iptables is the userspace command line program used to configure the Linux 2.4.x and 2.6.x IPv4 packet filtering ruleset. It is targeted towards system administrators. Please, when asking a question about iptables, add the output from the following command: iptables -L -v -n

learn more… | top users | synonyms (1)

0
votes
0answers
232 views

iptables redirect to 80 but origin port is still available

I've got a node.js process running at port 9500. I'm using iptables to redirect 80 to 9500 so - iptables -t nat -L outputs: Chain PREROUTING (policy ACCEPT) target prot opt source ...
0
votes
0answers
38 views

Redirection of nfstraffic to different host ip

I am setting up an environment with NFS. I have a setting where a SVR1 has two interfaces. I receive NFS-requests on one interface(192.168.122.2). I need to redirect these nfs request via the other ...
0
votes
0answers
75 views

OpenVPN advanced privileged client access customization

I have implemented an OpenVPN server running on Tomato router (Let's call the router TR) the OpenVPN server is using TUN interface which means connections between clients and servers are based on ...
0
votes
0answers
290 views

debian multiple network interface multiple networks

I have a virtual environment with 3 virtual machines on one host. One of my virtual machines has 2 network interface. I need the virtual machine with two interfaces to connect to two different ...
0
votes
0answers
92 views

customised client to client connection configuration inside OpenVPN server

I have two clients with common names [client_sina] and [client_extra] that are connecting to an OpenVPN server on remote place via (TUN21) running on Tomato Router The only physical port of the ...
0
votes
0answers
110 views

Couldn't load target `DNAT':No such file or directory

Trying to do some ipv6 nat and running into an error from ip6tables $ip6tables -t nat -N IPV6-BRIDGE $ip6tables -t nat -A PREROUTING -p all -d 2600:3c01::f03c:91ff:fe6e:2563 -j IPV6-BRIDGE $ip6tables ...
0
votes
0answers
45 views

Pinging to google.com from a particular interface

I am connected to the internet via wlan0(wifi) and also have an ethernet port(not connected to the internet). I am looking for some iptables rule / route addition, which will let me do a ping via eth1 ...
0
votes
0answers
358 views

Squid 3 - NetFilterInterception in cache.log

EDIT: after a day or so, it started happening again and I had to disable iptables for now cause everyone in the family was having no internet. I route all web traffic from my router (10.0.0.1) to my ...
0
votes
0answers
106 views

FTP Traffic routing through NAT prevents me from logging in

I need to send all FTP traffic to a particular server from a NAT. Server A connects via FTP to an IP which is routed to the NAT and then over a VPN. That traffic then comes back and gets routed from ...
0
votes
0answers
14 views

How to route packets from a service (media service) based on the UID of the app that is using media service using IPTABLES

I am redirecting application packets through different PDN's based on their UID's (Process ID's) using IPtables. So my App1 is using PDN1 for its data transmission. and App2 is using PDN2 for its ...
0
votes
0answers
347 views

OpenVPN on Ubuntu: IP Forwarding not working

I have successfully set up a VPN connection between a Windows 8 client and my Ubuntu server running OpenVPN. However, I just cannot get IP forwarding to work. I have adjusted all settings as desribed ...
0
votes
0answers
52 views

Forward connecting IP address to KVM guests

I'm running kvm with iptables configured to use DNAT and masquerading. However the guest machines are logging the host bridge ip not the connecting client IP address. Is there a way to configure ...
0
votes
0answers
108 views

Can't run CSF on the host machine using Open VZ

I managed to configure CSF on my three VM inside OpenVZ, but when I try to run it on the host, all the VMs become unreachable. I can see that the host is been attacked, and it would be critical if it ...
0
votes
0answers
63 views

enable user to connect to external pptp VPN server

I want to enable local user to connect to remote VPN server I added those rules to the iptables but still not able to connect -A OUTPUT -p gre -j ACCEPT -A OUTPUT -p tcp -m tcp --dport 1723 -j ACCEPT ...
0
votes
0answers
159 views

Load-balancing PPTP connections

I'm trying to load balance two PPTP connections, connected to the same server. I use the following script, but there is no send and receive via PPTP connections. What part am I doing wrong? Are there ...
0
votes
0answers
40 views

Output traffic on different alias based on user

I have a server running Debian with two IP addresses aliased on a single NIC. eth0 254.71.11.134 eth0:0 185.14.16.132 I want all traffic form a specific user to go through eth0:0. I figure I ...
0
votes
0answers
155 views

redirect http traffic through ppp0(vpn tunnel)

