1
vote
0answers
31 views

NAT for IPSEC access?

Please help to understand if the following configuration can be created. I have IPSEC connection with my customer. It is site2site vpn between customer network and my network 10.102.103.0/28. This ...
0
votes
1answer
23 views

iptables with sticky forwarding/routing

My iptables is sticking. I have a DNS server behind IPTables and down a NAT'ed OpenVPN pipe. Using tcpdump I see DNS packets hit the outside router but it takes 4 or 5 DNS query attempts before the ...
1
vote
1answer
26 views

Upgrade network Class vs Virtualized LAN

We operate on one class C network, let's say 192.168.1.0/24 But the problem is we have 262 devices! I propose upgrading the network to a class B. The opposition proposes purchasing new hardware and ...
0
votes
1answer
59 views

Failed to ping through gateway which is not default gateway

I have the following network interface configuration, eth0: 192.168.78.1/24 eth1: 192.168.254.76/24 (Gateway 192.168.254.1) eth2: 192.168.253.131/24 (Gateway 192.168.253.1) where both gateways ...
0
votes
1answer
50 views

iptables on Linux router does not forward DHCP between two LANs

I have an internal network as follows: A Linux system that serves as router, using iptables, with two network cards A client machine A DHCP Server The Router's eth1 is on the same LAN as the ...
1
vote
2answers
49 views

Allow only IPSEC outgoing traffic to a port (using IPTABLE?)

Problem: I've a situation where IPSEC server and the target server (Say http server) happens to be the same machine and I need allow ONLY the traffic coming through IPSEC server to have access to a ...
3
votes
2answers
210 views

How to enable traceroute in linux machine

I'm working on something in the transport layer and after i ran our custom policies for securing the policies i'm not able to do traceroute from the linux machine. root@keystone-evm:~# iptables ...
1
vote
0answers
39 views

Policy routing local user's traffic down a tunnel

I've got a Linux based Firewall/Router running iptables and SNAT for traffic passing through it to the Internet via a single uplink - This is working fine. There is also a small number of applications ...
0
votes
2answers
83 views

list all route tables

I need to know how to list the IDs of all route tables. For example, I can run: ip rule add fwmark 2 table 104 ip route add dev eth0 default via 192.168.3.7 table 104 A call to ip rule list shows: ...
0
votes
1answer
86 views

Linux Unraid route traffic through different interfaces

I have two interfaces: eth0 and tun5. eth0 is an ethernet to a router and tun5 is a VPN tunnel. These are on an UnRaid server, which is based on Linux. It's a headless server so I access it via SSH. ...
1
vote
2answers
52 views

Iptables does not seem to be applying SNAT to packets sent on a raw socket

I'm sending packets from a user space program to my wireless interface wlan0. I've set up a SNAT rule with iptables as follows iptables -t nat -A POSTROUTING -o wlan0 -j SNAT --to 192.168.1.3 And ...
0
votes
1answer
35 views

PBR with iptables

I know question was answered multiple times, but this situation a bit different. So here is what I have: All users must user default gateway on eth0, except one That one must only use gateway on ...
1
vote
1answer
82 views

How do I forward localhost traffic to a remote host with iptables?

I would like to set up my CentOS 6.5 box to forward connections to localhost (127.0.0.1) to the same port on a remote machine (e.g. 10.0.3.10). I've tried the iptables rule below, but when I attempt ...
0
votes
0answers
21 views

NAT with multiple connections

I have a linux server with 2 WAN connections. It has 2 public IP address as WAN_IP1 and WAN_IP2. The server default gateway is WAN_IP1. The server also has 2 LAN interfaces and the relative subnets. ...
0
votes
1answer
49 views

VPN routed traffic, response goes outside of VPN?

Here's a weird one. Whenever I'm on a hotel network I tend to like to route all my traffic through my home network. Mainly since I'm not entirely sure all my passwords go through SSL all the time. ...
0
votes
2answers
71 views

iptables treating ssh and http requests differently

Here are the facts: server (IP 192.168.1.140) that runs openssh on port 22 and nginx on port 80 server sits behind firewall/router (IP 192.168.1.1) that has identical iptables rules for openssh and ...
0
votes
2answers
43 views

Assign IPs to programs/processes

I need to assign different IP addresses to different processes (mostly PHP & Ruby programs) running on my Linux server. They will be making queries to various servers, including the situation ...
0
votes
0answers
98 views

