New answers tagged

0

You could try a tighter iptables rule set. The following assumes a default policy of ACCEPT on all the chains: # iptables -F # iptables -t nat -F # iptables -X # iptables -Z # iptables -t nat -Z # iptables -t nat -A PREROUTING -i eth1 -d 10.10.1.27 -j DNAT --to 192.168.10.52 # iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to 192.168.10.17


0

To put everything in layman's terms 1. Yes, it's pretty easy too. With the default installer you should be prompted with an option to Encrypt the installation of Ubuntu. 2. If you proceed to Encrypt the hard drive through the installer.. the hard drive will be formated for you. 3. Don't use it but I heard many positive things about it http://gufw.org/ ...


0

apt-add-repository will always try to get the key - it doesn't check whether it already exists in the keyring. Make a feature request if you need.


0

The issue was bindIp didn't change. There was some issue in restarting mongo from my side. The habit should be to verify if the bindIp actually changed or not. (using sudo netstat -tulpn | grep 27017) Thanks steeldriver for pointing it out.


1

To answer your question, yes. What that log message is telling me is that packets from source 31.13.93.7:443 (or https://facebook.com) are being blocked, likely in your FORWARD chain if the connection is originating from your LAN and not your Ubuntu gateway. If the connection is originating from your Ubuntu gateway, the block will likely be in your INPUT ...


2

There is a bug pertaining this message Bug Report! Quote: You have 2 apaches profiles in your /etc/ufw/applications.d : apache2.2-common and apache2-utils.ufw.profile. Remove one of them Try it and let me know.


0

-A POSTROUTING -s 10.8.0.0/8 -o venet0 -j MASQUERADE and iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o venet0 -j SNAT --to-source X.Y.Z where X.Y.Z is the actual IP address assigned to your VPS. (If that doesn't work, try venet0:0 )


1

Your web browser initiate outgoing connection. Ufw by default is blocking incoming connection. If you want block all web browser traffic you could add this rule: sudo ufw deny out http sudo ufw deny out https Or you can change default policy to deny outgoing : sudo ufw default deny outgoing Now all your outgoing traffic will be blocked, until you ...


0

If my computer is any server then I have to open some specific port(ex. web:80 ssh:22 telnet:23 ftp:21) to listening and anyone who get my link their computer will send me a request to connect and this is incoming meaning. At the same time, if I am surfing web page my computer will send a request to connect server what ever it is and server will reply me ...


0

Both ufw, gufw, and a number of alternate "frontends" all create configuration for iptables. They aren't firewalls, they are config editors for the firewall. They work only "work" when you open them and edit the options. After you "save" the config IPTables just applies the changes and starts working using the new config, but it really doesn't matter what ...



Top 50 recent answers are included