Iptables is used to set up, maintain, and inspect the tables of IP packet filter rules in the Linux kernel.

learn more… | top users | synonyms

1
vote
1answer
48 views

How to configure simple routing between NICs

I have the following setup: Physical router Internet interface 192.168.1.1 Port forwarding of IP 1194/udp to virtual machine below Virtual machine (VM) Ubuntu 14.04.3 Server AMD64 One virtual ...
0
votes
1answer
43 views

IP tables as a basic proxy not functioning as expected

I'm trying to accomplish simple packet forwarding on an Ubuntu 14.04 server (IP=192.168.36.217) using iptables. I want to take incoming packets destined to the server on a particular port and rewrite ...
1
vote
1answer
113 views

How to block facebook

I want to try blocking facebook on my machine. I started using /etc/hosts but that doesn't catch all subdomains, so I did some research and found this (and many similar solutions) which lead to this ...
1
vote
1answer
66 views

Iptables rules slow down loggining in via SSH

I am trying to build some basic iptables rules for my VDS: iptables -A INPUT -p tcp --dport ssh -j ACCEPT iptables -A INPUT -p tcp --dport 80 -j ACCEPT iptables -A INPUT -p tcp --dport 443 -j ACCEPT ...
0
votes
1answer
48 views

VNC Server Missing and UFW disabled and iptables empty after update?

I have an Ubuntu 12.04 computer in the other room that I remote into using Remmina Remote Desktop Client and VNC on another Ubuntu 12.04 desktop. It worked about 1 month ago. Now Remmina hangs at "...
0
votes
1answer
112 views

IPTables: Block incoming traffic connection to your IP address of your virtual machine

Host OS: Ubuntu 14.04 Guest OS: Ubuntu 14.04 (Virtual Box) I want to block incoming traffic connection from Virtual machine with IPTables. I have searched, One solution I found is static IP for ...
0
votes
0answers
71 views

iptables for setting up a transparent proxy

I have set up ubuntu server 14.04 on VirtualBox with two network interfaces. auto eth0 iface eth0 inet static address 192.168.1.5 netmask 255.255.255.0 gateway 192.168.1.1 dns-...
0
votes
0answers
30 views

Bluetooth connect changes iptables behaviour

I have a very strange situation where a bluetooth connection seems to change the behavior of the iptables firewall. Let met start from the beginning: I have a Onkyo stereo amplifier with a bluetooth ...
0
votes
1answer
25 views

Install Iptables server

I'm new in Linux and I don't know what it refers with Support but I can type some commands like ls, cd, sudo apt-get it always shows up command not found. So, please someone can help me?terminal
0
votes
0answers
47 views

Knockd not recognizing knocked ports Ubuntu Server

I've got a server with knockd running. When ports 7000, 8000, and 9000 are hit, knockd is supposed to insert a rule into my iptables firewall and allow the connection to reach a port (22). For some ...
1
vote
1answer
29 views

Can't connect to my ubuntu box outside my local network (VPN)

I have an Ubuntu 14.04 server running some services on different ports. I used to be able to connect to it (via SSH, samba, and a couple web servers on different ports) using a VPN. I'll use ssh as ...
1
vote
2answers
77 views

Confiruration DNAT in iptables

I have 2 PC be created by VMWARE 1. PC1 (make iptables router): ens33 's IP: 192.168.1.5/24 (network connection is bridged) ens37 's IP: 192.168.2.2/24. (network connection is wmnet9) 2. PC2 (...
0
votes
1answer
331 views

IPtables Config to Passthrough Internet 16.04

I am struggling to finish the config on my Ubuntu 16.04 fileserver to pass on the internet connection to my HTPC. See the network layout below: [Internet] <--> [DHCP Router] <--> (eno1).[...
1
vote
0answers
323 views

Ubuntu 16.04 Tor Transparent Proxy

I want to setup an Ubuntu Server 16.04 to act as a transparent proxy for all traffic from a specific subnet to Tor. To be specific, I want all traffic on a subnet 10.20.0.0/16 when using the Ubuntu ...
1
vote
0answers
19 views

Zenmap Showing Filtered for iptables REJECT Rule

I've been recently messing around on my VMWare Ubuntu 15.10, and decided to test out my iptables and see if my Zenmap on my Windows host machine would recognize the ports being blocked. However, when ...
2
votes
1answer
59 views

How do I permanently removing a ban stored by Fail2Ban

I have two filters that have banned local addresses. I have added the addresses to ignoreip but the damage was done already and the bans are in place. Every time I reboot my computer I have to do an ...
1
vote
1answer
268 views

UFW not working in 16.04 server. Refers to earlier kernel module?

