iptables is the userspace command line program used to configure the Linux 2.4.x and 2.6.x IPv4 packet filtering ruleset. It is targeted towards system administrators. Please, when asking a question about iptables, add the output from the following command: iptables -L -v -n

learn more… | top users | synonyms (1)

-1
votes
0answers
5 views

iptables, multiple vpn with selective routing, unable to forward incoming ports

First of all, forgive my incompetence! I have a Linksys EA6900 with Tomato by Shibby v.129. I have set up 2 OpenVPN clients and successfully configured iptables so all traffic by default is routed ...
-1
votes
0answers
5 views

IPTables route only specific IP and ports over VPN

I have a DD-WRT router that is a OpenVPN client. I am trying to get my network to use the regular ISP based connection and only use the VPN connection for a couple specific IPs on specific ports ...
-4
votes
2answers
29 views

Using same port for http/ ssh on two ip's

How could use two diferent services using the same port on two diferent IP addresses? Example: IP 1 : 192.168.10.10: Service: Http Server Ports: 443 IP 2 : 192.168.10.11: Service: SSH Server ...
-1
votes
0answers
4 views

Iptabels Port Forewarding Issue [on hold]

I am trying to forward requests on eth0 (192.168.1.110 port 9600 tcp) to the same port on 192.168.250.2 (reachable through eth1 (192.168.250.150)). I am running a fresh Raspbian version of Debian and ...
0
votes
0answers
6 views

how do --queue-num iptables work?

Relation to --queue-num iptables Example iptables -t nat -A PREROUTING -p tcp --dport 80 -j NFQUEUE --queue-num 30 Explanation The --queue-num option specifies which queue to use and to ...
0
votes
0answers
13 views

Multiple TAP devices on OpenVPN Server

So we have a number of clients that have their own VPS instances which we host via Proxmox. The clients servers are all behind a NAT firewall and we forward ports per client request to our various ...
-1
votes
0answers
8 views

how to port forward to server + tunnel specific hosts route though openvpn client on tomato [migrated]

Running Shibby Tomato v130 on an Asus RT-N66U. My goals are the following With Transmission running on the router have all torrent traffic route through an OpenVPN client also running on the ...
0
votes
1answer
24 views

NAT TCP/UDP Connections With iptables on AWS

So I've got 2 instances on AWS set up so I can SSH into them directly (A, B) from my home machine C. But I want to set up box A so that I can forward certain UDP and TCP connections from it to box B. ...
0
votes
4answers
100 views

How can I limit SSH access to my own 2 IP addresses?

I am getting > 100 attempted logins per minute in my /var/log/auth.log so a quick search online on how to limit SSH access to a particular IP address lead me to a question and answer on here. However ...
-3
votes
0answers
24 views

eth0 as a management interface for port 22 and 3389 and everything else through wlan0 (iptables) [on hold]

I would like to use iptables to: Allow port 22 on eth0 Allow port 3389 on eth0 Disallow everything else on eth0 Allow all traffic on wlan0 (web browsing, etc.) Essentially I want to make eth0 the ...
-1
votes
0answers
13 views

VMware Workstation on Debian iptables [on hold]

I installed vmware workstation on Debian On this Debian machine I have eth0 and wlan0 adapters that are running in link-local only mode without assigned IP My VM guest has only one vmnet0 network that ...
-4
votes
1answer
24 views

ip6tables -L explanation [on hold]

Can someone explain me the following rules in the INPUT chain of the firewall. Chain INPUT (policy DROP) target prot opt source destination ACCEPT all ...
-1
votes
1answer
20 views

ruleset iptables- user defined chains [on hold]

I am very new in iptables. Learning to use them. I got a hang of some basic commands from https://help.ubuntu.com/community/IptablesHowTo. However, I didnt find good explanations of examples of a ...
0
votes
0answers
29 views

Very basic nginx configuration failing

The following is my nginx configuration: user www-data; worker_processes 4; pid /run/nginx.pid; events { worker_connections 768; multi_accept on; } http { server { listen 80; listen ...
1
vote
0answers
70 views

How to simulate network partitions on windows? [on hold]

Working on a project which implements a clustering algorithm. One important property of the clustering is to respect guarantees when face a network partition. To prove that clustering works I need a ...
0
votes
0answers
27 views

squid 3.5.3 with ssl bump

I have configured squid as transparent proxy with ssl bump configuration and using store id to cache youtube Squid 3.5.3 Ubuntu 14.04 Issue is my http sites are working but I cant see https website ...
-1
votes
0answers
24 views

