Linux Networking refers to any networking function performed by a server running Linux. A Linux server operating as a router or firewall are the most common applications.

learn more… | top users | synonyms

3
votes
1answer
49 views

Find network percentage of NIC [closed]

So I have created a Linux resource monitoring tool that pulls various resource information. One of the fields I am trying to pull is the percent of network throughput on my NIC. So if I have a 1 ...
3
votes
1answer
48 views

Route Between Two Virtual Interfaces on one NIC Linux

I have an Ubuntu machine that is my firewall The Machine has 2 NIC Cards. eth0 and eth1. eth1 is connected to a modem that gives it an IP of 10.10.1.X eth1 is required to provide DHCP on 192.168.2.X ...
3
votes
1answer
145 views

how to realize a traffic volume limit with linux

I am helping to organize a little conference. There is no internet connection, so we are limited to a mobile LTE connection with a limited volume. We have a Ubuntu-based server that acts as a router, ...
3
votes
1answer
34 views

Please clarify for me how tcpwrappers works

We've recently gone through a security audit and among several valid and other, quite pointless findings is one that states that tcpwrappers is not disabled. I've never used tcpwrappers so I don't ...
3
votes
3answers
5k views

How can I achieve OpenVPN client routing without NAT on Linode

I've set up an OpenVPN network, and it is working properly in the sense that I can access the inner/LAN machines from the remote client. However, my problem is that all traffic from the remote ...
3
votes
1answer
842 views

Split tunneling through two VPNs simeltaneously

I want to run two OpenVPN client instances on an Ubuntu Server 14.04. I have both .conf files that can work independently (both are set to different interfaces - tun0 and tun1). I want to run both at ...
3
votes
1answer
7k views

Diagnosing packet loss / high latency in Ubuntu

We have a Linux box (Ubuntu 12.04) running Nginx (1.5.2), which acts as a reverse proxy/load balancer to some Tornado and Apache hosts. The upstream servers are physically and logically close (same ...
3
votes
1answer
1k views

Unable to set proxy to “subscription-manager repos --list” -command

I have RHEL6 system that is registered to rhn via subscription-manager. I'am trying to install package java-1.6.0-sun-devel which is in rhel-6-server-optional-rpms repository, According to this Redhat ...
3
votes
1answer
1k views

Configure IPv6 routing

I've got IPv6 addresses from SIXXS. My host is connected with SIXXS network over a AICCU tunnel ("sixxs" interface). My host address is 2001:::2, the host on the end has address 2001:::1. On my host ...
3
votes
1answer
3k views

What is the difference between MULTICAST and ALLMULTI ifconfig ifconfig flags

What is the precise difference between the ifconfig flags MULTICAST and ALLMULTI? Also How do I change the default flags under Ubuntu?
3
votes
2answers
137 views

Why can I not exceed 32k or 65k TIME-WAIT connections?

I've been trying to tune up our Ubuntu 14.04 LTS web server instances, hosting both web applications and reverse-proxying nginx, to handle as many req/s as possible with the given hardware. It's a ...
3
votes
2answers
271 views

same subnet,different VLAN in Virtual machine

I have 2 VLAN,VLAN 100 and 101 but only one subnet i am trying to make this work with virtual machine so that VM will have two IP address in same subnet but will actually be in two VLAN. steps ...
3
votes
2answers
221 views

how to prevent any service to bind to a given interface?

I need to set up a server (preferably RedHat/CentOS/Fedora but the Debian family would work out as well) with no services available on a given interface. I cannot use iptables (which would be the ...
3
votes
1answer
416 views

What's the expected behaviour of multiple hostname entries with different IP addresses in /etc/hosts?

I know this has been discussed in several places, but there doesn't seem to be a definitive answer yet - at least not for RHEL 6. I'm just hoping someone might be able to point to how it's working so ...
3
votes
1answer
548 views

Why rinetd is working locally but not working remotly?

/etc/rinetd.conf 0.0.0.0 443 10.30.224.7 636 allow * >lsop -i|grep rinetd rinetd 27099 root 4u IPv4 2553556 TCP *:https (LISTEN) Also iptables -L -n returns nothings. Still, ...
3
votes
2answers
3k views

Delete specific conntrack entries?

in a multi-ISP configuration, I'm routing and NATing specific traffic, e.g. VoIP, through specific interface - to a distinct provider. When one of the interfaces (or routes) becomes unavailable, all ...
3
votes
2answers
11k views

I'm having problems getting CentOS to recognize an Intel Ethernet card. Any suggestions please?

