Iptables is used to set up, maintain, and inspect the tables of IP packet filter rules in the Linux kernel.

learn more… | top users | synonyms

0
votes
1answer
44 views

Iptables HTTP not working on computer

By default I have an implicit deny so I used these two commands to try to enable http on ip address 10.1.10.201 but I cannot access any websites. sudo iptables -A INPUT -p tcp -s 10.1.10.201 --dport ...
0
votes
0answers
74 views

Cannot 'Ping' my server from client in PPTP VPN?

Recently i set up a server and a client using PPTP VPN . I can connect to the server,but cannot do anything else. I cannot Ping,SSH to the server from client and vice versa. For setting Iptables for ...
0
votes
1answer
51 views

IPtables command to block specific port for certain ip

I want to block certain services such as ftp, telnet, http for a certain ip address. What command will I execute in order to achieve this. The only command I have tried is sudo iptables -A INPUT -s ...
0
votes
1answer
136 views

Clean install of Apache but can't access it via lan client

I've been fighting this issue for a couple days now and am at whits end, so any help would be great. I have several computers in the office. One is now a Ubuntu Server that I'm setting up for a ...
0
votes
1answer
65 views

iptable rules works sometimes only

I have blocked an attacker IP that was sending me lots of UDP packets. iptables -I INPUT 1 -s IP_OF_ATTACKER -j DROP This rule was working all fine. iptables -nvL --line-numbers 22G traffic was ...
0
votes
1answer
43 views

Block all but one ip address

I need to allow access to only one IP address and block the rest, so I wrote the following: sudo iptables -F sudo iptables -A INPUT -s ipaddress -j ACCEPT sudo iptables -A INPUT -j DROP sudo iptables ...
1
vote
1answer
26 views

Options missing from iptable man page

I was looking at iptables man pages. But I did not find anything about --sport and --dport. --sport is short for --source-port --dport is short for --destination-port Why are those options ...
1
vote
0answers
8 views

Local iptables nat redirection not working [duplicate]

I'm trying to install mitmproxy. To use it as a transparent proxy, I need to enable ip forwarding and use iptables to setup nat redirection. It doesn't appear to be working. I'm able to make requests ...
0
votes
1answer
82 views

iptables allow just internet connection

let me explain what I did before; # Only INPUT policy DROP, others are ACCEPT sudo iptables -P INPUT DROP sudo iptables -A INPUT -p tcp --sport 80 -j ACCEPT I also try this; for these ports to 443 ...
0
votes
0answers
37 views

Redirection using Apache with scala website

My aim to redirect xxxxx.com to www.xxxxx.com. Website is running through scala play framework and Apache is used for redirection. What i did and its not working: Server infrastructure: Scala play ...
0
votes
0answers
126 views

Restrict Deluge to tun0 only but allow Deluge Web UI over eth0

After many searches I have been able to restrict deluge network traffic to only the VPN interface tun0 using the following command: sudo iptables -A OUTPUT -m owner --uid-owner deluge \! -o tun0 -j ...
0
votes
1answer
34 views

Can't get to forward ports with Iptables

In my "router" machine I have the following /etc/network/interfaces: # The loopback network interface auto lo eth0 eth1 eth2 eth3 iface lo inet loopback # The primary network interface allow-hotplug ...
0
votes
1answer
30 views

iptables presale me to ssh access or calling methods remotely

I have a linux openwrt unit at its start I can not make a ssh access if I do iptables -F. If I iptables -L -n -v, I find several rules that are automatically inserted and it prevents me from doing ...
0
votes
0answers
22 views

virtualization and security vis PCI DSS security

I have a couple questions about the effect of virtualization and the security of both the host and guest systems. The OS on both is Ubuntu server 14.04. I opted for use of Oracle's Virtualbox. I ...
0
votes
1answer
85 views

Ubuntu Server 14.04 Drop UDP packet

I use Ubuntu server as part of my system and now I have seen something interesting. I have a router that sends me ethernet 802.11 packets. I generate this packet in the router and then send it under ...
1
vote
0answers
114 views

opening port 80 on AWS

I created a AWS EC2 VPS(ubuntu v14) on which I want to open port 80 so that my website can run. But unfortunately, I am not able to open port 80. For this, I first ran the command: $ sudo iptables ...
0
votes
0answers
39 views

UFW blocking 169.254.0.0 (link-local / apipa) addresses?