Do my iptables do what I need? [on hold]

I'm an ecologist attempting to write some apps to run unique IR cameras and manage a couple of computers by learning enough linux and networking to get by. I'm not well versed in networking or linux. ...
0
votes
0answers
16 views

Strongswan: Connection established but one way data transfer

Posting Updated: 26.06 11:22 I'm trying to use a rasperry pi on arch linux as strongswan ikev2 server for my windows phone 8.1 smartphone. I would like to use a client certificate for authentication. ...
0
votes
0answers
23 views

Delaying packets with libnetfilter_queue

From my Raspberry Pi configured as an access point, I set the following rules: sudo iptables -I FORWARD -p tcp --sport 25 -j NFQUEUE --queue-num 0 sudo iptables -I FORWARD -p tcp --sport 80 -j ...
2
votes
1answer
31 views

iptables blocking some of the traffic on ports 80 and 443 when it shouldn't?

A web server I'm administering shows weird iptables denials from IPv4 addresses on destination port 443, despite HTTPS traffic being explicitly allowed. Port 80 is also allowed in the same rule, but ...
1
vote
1answer
12 views

OpenVZ Host Node showing up in traceroutes

I've installed SolusVM as a Master server that will host OpenVZ containers on a fresh install of CentOS 6.6 What i am now noticing is that if i traceroute one of my containers IP addresses i see the ...
0
votes
0answers
21 views

Proxy/Gateway/Router server for specific ports only

Sorry, i don't know the correct term for this type of server. English is not my primary language. This is what i want to do : I am migrating my already running web app to Google compute engine (My ...
-2
votes
1answer
22 views

Setup Tunnel via ssh and use it's Internet for VPN clients

I have two VPS centos 6.6 x64 with Public IP addresses example:1.1.1.1 and 2.2.2.2 VPS with 1.1.1.1 is a VPN server I Need to connect 1.1.1.1 via ssh to 2.2.2.2 so My VPN clients on 1.1.1.1 can Have ...
-1
votes
1answer
14 views

When adding an IP address drop rule to IPtables it converts it to a domainname/url. Why?

So I have been playing around with IPTables and bash scripts to auto detect bruteforce attacks on my server (averaging about 50 per day minimum - is this normal?). My server logs these attacks for me ...
0
votes
0answers
10 views

Hashlimit rule blocks my server

I am using an nginx as a proxy on port 9883 to forward all the requests to an apache server running on the same machine, on port 8888. I am using the following iptables rule to decrease the chances of ...
0
votes
1answer
21 views

Forwarding all traffic coming into eth0 on host to eth1 on LXC container

I'm trying to monitor all the traffic coming into my computer using software running in an LXC container. The software on the LXC expects to be monitoring eth1. Thus, I would like to Create an ...
-2
votes
0answers
14 views

Assign public IP to PPTP clients

i have a VPS with two (or more) public IPs: 1.1.1.1 1.1.1.2 The 1.1.1.1 is used by eth0, so i wanna assign the 1.1.1.2 to PPTP (vpn) client and route all inbound traffic from internet to that PPTP ...
1
vote
0answers
21 views

Get Original Destination Port From iptables

I would like to create a local server that acts as a proxy for all trafic, but how would I determan the original ports when using iptables to rederect the network traffic. I need this for when the ...
1
vote
1answer
24 views

Rate-limiting & dropping natted packets, EXCEPT for 5 local networks

Basically, I am trying to rate-limit requests to a mailserver at the firewall level, but whitelist several company-owned IP ranges. I can whitelist one IP addresses range, but not several, because of ...
0
votes
0answers
32 views

Docker container has not any app listening to ports [closed]

I have a CentOS 6.6 server and on it I'm running a docker container of Ubuntu. On the docker container I'm running a game server (ARK:Survival Evolved) and it should listen to 27015 So, to check if ...
0
votes
0answers
15 views

I cannot ping my server on PPTP vpn?

