Tag Info

New answers tagged

1

in command sudo ssh -gL 80:127.0.0.1:8080 localhost option -g - Allows remote hosts to connect to local forwarded ports option -L - [bind_address:]port:host:hostport Specifies that the given port on the local (client) host is to be forwarded to the given host and port on the remote side. This works by allocating a ...


1

You need to use the OUTPUT chain as the packets meant for the loopback interface do not pass via the PREROUTING chain. The following should work: iptables -t nat -A OUTPUT -o lo -p tcp --dport 80 -j REDIRECT --to-port 8080


1

NAT Table: This table should only be used for NAT (Network Address Translation) on different packets. In other words, it should only be used to translate the packet's source field or destination field. Filter Table: The filter table is mainly used for filtering packets. We can match packets and filter them in whatever way we want. This is the place ...


0

PREROUTING: This chain is used to make any routing related decisions before (PRE) sending any packets. Always remember that in PREROUTING/POSTROUTING i.e. NAT table the ACCEPT/DROP/REJECT etc targets of the default FILTER table will not work. The NAT table is only used for taking routing decisions. You should use PREROUTING when taking any routing decisions ...


0

I use softether vpn on my pi. I use this gist to set it up. Softether (or at least this script) puts iptable rules in /etc/rc.local As an example, this is mine # Start VPN Settings for vpn in /proc/sys/net/ipv4/conf/*; do echo 0 > $vpn/accept_redirects; echo 0 > $vpn/ send_redirects; done iptables -A FORWARD -i br0 -o br0 -m ...


0

I solved this problem the "old fashioned way": I put a terminal on the server. But I just tried using the XTerminal remotely again and it connected. So we'll chalk this up to "just one of those things." Thank you to everyone who replied.


0

That's because you're up against YouTube which is huge and has servers all over the planet and they use them very efficiently to stream Terabytes of data!!! If you really want to do this: don't remove any YouTube address from your IPtables; just keep adding them and to start, just go here for a list of YouTube IP addresses and add those all in. Check it ...


0

Perhaps this will work: sudo iptables -A INPUT -p tcp --dport ssh -j ACCEPT


0

Do you have any tcpwrappers ? Start the logging in the server : tail -f /var/log/auth.log Try to ssh from the client and paste the error logs. I think ssh known_hosts is causing the issue. Just backup and clear the known_host file and try again


0

Try: -A PREROUTING -i eth0 -p tcp -m tcp -d 87.13.180.182 -j DNAT –to-destination 192.168.0.13


0

Most Internet Service Providers in Europe close ports 80 and 25 for dynamic IP addresses as they want you to pay extra for a fixed IP... So VPN, Telnet, ... work, but the actual web and mail servers don't. Contact your ISP and ask them if this is the case. If not, leave a comment.


0

You don't have the public IP bound to an interface of the machine running a webserver. It's actually configured on your router. Since it's doing the Network Adress Translation (NAT), no new external connections to this public will reach your internal machines by default. You'll need to do 2 things to make this work: Allow incoming HTTP[S] connections to ...


1

As stated in the man page, ULOG is deprecated (and IPv4-only). It was replaced with the NFLOG target, which can be used with either protocol. For example: ip6tables -A INPUT -m limit --limit 5/sec --limit-burst 15 -j NFLOG --nflog-prefix "flt " You still use the ulogd2 daemon with the NFLOG target.


0

"If all you have is a hammer, every problem looks like a nail..." You need DNS redirection ;-)


0

sudo iptables -L You need to use sudo with iptables Edit: strikthrough due to updated answer


0

Class C IP Address: 192.0.0.0 to 223.255.255.255. In this case --connlimit-mask option must be 192.0.0.0/3 in CIDR notation. If you specify a mask of 24, it will apply to Class A and Class B too. You have to use CIDR notation to specify the Class for sure. --connlimit-mask 192.0.0.0/24



Top 50 recent answers are included