So I have this tunnel connection with a VPN on interface ppp0, I need to redirect the traffic through that vpn, of course if I do route add default dev ppp0 it will redirect all the traffic through ...
0
votes
0answers
103 views

Connecting to Webserver(Nginx) from within GuestOS (VMware Player+ NAT) inside Debian from outside

I currently have a Server (Debian 7.3 , Kernel 3.2.0-4-amd64) with VMware Player 6 installed which is hosting a guest OS(Ubuntu Server) with Nginx running on it. I want the NGINX to serve webcontent ...
0
votes
0answers
208 views

OpenWRT and multple WANs: active/open connections doesn't update when alternate WAN

Here is my scenario: I have a OpenWRT Backfire 10.03 installed on a Mikrotik RB411U. I have two WANs: a 3G and a wifi. The eth0 interface is my lan. I configured the iptables to MASQUERED both WANs: ...
0
votes
0answers
72 views

openvpn doesnt start due to iptables and mangle (VMware)

I have installed openvpnas on redhat5.10 via the package from openvpn. When I start the server it will start the webserver for administration but it wont start the the openvpn service. So I did my ...
0
votes
0answers
196 views

xen and port forwarding from dom0 to domU

I have a server running Xen with the following network configuration root@ubuntu:~# cat /etc/network/interfaces # The loopback network interface auto lo iface lo inet loopback auto xenbr0 iface ...
0
votes
0answers
56 views

Iptables being changed without rebooting

I configured a tunnel between my network and a remote network with OpenSwan. On my tunnel endpoint, running on Ubuntu, I added iptables rules to disable source NAT (SNAT) when the destination was the ...
0
votes
0answers
113 views

macvlan on host, macvtap guest, routing via host gives error

I have a setup on CentOS 6.5 Host configuration: macvlan0-> 10.0.0.2/24 ppp0 -> connected to the internet Guest configuration macvtap0-> 10.0.0.4/24 gateway -> 10.0.0.2 Other host ...
0
votes
0answers
125 views

How to set mark on packet when forwarding it in nat prerouting table with rp filter 0?

I have a serious problem with my server ubuntu 13. I have two ADSL lines and an internal network as follows. i.imgur.com/v4ddHXf.png (URL IMG) IP redirections made ​​two because there are two older ...
0
votes
0answers
74 views

Multiple routes and gateways with NAT

My setup is a VM host with two network interfaces where I want to use one as private/internal and the other one as public (which will get a public address on the host), where all the NAT magic to the ...
0
votes
0answers
172 views

Unable to access Splunk via port number on Ubuntu 12.04

Ubuntu 12.04 Server x64 & Splunk 6.0 I installed Splunk according to the documentation. Started Splunk as directed and I am able to see it running in the terminal. I believe I correctly added the ...
0
votes
0answers
85 views

iptables only partially redirecting ports

I am moving over everything that uses port 80 to port 9000 on my server, so I configured my apache + it's virtual hosts to listen to 9000 using ip xx.xx.xx.106, and I set up my iptables to preroute ...
0
votes
0answers
180 views

Using iptables to log traffic from port mirroring

I configured one port of my switch to do port mirroring of the other ports. I connected to this port mirroring a server where iptables has some rules. If some rules are matched, iptables sends to the ...
0
votes
0answers
98 views

iptables 1.4.12 invert and --u32

This line in a script: iptables -A jk2_ddos -m u32 ! --u32 "0x1c=0xffffffff" -j ACCEPT will result in this error: iptables v1.4.12: u32: option "--u32" cannot be inverted. This seems not to ...
0
votes
0answers
134 views

Why is an ack response being sent to the wrong gateway?

I was trying to determine why a packet forwarded by iptables to my internal lan is returned on the wrong gateway. Having investigated this further, I determined that, at least in the case of one of ...
0
votes
0answers
219 views

Routing outgoing HTTP/HTTPS traffic over a different subnet

I am trying to set up a Linux Server which was initially only supposed to be in one "server-subnet". However I am forced to use a proxy to access HTTP/HTTPS services in this subnet, which causes a lot ...
0
votes
0answers
59 views

Where can I find the range of IP addresses of my container OpenVZ

I'm looking for the "range of IP addresses of my container"... Where can I find those ? /etc/network/interfaces ? ifconfig ? I don't know and I can't find any answers... I need it for this tutorial ...
0
votes
0answers
41 views

IPTABLES Limiting destination based on source?