I am trying to move our mail server based on 12.04 to a brand new installation of 16.04 server. When I run sudo ufw status, I get: ERROR: problem running iptables: modprobe: ERROR: ../libkmod/...
0
votes
0answers
20 views

Deny guest user access to the Internet except to one address

I guess that an AppArmor profile has to be edited to archive that, but I'm lost on how to do it. If it is possible through an ufw or iptables rule I would be happy as well. Don't forget that it's ...
0
votes
0answers
92 views

Issues With Iptables

I have problems while performing iptables operations. modprobe: ERROR: ../libkmod/libkmod.c:556 kmod_search_moddep() could not open moddep file '/lib/modules/3.13.0-85-generic/modules.dep.bin' ...
0
votes
1answer
37 views

What is the UH flag in routing table

I'm using an Ubuntu machine as a server and it has two network interfaces. One is the 10.10.10.0/ 24 range and the other is 192.168.0.0 /24 range. I was trying to bridge these network interfaces as ...
0
votes
0answers
39 views

OpenVPN Ubuntu Server Routing Problems No Internet

I'm running OpenVPN on Ubuntu 15.04. When I connect to the server, I can connect and authenticate correctly (I use PAM auth because I'm lazy). Once connected I can't ping the server or access the ...
0
votes
2answers
50 views

Understand the differences between two network configurations for MAAS

I am trying to understand the differences between two network configurations for MAAS. My understanding is that the both achieve the same tasks where the first network connects to the internet and the ...
0
votes
1answer
94 views

Block port on one network address

I'd like to block a series of ports (mailserver) for all the network addresses on my server except one. I've got a server running Ubuntu 14.04.4 and configured with 2 ipv4 addresses per Linode's ...
0
votes
0answers
10 views

Port Access through VPN

I'm trying to access a PC from behind a VPN (PIA) using the Network Mgr on Ubuntu 14.04.4 but having some issues. Without the VPN up, I can access WANIP:8022 which port forwards to 192.168.1.10:22, ...
0
votes
1answer
47 views

iptables is blocking only some connections to port 80

I'm running a Ubuntu 15.10 server with an nginx webserver on it. I've used the following iptables configuration to allow port 80 and port 443 connections: *filter # Allow all loopback (lo0) traffic ...
1
vote
3answers
75 views

Adding VPN to firewall UFW

I'm having trouble at work in connecting to the work VPN while Firewall (UFW) is active. When i disable it "sudo ufw disable", there are no problems. When it's on, when trying to connect I receive ...
0
votes
1answer
83 views

open wifi Captive portal w/only local net (no internet/wan)?

I am trying to set up a wireless 'test' box to use on a private club (11,000 acres). The initial tests won't need anything fancy, it will just be checking the visibility of a hotspot from a high-point ...
0
votes
1answer
59 views

iptables-persistent / netfilter-persistent has (dependancy?) problem on 15.1

I'm trying to install 15.1 x64 on a new VPS. The first thing I do is ssh in and define a few iptables rules to drop non-ssh traffic, and now want to make those rules persistent. So: root@server:~# ...
0
votes
0answers
34 views

Easiest way to forward a port on local network

I have a server (python -m http.server) running on hostA:8000. Say I want to forward traffic from hostB:8004 to hostA:8000 How can I achieve that from hostB? I've already tried, $ sudo ufw allow ...
3
votes
1answer
104 views

Using UFW with ipsets

I am running Ubuntu 14.04 on a VPS for business purposes. The firewall is setup using ufw; testing reveals that it's working well. I'd like to further secure my server using techniques described ...
0
votes
0answers
44 views

Allow winscp/filezilla through iptables and fail2ban

I just launched a website within my school community and woke up this morning to logs of someone trying to bruteforce into my server. I followed some guides on digitalocean to set up fail2ban and ...
0
votes
0answers
35 views

Ubuntu is not accessible from LAN when ppp0 is up

I have successfully connected my Ubuntu server to a VPN server. Unfortunately, it is no longer accessible from inside of my LAN unless I kill the VPN connection. I use PPTP. What if I want a specific ...
0
votes
1answer
115 views

External access to Ubuntu single-node openstack horizon dashboard

I successfully installed openstack on spare server using the ubuntu single-node installer script. The openstack status page on the underlying ubuntu instance is green across the board. From the host ...
0
votes
1answer
61 views

Inherited Ubuntu server will not PING: What am I missing?