When using iftop on my wlan0 interface, there are a few link-local addresses connecting. How and where can I filter these connections? I have very specific UFW rules blocking 169.254.0.0/16, but I ...
0
votes
0answers
43 views

Redirect all traffic except DNS

I successfully setup Ubuntu server up & running. Server configuration: tun0 192.168.99.1/24 NAT Enabled Note that client able to communicate with server. ping 192.168.99.1 Now I stuck at ...
0
votes
2answers
61 views

How to allow this connection on the Firewall?

I am trying to connect my Ubuntu Web Server to my Ubuntu Storage Server using NFS (Network File System). But when I try to mount a Storage Server to the Web Server, I get a "Connection Timeout" ...
1
vote
1answer
46 views

Iptables and Postfix

Examine configuration of Postfix and iptables, what will be response of mail server and why? First: main.cf mynetwork=127.0.0.1/8 smtpd_sender_restrictions=permit_inet_interfaces iptables ...
0
votes
0answers
37 views

Virtual Machine can not ping to internet but still use apt-get update?

I'm installing VMware version 11 on Windows 7 Pro to create Virtual machines. VMs is running Ubuntu 14.04. My problem is I can not ping from the virtual machines to the Internet (8.8.8.8). but still ...
0
votes
0answers
59 views

14.04 How to unblock UDP ports and UDP packets?

I'm use and Ubuntu Server, and I use it an Asterisk 11. But I have to unblocking the UDP Port 5089 and port for UDP packets in the range of 16384-16482. Also, I need to disable "SPI" in my firewall. ...
1
vote
1answer
51 views

How can i make both iptables/ip6tables run at startup?

I have two differents set of rules in two files, one is dedicated to ipv4 and the other for ipv6. To make them persistant I use the if-pre-up/if-post-down script : #! /bin/sh iptables-restore < ...
2
votes
1answer
190 views

Change iptables log format

Is it possible to change the log format of iptables ? I want to add the ssh_client in the log. I have already made an iptables rule for outgoing ssh iptables -I OUTPUT -p tcp --dport 22 -j LOG ...
0
votes
0answers
110 views

Ubuntu Port Scan , Security concerns

Scan results of my ubuntu 14.04 $ nmap 127.0.0.1 Starting Nmap 6.40 ( http://nmap.org ) at 2015-05-02 08:43 IST Nmap scan report for localhost (127.0.0.1) Host is up (0.0021s latency). Not shown: ...
0
votes
1answer
92 views

How to load a iptable matching module? Or is it required to load it expressly? Some related questions

I am running Ubuntu 14.04 LTS. I believe the following shows which iptables matching modules are loaded: sudo cat /proc/net/ip_tables_matches Question: I see conntrack listed three times. Why? ...
0
votes
1answer
48 views

Do iptables support jitter simulation?

I'm using 14.04.1-Ubuntu. I'm trying to find out if iptables supports creating jitter, like it does for packet loss. I'm using iptables -A INPUT -m statistic --mode random --probability 0.02 -j ...
0
votes
1answer
77 views

How to use my ubuntu server as router?

+---+ eth1- *.1.6| S | =========| | |PC1|private net -------------------- ...
0
votes
0answers
41 views

IPtables logging… continues after command is commented and old rules flushed

I have the following iptables script. I do a sudo to execute it but before doing so I run a sudo iptables -F to flush all old rules. Yet, there are entries with prefix of iptables2: #iptables -t nat ...
0
votes
1answer
98 views

How to setup IPTABLES for logging/monitoring usage while using a DSL with a dynamically assigned IP

I am trying to set up a system to do NAT and other iptables-stuff (like logging, firewall, monitoring, etc.). The ISP provides a dynamic IP address and the DSL modem does NAT. I have the following ...
1
vote
1answer
38 views

Can iptables log be directed to different log files in different iptables command?

Can I have something like this: iptables -A INPUT -i em1 -j LOG --log-prefix='iptables1: ' iptables -t nat -A PREROUTING -i em1 -j LOG --log-prefix='iptables2: ' Here I have different log files ...
0
votes
0answers
91 views

Redirecting iptables log works but logging continues in kern.log file too

Yes, I have gone through similar questions asked. My problem is that I am able to log the iptables log in another file. However, the log entries also get logged in kern.log file. I have the following ...
1
vote
0answers
62 views

Gufw log: rejected, denied and allowed connections

I have got Gufw installed, and I have set some firewall rules so that it rejects and allows certain IP addresses. And although I have set it so that it logs-all, I cannot seem to find anywhere where ...
0
votes
0answers
18 views

Two different Networks, 2xRouter some routing Fail need help!

