0
votes
0answers
29 views

iptables / firewall blocking traffic (even SSH) on my dedicated box

Can someone please take a look at this iptables data and tell me what's wrong with it? The paste 24h has been a nightmare, I couldn't even SSH to my server, and the only way I could manage to get the ...
0
votes
4answers
131 views

iptables not installed on centos

If a machine does not have iptables installed, is there still a firewall running? If yes, how to I disable / change rules? if I enter the command iptables I receive the response: iptables v1.4.7: ...
0
votes
1answer
55 views

No route to host centos

I am trying to allow a port through a firewall on centos 6. The error I am receiving is telnet: connect to address 80.xx.xx.xx: No route to host The port I am trying to allow is 5666. If I disable ...
-1
votes
3answers
171 views

How do I access port 10,000 on AWS?

How can I access port 10000 on Amazon Web Services? I added port 10,000 to a security group, but I still cannot access it. I can only access the service locally. [root@ip-172-31-15-65 ~]# curl -I ...
-1
votes
3answers
270 views

Is blocking SMTP ports prevent server from sending emails?

I have a Centos server with cPanel on it. Yesterday, some hackers had successfully connected to my smpt server and sent thousand of emails from it. What I want to do is blocking every ports except ...
0
votes
1answer
50 views

Cannot access Asterisk sip from remote location

I've used this tutorial to configure my iptables so I can access asterisk sip from outside of my server. My iptables -L looks like this Chain INPUT (policy ACCEPT) target prot opt source ...
1
vote
3answers
97 views

Despite of several attempts, unable to open port 25

This question may have been asked many times here but after several failed attempts, I repeat the history: How do I open port 25 port on my server running CentOS. Here is my iptables config: Chain ...
0
votes
1answer
60 views

Turn IPTables Flush off CentOS

I made some changes to my iptables in a centOS machine. I noticed once I shut the server off it flushes all my iptables and goes back to the default. Is there a way to turn that off?
0
votes
1answer
419 views

CentOS postfix smtp server connection refused from outside

I am quite stuck with my postfix/smtp configuration on my CentOS machine. I setup a mail dns mail.domain.tld, configured in the postfix main.conf file and tested locally on the server by connecting ...
0
votes
2answers
521 views

MySQL / Firewall / Can't connect to MySQL server

I have a client running a mysql server with bind-address=0.0.0.0. Here is the iptables output root@host:/var/www# iptables -L Chain INPUT (policy ACCEPT) target prot opt source ...
1
vote
1answer
149 views

Outbound HTTP traffic being blocked by APF - outbound filter is off

I'm using CentOS 6.4 inside an OpenVZ container. I'm trying to configure APF 9.7-2 to allow inbound SSH and HTTP traffic (only) and outbound HTTP and HTTPS traffic (don't care much if other outbound ...
0
votes
0answers
39 views

IPTABLES Limiting destination based on source?

I am trying to have a bridge firewall between my network and IPMIs. I want to be able to limit the allowable destinations, e.g. IP x.x.x.x has access to x.x.y.y and x.x.y.z but no others while IP ...
0
votes
2answers
42 views

Is there a good way to prevent a server from emailing a specific address (we control both servers/apps)?

When testing a production app we occasionally need to pull from a live site and perform tests on a development server. There are quite a few email addresses stored in the database that we need to ...
-1
votes
1answer
69 views

Is this CentOS 6.2 system reasonably secure as described? [closed]

This is a CentOS 6.2 system. For my login with the hosting company website, I set a 20-character mixed case, letters, numbers, symbols password and enabled two-factor authentication. In ...
1
vote
1answer
105 views

How to ban 250.000 IP ranges?

