-2
votes
1answer
48 views

How to close port 8080 from all except ip 127.0.0.1

I am on Centos 6 with Nginx on port 80 and Apache2 behind him on port 8080. I've written an anti DDOS script which works fine when ip access port 80, but if attacker directly spams port 8080 ...
0
votes
0answers
10 views

CSF not blocking ports [closed]

Yesterday I've installed CSF on my VPS. I blocked many ports on my machine (allowing only these included in /etc/csf/csf.conf However, my services like teamspeak or mumble server are still able to be ...
-2
votes
3answers
36 views

How do I get iptables to allow a new port (for a webserver sockets handler)

In the local development server, I don't have any iptables rules (running on a Mac). The production server however, runs CentOS 6 with certain rules. I need to add a rule that allows the client to ...
0
votes
0answers
67 views

Trouble with port 80 nating (XenServer to WebServer VM)

I have a rent server running XenServer 6.2 I only have 1 public IP so i did some NAT to redirect ports 22 and 80 to my WebServer VM. I have a problem with the port 80 redirection. When i use this ...
-1
votes
1answer
32 views

how to 2 ip virtual in public dan private with forward to different destination

Here my case, Server 1 public IP in 1 box (eth0) -> 203.x.x.55/28 and 57/28 gw 203.x.x.49 private IP (eth1) -> 10.10.8.1 Server 2 private IP in 1 box (eth0) -> 10.10.8.5/24 and 7/24 gw 10.10.8.1 ...
1
vote
3answers
97 views

Despite of several attempts, unable to open port 25

This question may have been asked many times here but after several failed attempts, I repeat the history: How do I open port 25 port on my server running CentOS. Here is my iptables config: Chain ...
0
votes
1answer
88 views

Adding port 25 to iptables won't getting to open centOS

I am facing a problem to open port 25 with iptables on my CentOS machine. I checked the connection by 'nmap' and 'telnet' but both failed. The follow things I did to trying make this work: iptables ...
0
votes
1answer
703 views

iptables for Windows to redirect traffic

I am currently testing my server traffic and would like to route all incoming+outgoing traffic so as to be picked up by Burpsuite for analysis. Ideally, all traffic from ports 80 and 443 should be ...
-1
votes
2answers
344 views

Opened some ports with iptables but they aren't open

I'm running a Debian 7 server via Linode VPS, and have recently installed/configured a mail server using Postfix and Dovecot. The final step to complete this was to open up ports 993, 995, 465, and ...
0
votes
0answers
68 views

iptables only partially redirecting ports

I am moving over everything that uses port 80 to port 9000 on my server, so I configured my apache + it's virtual hosts to listen to 9000 using ip xx.xx.xx.106, and I set up my iptables to preroute ...
0
votes
1answer
29 views

Centos6 Alternate Apache/Virtual Host Config Alternate Port

I have an Apache2 + Virtual Host config that runs perfectly fine on port 80, but I'm trying to get the same setup to run on port 9000 instead. I went into my httpd.conf and changed the Listen line to ...
0
votes
0answers
132 views

Using iptables to log traffic from port mirroring

I configured one port of my switch to do port mirroring of the other ports. I connected to this port mirroring a server where iptables has some rules. If some rules are matched, iptables sends to the ...
0
votes
2answers
1k views

CentOS 6 and PostgreSQL - Can't Connect to Port

SOLUTION: it turns out the ORDER of iptables matters. The firth INPUT rule is REJECT all ... which precludes the ACCEPT rule. So I had to use iptables -I INPUT 5 ... to add the rule in the fifth ...
-2
votes
2answers
456 views

Ports do not open after rules appended in iptables [closed]

I have a server that I am trying to setup for OpenVPN. I have followed all the steps, but I see that when I try to connect to it in Windows, it doesn't allow me, it just hangs on connecting, so I did ...
0
votes
2answers
181 views

How to modify iptables so a port is accessible on the server

when I do curl --insecure https://localhost/svn from my linux box I can see that it is returning some data However, when I run curl on this machine from another machine on the same network e.g. ...
6
votes
3answers
314 views

What is the difference between these 2 iptables rules?