I have made a client server PPTP vpn connection on ubuntu. I can connect but cannot ping or ssh from my client to server or vice versa. IP tables server side #!/bin/bash # Set defaults. iptables -F ...
1
vote
0answers
29 views

Fail to redirect requests to specific url to localhost

I have a server that listens on http://localhost:3000 and I want to forward all requests to http://api.lingualeo.com/addword from Chrome extension (some JSON data) to http://localhost:3000. What I ...
0
votes
0answers
13 views

Centos 5.8 - firewall blocking Virtualizor staff

I run private KVM/OpenVZ hosting and im currently having issues with it. So I opened a ticket with virtualizor and they say they cant access the VNC connections, but I can. I figured the only thing ...
0
votes
1answer
39 views

Redirecting HTTP(s) traffic to another server

I am trying to setup a test environment for research/reverse engineering of wireless platforms. I have a router AP broadcasting my network which the hardware I am researching connects to, and from ...
0
votes
0answers
18 views

Route port to other host:port inside Docker

I'm running code inside Docker that has a hardcoded server set to localhost:27018, which I'm trying to redirect like this, but it doesn't work. targetip=$MONGOTARGET_PORT_27017_TCP_ADDR sysctl ...
1
vote
1answer
39 views

Linux limit connections on a specific port

I am following iptables connection limits to limit the amount of connections the server can get on port 80. For instance I tried: /sbin/iptables -I INPUT -p tcp --syn --dport 80 -m connlimit ...
0
votes
0answers
16 views

OpenVZ: Node iptables doesn't append rules

I want to make a set of rules on iptables inside of a node, but it seems that the iptables isn't appending all the rules or somehow and kick me out everytime I run the following script (I'm using this ...
0
votes
1answer
43 views

NAT routing based on DNS name (reverse TCP proxy?)

Introduction I have one router, running pfSense (can be anything since it's a virtual machine on VMware, so if the solution requires anything else, that's fine by me) and behind it I have multiple ...
0
votes
1answer
40 views

iptable rule and iftop command

Someone is flooding our server with UDP packets. I simply put iptable rule to block that IP. However, when I run iftop command I can see a huge traffic coming to my server. When i looked for iptables ...
0
votes
0answers
12 views

iptables — capture pptp connection attempt packets and place into holding pattern

Problem I have a problem of too many simultaneous connection attempts to a vpn server causing all connections to drop. Staggering connection attempts fixes problem. How can I use iptables to do the ...
0
votes
0answers
14 views

Android: redirecting self-bound traffic

I'm using an Android emulator hosted on a linux machine. It has an application that is sending packets towards the emulator itself (using ip 10.0.2.15, see here) that I want to redirect towards ...
0
votes
1answer
36 views

What is timestamp format of iptables recent proc-file?

I want to understand meaning of records in /proc/net/xt_recent/ip_list file (which is created by recent extension of iptables), e.g: src=127.0.0.1 ttl: 128 last_seen: 4298627364 oldest_pkt: 3 ...
0
votes
1answer
45 views

Distributing Internet equally among several users [closed]

I have a very basic setup which follow the following diagram - [ISP] === [Linux Home Router] ==== [Client1 .. n] Internet sharing is working without any problem. But the main issue is that if any ...
-2
votes
0answers
15 views

How to isolate a rebroadcasted wifi network without NAT?

I could just set up this router (Buffalo AP running DD-WRT) in in NAT mode. But I know that's recommended against, so I'm thinking that I could configure the firewall to whitelist traffic to or from ...
1
vote
2answers
56 views

Forwarding of a specific port

I tried forwarding a specific ip:port to a specific ip:port on a linux machine. I used iptables with the following command: iptables -t nat -A OUTPUT -p tcp -d 10.0.2.5 --dport 80 -j DNAT ...
2
votes
1answer
60 views

Protecting against a DOS attack

Someone is DOSing my server. It is not a DDOS attack as there is only one server involved in this attack. I simply put following iptable rule to drop all the packets coming from the attacker: ...
3
votes
0answers
25 views

iptables on openwrt router: logging connections to a host from clients on the same subnet [migrated]

I am trying to setup an auto wake-on-lan setup using my router that is running OpenWRT 14.07, Barrier Breaker. My idea is that the router monitors any connection attempts to the host I want to wake up ...
1
vote
1answer
39 views

route traffic directly without vpn while the vpn still connected

I have a box with fedora, connected to vpn, forwarding done by iptables, every thing is fine, and it is always connected, vpn interface is ppp1, connected through the pppoe interface: ppp0, but ...
0
votes
0answers
32 views

/etc/network/if-pre-up.d/iptables script makeeth interfaces disappear in debian jessie?

I need to enable NAT on my VM in iptables. I followed official debian instruction to configure it: First of all, i created /etc/iptables.rules file with following content: *nat -A ...
1
vote
1answer
25 views

Netfilter : invalid state for proxy through VPN

I have an OpenVPN between my box A, and the remote server B (both Debian jessie). On server B, I also run Squid3. I then configure my A-browser to use the remote proxy with the VPN address of the ...