0
votes
0answers
19 views

ISC DHCP Server - Client Uplink Is Not Working

Running a DHCP server, client(s) does not have up-link (0Mbps) and has a downlink (50Mbps.) I am setting up a gateway/router on a PC running Debian Wheezy with ISC-DHCP. I have 1 WAN (eth0) and 2 LAN ...
0
votes
4answers
65 views

Create IP nullroute blacklist from text file

I've seen various guides out there for how to nullroute a single IP address, and I've done that before. However, I'm not sure how to nullroute a group of IP addresses. Going through each one ...
-5
votes
1answer
35 views

How to route to next server? [closed]

I must route all traffic from first server to second server and next to third server. Like this: server1 -> server2 -> server3 I use Debian Wheezy. Can anyone tell how to do this with iproute?
1
vote
1answer
44 views

iptables connection limit does not work on debian

I'm trying to set up some basic DOS protection. The following iptables rule works on a CentOS box but NOT on debian (wheezy). #limit the parallel http requests to 50 per class C sized network ...
-2
votes
1answer
25 views

Allow outgoing connections for DNS [closed]

I'm new to IPtables, but I am trying to setup a secure server to host a website and allow SSH. This is what I have so far: #!/bin/sh i=/sbin/iptables # Flush all rules $i -F $i -X # Setup default ...
0
votes
2answers
33 views

IPtables - Sensible and non-contradictory rules?

This is my IPtable rules for my webserver with SSH installed, i've had help to get this far. My question is, are my rules contradictory. For example, I've been recommended to use these two lines: # ...
4
votes
3answers
186 views

IPtables locking down website allowing only SSH

I have written my first IPtables rule file to try and protect my server on all ports apart from SSH and the ports needed for the web. This is what I have come up with: i=/sbin/iptables # Flush all ...
0
votes
2answers
47 views

ssh connection to Debian machine hangs when updating firewall rules

I am running a script which updates firewall rules on a Debian machine via SSH as well as other actions. However, after the script runs, my connection just hangs. I am able to close the terminal and ...
2
votes
0answers
38 views

firehol simple config doesn't work on Debian 7

I'm trying to set up a very simple firehol setup under a brand new Debian7 server. I only installed ssh and sudo before this Installed firehol with sudo apt-get install firehol Changed the config ...
0
votes
2answers
61 views

iptables rules advice in debian linux

please advice: I add next iptables rules: iptables -I OUTPUT 2 -p udp --dport 53 -j ACCEPT iptables -I OUTPUT 2 -p udp --dport 1700:1750 -j ACCEPT iptables -I OUTPUT 3 -p udp -m udp --dport 1812 -j ...
0
votes
0answers
98 views

debian multiple network interface multiple networks

I have a virtual environment with 3 virtual machines on one host. One of my virtual machines has 2 network interface. I need the virtual machine with two interfaces to connect to two different ...
0
votes
2answers
95 views

How to block requests for virtual hosts that dont exist in apache [duplicate]

First up, check out this question: Why are external domains appearing in my apache logs? We're seeing the exact same thing on one of our Debian VPS servers - with one big difference, the regularity ...
1
vote
1answer
58 views

Something (but not iptables) mysteriously redirects network traffic - how to diagnose?

Summary There is a virtualbox host (1.1.1.5) and a routed guest (1.1.1.6). Something redirects any traffic on port 25 with the guest, whether ingoing or outgoing, to 1.1.1.5 port 2525 and I cannot ...
0
votes
1answer
48 views

Blocking incoming traffic for interface

I have created an interface eth0:2 and I want to make curl requests from that interface only so I want to block all ports and incoming traffic on that interface. This iptables rule used to work, but ...
1
vote
1answer
50 views

Logging in iptables

I have created rules in iptables to log and edited the rsyslog.conf file to output any message which contains "iptables" to a different log file. It seems that it is logging to both places, the ...
0
votes
0answers
26 views

Output traffic on different alias based on user

I have a server running Debian with two IP addresses aliased on a single NIC. eth0 254.71.11.134 eth0:0 185.14.16.132 I want all traffic form a specific user to go through eth0:0. I figure I ...
3
votes
3answers
924 views

How to duplicate TCP traffic to one or multiple remote servers for benchmarking purposes?

Infrastructure: Servers in Datacenter, OS - Debian Squeeze, Webserver - Apache 2.2.16 Situation: The live server is in use by our cusotmers every day, which makes it impossible to test ...
-2
votes
2answers
56 views

How to block access to a local user to a local port?