Packets are not routed by iptables, how to debug

I'm using OpenStack and OVS. This is my case: From a remote host, I ping VM with IP A. Local gateway received the echo request, then send a packet with IP A and MAC address A' (based on a fixed ...
0
votes
1answer
243 views

Port forward remote desktop without a gateway over 3G modem router [closed]

I'm trying to connect from a laptop, through a VPN, and a 3G modem/router, to a remote PC / computer. PC (192.168.1.33) | 3G Modem (192.168.1.22) | [3G internet, connecting to VPN] | ...
0
votes
1answer
96 views

Is it possible to make the server accessible from two internet connections

how to make this: have: Centos 6.5 WAN1 eth0 44.44.44.44 (DEFROUTE=yes) WAN2 ppp0 95.95.95.95 (DEFROUTE=no) HTTP server work and available only in eth0 DNS server work but port 53 blocked in ...
2
votes
1answer
233 views

How do I set up an IPv6 DMZ with iptables without a static allocation?

I have several networks which are on Comcast's residential network. I need to access those networks from a variety of environments, via an SSH proxy on one of the hosts. (As it happens I'm using ...
0
votes
0answers
20 views

Is it necessary to open all used ports when using one Node.JS application to route from port 80 to apps on different ones?

I'm working with an Ubuntu 12.04 LTS, 64 Bit server there I have used the following commands to send all http request on port 80 to port 8080 Commands: cat /proc/sys/net/ipv4/ip_forward #returns 1 ...
1
vote
1answer
111 views

Firewall setup Huawei 4G with DMZ

Network topology: ISP1 | | Alternative ISP 4G | | | Huawei 4G with DMZ | | ...
2
votes
3answers
1k views

How can I achieve OpenVPN client routing without NAT on Linode

I've set up an OpenVPN network, and it is working properly in the sense that I can access the inner/LAN machines from the remote client. However, my problem is that all traffic from the remote ...
0
votes
3answers
1k views

Routing between two subnets using a Linux box with two NICs

I have a Linux box with two NICs, each connected to a different LAN: Network A: 192.168.1.0 255.255.255.0 Network B: 192.168.2.0 255.255.255.0 The routers are: 192.168.1.1 192.168.2.1 Linux NICs are ...
2
votes
1answer
180 views

Redirect all traffic sent to an unallocated alias IP within a VPN subnet, to a fixed IP within another VPN

I have a server hosting multiple bridged (i.e. tap) VPNs using openvpn, where each VPN has a different 10.8.X.0/24 subnet. I wish to redirect traffic sent to a specific, unallocated IP address (e.g. ...
0
votes
1answer
245 views

Block ip forwarding for specific remote ip address

I use ubuntu as gateway for several hosts. I need advise how to block ip forwarding for specific ip address or specific ip range? I tried to block ip via ufw deny rules, but it looks like ip ...
1
vote
1answer
78 views

Segregating web traffic between internet and LAN using Netfilter

I have a corporate "web appliance" which allows handheld devices to connect to it over wifi. I'm trying to figure out how to allow the appliance access to the internet (so it can download vendor ...
1
vote
0answers
62 views

Openstack instances, routing, packets not delivered for SPECIFIC services

I am taking over management of an existing openstack system at work and I have only a little prior experience with openstack. I have about 8 instances running and all of them appear to function ...
1
vote
1answer
86 views

Port based routing on ubuntu

My situation: A ubuntu server is part of a LAN with 2 gateways. The one offers high speed with high latency. The other low speed with low latency. My server usually uses GW1 for all traffic (because ...
0
votes
1answer
75 views

Forward all network packets from server A to server B (WAN) Ubuntu

I currently run a game server on a VPS and will shortly be moving VPS provider. To make the migration easier on the players I would like players to be able to use the original IP for a short while by ...
0
votes
0answers
41 views

Pinging to google.com from a particular interface

I am connected to the internet via wlan0(wifi) and also have an ethernet port(not connected to the internet). I am looking for some iptables rule / route addition, which will let me do a ping via eth1 ...
0
votes
1answer
146 views

access same subnet on different interfaces

I have a router with external (WAN connection) subnet 192.168.1.0/24 and also on same router a tunnel to a remote location which have the exact same subnet (192.168.1.0/24), and i need from my LAN to ...
0
votes
0answers
97 views

FTP Traffic routing through NAT prevents me from logging in

I need to send all FTP traffic to a particular server from a NAT. Server A connects via FTP to an IP which is routed to the NAT and then over a VPN. That traffic then comes back and gets routed from ...
0
votes
1answer
57 views

