Iptables is used to set up, maintain, and inspect the tables of IP packet filter rules in the Linux kernel.

learn more… | top users | synonyms

0
votes
0answers
29 views

OpenVPN Ubuntu Server Routing Problems No Internet

I'm running OpenVPN on Ubuntu 15.04. When I connect to the server, I can connect and authenticate correctly (I use PAM auth because I'm lazy). Once connected I can't ping the server or access the ...
0
votes
2answers
43 views

Understand the differences between two network configurations for MAAS

I am trying to understand the differences between two network configurations for MAAS. My understanding is that the both achieve the same tasks where the first network connects to the internet and the ...
0
votes
1answer
60 views

Block port on one network address

I'd like to block a series of ports (mailserver) for all the network addresses on my server except one. I've got a server running Ubuntu 14.04.4 and configured with 2 ipv4 addresses per Linode's ...
0
votes
0answers
9 views

Port Access through VPN

I'm trying to access a PC from behind a VPN (PIA) using the Network Mgr on Ubuntu 14.04.4 but having some issues. Without the VPN up, I can access WANIP:8022 which port forwards to 192.168.1.10:22, ...
0
votes
1answer
39 views

iptables is blocking only some connections to port 80

I'm running a Ubuntu 15.10 server with an nginx webserver on it. I've used the following iptables configuration to allow port 80 and port 443 connections: *filter # Allow all loopback (lo0) traffic ...
1
vote
3answers
61 views

Adding VPN to firewall UFW

I'm having trouble at work in connecting to the work VPN while Firewall (UFW) is active. When i disable it "sudo ufw disable", there are no problems. When it's on, when trying to connect I receive ...
0
votes
0answers
56 views

open wifi Captive portal w/only local net (no internet/wan)?

I am trying to set up a wireless 'test' box to use on a private club (11,000 acres). The initial tests won't need anything fancy, it will just be checking the visibility of a hotspot from a high-point ...
0
votes
1answer
42 views

iptables-persistent / netfilter-persistent has (dependancy?) problem on 15.1

I'm trying to install 15.1 x64 on a new VPS. The first thing I do is ssh in and define a few iptables rules to drop non-ssh traffic, and now want to make those rules persistent. So: root@server:~# ...
0
votes
0answers
31 views

Easiest way to forward a port on local network

I have a server (python -m http.server) running on hostA:8000. Say I want to forward traffic from hostB:8004 to hostA:8000 How can I achieve that from hostB? I've already tried, $ sudo ufw allow ...
3
votes
1answer
72 views

Using UFW with ipsets

I am running Ubuntu 14.04 on a VPS for business purposes. The firewall is setup using ufw; testing reveals that it's working well. I'd like to further secure my server using techniques described ...
0
votes
0answers
31 views

Allow winscp/filezilla through iptables and fail2ban

I just launched a website within my school community and woke up this morning to logs of someone trying to bruteforce into my server. I followed some guides on digitalocean to set up fail2ban and ...
0
votes
0answers
29 views

Ubuntu is not accessible from LAN when ppp0 is up

I have successfully connected my Ubuntu server to a VPN server. Unfortunately, it is no longer accessible from inside of my LAN unless I kill the VPN connection. I use PPTP. What if I want a specific ...
0
votes
1answer
85 views

External access to Ubuntu single-node openstack horizon dashboard

I successfully installed openstack on spare server using the ubuntu single-node installer script. The openstack status page on the underlying ubuntu instance is green across the board. From the host ...
0
votes
1answer
59 views

Inherited Ubuntu server will not PING: What am I missing?

Update: It turns out, our in-house network suppresses pings. I demonstrated this by turning my phone into a hot-spot (thus changing my outbound gateway), connecting with a laptop, then pinging the ...
0
votes
0answers
85 views

Setting up NAT forwarding using iptables on ubuntu server 14.04

I have a server with 2 ethernet interfaces(em1 and em2). em1 is the internet facing interface(192.168.16.113) and em2 has a static address(10.1.1.100) connected to a switch. I have configured the ...
0
votes
0answers
13 views

How to route external traffic via mobile-phone usb modem and use ethernet for internal traffic?

