Linux Networking refers to any networking function performed by a server running Linux. A Linux server operating as a router or firewall are the most common applications.

learn more… | top users | synonyms

1
vote
2answers
107 views

How do I throttle network activity in Linux?

How do I throttle network activity, system-wide? Say, I'm running rsync on a large archive with a cron, or a torrent server, or both. It's important that these activities will be running, but they ...
1
vote
1answer
306 views

Running a custom script when StrongSwan connection is established

I have StrongSwan VPN server set up on a Debian host, and would like to run a custom script when a client connects to it. The only thing I have come up with is periodically checking the contents of ...
8
votes
1answer
318 views

TCP packet being retransmitted 7 times when sysctl tcp_retries1 is set to 3 - why?

Ubuntu 12.04 I am trying to better understand how many times TCP will attempt to retransmit a packet when it does not receive confirmation the destination received it. After reading the tcp man page ...
1
vote
1answer
139 views

What's the difference between eth0:1 and 2nd eth0?

In Ubuntu server, I configured eth0:1 like this in /etc/network/interfaces file # The primary network interface auto eth0 iface eth0 inet static address 192.168.1.111 netmask ...
0
votes
0answers
29 views

Do I need a firewall if the service doesn't listen on all interfaces? [duplicate]

Short version: I have a CentOS 6.5 with two NICs, one connected to the internet and one connected to the internal network. The services that shouldn't be accessible to the internet don't listen on ...
0
votes
3answers
71 views

benefits of iptables on VPS? [duplicate]

Say I have a well updated Linux VPS serving HTTP content on port 80 using apache. What would I gain by enabling IPtables? I can see no obscurity gains since the machine has a port open. Also, since ...
0
votes
2answers
138 views

Http Persistent Connection (keep-alive) and port numbers

Is a persistent http connection (keep-alive), always bound to a specific port, or can it use a range of ports?
0
votes
2answers
56 views

APF and iptables on router - disallow SSH on specific subnet host

I have a CentOS terminal working as a router with APF installed. Also 1 terminal with 3 NICs (3 IPs) is using that router as a Gateway to access the internet. What I want is APF to block SSH access, ...
0
votes
1answer
188 views

Mininet additional veth pair between host and server

For those who don’t know - Mininet is a tool that allows for the automated creation of multiple OVS switches, chroot linux ‘containers’ as hosts and links them all together to prototype OVS powered ...
0
votes
1answer
148 views

Linux IPSec between Amazon EC2 instances on same subnet

I have a requirement to secure all communications between our Linux instances on Amazon EC2 - we need to treat the EC2 network as compromised and therefore want to protect the data that's being ...
1
vote
0answers
209 views

iptables - hashlimits, why it calculate all to seconds

I've tried to set 'synflood' limits with hashlimits, those are my snippet of rules: iptables -A SYNFLOOD_CHECK -p tcp --syn -m hashlimit --hashlimit-above 10/s --hashlimit-burst 6 \ ...
1
vote
1answer
2k views

Unable to add a static route: SIOADDRT: Network is unreachable

I've been bashing my head against a wall for a few days trying to figure this out: My ifconfig is: eth0 Link encap:Ethernet HWaddr 00:50:56:BB:XX:XX inet addr:192.168.36.132 ...
0
votes
1answer
80 views

IPTables: Firewall with just one Eth device? [closed]

Admittedly I am a novice in the area of firewalls. But I have read on the IPtables and Firewall theory and command options. There is a general diagram by Rusty Russell, the creator of IPtables: ...
2
votes
2answers
492 views

ARP responds with single MAC address on Linux server with multiple interfaces on the same network

Linux server has 2 active network interfaces: IF:eth1 IP:192.168.1.1/24 MAC:11:11:11:11:11:11 (1GbE) IF:eth2 IP:192.168.1.2/24 MAC:22:22:22:22:22:22 (10GbE) The idea is that the ...
0
votes
1answer
44 views

Forward a host network traffic to another host with the exception of the ssh service

I am trying to redirect all the network traffic received in a old host to a different new host. For that i created two new rules on iptables of the old host: echo 1 > /proc/sys/net/ipv4/ip_forward ...
1
vote
0answers
184 views

Proxmox internal network configuration

We have several servers (with one nic) staying in one rack in hetzner. Proxmox is installed on each one, and they are combined in proxmox cluster. The goal is to create network, between virtual ...
3
votes
1answer
230 views