I have some problems with my Settings, if someone can check it and analyze whats wrong. NETWORKPLAN MY current settings: /etc/network/interfaces Wan auto eth0 iface eth0 inet dhcp LAN auto eth1 ...
0
votes
1answer
457 views

Referanceing venet0:0 and venet0:1 in iptables on OpenVZ

I have an Ubuntu vps that is hosted with openvz. For a while now I have had trouble using the interface names in iptables, such as: (edited) -A INPUT -i venet0:0 -p tcp -m tcp --dport 80 -j ACCEPT ...
2
votes
1answer
304 views

Ubuntu 14.04 as router Destination Network unreachable

I am fightning with this for like 10 days now i really need to ask you guys, i hope someone has 5 mins time to explain me what i am doing wrong! For the start i wanted to configurate a router for my ...
0
votes
1answer
131 views

Preventing port scanning

I want to prevent my server from being port scanning from Internet and if port scanning occurs, block source IP address for several minutes. Below my current iptables config: Lilith> iptables ...
1
vote
0answers
213 views

Dnsmasq and Iptables for routing

I'm using a Raspberry Pi with two ethernet ports as a router. The network looks like this. "Internet" <--(…)--> Fritz!Box <--(172.16.x.y)--> [eth1, dhcp] Raspberry Pi [eth0, static] ...
0
votes
0answers
122 views

unable to start (Ubuntu server 14.04) iptables service it show “Unrecognized service”

Ubuntu server 14.04 iptables service start shows: Unrecognized service
0
votes
0answers
41 views

Web service only responding to local request

I have a webservice that listen on port 5678 on a remote ubuntu machine. netstats: tcp 0 0 0.0.0.0:5678 0.0.0.0:* LISTEN 10605/node I don't have any ...
1
vote
0answers
129 views

Using iptables to redirect all traffic to my localhost

So I've just installed DD-WRT on my router and I wanted to redirect all http requests to my local host located at 192.168.1.50 (port 80) but I'm unable to find any way of doing this. I've tried doing ...
0
votes
1answer
122 views

'iptables -S' to be accessed by www-data

I've had a look around on Ask Ubuntu and can't find an answer to what I'm looking for. Basically, I have an admin panel for a website I run and recently just installed fail2ban, which has made my ...
2
votes
0answers
96 views

Host to Guest one way connection issue

I have guest run on my machine on qemu with configuration: /usr/local/kvm/bin/qemu-system-x86_64 -enable-kvm -cpu host -smp 8 -hda ${TEST_VIRT_ENV_IMAGE} -m 4096 -netdev user,id=user.0 -device ...
1
vote
0answers
37 views

UFW open range is still blocked

I have opened up a range of ports using UFW. The rules in question are shown below (output of sudo ufw status numbered). I have restarted UFW since I added the rule, yet in lnav I still see log ...
0
votes
1answer
173 views

How to route transmission traffic

Trying to get Transmission to only use my wifi interface (wlan0), while everything else uses ethernet (eth0). I was able to bind Transmission to the wlan0 IP but can't get it to work unless I ...
1
vote
0answers
171 views

how to open a port under Ipv4 instead of Ipv6

How I can open a port under Ipv4 instead of Ipv6 on ubuntu tcp 0 0 127.0.0.1:3306 0.0.0.0:* LISTEN - tcp 0 0 127.0.1.1:53 ...
0
votes
0answers
144 views

ufw on ubuntu doesn't work, how to deactivate plesk firewall?

Since I'm a totally newbie to server stuff but I needed to set up a vServer, I let install Ubuntu 14.04 AND Parallels Plesk on it. Now, I think it would have been better to install Ubuntu without ...
1
vote
2answers
187 views

Ubuntu 14.04 : Cannot access internet via terminal

I am able to connect to both wired and wireless networks and able to browse via a browser. So I don't think there's any network issue. However I cannot run any internet based command from my terminal ...
0
votes
0answers
175 views

iptables: write UDPv4: Operation not permitted (code=1)

I am trying to set up a stateful firewall using iptables. It is for use on my desktop machine. Below are the contents of my firewall script: #!/bin/bash iptables-save > ...
0
votes
1answer
220 views

Configure UFW to allow only established and related conections (on IPv4)

I want to configure ufw to deny everything except the related and established connections. On iptables I usually did : -P INPUT DROP -P FORWARD DROP -P OUTPUT ACCEPT -A INPUT -m state ...