Suppose my internal traffic all goes through some ip like 10.0.0.1 for example. I want to tether internet connection from my mobile phone to my desktop while still have the access to internal network.
0
votes
0answers
37 views

VPN doesnt ping the local network

I am using OpenVPN for connecting to office network. I have a VPN client configured on the laptop in my home Internet connection. The objective is to get connected to a VOICE SERVER sitting in the ...
0
votes
0answers
55 views

15.10 “falls off network” but all services are still up

A problem has been plaguing my Ubuntu 15.10 4.2.0-34-generic i686 VPS for a couple of weeks now. There will be a small (2-3Mb/s) spike in outgoing network traffic, and then the VPS will cease to ...
0
votes
1answer
55 views

IPTABLES Block FXP download from a IP

I am trying to block an FXP upload from a specific IP eg. 188.145.11.10. The problem is that I want to allow a download to 188.145.11.10 but I want to BLOCK the upload from that IP. For example: ...
0
votes
0answers
31 views

How to perform NAT with inside interface as bridge

I have a following network diagram: network diagram 192.168.0.0/24 network with 4 web servers (.1,.2,.3,.4). There are 2 Ubuntu 14.04 (VM1 and VM2) in it. They have 2 physical interfaces both (eth0 ...
0
votes
1answer
110 views

iptables and hacker prevention

Hello fellow Ubuntuers! here is an example of my iptables.rules file: *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :f2b-sshd - [0:0] :f2b-sshd-ddos - [0:0] -A INPUT -p tcp -...
1
vote
1answer
67 views

fail2ban won't work

A few days ago I setup a new whole Server (Mailserver with Zarafa / Postfix, Apache, MySQL, and so on). Everything works fine.. except fail2ban. Fail2ban do nothing. He don't even act if something is ...
1
vote
1answer
355 views

Can't initialize iptables table `filter': Table does not exist (do you need to insmod?)

I'm trying to open up port 1900 for UDP in order for the Echo to be able to discover the HA Bridge using the following command but I get errors. What is the best solution to fix this? pi@raspberrypi:~...
0
votes
0answers
34 views

Server iptables configuration

I have an application installed in the /usr/local/tomcat/fakebook directory. I want to allow any user to use the app and also all external user to use the app. I just want to allow connections to the ...
0
votes
0answers
20 views

Merging IPTABLES

In advance, thanks for all help! Hi. Got two ubuntu servers running fail2ban. I am currently trying to write a bash shell code to sync the iptables and / banned ips. So I got this rules from ...
0
votes
0answers
80 views

iptables port redirect in nat table but traffic still showing up in the filter table?

I asked a more specific question over on stack overflow a few days ago, but thought I would try and generalise it a bit here... In the nat table, does doing a port redirect in the prerouting chain ...
0
votes
1answer
29 views

DNAT redirecting to specifc port is not working

I want to redirect ssh by port using DNAT, and i do try to ssh it through the command > username@IP_ADDRESS:10003 and i got this message "ssh: Could not resolve hostname IP_ADDRESS:10003: Name or ...
0
votes
0answers
50 views

Still seeing connections from IP after blocking in fw

So I'm using iftop to monitor connections on my server, and I'm seeing this ip address 116.110.127.24 making constant connections on ssh port. (I'm not sure if this means 22 or my actual ssh port, it ...
2
votes
1answer
50 views

how can i kill all established connections before running iptables bash scrip

there is established connection from before running iptables bash script, and even this connection is blocked by iptables, but it keeps running because it is in established status, which according to ...
0
votes
1answer
36 views

meaning of -m in iptables

I use the following commands to turn my laptop into a router, that routes traffic from eth0 to wlan0 and vice versa. $ echo 1 > /proc/sys/net/ipv4/ip_forward $ sudo iptables -t nat -A ...
2
votes
1answer
227 views

Docker Transparent Squid Proxy

I am trying to run a squid3 transparent proxy in a docker image, on my laptop. Then on the same laptop I want to use the transparent proxy. The reason for the proxy is to abstract a corporate proxy ...
2
votes
1answer
97 views

Ubuntu as router; redirect traffic from 1 client (LAN) to VPN

I have a Ubuntu 14.04.03 router (iptables). Behind it there is a LAN with laptops, tablets, smart TVs, etc. I would like to use VPN on my TV, but there is no such option in the TVs software/firmware. ...
0
votes
1answer
28 views

the packet flow from a network interface to a local process? help!