Trying to allow incoming ssh traffic on port 22. Default behavior is to DROP all incoming traffic. I came across 2 articles on how to allow traffic. However, they are different. ## open port ssh ...
0
votes
1answer
73 views

Iptables log clent IP to file

Im trying to track whether some ports are being used, and what by, as I want to close them. I have made some iptables traffic counters, and have worked out is a small amount of traffic, coming into a ...
9
votes
3answers
255 views

advantages in closing a port where no services are running

Are there advantages in closing a port where no services are running? What do I gain in terminating a connection at iptables level instead of what does it next (I guess OS).
0
votes
1answer
80 views

Redirecting port A -> B and blocking externally B

I want to redirect port A to port B and EXTERNALLY block port B. A = 9922 B = 22 (Yes, it's ssh, and NO I cannot change it in configuration.) I have three interfaces: lo (loopback) p36p1 ...
1
vote
1answer
341 views

Can Telnet to port 21 but not 25, 110

I am running postfix and dovecot on my Centos Mail server. Now I can send mail from the server to the outside, BUT I cannot receive mail from the outside. TELNET: When I telnet to my ip address to ...
1
vote
2answers
166 views

Limit FTP client ports?

Okay so I use the simple linux ftp client to download/upload files off ftp servers. I have an iptables firewall which blocks most of the ports and I have to close the firewall for it to work. Although ...
-1
votes
1answer
307 views

Iptables - source or destination check first?

So I'm running a server with iptables config and I've only been checking for destinations. Here is what the config structure is. Top of config has a list of ip addresses to drop followed by ...
0
votes
1answer
597 views

Block SSH access from specific countries

I found this handy script online, and would like to modify it to only block SSH access but I don't know anything about iptables and Im afraid Ill kill my system as i have no physical access to it. ...
-2
votes
1answer
117 views

How do iptables ports work? [closed]

Let's say, for instance, a user on the network makes a HTTP request to http://serverfault.com. I believe the destination port (dport) in this case is 80. What is the source port (sport)? If the user ...
-4
votes
1answer
363 views

Open Port 123 to change Server time [duplicate]

How can I actually open port 123 on my CentOS server, so I can synchronise my server with another server's time? I couldn't be able to open 123 port using google guides.
1
vote
1answer
383 views

Rewrite domain.com:3000 to port 80 with Apache

I'm hosting two applications on my web server, one is a Drupal site, and the other is an Errbit installation, which is a Ruby on Rails application. The URLs looks something like this: ...
0
votes
1answer
73 views

Whats wrong with my iptables?

Problem I cannot get requests to my server on port 80 to redirect to my client on port 8080 Server I am using a CentOS 6.3 VM as the server, the client is an Arduino Server eth0 - 172.16.145.139 ...
0
votes
2answers
1k views

ubuntu: open udp port 123

into my linux server (Ubuntu 8) I have top open the port 123 for ntp. I have write this into /etc/iptables.rules: :INPUT ACCEPT [7496:9080183] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [4393:322232] [0:0] ...
1
vote
1answer
322 views

Port 25 blocked but Firewall is off [duplicate]

OK so this is driving me crazy. Running sendmail on CentOS. It's running, and listening on 25: [root@mysqlslavebackup ~]# nmap -sS -O -sV 127.0.0.1 Starting Nmap 4.11 ( ...
1
vote
0answers
241 views

Static Public IP OpenVPN Client Needs to Accept Incoming Connections on His Public IP

I love serverfault, I have learned quite a bit from this website. Hopefully I can learn one more thing. OpenVPN Server has 30 Static WAN IP's each one has 1 user on it. Plus there is a main IP ...
0
votes
1answer
406 views

iptables forwarding port to internal IP

I'm using OpenVPN on a VPS which I want to forward incoming port 7999 from the external IP 198.23.248.150 to the internal IP 10.1.10.2 using iptables. I cannot seem to get the syntax correct and I ...
3
votes
1answer
171 views

Unable to access NTPD server except on loopback address Centos 6

I can only get results from: ntpq -p localhost or ntpq -p 127.0.0.1 If, from the same server, I try it as either the external IP address or domain name then it times out with no response. ntpq -p ...
-2
votes
1answer
73 views

How to configure iptables for must open ports? [closed]

In my machine there are 2 ws (web services) which can be accessed from any PC connected to in the same network (wifi for example) .. so i have to install iptables on the machine to prevent any call ...
0
votes
1answer
142 views

Running an email server on a VPN client, wanting traffic passed through for smtp, pop3,imap etc from vpn server.