DHCP wont release allocated IPs [closed]

I have a TP-Link td28151 router and I am using DHCP. I need to connect 40 devices to my router by Ethernet. I have set the count of my clients to 100, and my subnet mask is 255.255.255.0. I have ...
0
votes
2answers
240 views

How do I use OpenVPN for all traffic other than ports 80 and 22 (inbound and outbound)? [closed]

I use a dynamic DNS service which is sent ip address updates from my router. In router settings, ports 22 and 80 are forwarded to my server at 192.168.1.10. I have a webserver and sshd running on my ...
0
votes
0answers
137 views

Load-balancing PPTP connections

I'm trying to load balance two PPTP connections, connected to the same server. I use the following script, but there is no send and receive via PPTP connections. What part am I doing wrong? Are there ...
0
votes
0answers
145 views

redirect http traffic through ppp0(vpn tunnel)

So I have this tunnel connection with a VPN on interface ppp0, I need to redirect the traffic through that vpn, of course if I do route add default dev ppp0 it will redirect all the traffic through ...
2
votes
2answers
1k views

iptables packet forwarding to one of two gateways depending on origin

Given the following installation: old router 192.168.1.1 with NAT forward of tcp port 80 to 192.168.1.10:80 new router 192.168.1.2 with NAT forward of tcp port 80 to 192.168.1.10:80 web ...
1
vote
1answer
100 views

How to send packets coming from a second router on a particular port back to the router, using iptables not a route

I have a Linux server which runs a particular service listening on a single TCP port. The Linux server connects to the internet using a PPP connection and also acts as router for a local network using ...
0
votes
1answer
238 views

How to Setup Linux Server As A Router with NAT

We have a simple router which has NAT of symmetric type, but because this router doesn't provide us with any debugging interface, we cannot figure out if a specific packet reaches the NAT or not. ...
0
votes
2answers
603 views

How can i forward the http and ssh port to my internal server using iptables

I do not have the router so i make the Linux system into router having centos 6.4 for forwarding the Public network traffic to my local LAN.It has the two NIC card. one for public ip (eth1) and ...
0
votes
0answers
100 views

How to set mark on packet when forwarding it in nat prerouting table with rp filter 0?

I have a serious problem with my server ubuntu 13. I have two ADSL lines and an internal network as follows. i.imgur.com/v4ddHXf.png (URL IMG) IP redirections made ​​two because there are two older ...
3
votes
1answer
1k views

iptables: access connected openvpn client from the LAN with the VPN server

I have what is essentially a routing problem, and I'm not familiar enough with routing and iptables to effectively troubleshoot and set up my network needs. What's working I have an openVPN network ...
0
votes
1answer
248 views

Route traffic to some host in Internet via VPN server

I need route traffic to some host in Internet via VPN server. Configuration: Computer: ubuntu-12.04 eth0 - x.x.x.x/24 tun0 - inet addr:10.8.0.6 P-t-P:10.8.0.5 Mask:255.255.255.255 There is ...
2
votes
1answer
2k views

OpenVPN not redirecting all traffic through VPN

I have just finished setting up my VPN, and google shows my IP to be that of my VPN, so this works fine. However, when I log in through SSH to the VPN server, it shows my last login to be that of my ...
0
votes
4answers
66 views

What can be done to migrate network applications when the client configuration cannot be changed?

We have a number of situations where a client application needs to be migrated from one host to another in an active production network. The servers continue to run other applications. The problem is ...
1
vote
1answer
199 views

OpenVPN - VM-Setup with MacVTap, ICMP echo works, TCP/UPD don't

Short résumé No errors, no dropped packets, pings reach clients, tcpdump shows packages travelling, everything else never reaches the LAN hosts (or OpenVPN clients). Edit After trying to eliminate ...
-1
votes
1answer
97 views

Trying to RDP to Windows machine using iptables

I am a newbie to iptables. Sorry for the basic question. I am trying to connect to a Windows Machine using Microsoft's "Remote Desktop Protocol" This service uses TCP Port 3389. My Linux server is my ...
3
votes
3answers
2k views

Almost working: How to set up iptables and iproute2 rules on dual WAN linux server?

I have a Raspberry Pi (running Raspbian) with three network interfaces (one ethernet and two USB wifi nics). What I want to achieve is this: I have two WAN connections to the internet (DSL + Cable), ...