0
votes
1answer
26 views

network bridge not forwarding traffic from span port on router

I want to run several security network tools in LXC containers like ntopng, suricata, snort, etc. I hooked one of my server's NIC's up to a port that is spanned to my firewall... so basically this ...
0
votes
0answers
15 views

iptables debugging on ubuntu 12.04

ufw was blocking the incoming ssh connection. So removed and purged the ufw still the incoming ssh connection is blocked. But there is not logs in dmesg output. I am sure sshd is running, tested ...
1
vote
2answers
41 views

The program 'iptables' is currently not installed

I am a newbie, so my apologies up front. I am trying to get DansGuardian installed (which I believe I have) and working. To get it working I need to filter IP traffic through the app via iptables. ...
1
vote
0answers
96 views

Why aren't these ufw rules working?

I'm trying to configure ufw to only allow connections to 3 ip addresses on my local network, and deny everything else. Here's the commands I'm using: yes | sudo ufw reset sudo ufw default deny sudo ...
0
votes
1answer
44 views

Iptables Issue can't SSH Remote Machines

I want to SSH to 192.168.1.15 Server from my machine, my ip was 192.168.1.99 Source Destination was UP, with IP 192.168.1.15. This is LAN Network there are 30 Machine's Connected to the network and ...
0
votes
0answers
104 views

iptables rules keep showing up

I just installed an ubuntu precise server, after a few weird communications issues I checked the iptables list and found: Chain INPUT (policy DROP) target prot opt source ...
0
votes
0answers
126 views

How to reset/flush remove ufw rules in recovery mode in ubuntu 12.04

Hello I think I have mistakenly locked myself from a remote server (ssh). I had a way to restart in recovery mode but it seems ufw is not even installed when in recovery mode. should I follow ...
0
votes
0answers
55 views

Ubuntu 13.10 allows connections from LAN but not from outside LAN

SSH ports configured to all 22 and another one. I can connect from another Linux/Windows workstations on my home LAN no problem. Same thing for nomachines nx server. Teamviewer connects with no ...
1
vote
1answer
79 views

How to block ip forwarding for specific remote ip address

I use ubuntu as gateway for several hosts. I need advise how to block ip forwarding for specific ip address or specific ip range? I tried to block ip via ufw deny rules, but it looks like ip ...
0
votes
1answer
406 views

what does this mean “80/tcp filtered http”

Our linux server(ubuntu) stop listing on port 80. this is what i got : PORT STATE SERVICE 22/tcp open ssh 80/tcp filtered http what does this "80/tcp filtered http" means? What ...
0
votes
1answer
168 views

UFW locks me out of server everytime I run it

Background: I'm setting up a new 12.04 instance on a VPS with a new provider.The VPS provider only offers a 32bit image but that really shouldn't matter here. I have no local access to the machine and ...
2
votes
2answers
562 views

UFW not blocking connections to docker instance

I have a webservice running inside a docker instance which was run using the following command: sudo docker run -d -p 4040:4040 .... My UFW rules look like this: ~ sudo ufw status Status: active ...
2
votes
2answers
988 views

how do you create an app profile for ufw?

Ufw has a command that lists out profiles to which you can further explore their profile definitions $ ufw app list And $ ufw app PROFILE {app profile title} I was wondering how you can ...
1
vote
2answers
440 views

How do I whitelist some connections by ip from being dropped by connlimit?

I'm using these rules in /etc/ufw/before.rules # Limit to 20 concurrent connections on port 80 per IP -A ufw-before-input -p tcp --syn --dport 80 -m connlimit --connlimit-above 20 -j DROP -A ...
0
votes
0answers
118 views

Why is UFW ignoring rule order?