How to ping ipv6 interface

I'm trying to get familiar with ipv6 I don't understand why I can't ping this interface at the inet6 addr eth1 Link encap:Ethernet HWaddr 08:00:27:77:9e:77 inet addr:192.168.33.10 ...
2
votes
1answer
211 views

Automatically acquire IPV6 address in CentOS 6

The network has fixed IPv4 address, and automatic acquired IPv6 address. Does anyone have an idea how to setup? Thanks a lot! I didn't use NetworkManager. The following is my setting, but it does not ...
0
votes
0answers
90 views

CentOS 6.5 with Oracle XE in virtualenv

I'm running a CentOS 6.5 with installed Oracle-XE. I created a virtualenv where I run my Django-NGINX-Gunicorn Webserver. Locally I can access XE via SQL Developer but when I try to access the ...
0
votes
1answer
82 views

How can I configure iptables to forward and forget?

I'm trying to create a front controller where users can connect to a specific port and have their connection redirected to a different IP/port. The reason I'd like to be able to do this is for ...
1
vote
2answers
296 views

Routing Internet traffic through computer on another subnet

Ubuntu box server has 2 network interfaces: eth0 50.57.71.100 eth1 10.182.161.100 Ubuntu box client has 1 network interface: eth0 10.177.30.100 server and client can already talk to each other ...
1
vote
0answers
29 views

Improbably high bitrate in the output of “iw wlan0 link”

I am trying to determine the bitrate of a wireless connection that uses the nl80211 driver on a Linux 2.6.39 machine. I am actually using a Netlink socket internally, but the effect is the same as ...
0
votes
1answer
121 views

Tunnel interface inside Virtualbox IP forwarding

I am working on a solution to expose a development stack that resides inside a Virtualbox guest up to the Internet through OpenVPN tunnels. OpenVPN client fires up inside the guest VM and connects ...
1
vote
2answers
52 views

Network Buffer Usage

I am facing some issues with my Application, and am curious to know the network buffer usage at any given moment. I am using a CentOS 6 linux Machine. I know the Default values are present in ...
0
votes
2answers
45 views

SCP version of - ssh -A -t -l root 192.16.4.9 ssh -A -t node-17

I'm on a vpn. I ssh to a machine through another machine like so ssh -A -t -l bob 192.16.4.9 ssh -A -t node-17 I now need to scp a file from node-17:/tmp/something. How can I do the above in one ...
0
votes
0answers
29 views

Routing traffic based on source (Linux)

I have two interfaces on my server; eth0, wich has one public IP address; and eth1, on which 3 IPS are attached. What I'd like to achieve is route traffic coming to the public address configured on ...
1
vote
1answer
38 views

Sharing a file system, or how to horizontally scale access to files

My API mostly serves up stuff from the database, but a big part of the product is generating images by combining SVG files with large pattern fills (~50MB tiff files). The API can scale ...
0
votes
1answer
46 views

Unable to nmap open port. IPTables has it listed as open

I have an IPtables firewall set up on a single system. I'm trying to nmap it with the following command: sudo nmap -Pn -A (IP addr) I expect everything incoming to be filtered except for ports 22 ...
0
votes
1answer
41 views

Command “ip rule show” not showing anything

I try to list all routing rules, and as far as I know this should be accomplished with the "ip rule show" command. In my case there is nothing returned (really nothing at all). Why? Could it have to ...
0
votes
2answers
38 views

Forwarding all connections to different address

I have a script that tries to connect to rabbitmq using default url and port (localhost:5672). Is it possible to make linux redirect all connections to this url and port to different server? I am ...
0
votes
0answers
45 views

Forward connecting IP address to KVM guests

I'm running kvm with iptables configured to use DNAT and masquerading. However the guest machines are logging the host bridge ip not the connecting client IP address. Is there a way to configure ...
0
votes
0answers
136 views

Configuring VRRP with keepalived on two machines - interaction with proxy arp

Let's assume we have the following topology for our network: Host1------- Router1-------Router2----------Router3-------Host2 and we want to configure vrrp on the two hosts with keepalived so that ...
2
votes
1answer
55 views

Is the ethx mac address of a VM the same as the mac address of the corresponding tap interface?

