iptables is the userspace command line program used to configure the Linux 2.4.x and 2.6.x IPv4 packet filtering ruleset. It is targeted towards system administrators. Please, when asking a question about iptables, add the output from the following command: iptables -L -v -n

learn more… | top users | synonyms (1)

0
votes
1answer
10 views

what version of iptables implemented -j CT?

I'm setting a firewall config for different distros/versions and I need to setup NOTRACK for DNS traffic. On CentOS 7 (iptables v.1.4.21), I need to write like this: -A PREROUTING -p udp -m udp ...
1
vote
0answers
21 views

Investigating connectivity issue

I'm trying to set a up a new service on a server that is running apache, however it seems like incoming traffic on that specific port is blocked, although I do not understand why. On the first server, ...
-1
votes
1answer
25 views

Iptables DNAT working in my own network, but not through VPN

For some reasons I need to switch a server ip to another ip, in order to be seen by another computer elsewhere through vpn. So I'm using iptables (didn't know any of that until yesterday) and testing ...
1
vote
1answer
12 views

Restore rules from output of `iptables -S`

I have a bunch of rules dumped with iptables -S: -P INPUT ACCEPT -P FORWARD ACCEPT -P OUTPUT ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -A INPUT -p ...
0
votes
1answer
42 views

SSH works but tunneling or SFTP doesn't. Why?

since 2014 I've got a server from SoYouStart, with Centos 7. It worked perfectly, but now I had to install again the OS. Now I'm configuring all the services to work again. I need to connect to the ...
0
votes
0answers
4 views

Connection interruptions on Debian router, possibly due to excessive duplicate ACKs? [migrated]

I have a Debian server as a house router, which for a year has been working flawlessly. However, I recently moved and switched service providers from FiOS to Comcast, and possibly as a result am ...
-1
votes
0answers
5 views

How do I set up my iptables to allow web traffic to my Spring Boot application?

I am trying to host my Spring Boot application on Arvixe's VPS Lite. No CPanel, just command line. When I spin up my Spring Boot app and navigate to the server's IP address, I see the ...
0
votes
1answer
27 views

Cannot open port 1337

I am struggling with iptables firewall to open port 1337 externally. My iptables file looks like this: *nat :PREROUTING ACCEPT [0:0] :INPUT ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :POSTROUTING ACCEPT [0:0] ...
0
votes
0answers
13 views

PHP FTP Pasv mode on CentOS 7

I need help with connecting to a FTP server and using the passive mode. They told me I need to open ports 20, 21 and 5000-5100 range. I've got a virtual machine running CentOS 7 on a dedicated server ...
-1
votes
0answers
18 views

iptables, redirecting all ingoing connexion

I have this iptables conf on my linux mint... What does it mean ? Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT all -- 13.37.42.0/24 ...
-1
votes
0answers
22 views

iptables : redirect all ingoing traffic to www [on hold]

I have a Wifi hotspot, made with a linux machine. I d like to redirect any ingoing trafic to my index.php localsite. My public interface is wan0. Is iptables the best solution ? How can I do that ?
0
votes
0answers
7 views

PSAD / removed iptables block

I'm pretty new to PSAD but eagerly getting into it to have a safer installation. But some understanding is missing I've had yesterday the following notification : [psad-status] removed iptables ...
-1
votes
0answers
13 views

iptables, multiple vpn with selective routing, unable to forward incoming ports

First of all, forgive my incompetence! I have a Linksys EA6900 with Tomato by Shibby v.129. I have set up 2 OpenVPN clients and successfully configured iptables so all traffic by default is routed ...
-1
votes
0answers
10 views

IPTables route only specific IP and ports over VPN

I have a DD-WRT router that is a OpenVPN client. I am trying to get my network to use the regular ISP based connection and only use the VPN connection for a couple specific IPs on specific ports ...
-4
votes
2answers
34 views

Using same port for http/ ssh on two ip's [on hold]

How could use two diferent services using the same port on two diferent IP addresses? Example: IP 1 : 192.168.10.10: Service: Http Server Ports: 443 IP 2 : 192.168.10.11: Service: SSH Server ...
-1
votes
0answers
17 views

Iptabels Port Forewarding Issue

I am trying to forward requests on eth0 (192.168.1.110 port 9600 tcp) to the same port on 192.168.250.2 (reachable through eth1 (192.168.250.150)). This is so that I can leve a preconfigured Raspberry ...
0
votes
0answers
6 views

how do --queue-num iptables work?

