -A INPUT -j DROP sudo iptables ...
1
vote
1answer
12 views

Options missing from iptable man page

I was looking at iptables man pages. But I did not find anything about --sport and --dport. --sport is short for --source-port --dport is short for --destination-port Why are those options ...
1
vote
0answers
8 views

Local iptables nat redirection not working [duplicate]

I'm trying to install mitmproxy. To use it as a transparent proxy, I need to enable ip forwarding and use iptables to setup nat redirection. It doesn't appear to be working. I'm able to make requests ...
0
votes
1answer
46 views

iptables allow just internet connection

let me explain what I did before; # Only INPUT policy DROP, others are ACCEPT sudo iptables -P INPUT DROP sudo iptables -A INPUT -p tcp --sport 80 -j ACCEPT I also try this; for these ports to 443 ...
0
votes
0answers
18 views

Redirection using Apache with scala website

My aim to redirect xxxxx.com to www.xxxxx.com. Website is running through scala play framework and Apache is used for redirection. What i did and its not working: Server infrastructure: Scala play ...
0
votes
0answers
41 views

Restrict Deluge to tun0 only but allow Deluge Web UI over eth0

After many searches I have been able to restrict deluge network traffic to only the VPN interface tun0 using the following command: sudo iptables -A OUTPUT -m owner --uid-owner deluge \! -o tun0 -j ...
0
votes
1answer
15 views

Can't get to forward ports with Iptables

In my "router" machine I have the following /etc/network/interfaces: # The loopback network interface auto lo eth0 eth1 eth2 eth3 iface lo inet loopback # The primary network interface allow-hotplug ...
0
votes
1answer
24 views

iptables presale me to ssh access or calling methods remotely

I have a linux openwrt unit at its start I can not make a ssh access if I do iptables -F. If I iptables -L -n -v, I find several rules that are automatically inserted and it prevents me from doing ...
0
votes
0answers
13 views

virtualization and security vis PCI DSS security

I have a couple questions about the effect of virtualization and the security of both the host and guest systems. The OS on both is Ubuntu server 14.04. I opted for use of Oracle's Virtualbox. I ...
-1
votes
0answers
23 views

ip packet forwarding in Debian

I have physical network setup with machine A<---->B<----->C..IP and ethernet configurations are summarized as following: A(eth0: 10.10.10.2)<--->(eth0: 10.10.10.3)B(eth1: ...
0
votes
0answers
43 views

Ubuntu on Chromebook - How to add iptables_nat to special kernel?

I am running this modified version of Ubuntu on my Acer C720 Chromebook. Recently I've tried installing Docker, but it seems that this special version of Ubuntu lacks iptables_nat: eir@asgard:~$ sudo ...
0
votes
1answer
42 views

Ubuntu Server 14.04 Drop UDP packet

I use Ubuntu server as part of my system and now I have seen something interesting. I have a router that sends me ethernet 802.11 packets. I generate this packet in the router and then send it under ...
1
vote
0answers
42 views

opening port 80 on AWS

I created a AWS EC2 VPS(ubuntu v14) on which I want to open port 80 so that my website can run. But unfortunately, I am not able to open port 80. For this, I first ran the command: $ sudo iptables ...
0
votes
0answers
21 views

UFW blocking 169.254.0.0 (link-local / apipa) addresses?

When using iftop on my wlan0 interface, there are a few link-local addresses connecting. How and where can I filter these connections? I have very specific UFW rules blocking 169.254.0.0/16, but I ...
0
votes
0answers
37 views

Redirect all traffic except DNS

I successfully setup Ubuntu server up & running. Server configuration: tun0 192.168.99.1/24 NAT Enabled Note that client able to communicate with server. ping 192.168.99.1 Now I stuck at ...
0
votes
2answers
46 views

How to allow this connection on the Firewall?

I am trying to connect my Ubuntu Web Server to my Ubuntu Storage Server using NFS (Network File System). But when I try to mount a Storage Server to the Web Server, I get a "Connection Timeout" ...
1
vote
1answer
31 views

Iptables and Postfix

Examine configuration of Postfix and iptables, what will be response of mail server and why? First: main.cf mynetwork=127.0.0.1/8 smtpd_sender_restrictions=permit_inet_interfaces iptables ...
0
votes
0answers
32 views

Virtual Machine can not ping to internet but still use apt-get update?