I have a dual-port Intel Pro/1000 (82571EB) PCIe card. I've installed in into a Dell PowerEdge 1950 running CentOS 6.2 x64. The card is detected and the kernel module is loaded, but a start-up ...
3
votes
2answers
5k views

Why is my second PCIe network card not recognized by Linux?

The machine is an IBM ThinkCentre (model 8115LUA) with two PCI slots - x1 and x16 if I recall (the designations) correctly. There are two identical network cards in these PCIe slots. Initially, the ...
3
votes
3answers
1k views

How to Hide OS Fingerprint of Virtual Machine?

Is it possible to make a linux virtual machine appear as the host machine to a network tool like nmap or Blue's Port Scanner without recompiling the kernel?
3
votes
1answer
50 views

How to properly permanent enable ip forwarding in Linux with systemd?

I try to enable ip forwarding (between enp0s3 and tun0 interfaces) and write net.ipv4.ip_forward = 1 in /etc/sysctl.conf. After restart I have $ cat /proc/sys/net/ipv4/ip_forward 1 But forwarding ...
3
votes
1answer
30 views

How to setup embedded Linux private vlan

I am trying to setup a vlan between 2 embedded Linux SOCs on wireless IPTV STB (set top box) using vconfig. The physical connection between the SOCs is a Marvell 88E60xx switch. The issue is that the ...
3
votes
0answers
67 views

What would cause named to send out hundreds of bogus responses?

My DNS server running RHEL 6.6 is actively sending unsolicited DNS responses to a couple of IP's. By unsolicited I mean that there is no incoming request from the external IP, the DNS server seems to ...
3
votes
0answers
26 views

What's the recommended way to restrict Internet access per process using SELinux?

Before I have tried to do this using a phony user and iptables to execute commands that needs to be restricted. However now the commands need to read configuration set by each user's environment vars ...
3
votes
0answers
22 views

Linux: What is the right way to configure the HOSTNAME directive in /etc/sysconfig/network? [duplicate]

There's a (quiet) argument between me and my boss in regard to the right way to configure HOSTNAME directive in /etc/sysconfig/network file: As far as I know, in the HOSTNAME directive you should ...
3
votes
0answers
160 views

Hyper-V lost synthetic NIC after Debian 8 dist-upgrade?

I'm running a Debian 8 vm on Hyper-V (Win Srv 2012R2) and when I did a dist-upgrade of stable, I lost all network connectivity. Using the console, I was able to see the network interfaces as UP but ...
3
votes
1answer
147 views

When is route lookup performed when a packet flows through iptables?

Iptables is often illustrated using diagram I fail to understand when route lookup (routing tables) is performed: inside the "Routing Decision" grey boxes? If so, does it mean a packet is routed ...
3
votes
1answer
147 views

Linux Server Virtual Ethernet interface stops responding to arp requests

I'm hoping someone has had this issue before as it is driving me nuts. I have 2500 linux embedded Linux servers. We use these servers partly to act as gateways to other devices sat on a private ...
3
votes
1answer
868 views

Limiting bandwidth with hashlimit (e.g. kb/s — not connections!) doesn't work, though the man page says it should

According to the iptables-extensions man page hashlimit can do bandwidth limiting: "flows exceeding 512kbyte/s" => --hashlimit-mode srcip,dstip,srcport,dstport --hashlimit-above 512kb/s ...
3
votes
1answer
738 views

qemu with tun virtual networking issues

I'm trying to setup a virtual networking environment using open-wrt qemu and vde2 The script to boot two qemu instances and conenct them together is the following ...
3
votes
1answer
223 views

Buffer-stuffing denial-of-service attack

I started seeing this odd sort of effect that resembles denial-of-service attack against a Linux server. The effect is that the network becomes at least partially unusable very much the same as what ...
3
votes
2answers
311 views

Traffic not routing as expected

In the following output, why does vpn1 route/ping to 10.100.0.1 instead of to 10.100.0.112? 10.100.0.1 is network gateway with no nat. 10.100.0.112 is dual home host with nat enabled. root@vpn1:~# ...
2
votes
3answers
428 views

Which private IP addresses can I use? [closed]

I have a dedicated server where I'm running several web-facing virtual machines on public IP addresses; I pay my hosting provider for each IP. I would also like to run virtual machines with private ...
2
votes
4answers
4k views

How to change persistent-net-generator.rules to be PCI bus dependent and not MAC based?