I have two interfaces, one is eth0 and the other is a VPN over tun0. user@server:~$ ifconfig eth0 inet addr:192.168.1.80 Bcast:192.168.1.255 Mask:255.255.255.0 tun0 inet addr:10.4.0.100 ...
0
votes
0answers
90 views

VPN won't connect while ufw is enabled

I use a paid VPN service which uses OpenVPN. It works great and I have been pleased with it for months now. Recently, I enabled, and began configuring, the firewall that is provided with Ubuntu ...
2
votes
2answers
275 views

UFW and firewall

So I recently installed ubuntu and I have been working with it no problem.While browsing through the security guides (specifically: https://wiki.ubuntu.com/BasicSecurity) I noticed this: "enable the ...
0
votes
0answers
54 views

UFW problem : can not access certain pages

Hello, I configured iptables using ufw to deny traffic from and to anywhere except my chosen ports. This is my /lib/ufw/user.rules : *filter :ufw-user-input - [0:0] :ufw-user-output - [0:0] ...
0
votes
0answers
241 views

Foraward Traffic from local machine to proxy server using iptables

I am using Ubuntu Server 12.04. My IP is 192.168.4.160. I want to route the HTTP traffic generated locally from my system destined to a particular URL (say x.x.x.x) to pass through proxy server. My ...
0
votes
1answer
59 views

why opening a port is so difficult in ubuntu?

I have searched around and I have run these commands iptables -A INPUT -p tcp -d 0/0 -s 0/0 --dport 5432 -j ACCEPT iptables-save > /etc/iptables.rules And I rebooted the box. I had no luck. ...
0
votes
1answer
966 views

Connecting to NAT virtualbox guest from bridged network

I've setup a Virtualbox Ubuntu 12.04 server using Vagrant. I can ssh to it and even ping my desktop from it. What doesn't work is to ping the guest OS from my desktop. I've tried to flush the ...
1
vote
0answers
381 views

UFW Firewall Rules, has a hole in it. Please help

Can someone please look at the below output for me. I have my UFW on deny/deny, and here are the rules. But if I leave my Ubuntu Server on, with a Windows XP VM, and let Instant Messenger run in the ...
0
votes
1answer
3k views

UFW 'default deny incoming' doesn't work

I have UFW enabled, 'default deny incoming' set and no any additional rules, but I still can access all ports from other PCs. I have to manually block each port. What can be wrong?
0
votes
2answers
1k views

Problems allowing outgoing multicast in ufw

I am having problems configuring the uncomplicated firewall (ufw) to allow outgoing multicast traffic. I am blocking all in and outgoing connections as the default policy. I have supplemented with the ...
0
votes
1answer
594 views

Can't open a port

I need to run an app on my computer which connects to local port 49100. So everything runs on one computer. I tried adding rules to gufw, firestarter, manually: sudo iptables -A INPUT -p tcp --dport ...
2
votes
1answer
202 views

Using Ubuntu as a gateway for monitoring and possibly IPS IDS within Active Directory

Ok, I've searched for days, maybe you can point me in the right direction. I have an MPLS scenario with a shared gateway in a multi-domain M$FT AD environment. On the inside of the MPLS all of the ...
3
votes
2answers
8k views

How to configure UFW to allow IP Forwarding?

I have UFW, OpenVPN and Virtualbox installed on my home server. I have a host-only network for my virtual machine guests (vboxnet0) set up with the IP range 10.0.1.0, and another IP range of 10.0.0.0 ...
6
votes
1answer
2k views

Block Ping from a specific IP

I am on a private LAN 192.168.1.0/24. My ip is 192.168.1.3, I want to block only ping requests from 192.168.1.2. I am running ubuntu 11.10. I found two links First tells how to block an IP but not ...
3
votes
2answers
13k views

How do I allow all possible IPs for Gmail servers through my ufw firewall?

I am currently using the following rule: ufw allow out from my_local_ip to any port 587 This is a little too lax for my liking. I would like to tighten it up and restrict it to only gmail's smtp ...
2
votes
1answer
539 views

Looking for IPTABLES and UFW readily available, the best proven rules

ok i am up with UBUNTU finally, and liked the distro! particularly ufw, synaptic and software manager. as i am pretty blind newbie to linux, i need some help securing Ubuntu desktop. I've gone ...
2
votes
3answers
2k views

Why is Ubuntu permissive with outgoing connections by default?

I am pretty newbie to Linux, as most of computers for resources in my school use Linux, I just installed Ubuntu to learn. By default iptables and ufw sets policy as under: IPTABLES -P INPUT DROP ...
9
votes
2answers
3k views

potential ufw and fail2ban conflicts

Will running both fail2ban and ufw cause problems? I noticed that fail2ban modifies iptables rules, but ufw already has a ton of iptables rules defined... so I'm not sure if fail2ban will mess these ...