0
votes
0answers
28 views

Use Cisco VPN connection of another Computer using linux iptables and routing

I have the following need. I have a system that is connected to production environment using a cisco VPN client. At any point of time only one connection is possible. Right now I ssh to that PC and ...
0
votes
4answers
87 views

Create IP nullroute blacklist from text file

I've seen various guides out there for how to nullroute a single IP address, and I've done that before. However, I'm not sure how to nullroute a group of IP addresses. Going through each one ...
0
votes
1answer
46 views

squid3 with tcp_outgoing_address could not connect to anywhere

I have one server with 3 interfaces (3 physical lan card), which are connected to 3 different routers. Each router has a different subnet, i.e. the 3 interfaces of server belong to 3 different ...
-5
votes
1answer
37 views

How to route to next server? [closed]

I must route all traffic from first server to second server and next to third server. Like this: server1 -> server2 -> server3 I use Debian Wheezy. Can anyone tell how to do this with iproute?
0
votes
0answers
26 views

Output traffic on different alias based on user

I have a server running Debian with two IP addresses aliased on a single NIC. eth0 254.71.11.134 eth0:0 185.14.16.132 I want all traffic form a specific user to go through eth0:0. I figure I ...
3
votes
3answers
1k views

How to duplicate TCP traffic to one or multiple remote servers for benchmarking purposes?

Infrastructure: Servers in Datacenter, OS - Debian Squeeze, Webserver - Apache 2.2.16 Situation: The live server is in use by our cusotmers every day, which makes it impossible to test ...
0
votes
3answers
187 views

CentOS masqueraded network with iptables clients not connecting: Unable to ping

I'm a novice sysadmin working on a system with a CentOS server masquerading traffic with client machines also running CentOS. Something with the tables got messed up and my clients no longer have ...
0
votes
0answers
107 views

Why is an ack response being sent to the wrong gateway?

I was trying to determine why a packet forwarded by iptables to my internal lan is returned on the wrong gateway. Having investigated this further, I determined that, at least in the case of one of ...
0
votes
0answers
139 views

Routing outgoing HTTP/HTTPS traffic over a different subnet

I am trying to set up a Linux Server which was initially only supposed to be in one "server-subnet". However I am forced to use a proxy to access HTTP/HTTPS services in this subnet, which causes a lot ...
0
votes
1answer
141 views

Enable route between subnet

I have a Centos server with three NIC cards. ETH0 Public IP xx.xx.xx.xx1/xx.xx.xx.xx2 (with two public IP) EHT1 Local Subnet 192.168.80.0 (DHCP server listening on this interface) ETH2 Local ...
0
votes
0answers
92 views

KVM directly connect to guests without passing router

I have a KVM host running 5 virtual servers. Each virtual server is using a separate bridge interface, like br0, br1, br3... Each virtual server has a own public IP. Now, I would like to be able to ...
0
votes
1answer
117 views

NAT one network to another using iptables

Trying to NAT ips in different network using iptables. KVM host with ip 10.10.11.36 on bridge br0. Two vms are running with ip 192.168.11.60 and 192.168.11.57 sharing bridge br0. Want to NAT all ...
1
vote
2answers
278 views

How to make incoming and outgoing IP same on a multiple IP binding server

I have a centos 6 VPS configured 1 network interface binding with 4 IPs, for example 172.x.x.11, 172.x.x.12, 172.x.x.13, 172.x.x.14 binding with venet0:0, venet0:1, venet0:2, venet0:3. I have pptpd ...
0
votes
3answers
1k views

OpenVPN - Client traffic is not entirely routed through VPN

I installed OpenVPN on my dedicated server. Using Viscosity or Tunnelblick on the client, I successfully connected to this server. However, after some tests, I realized that not all the traffic ...
0
votes
1answer
276 views

Using iptables to forward traffic to a single IP address

The setup: Debian; acting as the network's router using iptables, fail2ban Because of external requirements, both networks are 192.168.1.x. eth0: 192.168.1.1 eth1: 192.168.1.2 Ubuntu (192.168.1.3) ...
0
votes
1answer
53 views

route client by specific query?