I am using CentOS 6.2 with VMware. I often have to clone my systems. Every time I clone it is adds a new rule to 70-persistent-net.rules file like so. SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ...
2
votes
2answers
686 views

Stop China from connecting to my Google Compute Engine server

My company has a Google Compute Engine server hosted in North America. We get so many Chinese IP addresses sending requests to port 11 that it is costing us money for the ingress. Our firewall blocks ...
2
votes
2answers
4k views

Server becomes unreachable and comes back up on its own (most likely a network issue)

I'm having a strange problem with a server I have sitting at my workplace (it's behind a NAT, if that's important). The issue is that at some times, it becomes unreachable and then comes back up ...
2
votes
6answers
2k views

How can I restrict SSH access when the source IP is dynamic

I want to protect SSH access to our live web server from all IP's except our office static IP. There are some employees who connects to this live server from their dynamic IP's. So, it is not always ...
2
votes
3answers
3k views

How to find out capacity for network interfaces?

I could get the capacity for the network interface by lshw, but which file in sysfs is this information stored(i.e. which file in /sys/class/net/eth0/device/ directory)? $ sudo lshw -class network ...
2
votes
1answer
104 views

How can I Nat certain boxes in my datacenter so that they are coming from a single IP

I want to NAT a certain group of servers in my datacenter so that they all access clients from a single IP. This will make it much easier for documentation that we provide clients. However there ...
2
votes
3answers
194 views

Linux networking essentials

Can someone suggest a book which contains all the essentials required for linux networking. I need something that common to all linux distributions rather than specific distribution. Thank you Bala
2
votes
3answers
168 views

Is it wise to use OpenVPN to connect remote web servers?

I have a number of remote hosted servers for various purposes--web and application servers. I effectively want a "management network" of sorts so I can simplify tasks like log collection and package ...
2
votes
2answers
405 views

DNS points to the right IP, but I can't connect using DNS

UPDATE: This is now strictly a local problem, connecting remotely works (a dumb mistake I made.) I think it's now it's a loopback issue, which is a different issue, and likely answered in another ...
2
votes
2answers
143 views

IPtables NAT puzzler: Why is traffic from the firewall host being NATed even though it's not coming from one of the prescribed source addresses?

I run a small network where a linux web/mail server also provides NAT for a collection of windows boxes. One of these windows machines is apparently misbehaving (ZeroAccess botnet even though I can't ...
2
votes
1answer
1k views

iptables: why only OUTPUT rules are needed for samba clients?

I tried the following iptables rules for samba client and they worked. Please note that policy for INPUT, OUTPUT and FORWARD were all set to DROP iptables -A OUTPUT -m state --state NEW,ESTABLISHED ...
2
votes
1answer
4k views

how to setup subdomains for AWS EC2 Ubuntu Instance?

I am trying to setup subdomains for my AWS EC2 ubuntu instance, but without enough knowledge I couldn't proceed anymore. I have a parked domain name example.com on a domain name service provider. My ...
2
votes
3answers
2k views

Server sending out packets bigger then MTU

I have a server that I am transferring data off of. We were having some problems that were traced back to the fact that the server is sending out jumbo size frames despite the fact that ifconfig is ...
2
votes
5answers
14k views

ubuntu server 12.04 can not remove dhcp-client

When I change network from dhcp to static, it will periodically change IP to the dhcp configuration and ignore the configuration of /etc/network/interface. So I want to remove the dhcp-client, ...
2
votes
1answer
2k views

Port appears open locally but closed from another machine

I am currently trying to set up a Hadoop distributed compute cluster on my network. Currently. my cluster nodes are encountering a problem communicating with my master server. Right now I am working ...
2
votes
1answer
2k views

Eth0 Interface Not Coming Up on Fedora 14

I'm trying to upgrade some old Fedora 13 servers to Fedora 14 following Fedora's docs. The yum commands ran very quickly and seemingly without error. However, when I rebooted after finishing the ...
2
votes
1answer
911 views

How to change netmask with iproute2?

With ifconfig we can change the netmask with the folowing: ifconfig eth0 netmask <new netmask> How can we do this with the command ip? I know ifconfig is deprecated and this mostly why I ...
2
votes
2answers
414 views

Using linux server as router for network

I would like to setup my Debian Lenny server as a router for my home network using iptables, but so far have been unsuccessful. Below is a diagram of the desired network architecture INTERNET - ...