I am using iblocklist.com and I want to ban a list of IPs I made from accessing my web server on a CentOS dedi. I have a bash script that can parse it and add the ranges one by one to iptables. My ...
0
votes
3answers
606 views

Is there any logs in Linux which tells if some port has been denied

Suppose in i have the firewall active or any other security like SE linux etc. Now suppose user wants to connect to port 21 and Iptables does not allow it. Now when users gets denied is that ...
0
votes
1answer
360 views

CentOS 6.4 - iptables keeps getting rules added to it

I have CentOS 6.4 with iptables running. I manually configure iptables with Webmin with the rules: [root@fst ~]# service iptables status Table: filter Chain INPUT (policy ACCEPT) num target prot ...
3
votes
2answers
881 views

NTP client on CentOS 5 fails behind Cisco ASA firewall

I have a CentOS server on which I want to set up an NTP client to get accurate time for the server. The server is on a local subnet with NAT behind an ASA 5505 firewall, which acts as NAT router, and ...
0
votes
1answer
198 views

Can't connect to my own machine through public IP

I couldn't figure out why I can't make a connection through my public IP. When using a local IP it works. I have the proper firewall port exceptions, and my router NAT has the configurations for port ...
3
votes
3answers
3k views

Centos iptables open port 53

I am having problem opening port 53 on my centos machine, for DNS configuration. Here is my iptables config -A INPUT -p udp -m udp --sport 53 -j ACCEPT -A OUTPUT -p udp -m udp --dport 53 -j ACCEPT ...
1
vote
1answer
283 views

how to load /etc/sysconfig/iptables on server reboot

To enable port 7070 on my server I've run iptables -A INPUT -p tcp -m tcp --dport 7070 -j ACCEPT through SSH and then service iptables save which saved rules to /etc/sysconfig/iptables file. ...
1
vote
2answers
844 views

Port Scanning Temporary Block on Linux Centos

I am running a VPS server (Linux CentOS) to provide web hosting for my clients. Yesterday, one of my clients got blocked out by the LFD firewall on my server: I got a server admin email notification ...
0
votes
1answer
2k views

Plesk 11 Set firewall rules manually

I have a big spamming problem on my site from ip addresses coming from Asia. My website is designed for people in France and Canada, so I want to block all ip addresses from Asia to avoid spam. I ...
0
votes
2answers
2k views

Problems with multicasts in “iptables”

My question is related to multicasts and iptables. I want to allow ICMP and IGMP multicasts from the local VLAN 192.168.1.0/24 as well as from 0.0.0.0 on my CentOS machine, so I added the following ...
0
votes
1answer
2k views

iptables - Block incoming on Eth1 and Allow All from eth0

I am a bit stuck with iptables to do deal with two Ethernet ports. eth0 port for LAN use (192.168.1.50 Private IP). eth1 port is connected to the internet via cable modem (80.0.xxx.xxx public IP). ...
2
votes
1answer
111 views

How can I implement an ip whitelist to protect my server?

I'm going to start running a gameserver soon and I want a way to reduce the the damage of a denial of service attack. I want to make it so when someone joins the game their ip adress is added to a ...
1
vote
1answer
734 views

SNMP closed state in CentOS

I'm having a problem here, I've added to my IPtables rules this: -A INPUT -p tcp -m state --state NEW -m tcp --dport 161 -j ACCEPT -A INPUT -p udp -m state --state NEW -m udp --dport 161 -j ACCEPT ...
2
votes
5answers
8k views

Why is this iptables file line failing in CentOS 6

Hi could could anyone help me understand why line 15 is failing supposedly in my iptables file. I'm using CentOS 6. When I try to restart iptables service, get the following: [root@dbserver ~]# ...
2
votes
4answers
3k views

Can't disable firewall on CentOS 6.3

I'm trying to disable the firewall with no luck. I have tried: Going through System->Administration->Firewall and disabling it there. Running 'iptables -F' and then /etc/init.d/iptables save I've ...
0
votes
2answers
504 views

Centos IPTables configuration for external firewall

Current setup Centos which is a Web, Mail (Postfix,Dovecot), FTP Server and Gateway with public ip and private ip (for LAN Gateway). We are planning to implement external firewall box and bring the ...
1
vote
2answers
2k views

Cannot access webmin remotely even when the firewall stopped

I have webmin running on centos on port 307, I can access it locally and I verified it by trying wget localhost:307 However, I cannot it access it remotely, I have even tried to disable the ...
0
votes
1answer
106 views

Iptables script is blocking ssh

can anyone spot what is wrong with this? As soon as I run the script i'm locked out of my server and need to restart it. It's blocking ssh at a minimum. I'm using port 6789 for ssh. Thanks for any ...
0
votes
1answer
352 views

iptables rule error

I'm trying to restart my iptables service, but it's giving me an error on one of the rules in my iptables file. iptables: Flushing firewall rules: [ OK ] iptables: Setting ...
-1
votes
2answers
363 views

Limiting and redirect port access with useragent

I'm trying to write iptables string match rule To block http://domain.com:8888 and https://domain.com:8888 when it matches the supplied string in the rule. And another rule to redirect the ports also ...
2
votes
1answer
2k views

What is the proper iptables configuration for Apache Solr on CentOS?

