Tag Info

New answers tagged

0

I'm having trouble understanding your question. But I guess you have a problem with an empty file, /etc/default/isc-dhcp-server. This file isn't necessary to run the dhcp server, for example on my dhcp server there is content in this file, but it is all commented out and it works fine. Since you haven't configured anything, I would try to reinstall (sudo ...


0

I have found the solution posted here to be a good one. It involves creating a user-group for which internet access is allowed, and setting up firewall rules to allow access only for this group. The only way for an application to access the internet is if it is run by a member of this group. You can run programs under this group by opening a shell with ...


1

You can use apparmor to deny network traffic for some application. First you must install apparmor and apparmor-utils .. sudo apt-get install apparmor* After that you can generate profile to you application ... sudo aa-genprof /usr/bin/google-chrome Next step is to change Networking part in profile to: sudo nano ...


0

Do a fresh Install. Your settings are correct. Install squidguard first. Then install squid 3 ( Important ) Your issues will be over.


0

Just run into the same issue, and in my case it was because i had a virtual bridge that had all other interfaces connected to it (created while configuring Xen) . Removing the bridge solved the ufw not working problem. The other approach is to play with routing and forwarding rules and make ufw work with the bridge.


0

Try this Check first with cat /proc/sys/net/ipv4/ip_forward is response 0 or 1. If is 0 run command sudo echo 1 >/proc/sys/net/ipv4/ip_forward This will enable ip forwarding Then edit and add before filter section in /etc/ufw/before.rules(top of file): sudo nano etc/ufw/before.rules *nat :PREROUTING ACCEPT [0:0] -A PREROUTING -i eth0 -p tcp ...


1

Add before filter section in /etc/ufw/before.rules(top of file): *nat :PREROUTING ACCEPT [0:0] -A PREROUTING -p tcp --dport 1724 -j REDIRECT --to-port 1723 COMMIT These rules will then need to be reloaded; simply disabling and re-enabling ufw or running ufw reload is not sufficient. The simplest solution is to reboot, otherwise you can use one of the ...


2

There is currently not a way to show the rules you have entered before enabling the firewall via the CLI command. You can inspect the rules files directly however. /lib/ufw/user*.rules contain the rules controlled via the 'ufw' CLI command. Eg sudo grep '^### tuple' /lib/ufw/user*.rules This will show output like the following sudo grep '^### tuple' ...


1

Got the log files working. Turns out I was needing to do sport not dport. Works now :D sudo iptables -A INPUT -p udp --sport 27017 -j ACCEPT


0

When a program opens a listening TCP socket, it must first bind that socket to an address and port number. Most commonly, the address will be INADDR_ANY, which on Linux is the 0.0.0.0 address. This means "any address on any interface may connect." The other common alternative is to bind to the address configured on a particular interface: either your ...


0

Since nmap shows only one open port for localhost and none for your external IP, one simple conclusion is that you have only one service listening, and it is listening only on localhost. The output of netstat for that port confirms this, since the service is listening only on 127.0.0.1:631 (IPv4 localhost) and ::1:631 (IPv6 localhost).


2

You have different answer because fist scan to 127.0.0.1 is do not go through firewall. Second scan also included firewall rules. Port status Open State An application is actively accepting TCP connections, UDP datagrams or SCTP associations on this port. Finding these is often the primary goal of port scanning. Security-minded people know that each open ...


2

Code is something like this ################################################# # clear existing chains ################################################# iptables --flush iptables --delete-chain ################################################# # allow loopback ################################################# iptables -A INPUT -i lo -j ACCEPT iptables -A ...


1

You must be more precise. Generally answer is to enable firewall. Ubuntu buildin firewall is ufw With command sudo ufw enable you will block all inbound traffic. Then you can allow traffic from only one host on port 80 with command sudo ufw allow from ip_address_of_host to any port 80 or allow only port 22 on server from any host sudo ufw allow ...


1

You can use fallowing command to trace communication between pc and printer sudo tcpdump -i interface | grep ip_address_of_printer You will see output of network communication, protocol, port ... After that you can set ufw Another way is to use command netstat -atu | grep ip_address_of_printer With this command you will see active connection between ...



Top 50 recent answers are included