I am trying to have a bridge firewall between my network and IPMIs. I want to be able to limit the allowable destinations, e.g. IP x.x.x.x has access to x.x.y.y and x.x.y.z but no others while IP ...
0
votes
0answers
1k views

CentOS 6.4 - Cant get an IP from DHCP

I have a Ubuntu and CentOS system running on XenServer. The Ubuntu Box gets and IP from DHCP no problem. The CentOS will not take a DHCP but a static address works fine. [root@XenCentOS ~]# service ...
0
votes
0answers
375 views

Tomato RT-N16 - How to Prevent Multicast Packets from Reaching OpenVPN clients (TAP)

We have a remote (like in the woods) client using a VPN connection to connect to our office, using this link we can monitor and operate the remote client without a few hours drive in the wild. This ...
0
votes
0answers
264 views

Socksify TCP connections reaching a gateway IP — preferably without iptables

I have Virtualbox installed on Debian with a few virtual machines. I can't install anything in the guests, and I use host only networking, vboxnet0. The host IP in the host network is 192.168.56.1, ...
0
votes
0answers
110 views

Why does firehol generate an iptables ACCEPT rule on top?

Firehol generates iptables rules from a convenient configuration file. In my /etc/firehol/firehol.conf I have the following very simple configuration to allow incoming connections on http, https and ...
0
votes
0answers
260 views

OpenVPN on Ubuntu 12.04 - unable to connect to internet

I'm trying to use OpenVPN on my Ubuntu 12.04 web server, but as soon as OpenVPN is running, I can't connect to the internet. Befor starting OpenVPN, route says: Kernel IP routing table Destination ...
0
votes
0answers
37 views

Can IPtable be used to route the packets to a specific ipaddress

I have a server which has a iptables that maps all the incoming requests on port 443 to one of the configured process in round robin. The process to which request is routed via iptable , establishes ...
0
votes
0answers
248 views

Squid SSL Protocol error

What is the issue of this error in Squid? (I Don't find anything in google) The system returned: (71) Protocol error The remote host or network may be down. Please try the request again. my ...
0
votes
0answers
41 views

Add iptable rule before networking starts on Ubuntu Server

I have a Ubuntu 10.10 server. I have an iptable rule that needs to get added before networking is started. How can I do that? I've tried this: ...
0
votes
0answers
69 views

iptable-save exported rule from another system doesn't get restored in new system

I built kernel and user parts of iptables 1.4.3.2 (to add layer 7). . I have another iptable 1.4.8 and I want to move rule from the system which is 1.4.8 to 1.4.3.2. I use iptables-save and ...
0
votes
0answers
100 views

KVM directly connect to guests without passing router

I have a KVM host running 5 virtual servers. Each virtual server is using a separate bridge interface, like br0, br1, br3... Each virtual server has a own public IP. Now, I would like to be able to ...
0
votes
0answers
212 views

using iptables to secure asterisk

Following the post at http://www.dslreports.com/forum/r26964868- I created some IP tables for my asterisk install. The server is behind a router and the router only had 5060 and the RTP ports ...
0
votes
0answers
115 views

how to use two squid proxy by iptables

I have two Linux machines with squid installed: 192.168.0.60:3128 and 192.168.0.70:3128. I want to setup a transparent proxy: 192.168.0.60:3128 to deal with http protocol 192.168.0.70:3128 to deal ...
0
votes
0answers
371 views

fail2ban is failing to ban apache IP pattern

I just noticed that fail2ban reports it 'banned' an IP address doing the following: 183.60.48.25 - - [03/Jul/2013:10:14:26 -0700] "GET http://www.baidu.com/ HTTP/1.1" 200 5112 183.60.48.25 - - ...
0
votes
0answers
157 views

How to allow only a country on APF

How I can block all countries and just allow connections from IPs from Brazil to my server using APF? I've searched some ways but none are using APF at all. Some of them make me download a huge list, ...
0
votes
0answers
1k views

FTP not listing files behind firewall (setsockopt (ignored): Permission denied)

We are developing a Magento application that has a module that works with FTP. Today we deployed this on the testing environment which is setup in the following way: Gateway server which has the ...
0
votes
0answers
132 views

Open port and route incoming traffic back to the connected client - OpenVPN

I did my own VPN setup on a CentOS box and it's working very nice and smooth. However I would like to add a feature that I open a specified port on the box for the incoming traffic that should be ...
0
votes
0answers
122 views

Copy files from EC2 instance to remote dedicated server

I'm having trouble copying several very large sql dumps via SSH I used this command: /usr/bin/scp -P 2382 /ec2/path/file.sql root@$123.45.67.890:/remote/file/path/ And also /usr/bin/scp -P 2382 -i ...