I have a home broadband network which I also run an email server. As my provider won't give me a fixed ip address, and most servers refuse to accept smtp mail from dynamic ip ranges, I felt the simple ...
0
votes
1answer
271 views

Countermeasures versus incoming DNS reflection attack

i am currently experiencing a DNS reflection attack towards my server. I am getting a massive amount of answers via UDP from Port 53 that my server has never asked for: 02:53:57.626156 IP (tos ...
3
votes
1answer
513 views

iptables + TEE doesn't work correctly

On my server, I want to duplicate all the traffic to an other host. I use iptables with TEE module: iptables -t mangle -A PREROUTING -i eth0 -j TEE --gateway IP_SERVER2 I check the rule: iptables ...
0
votes
0answers
563 views

iptables denies internal access to port 17500

In the kernel log there are hundreds of these lines. The source is the external IP of the VPS (not localhost nor 127.0.0.1), other times an IP of the network of the VPS provider. The source port and ...
1
vote
3answers
331 views

Server Firewall preventing sending of email

The firewall on my VPS appears to be preventing my site from sending email. It was working fine until the end of last month. My hosting provider (Webfusion) has been next to useless. I am able to ...
1
vote
0answers
132 views

iptables forward filter through proxy [closed]

I'm block HTTPS Port in iptables: $IPTABLES -A FORWARD -p tcp --dport $HTTPS_PORT -j DROP $IPTABLES -A FORWARD -p tcp --sport $HTTPS_PORT -j DROP $IPTABLES -A FORWARD -p ALL -d $YOUTUBE_IP -j DROP ...
1
vote
1answer
672 views

Port redirection from 80 to 8080 using iptables not working

Good day, I had a Tomcat running on port 80 on a CentOS server with IP 10.33.46.68. When I tried to open "http://10.33.46.68" on my notebook I could see Tomcat welcome page. Then I changed Tomcat ...
1
vote
1answer
189 views

centos iptables, restrict tcp port to specific ips

I would like to modify the iptables on my CentOS 5.8 server so that only specific ips can connect to the machine on a specific port. Currently, I have the following in my iptables file: -A ...
2
votes
1answer
808 views

Sendmail & IpTable Rules

I need to setup IpTable Rules for a server with nginx, ssh and sendmail. Now, the problem is, with my rules I can not send emails to other hosts anymore. Emails to localhost do work, but sending to ...
1
vote
2answers
1k views

Cant forward port 443 to 8443 without allowing 8443 on ufw

I configured port forwarding through iptables and ufw. But there is something I do not understand, I just cant get iptables to forward port 443 to 8443 without allowing port 8443 on UFW. I want port ...
0
votes
2answers
152 views

Allow accessing to the port :8080 in iptable

I need to access to my website on port :8080 But for a reason, I can't : That's what looks like my iptable -L https://gist.github.com/28e7a48d91e933c6f377 After searching on serverfault, I've just ...
2
votes
2answers
1k views

iptables: Allow port range but deny to certain IP

I am running a server which needs UDP ports 1000:11000 opened, as well as TCP 10011 and 30033 open to function. I have a set of iptables rules set to allow SSH and those ports, and intentionally left ...
-2
votes
6answers
323 views

How to reject HTTP access to SSH port

I changed my server SSH port to something else than port 22, however when I access to domain.com:<ssh-port> I can see an output of SSH-2.0-OpenSSH_5.8p1 Debian-7ubuntu1 I want to block ...
2
votes
2answers
457 views

How to redirect ports for on a virtual interface?

There are two IPs associated with one physical network interface eth0 and eth0:0. The following works fine for the first interface: iptables -A PREROUTING -t nat -i eth0 -p tcp --dport 80 -j ...
1
vote
1answer
978 views

How to open port 10011 in centos using iptables

I need to open port 10011 for an application called Teamspeak 3 to work. I'm using CentOS and i tried the following commands : sudo iptables -I INPUT -p tcp --dport 10011 -j ACCEPT i pressed ...
0
votes
1answer
98 views

Why am I still able to get a response on port 80 when I've shut down all ports except 22?

My goal is to shut down absolutely all ports on my Ubuntu server, except port 22 (SSH). I followed the instructions from this question here on Server Fault, plus instructions here and here. However, ...
0
votes
1answer
96 views

need to my server's ip changes when it needs to connect port 'x' on ip 'y' [closed]

I have a linux server and have a proxy server on another machine. My linux server needs connect to port 'x' on ip 'y' Is it possible to create iptables rule or another way to: when my linux server ...