I know for a fact that iptables running is causing my instance of Apache Solr to be inaccessible. How do I know this? Because I ran: /sbin/service iptables save && /sbin/service iptables stop ...
0
votes
2answers
797 views

Should I disable iptables when I'm using csf?

Should I disable iptables when I'm using csf ? any help appreciated.
5
votes
1answer
522 views

Block outgoing connections for certaing uids (root, apache, nobody)

With iptables in CentOS 5 and 6 Linux - how can you please prevent processes running as root, apache or nobody from initiating outgoing connections? On CentOS 5 Linux I've tried putting these lines ...
1
vote
1answer
603 views

How to use address ranges in shorewall rules?

I want to add rule for a range of IP addresses from 64.240.160.0 to 64.240.191.255.
1
vote
1answer
226 views

centos 5.x basic firewall settings on the commandline

I'm using a dedicated host. Unfortunately, when I use x windows with xming, it tends to freeze up the x windows session. This is keeping me from calling system-config-securitylevel and making changes ...
0
votes
1answer
333 views

Figuring out the reason for a “Connection timed out” error

For the last 24 hours two independent servers are having a hard time connecting to our web server. They are trying to open a port 80 connection. They are both receiving "connection timed out" errors. ...
1
vote
2answers
706 views

iptable - configuration for outbound traffic from local network

I reinstalled a ClearOS box, which is based on CentOS. The previous install ran fine for 3 years, without a glitch but I may of misconfigured something on this install along the way, as things are ...
1
vote
2answers
3k views

Iptables not persisting after reboot on CentOS 6.2

I've tried adding a few rules to my iptables but they don't seem to be saving. In order to save them, I've tried running iptables-save and service iptables save. Each time I have run either of those ...
2
votes
1answer
230 views

Firewall locks me out of ssh

Just trying to make a simple script that will configure iptables to block all incoming and outgoing traffic except for ssh on default port 22 and udp on port 8888. This is what i have: #!/bin/sh # # ...
2
votes
1answer
620 views

CentOS and iptables Logging

I am working with some CentOS rules and would like to be able to log the dropped items from iptables out to a separate file. What is the best way to setup CentOS to log dropped iptables matches to a ...
5
votes
1answer
735 views

Cannot modify iptables on CentOS

My question: How to add a custom iptables rule to accept connection on a certain port? I'm trying to open port 3500 on my server but failed. I started by using this command: (From ...
1
vote
4answers
1k views

How to open Apache2 to outside in CentOS 6

I have installed CentOS 6 but I'm only able to open Apache2 to outside by turning off the firewall. Can somebody give me a clue on how I can open apache2 to the outside without turning off the ...
0
votes
1answer
249 views

iptables two eth passing internet, internal lan blocked to the world, how to solve this?

dsl modem, linux server, router, couple computers dsl modem connected > to eth0 at my server router for sharing internet connection connected to > eth1 at my server server got mascarade to pass ...
0
votes
3answers
241 views

iptables for webserver

I have been hosting a couple of websites on my dedicated machine. The OS is CentOS 5.6. Until now, I have been turning iptables off since it jsut blocked all web traffic. However, I see that this is ...
0
votes
1answer
972 views

How to enable windows shares with iptables?

I have an OpenVPN server on CentOS5, where I would like to enable Windows shares through the VPN. When I try to access a Windows share then noting happens. No errors or anything. My iptables rules ...
1
vote
1answer
860 views

How to allow FTP on OpenVPN with NAT?

I'm using these iptables rules for my OpenVPN server with 1 NIC (eth0) iptables -I INPUT -i eth0 -p udp --dport 1194 -j ACCEPT iptables -I FORWARD -i eth0 -o tun0 -j ACCEPT iptables -I FORWARD -i ...