I'm read Linux Iptables Pocket Reference. So I do not understand the figures presented. It says that packets travel through chains, and are presented to the rules one at a time and in order. Then ...
1
vote
0answers
16 views

Forwarding traffic with IPtables through a series of IDS

My goal is to run several Intrusion Detection Systems (IDS), these IDS sensors should be positioned in sequence, so the traffic will travel through the first IDS and will generate alerts of malicious ...
1
vote
1answer
65 views

Multiple connections per ip

I am running Ubuntu with a webserver (Nginx). I noticed that one IP has multiple connections opened. My server works all fine and there is no issue. I am just curious to know why there are many ...
0
votes
0answers
154 views

IPTables forward port to another ip:port but keeping original source ip

I have following iptables rules on gateway machine(192.168.0.1). I want to forward port 192.168.0.1:80 to 192.168.0.2:8080. But I need to maintain original source ip so that original server can get ...
0
votes
0answers
45 views

TCP IPTables Expert ubuntu 14.04

I started hosting my game-server on Ubuntu Linux 14.04 I am having an issues ، some enemies/bug abusers log in 2+ characters in the same second then they spam a certain spell/word that lags/stops my ...
0
votes
1answer
124 views

IPtables ubuntu 14.04 LTS

I am new to Linux, I used to use windows for years and this is my first time to use Linux "Ubuntu 14.04 LTS" I am hosting a game-server I was wondering if it is possible to make IPtables to kick if ...
0
votes
1answer
48 views

Connect two subnets so that they can see each other

I've got 3 machines (virtual) : A client, a server, and a destination. (All running ubuntu 14.04). The client and server are interconnected via a subnet, and have the ips 10.10.100.4 and 10.10.100.2 ...
0
votes
0answers
64 views

libiptc error on unbunt14.04

Am trying to work with iptables, using libiptc to manipulate the entries. Header looks something like this. I have iptables-dev installed on my machine. Am getting following error, but the same ...
0
votes
0answers
49 views

Forwarding UDP data between two local interfaces

I have server which has 4 eth ports: - eth0: 192.168.226.55 (Internet connection, default one default route) - eth1: 10.8.8.1 (local network) - eth2: 192.168.225.129 (Internet connection) - eth3: 10.9....
0
votes
0answers
47 views

Internet Sharing/nat on 14.04lts vmware esx guest with usb internet

Situation: vmware esxi 5.1 Hosting a couple of Windows guests and a Ubuntu 12 file server that also is the local DHCP server and DNS server. Two NICs in the ESXI host to a small Wifi router which I ...
0
votes
1answer
772 views

Unable to connect to mongo on remote server

I have installed mongo on machine1(Ubuntu 14.04.3 LTS server) in my local network. I have also opened the port 27017 as mentioned in this guide using following commands: sudo iptables -A INPUT -p tcp ...
2
votes
1answer
199 views

Redirect port 3389 with iptables, to an IP network [closed]

I have on my network a linux server and it iptables firewall. On the same network, you have a Windows Server 2008 server. When I'm out of my network, I access the Server 2008 for RDP and this service ...
0
votes
0answers
42 views

ICMP Echo Request

This is my topology: My cloud is configured with eth0 adapter, connected to R1 port fa0/0. The R1 receives the address through DHCP Server, with it I can ping any public address.. R1#ping www....
0
votes
1answer
32 views

List active rules in Iptables

I would like to help me check the active rules in the iptables firewall. My S.O is Ubuntu Server 14.04.3 LTS Trusty.
0
votes
0answers
72 views

Does changing the hostname of 127.0.1.1 in /etc/hosts

I usually have this problem: lluis@biolinux[exercises] sudo gedit /etc/hosts sudo: unable to resolve host biolinux [sudo] password for lluis: Sudo is unable to resolve host(Because I changed my ...
0
votes
1answer
52 views

Would active connections cause this UFW Block?

I'm running ubuntu 14.04 as a gateway, routing is controlled by iptables. I'm getting a number of strange blocks in UFW which seem to effect established connections. Is there any way this block would ...
2
votes
1answer
183 views

Port forwarding between bridged interfaces

So I have a bunch of bridge interfaces bound with my main ethernet device (em1, blame HP). These serve various LXC containers I have running on my server and easily allows me to access them from other ...
0
votes
1answer
52 views

Iptables and Deny issue

I've configured iptables with FWBuilder, and for some reason there is a rule that is constantly dropped, and I don't know why, because all the address IP from and to 10.208.x.x (first server) and 10....