I have a single node openstack install on an ubuntu machine. For some reason that I cannot figure out, the linuxbridge is dropping packets from this VM. My iptables seem to be fine (atleast as far as ...
0
votes
0answers
66 views

CentOS 6 network failling to connect network after exporting VM from VirtualBox to VMWare Player

I have installed a CentOS 6 virtual machine in VirtualBox and I want to export it and use it under VMWare. But after exporting, network does not work. There are some other interfaces created with the ...
0
votes
0answers
88 views

VPN route works for browser, but not for Curl

I am using "Cisco AnyConnect Secure mobility Client" to set up a VPN connection. This works just fine for connecting web browsers, but when I tried doing the same connection with Curl I get: About ...
0
votes
0answers
7 views

rhel4 user not working on different domain

I am using a red hat server 4. Installed oracle on it for network database Previously when i was looging as root in gui and opening terminal it was showing like this $root@localhost> but now it ...
3
votes
2answers
1k views

Is it possible for L2TP VPN to do auto route configuration for client during connected?

We've setup a L2TP VPN server with this tutorial, everything works like a charm. The only issue is We don't want client to route all traffic using this VPN, only a particular subnet, e.g. ...
7
votes
1answer
295 views

Is ISP's Equipment Misconfigured? Getting Martian Packets on Internet Interface

We have a /28 block from our ISP. Let's say 1.1.1.240/28 with a gateway of 1.1.1.241. We are getting martian packets from another customer over at 1.1.1.214. They are sending broadcasts to 1.1.1.255. ...
0
votes
1answer
60 views

rsync works one way but not the other

I have a problem with using rsync. When I try to copy a remote file I get the following error: [home ~]$ rsync test.txt qnx: sh: rsync: cannot execute - No such file or directory rsync: connection ...
0
votes
0answers
122 views

QNAP LDAP server cannot change primary user group

We are setting up a new QNAP server in our office. We have set up NFS and LDAP to share users and files in a linux only network. The LDAP is giving us some trouble. As the default user group Domain ...
-1
votes
1answer
39 views

How to choose source IP from multiple virtual IP's based on specific destination

I am having two private IP attached to an interface. inet 10.255.0.127/24 brd 10.255.0.255 scope global eth1 inet 10.255.0.153/24 brd 10.255.0.255 scope global secondary eth1 When traffic leaves ...
0
votes
2answers
97 views

How do I set Securityonion/snort to not capture certain packets?

After looking through my pcaps from Security onion I'd like to filter out a host (let's call it 192.168.4.4) and filter out some traffic (ports 80 & 443), current project is to look at other ...
-2
votes
2answers
170 views

Iptables MASQUERADE: What is the advantage/disadvantage between these two commands? [closed]

What is the advantage/disadvantage between below 2 commands: iptables -t nat -A POSTROUTING -o eth0 -s 10.0.0.0/16 -j MASQUERADE AND iptables -t nat -A POSTROUTING -j MASQUERADE Some Background ...
1
vote
2answers
2k views

AWS VPC + IPtables + NAT: Port Forwarding is not working

Yesterday, I posted a question here but I think was not clear enough in my words. BTW, This question is not a duplicate. I have AWS VPC Setup as below. GOAL/PROBLEM: SSH to Server A from internet. ...
0
votes
2answers
93 views

Android/Linux Ping sends another packet before packet timeout

I have to send 10 packet & timeout for each packet should be 3 secs. As Android pings works on Linux ping commands, I am using below ping command in my application: ping -c 10 -W 3 -s 32 ...
0
votes
2answers
123 views

IPtables: Forward port to another host is not working

I am trying out something so this is my test setup: Setup: I have AWS VPC with a public and private subnet. I have a host in public subnet with a public IP address (say Host A) I have a host in ...
3
votes
2answers
339 views

Results of MTR on STDOUT?

I am trying out mtr (My traceroute) for educational purposes. However it is quite disturbing that I can't manage it to print results to stdout directly. Per default it opens a GTK-Window where it ...
1
vote
2answers
106 views

Red hat reporting more NICs than are physically present

We just deployed several servers (hp dl360p g8), and after the initial boot we're noticing that none of the network devices are showing up as cabled. Ethtool shows no link anywhere. Even more weird is ...
0
votes
2answers
75 views

Occasional Delay on Website Resources: Packet Loss Due to Bandwidth Cap?

My website loads more slowly than I think it should, due to a few of the assets taking an absurdly long time to download from the server. I've been trying to track down the cause of this. I'm about ...
0
votes
0answers
80 views

Tomcat fails to return syn requests to F5

I have an F5 LTM sitting in front of two tomcat servers which host 4 applications. When I initially create the pools and add the members to the LTM I can hit all applications. This is the weird part, ...