Relation to --queue-num iptables Example iptables -t nat -A PREROUTING -p tcp --dport 80 -j NFQUEUE --queue-num 30 Explanation The --queue-num option specifies which queue to use and to ...
0
votes
1answer
22 views

Multiple TAP devices on OpenVPN Server

So we have a number of clients that have their own VPS instances which we host via Proxmox. The clients servers are all behind a NAT firewall and we forward ports per client request to our various ...
-1
votes
0answers
8 views

how to port forward to server + tunnel specific hosts route though openvpn client on tomato [migrated]

Running Shibby Tomato v130 on an Asus RT-N66U. My goals are the following With Transmission running on the router have all torrent traffic route through an OpenVPN client also running on the ...
0
votes
1answer
27 views

NAT TCP/UDP Connections With iptables on AWS

So I've got 2 instances on AWS set up so I can SSH into them directly (A, B) from my home machine C. But I want to set up box A so that I can forward certain UDP and TCP connections from it to box B. ...
0
votes
4answers
104 views

How can I limit SSH access to my own 2 IP addresses? [on hold]

I am getting > 100 attempted logins per minute in my /var/log/auth.log so a quick search online on how to limit SSH access to a particular IP address lead me to a question and answer on here. However ...
-3
votes
0answers
25 views

eth0 as a management interface for port 22 and 3389 and everything else through wlan0 (iptables) [on hold]

I would like to use iptables to: Allow port 22 on eth0 Allow port 3389 on eth0 Disallow everything else on eth0 Allow all traffic on wlan0 (web browsing, etc.) Essentially I want to make eth0 the ...
-1
votes
0answers
17 views

VMware Workstation on Debian iptables [closed]

I installed vmware workstation on Debian On this Debian machine I have eth0 and wlan0 adapters that are running in link-local only mode without assigned IP My VM guest has only one vmnet0 network that ...
-4
votes
1answer
24 views

ip6tables -L explanation [closed]

Can someone explain me the following rules in the INPUT chain of the firewall. Chain INPUT (policy DROP) target prot opt source destination ACCEPT all ...
-1
votes
1answer
20 views

ruleset iptables- user defined chains [closed]

I am very new in iptables. Learning to use them. I got a hang of some basic commands from https://help.ubuntu.com/community/IptablesHowTo. However, I didnt find good explanations of examples of a ...
0
votes
0answers
29 views

Very basic nginx configuration failing

The following is my nginx configuration: user www-data; worker_processes 4; pid /run/nginx.pid; events { worker_connections 768; multi_accept on; } http { server { listen 80; listen ...
1
vote
0answers
70 views

How to simulate network partitions on windows? [closed]

Working on a project which implements a clustering algorithm. One important property of the clustering is to respect guarantees when face a network partition. To prove that clustering works I need a ...
0
votes
0answers
32 views

squid 3.5.3 with ssl bump

I have configured squid as transparent proxy with ssl bump configuration and using store id to cache youtube Squid 3.5.3 Ubuntu 14.04 Issue is my http sites are working but I cant see https website ...
-1
votes
0answers
24 views

Do my iptables do what I need? [closed]

I'm an ecologist attempting to write some apps to run unique IR cameras and manage a couple of computers by learning enough linux and networking to get by. I'm not well versed in networking or linux. ...
0
votes
0answers
20 views

Strongswan: Connection established but one way data transfer

Posting Updated: 26.06 11:22 I'm trying to use a rasperry pi on arch linux as strongswan ikev2 server for my windows phone 8.1 smartphone. I would like to use a client certificate for authentication. ...
0
votes
0answers
25 views

Delaying packets with libnetfilter_queue

From my Raspberry Pi configured as an access point, I set the following rules: sudo iptables -I FORWARD -p tcp --sport 25 -j NFQUEUE --queue-num 0 sudo iptables -I FORWARD -p tcp --sport 80 -j ...
2
votes
1answer
35 views

iptables blocking some of the traffic on ports 80 and 443 when it shouldn't?