myweb.com has external ip. I have a debian server running BIND9, it contain some clients, I created the zone myweb.com and I created A record to localhost.it's ok, but I would know if I can point ...
0
votes
1answer
244 views

IPSec VPN routing

This is supposed to be a pretty simple question but I couldn't google a answer for it! I have a ipsec VPN tunnel established between 1.1.1.1 and 2.2.2.2 (public IPs). The first machine (1.1.1.1) has ...
0
votes
1answer
360 views

Multiple interfaces: route packets to specific interface

I have 2 internet connections on my network. My router is running Debian. eth0 is my network (192.168.0.0/16). eth1 and eth2 are connected to 2 different internet providers (with dynamic IP). Here is ...
1
vote
1answer
259 views

Iptables -gw parameter

I want to copy tcp traffic. i want to use these commands " iptables -A PREROUTING -t mangle -p tcp --dport 7 -j ROUTE --gw 1.2.3.4 --tee iptables -A POSTROUTING -t mangle -p tcp --sport 7 -j ROUTE ...
1
vote
0answers
95 views

Routes with PPTP

I have a server A that is running OpenVPN server, and a server B connected to it. Then on B I have eth0, the physical interface, and tap0, created by OpenVPN. I want some ip to go with eth0 while ...
1
vote
1answer
230 views

IPTables Reroute SSH based on Connection string?

We are using a cloud server (Debian Squeeze) where public ports on a public IP route traffic to internal servers. We are looking for a way to use IPTables and ssh where based on some part of the ssh ...
3
votes
3answers
648 views

In Linux, does using route to blackhole an IP result in better performance than dropping in iptables? [duplicate]

During a DDOS attack, if we are finding IPs we want to block will we see better performance using a null route as opposed to iptables? Null routing we would do something like: ip route add blackhole ...
0
votes
1answer
999 views

route traffic to different interface, from port

I got three gateways: 192.168.10.1 on eth0 (default), 192.168.100.1 on eth0:0 192.168.101.1 on eth0:1 I'm trying to make my computer decide on which to use, from the request port. (request comes ...
0
votes
1answer
150 views

Route local traffic to ip1:port to extern ip2:port

I have a service setup that redirects after a succesfull login (Couchbase), but the IP it transfers to is an local one, where the client that is connecting to cannot reach. How can I setup iptables ...
4
votes
4answers
4k views

How can I force all internet traffic over a PPTP VPN but still allow local lan access?

I have a server running Linux Mint 12 that I want to keep connected to a PPTP VPN all the time. The VPN server is pretty reliable, but it drops on occasion so I just want to make it so all internet ...
2
votes
2answers
528 views

Iptables string

I have an iptables rule like this: iptables -t nat -I PREROUTING -p tcp --dport 80 -s 192.168.1.2 -j DNAT --to-destination 192.168.1.1:80 it works perfectly.. but I want to redirect only for one ...
2
votes
3answers
15k views

howto only tunnel specific hosts route through openvpn client on tomato [closed]

I am relatively newbie in networking world although I did coding and know some sysadmin background for a long time. and here I'm only one step from my destination. The whole picture is : at home I ...
2
votes
3answers
2k views

Route all wlan0 traffic over tun0

I'm looking for a way to route all wlan0 traffic (tcp and udp) over tun0 (openvpn). However, all other traffic originating from the device itself should not be routed through tun0. I'm guessing this ...
2
votes
1answer
2k views

Routing OpenVPN tunnel in via public interface and out via NAT'd interface (to internet)

I hope someone can help... I want to Configure OpenVPN-AS (i.e. OpenVPN Access Server, NOT OpenVPN) to work on my VPS. The VPS is a KVM running Ubunto 10.04 LTS, with a very vanilla configuration. ...
1
vote
1answer
335 views