I'm installing VMware version 11 on Windows 7 Pro to create Virtual machines. VMs is running Ubuntu 14.04. My problem is I can not ping from the virtual machines to the Internet (8.8.8.8). but still ...
0
votes
0answers
33 views

14.04 How to unblock UDP ports and UDP packets?

I'm use and Ubuntu Server, and I use it an Asterisk 11. But I have to unblocking the UDP Port 5089 and port for UDP packets in the range of 16384-16482. Also, I need to disable "SPI" in my firewall. ...
1
vote
1answer
31 views

How can i make both iptables/ip6tables run at startup?

I have two differents set of rules in two files, one is dedicated to ipv4 and the other for ipv6. To make them persistant I use the if-pre-up/if-post-down script : #! /bin/sh iptables-restore < ...
2
votes
1answer
101 views

Change iptables log format

Is it possible to change the log format of iptables ? I want to add the ssh_client in the log. I have already made an iptables rule for outgoing ssh iptables -I OUTPUT -p tcp --dport 22 -j LOG ...
0
votes
0answers
75 views

Ubuntu Port Scan , Security concerns

Scan results of my ubuntu 14.04 $ nmap 127.0.0.1 Starting Nmap 6.40 ( http://nmap.org ) at 2015-05-02 08:43 IST Nmap scan report for localhost (127.0.0.1) Host is up (0.0021s latency). Not shown: ...
0
votes
1answer
50 views

How to load a iptable matching module? Or is it required to load it expressly? Some related questions

I am running Ubuntu 14.04 LTS. I believe the following shows which iptables matching modules are loaded: sudo cat /proc/net/ip_tables_matches Question: I see conntrack listed three times. Why? ...
0
votes
1answer
40 views

Do iptables support jitter simulation?

I'm using 14.04.1-Ubuntu. I'm trying to find out if iptables supports creating jitter, like it does for packet loss. I'm using iptables -A INPUT -m statistic --mode random --probability 0.02 -j ...
0
votes
1answer
67 views

How to use my ubuntu server as router?

+---+ eth1- *.1.6| S | =========| | |PC1|private net -------------------- ...
0
votes
0answers
30 views

IPtables logging… continues after command is commented and old rules flushed

I have the following iptables script. I do a sudo to execute it but before doing so I run a sudo iptables -F to flush all old rules. Yet, there are entries with prefix of iptables2: #iptables -t nat ...
0
votes
1answer
48 views

How to setup IPTABLES for logging/monitoring usage while using a DSL with a dynamically assigned IP

I am trying to set up a system to do NAT and other iptables-stuff (like logging, firewall, monitoring, etc.). The ISP provides a dynamic IP address and the DSL modem does NAT. I have the following ...
1
vote
1answer
27 views

Can iptables log be directed to different log files in different iptables command?

Can I have something like this: iptables -A INPUT -i em1 -j LOG --log-prefix='iptables1: ' iptables -t nat -A PREROUTING -i em1 -j LOG --log-prefix='iptables2: ' Here I have different log files ...
0
votes
0answers
52 views

Redirecting iptables log works but logging continues in kern.log file too

Yes, I have gone through similar questions asked. My problem is that I am able to log the iptables log in another file. However, the log entries also get logged in kern.log file. I have the following ...
0
votes
0answers
41 views

Gufw log: rejected, denied and allowed connections

I have got Gufw installed, and I have set some firewall rules so that it rejects and allows certain IP addresses. And although I have set it so that it logs-all, I cannot seem to find anywhere where ...
0
votes
0answers
18 views

Two different Networks, 2xRouter some routing Fail need help!

I have some problems with my Settings, if someone can check it and analyze whats wrong. NETWORKPLAN MY current settings: /etc/network/interfaces Wan auto eth0 iface eth0 inet dhcp LAN auto eth1 ...
0
votes
1answer
228 views

Referanceing venet0:0 and venet0:1 in iptables on OpenVZ

I have an Ubuntu vps that is hosted with openvz. For a while now I have had trouble using the interface names in iptables, such as: (edited) -A INPUT -i venet0:0 -p tcp -m tcp --dport 80 -j ACCEPT ...
2
votes
1answer
131 views

Ubuntu 14.04 as router Destination Network unreachable

I am fightning with this for like 10 days now i really need to ask you guys, i hope someone has 5 mins time to explain me what i am doing wrong! For the start i wanted to configurate a router for my ...