Tag Info

New answers tagged

0

I followed your guide (do you know i'm italian?? o_O) Now this is my before.rules file : #Nat Table *nat :POSTROUTING [0:0] :PREROUTING [0:0] -A PREROUTING -d 79.3.191.226 -j DNAT -too-destination 192.168.0.17 70blabla is the private dynamic ip that my provider gave me for this session. 192blabla is my private ip COMMIT #lines that i already found on ...


-1

Try adding -i eth0 to your PREROUTING entry and -o eth0 to your POSTROUTING entry and executing sudo iptables -A FORWARD -i eth1 -j ACCEPT


2

That is not how you use iptables-save Without any optins it dumps the rules to your terminal, you have to re-direct. iptables-save > /etc/iptables.rules http://bodhizazen.net/Tutorials/iptables#Saving_your_configuration On Ubuntu you should probably be using ufw see https://help.ubuntu.com/lts/serverguide/firewall.html#ip-masquerading


0

I thought I was having a similar problem. For anyone who makes the same silly mistake I did... I was testing a new webserver by rerouting the requests to a different IP by /etc/hosts. I did tail -f access_log on my web server and saw all my test requests, except the https ones. I spent a few minutes trying to figure that out. Finally, I realized that I ...


2

You probably need to first identify the protocol, for example TCP or UDP. You do that by using the -p <protocol> option. I'm assuming you want TCP, so your iptables command should look like this: iptables -A INPUT -p tcp --dport 443 -j DROP


-1

I figured out a way to resolve this. This website helped me a lot. That was the scenario I had. Later configured iptables to restrict some client systems to few websites. I configured a ubuntu system as gateway between LAN and ADSL router. Then set rules in firewall (iptables) to restrict source systems (client) to some websites. This website helped me in ...


0

I'd recommend using key based authentication along with a passphrase with SSH for security instead of the complicated iptables setup you are using. Just allow port 22 and your server will still be safe. http://tombuntu.com/index.php/2008/02/20/public-key-authentication-for-ssh-made-easy/ It is going to be difficult to craft the firewall rules in such a way ...


0

I've had trouble with this myself. One handy way of debugging is to enable the logfile for ppp... sudo touch /var/log/ppp-ipupdown.log then when I bring up a ppp session I can see how my script is behaving.


1

The basic thing to do is to make the squid server the default gateway instead of your Internet router. Just add an additional network card to the Ubuntu squid bringing it up to 2 network cards: 1 into your LAN and 1 into your network router. The LAN-side now gets the IP address of the default gateway (probably 192.168.1.1) and the WAN-side gets an ...


0

Suggestions on how to configure iptables: Open a terminal,Press Ctrl+Alt+T Run it: sudo -i /sbin/iptables -t nat -A POSTROUTING -o em2 -j MASQUERADE /sbin/iptables -A INPUT -s 192.168.1.2/30 -i em1 -j ACCEPT echo “1” >/proc/sys/net/ipv4/ip_forward


0

For security reasons Mysql default does not allow remote access by root. To allow access follow these steps: Edit the configuration file "/etc/mysql/my.cnf" and remove the restriction of remote access Comment the following line: #bind-address = 127.0.0.1 Give permission to root for connections from any IP: mysql -u root -pROOTPASSWORD mysql> GRANT ...


0

iptables is likely not the tool to do what you wish. However, you may want to use iptables to block access from the internet. Network traffic on the lo device should not be routed to another device, even a virtual device. It is likely that virtualbox has created a br0 devices or some device with br in the name. The IP address of this device would be ...



Top 50 recent answers are included