How do I setup a routing rules to allow https traffic

This is about a clearOS installation. eth0 = external interface (dhcp Internet) eth1 = internal lan, static 192.168.0.10 eth2 = dmz The problem is, after initial installation, I was able to ...
1
vote
1answer
501 views

iptables and virtual machines of KVM, no ping, no ssh from VMs

Hi everyone :) I have two virtual machines KVM. I did two alias to eth0 - eth0:0 and eth0:1 and put them on an external IPs (eth0:0 - 89.114.122.3, eth0:1 - 89.114.122.4)​​. Now the problem is: ...
0
votes
1answer
779 views

iptables and virtual machines of KVM, external ip

Hi everyone :) In general, I'm still struggling with the virtual machine KVM. I did two alias to eth0 - eth0:0 and eth0:1 and put them on an external IPs (eth0:0 - 89.114.122.3, eth0:1 - ...
0
votes
0answers
396 views

Bidirectional NAT using iptables

I want an Ubuntu server machine to act as a bidirectional NAT. It has 2 NICs, each connected to a different network. I want it to forward connections received on eth1 at certain ports to certain ...
1
vote
2answers
825 views

port redirection through a VPN

I would like redirect my tcp traffic to IRC throught a VPN. I mark the packets with iptables and create a new route for this packets: echo 1 > /proc/sys/net/ipv4/ip_forward echo 0 > ...
16
votes
5answers
5k views

Use IPtables or null route for blacklisting about 1 million IP addresses?

I've come across a situation where a client needs to blacklist a set of just under 1 million individual IP addresses (no subnets), and network performance is a concern. While I would conjecture that ...
0
votes
1answer
736 views

Masquerade traffic from certain source IP to VPN connection

Network Setup: 10.0.0.1 Router: to internet 10.0.0.70 Server: Ubuntu based server,default gateway is 10.0.0.1 10.0.0.51 PC I created a PPTP connection(interface: ppp0) on Server to a machine ...
0
votes
1answer
98 views

iptables - websites redirection

I have three servers. The first is a for my front the two other http server : for dispatch. I want for example, do : receive a request on my front (public) : site1.com an redirect the request on ...
2
votes
2answers
355 views

Splitting a subnet, and routing it on a two interface iptables firewall

I have a two interface Linux iptables firewall. Currently I have several servers behind it on a private network 192.168.0.x. The firewall currently has each IP configured locally and uses NAT to ...
1
vote
2answers
2k views

How can I use iptables/route to route traffic from one local network device through its own gateway?

On my Linux server (Ubuntu), how can I configure traffic originating from one of my network interfaces (my VPN device - ppp0) to route through its own gateway address? Caveats: I can't set it up as ...
4
votes
2answers
285 views

Sharing a VPN connection among several servers with certain IP ranges

I have an OpenL2TP VPN instance running to a company providing me with connections to cellphone modems in the 10.4.2.0/24 private IP range. This server is on the same private network as three other ...
0
votes
1answer
391 views

route everything except 123.123.* through vpn

I would like to route all requests to 123.123.* normally through eth0 and everything else through VPN (tap0). This should probably be done with iptables. Any ideas how? Thanks
0
votes
2answers
60 views

How to reply some request from which routes its came from?

I wonder if we can reply some request from which route its came from? My Situation is like this: eth0 192.168.10.1 --> gw: 192.168.10.254 nm: 24 eth1 192.168.11.1 --> gw: 192.168.11.254 nm: 24 ...
1
vote
1answer
403 views

Creating Routes using the second NIC in the box

OS: Linux I need some advice on how to set up the routing table. I have a box with two physical NIC cards eth0 & eth1 with two associated IPs IP1 & IP2 (both of the same subnet). I need to ...
0
votes
1answer
969 views

Change OpenVZ route to pass through ip failover

I have one dedicaced server with its own IP and another IP (failover) who refer to the first. I will wish to change the gateway of a Proxmox virtual machine (openvz) who runs on this dedicaced server ...
2
votes
1answer
6k views

iptables prerouting to redirect source ip address on ethernet

I have 2 ip adresses on the Internet who redirect on the same machine. On this machine, one Debian runs on OpenVZ. I can set iptables rules to redirect all http request to the Debian. iptables ...
2
votes
1answer
13k views

How to forward connection from one interface to another under linux

I have linux box which has two network interface, eth0, eth1. from eth1 I can access an internal website, say under port 8080. from outside the box, I can't access that network. my question is, is ...