Update: It turns out, our in-house network suppresses pings. I demonstrated this by turning my phone into a hot-spot (thus changing my outbound gateway), connecting with a laptop, then pinging the ...
0
votes
0answers
129 views

Setting up NAT forwarding using iptables on ubuntu server 14.04

I have a server with 2 ethernet interfaces(em1 and em2). em1 is the internet facing interface(192.168.16.113) and em2 has a static address(10.1.1.100) connected to a switch. I have configured the ...
0
votes
0answers
13 views

How to route external traffic via mobile-phone usb modem and use ethernet for internal traffic?

Suppose my internal traffic all goes through some ip like 10.0.0.1 for example. I want to tether internet connection from my mobile phone to my desktop while still have the access to internal network.
0
votes
0answers
40 views

VPN doesnt ping the local network

I am using OpenVPN for connecting to office network. I have a VPN client configured on the laptop in my home Internet connection. The objective is to get connected to a VOICE SERVER sitting in the ...
0
votes
0answers
66 views

15.10 “falls off network” but all services are still up

A problem has been plaguing my Ubuntu 15.10 4.2.0-34-generic i686 VPS for a couple of weeks now. There will be a small (2-3Mb/s) spike in outgoing network traffic, and then the VPS will cease to ...
0
votes
1answer
59 views

IPTABLES Block FXP download from a IP

I am trying to block an FXP upload from a specific IP eg. 188.145.11.10. The problem is that I want to allow a download to 188.145.11.10 but I want to BLOCK the upload from that IP. For example: ...
0
votes
0answers
39 views

How to perform NAT with inside interface as bridge

I have a following network diagram: network diagram 192.168.0.0/24 network with 4 web servers (.1,.2,.3,.4). There are 2 Ubuntu 14.04 (VM1 and VM2) in it. They have 2 physical interfaces both (eth0 ...
0
votes
1answer
138 views

iptables and hacker prevention

Hello fellow Ubuntuers! here is an example of my iptables.rules file: *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :f2b-sshd - [0:0] :f2b-sshd-ddos - [0:0] -A INPUT -p tcp -...
1
vote
1answer
74 views

fail2ban won't work

A few days ago I setup a new whole Server (Mailserver with Zarafa / Postfix, Apache, MySQL, and so on). Everything works fine.. except fail2ban. Fail2ban do nothing. He don't even act if something is ...
1
vote
1answer
440 views

Can't initialize iptables table `filter': Table does not exist (do you need to insmod?)

I'm trying to open up port 1900 for UDP in order for the Echo to be able to discover the HA Bridge using the following command but I get errors. What is the best solution to fix this? pi@raspberrypi:~...
0
votes
0answers
34 views

Server iptables configuration

I have an application installed in the /usr/local/tomcat/fakebook directory. I want to allow any user to use the app and also all external user to use the app. I just want to allow connections to the ...
0
votes
0answers
21 views

Merging IPTABLES

In advance, thanks for all help! Hi. Got two ubuntu servers running fail2ban. I am currently trying to write a bash shell code to sync the iptables and / banned ips. So I got this rules from ...
0
votes
0answers
81 views

iptables port redirect in nat table but traffic still showing up in the filter table?

I asked a more specific question over on stack overflow a few days ago, but thought I would try and generalise it a bit here... In the nat table, does doing a port redirect in the prerouting chain ...
0
votes
1answer
40 views

DNAT redirecting to specifc port is not working

I want to redirect ssh by port using DNAT, and i do try to ssh it through the command > username@IP_ADDRESS:10003, and I got this message: ssh: Could not resolve hostname IP_ADDRESS:10003: Name or ...
0
votes
0answers
51 views

Still seeing connections from IP after blocking in fw

So I'm using iftop to monitor connections on my server, and I'm seeing this ip address 116.110.127.24 making constant connections on ssh port. (I'm not sure if this means 22 or my actual ssh port, it ...
2
votes
1answer
63 views

how can i kill all established connections before running iptables bash scrip

there is established connection from before running iptables bash script, and even this connection is blocked by iptables, but it keeps running because it is in established status, which according to ...
0
votes
1answer
37 views

meaning of -m in iptables

I use the following commands to turn my laptop into a router, that routes traffic from eth0 to wlan0 and vice versa. $ echo 1 > /proc/sys/net/ipv4/ip_forward $ sudo iptables -t nat -A ...