A web server I'm administering shows weird iptables denials from IPv4 addresses on destination port 443, despite HTTPS traffic being explicitly allowed. Port 80 is also allowed in the same rule, but ...
1
vote
1answer
12 views

OpenVZ Host Node showing up in traceroutes

I've installed SolusVM as a Master server that will host OpenVZ containers on a fresh install of CentOS 6.6 What i am now noticing is that if i traceroute one of my containers IP addresses i see the ...
0
votes
0answers
27 views

Proxy/Gateway/Router server for specific ports only

Sorry, i don't know the correct term for this type of server. English is not my primary language. This is what i want to do : I am migrating my already running web app to Google compute engine (My ...
-2
votes
1answer
28 views

Setup Tunnel via ssh and use it's Internet for VPN clients

I have two VPS centos 6.6 x64 with Public IP addresses example:1.1.1.1 and 2.2.2.2 VPS with 1.1.1.1 is a VPN server I Need to connect 1.1.1.1 via ssh to 2.2.2.2 so My VPN clients on 1.1.1.1 can Have ...
-1
votes
1answer
17 views

When adding an IP address drop rule to IPtables it converts it to a domainname/url. Why?

So I have been playing around with IPTables and bash scripts to auto detect bruteforce attacks on my server (averaging about 50 per day minimum - is this normal?). My server logs these attacks for me ...
0
votes
0answers
10 views

Hashlimit rule blocks my server

I am using an nginx as a proxy on port 9883 to forward all the requests to an apache server running on the same machine, on port 8888. I am using the following iptables rule to decrease the chances of ...
0
votes
1answer
25 views

Forwarding all traffic coming into eth0 on host to eth1 on LXC container

I'm trying to monitor all the traffic coming into my computer using software running in an LXC container. The software on the LXC expects to be monitoring eth1. Thus, I would like to Create an ...
-2
votes
0answers
14 views

Assign public IP to PPTP clients

i have a VPS with two (or more) public IPs: 1.1.1.1 1.1.1.2 The 1.1.1.1 is used by eth0, so i wanna assign the 1.1.1.2 to PPTP (vpn) client and route all inbound traffic from internet to that PPTP ...
1
vote
0answers
22 views

Get Original Destination Port From iptables

I would like to create a local server that acts as a proxy for all trafic, but how would I determan the original ports when using iptables to rederect the network traffic. I need this for when the ...
1
vote
1answer
24 views

Rate-limiting & dropping natted packets, EXCEPT for 5 local networks

Basically, I am trying to rate-limit requests to a mailserver at the firewall level, but whitelist several company-owned IP ranges. I can whitelist one IP addresses range, but not several, because of ...
0
votes
0answers
16 views

I cannot ping my server on PPTP vpn?

I have made a client server PPTP vpn connection on ubuntu. I can connect but cannot ping or ssh from my client to server or vice versa. IP tables server side #!/bin/bash # Set defaults. iptables -F ...
1
vote
0answers
30 views

Fail to redirect requests to specific url to localhost

I have a server that listens on http://localhost:3000 and I want to forward all requests to http://api.lingualeo.com/addword from Chrome extension (some JSON data) to http://localhost:3000. What I ...
0
votes
0answers
13 views

Centos 5.8 - firewall blocking Virtualizor staff

I run private KVM/OpenVZ hosting and im currently having issues with it. So I opened a ticket with virtualizor and they say they cant access the VNC connections, but I can. I figured the only thing ...
0
votes
1answer
39 views

Redirecting HTTP(s) traffic to another server

I am trying to setup a test environment for research/reverse engineering of wireless platforms. I have a router AP broadcasting my network which the hardware I am researching connects to, and from ...
0
votes
0answers
20 views

Route port to other host:port inside Docker

I'm running code inside Docker that has a hardcoded server set to localhost:27018, which I'm trying to redirect like this, but it doesn't work. targetip=$MONGOTARGET_PORT_27017_TCP_ADDR sysctl ...
1
vote
1answer
39 views

Linux limit connections on a specific port

I am following iptables connection limits to limit the amount of connections the server can get on port 80. For instance I tried: /sbin/iptables -I INPUT -p tcp --syn --dport 80 -m connlimit ...
0
votes
0answers
16 views

OpenVZ: Node iptables doesn't append rules

I want to make a set of rules on iptables inside of a node, but it seems that the iptables isn't appending all the rules or somehow and kick me out everytime I run the following script (I'm using this ...
0
votes
1answer
43 views

NAT routing based on DNS name (reverse TCP proxy?)

Introduction I have one router, running pfSense (can be anything since it's a virtual machine on VMware, so if the solution requires anything else, that's fine by me) and behind it I have multiple ...
0
votes
1answer
41 views

iptable rule and iftop command

Someone is flooding our server with UDP packets. I simply put iptable rule to block that IP. However, when I run iftop command I can see a huge traffic coming to my server. When i looked for iptables ...