How to block access to a local user to a local port? Example: user Elvis should not have access to the port 25600 on the same server.
1
vote
1answer
93 views

Debian 7.2 (wheezy) - Block domain

0 down vote favorite A few days ago I figured out that someone was trying to get access to my mailserver, obviously to send spam emails through. After some research I found out that the sender uses ...
0
votes
0answers
60 views

Connecting to Webserver(Nginx) from within GuestOS (VMware Player+ NAT) inside Debian from outside

I currently have a Server (Debian 7.3 , Kernel 3.2.0-4-amd64) with VMware Player 6 installed which is hosting a guest OS(Ubuntu Server) with Nginx running on it. I want the NGINX to serve webcontent ...
0
votes
2answers
95 views

Limit Privoxy access with iptables to IP range

I would like to limit the access of the Privoxy port to a selected IP range. Background: I'm using an IPSec-VPN which users get 10.0.0.0/8 addresses assigned and only those users should be able to use ...
-1
votes
2answers
73 views

Setting IPtables rules into a file

Currently I have a debian install with a shell script which has the following content (as an example): # Setup iptables IPT="/sbin/iptables" # Flush old rules, old custom tables $IPT --flush $IPT ...
1
vote
1answer
98 views

copy ipv4 rules to ip6tables

I have a static IPv4 and a static IPv6 address. Right now, my iptables look like: *filter :INPUT DROP [28:2168] :FORWARD DROP [0:0] :OUTPUT ACCEPT [551:134808] -A INPUT -i lo -j ACCEPT -A INPUT -i ...
0
votes
1answer
500 views

Iptable l7-filter installation guide and block p2p

I would install l7-filter to block P2P torrent, First of all , I have a linux debian. I installed by the below command apt-get install l7-filter-userspace And then run command iptables -I FORWARD ...
0
votes
1answer
110 views

fail2ban iptable rule wont block

So I set up fail2ban on my Debian 7 server, still I've been getting hit a lot and I dont know why is not blocking properly. The regex works, it recognizes the attempts but it seems the iptables rules ...
0
votes
2answers
48 views

My iptable configuration is secured?

I'm securing my debian with iptables. I done that for allow ssh, http and https: # history | grep iptable 18 /sbin/iptables -A INPUT -m state --state ESTABLISHED -j ACCEPT 22 /sbin/iptables -I ...
1
vote
2answers
767 views

force LAN hosts to go through proxy

I have an IPTables firewall on a Debian server, with a bunch of hosts behind it with masquerading. In the upstream network I don't have direct access to the internet, and I need to go through a proxy ...
-2
votes
1answer
112 views

Allow incoming traffic only to a specific public IP

I have a Debian VPS with 2 public IP addresses, 90.90.90.90 and 90.90.90.100. What I'd like to do is to make the server to accept incoming traffic only to the other public IP. Example: I have an ...
0
votes
0answers
44 views

Debian whitelist in openvz; cannot connect to the outside

i am trying to create a whitelist in a openvz VM. The strange thing is that until yesterday it was working as intended but now i cannot connect to any address from the inside which is not on the ...
1
vote
1answer
171 views

Configuring Debian as a gateway for two networks

Having a debian server with multiple NICs (eth0 and eth1) acting as a gateway. How would I be able to configure these NICs, so they can route the traffic from one to another. Network layout: ...
1
vote
1answer
542 views

How to do port forwarding/redirecting on Debian?

I have two questions. Question 1: My debian machine has interface eth3 with ip 192.168.57.28. If someone tries to connect to 192.168.57.28:1234 how do I redirect the request to another machine: ...
1
vote
2answers
539 views

iptables 1.4 and passive FTP on custom port

after the upgrade from debian squeeze to wheezy I've got a problem with passive FTP connection. I could narrow it to be iptables related, as I could connect via FTP w/o problems after adding my IP to ...
0
votes
0answers
767 views

FTP not listing files behind firewall (setsockopt (ignored): Permission denied)

We are developing a Magento application that has a module that works with FTP. Today we deployed this on the testing environment which is setup in the following way: Gateway server which has the ...
0
votes
1answer
143 views

iptables Port Forwarding Not Working

I have a server that I configured to be a router (Debian 7 Stable). eth0 is hooked up to my cable modem, and eth1 is hooked up to a 24-port switch. DHCP,DNS,Routing,Traffic all work fine. The only ...
2
votes
1answer
543 views

OpenVPN bypass on some ports

This is my first question here, so please be kind :-). I have a server running Debian 7 and I would like to connect to a VPN and let all the traffic pass via the VPN except for some ports (SSH, ...
3
votes
2answers
1k views

Debian 'ignores' /etc/network/if-pre-up.d/iptables

I want my iptables rules to automatically be loaded on startup. According to the wiki on Debian this can be done by placing a script with the name iptables in /etc/network/if-pre-up.d/ So I did, this ...
0
votes
1answer
84 views

Forwarded packets don't include their original IP address [closed]

I have a dedicated machine which has 2 VMs running. Host A (Router): eth0 192.0.2.8 eth1 10.0.0.1 and I have Host B(Application Server) eth0 10.0.0.2 My IPTables config is: modprobe iptable_nat ...
1
vote
1answer
135 views

How to block outgoing traffic of the mac address of one of the server's own NIC with ip tables?

i have a server with 5 nics connected to a switch, and running GNS3 (cisco router emulator). I need to block, in the server, the packets originated by the nics at layer 2 level (the nics are not ...
0
votes
1answer
94 views

Unable to ping gateway from network

I got the following route table : #!/bin/bash IP=/sbin/ip # SST echo "SST: Setting up SST network ..." $IP route flush table 10 $IP route add table 10 to 10.45.13.0/26 dev eth0 $IP route add table ...
-1
votes
2answers
323 views

Dnsmasq not distributing address as dhcp server [closed]

I have a Debian Linux server connected with ethernet cable to a Netgear Access Point (Wnr2000). I want all users wirelessly connected to the access point to have the Debian Linux server as gateway. ...
0
votes
1answer
132 views

Unable to access Tomcat6 from outside the server

I've just installed Tomcat6 on my Debian Linux server (with OpenJDK), which also has an Apache server installed on the same machine. I haven't strayed from the default settings, so it would be setup ...
-1
votes
1answer
75 views

Debian 6, ports closed anyway

I ran all the following commands iptables -F iptables -X iptables -t nat -F iptables -t nat -X iptables -t mangle -F iptables -t mangle -X iptables -P INPUT ACCEPT iptables -P OUTPUT ...
0
votes
2answers
63 views

How to open all ports for specific length of time?

I'd like to open all ports for specific user for specific length of time using IPtable. The current rule i have is: $IPTABLES -A FORWARD -i $LAN_IF -o $OUTSIDE_IF -p tcp -s 192.168.10.34 -m state ...
0
votes
2answers
147 views

Debian router drops connection [closed]

I have a home network with a debian server running kernel 3.8 setup as a router, doing DHCP, DNS-caching, samba and Squid. The motherboard is a Gigabyte GA-Z77X-UD5H with two ethernet ports, one Intel ...
0
votes
1answer
41 views

IPTABLES doesn't store the ip address entered inside the rule

I'm working on a debian server and when i add the following rules to forward a port to a lan address: iptables -t nat -I PREROUTING -p tcp -d 192.168.1.1 --dport 3385 -j DNAT --to-destination ...
0
votes
1answer
263 views

Using iptables to forward traffic to a single IP address

The setup: Debian; acting as the network's router using iptables, fail2ban Because of external requirements, both networks are 192.168.1.x. eth0: 192.168.1.1 eth1: 192.168.1.2 Ubuntu (192.168.1.3) ...
0
votes
2answers
253 views

stop IPTABLES from prerouting to local IPs

I'm running a proxmox server and I'm redirecting ports to internal virtual machines via IPTABLES. I'm following instructions here ...
2
votes
1answer
423 views

Dom0 not forwarding to DomU

The situation: DomU: Debian SID /etc/network/interfaces auto eth0 iface eth0 inet static address x.x.x.55 gateway x.x.x.49 netmask 255.255.255.255 pointopoint x.x.x.49 Ping DomU -> x.x.x.49 ...
0
votes
2answers
508 views

how can I block all traffic that is coming to and from an IP address using iptables

I am trying to block all traffic that is both coming and going to an internal IP address (this server acts as a router for the network). so far I have tried the following: iptables -A INPUT -s ...
-1
votes
1answer
98 views

is there a way to prevent mac spoofing using debian [duplicate]

I have a debian server that acts as a router for a network, and I am planning on making it so I am able to block network access for certain computers, what do you think would be the best way to do it? ...