-1
votes
0answers
27 views

DHCPREQUEST Operation not permitted

I am configuring iptables on a Ubuntu 14.10 VPS. However, I am having a few issues with the following: Jun 25 08:28:23 www dhclient: DHCPREQUEST of 1.2.3.4 on eth0 to 2.3.4.5 port 67 ...
-1
votes
0answers
12 views

Specifying routes among 3 subnets using iptables at firewall server

I have 3 subnets each connected to the same router (cisco router with 3 interfaces). One of these subnets (LAN3) has got an Ubuntu server (named atlas) running iptables to filter traffic and to make ...
0
votes
0answers
135 views

VPN pptp connection Unable to pass through linux iptables

I have set up a windows VPN server behind Linux - Ubuntu box that is working as firewall and proxy server. Now I want people from outside to be able to connect to the VPN server, but the connection is ...
2
votes
1answer
62 views

Whitelist outbound traffic in VPC to changing IPs

I'm working with EC2 servers in a VPC where we'd like as little outbound traffic as possible, and for all outbound traffic to be explicitly whitelisted. However, based on EC2 security groups or ...
-1
votes
1answer
129 views

Connection timed out ftp cannot connect

I have a ubuntu server and am trying to connect using filezilla but keep getting connection timed out. I have done an nmap and the port that is opened for ftp is 21. I have gone onto the server and ...
-1
votes
2answers
92 views

tcp port 12202 not opening on ubuntu EC2 instance

I created an EC2 ubuntuu 12.04 instance. i have opened TCP 12202 port through security group console of AWS .But i am unable to open instance port . I tried below commands to open the port . sudo ...
-4
votes
1answer
48 views

Single machine server with many operating systems [closed]

Could possibly with single one high end Server with supported Virtualization We can have: - DHCP Server (Virtual Machine 1), - Firewall (Virtual Machine 2), - Squid proxy (Virtual Machine 3) - ...
1
vote
3answers
218 views

Locking down my Ubuntu server with UFW [duplicate]

I'm using Ubuntu 12.04 on an Amazon EC2 instance and new to the sysadmin side of things. I'm working on a little project of my own and I'm already starting to get targeted by bots (at least I hope ...
1
vote
1answer
69 views

Automatically ask router for port redirection on ubuntu

Is there a way to use uPnp or something to automatically ask a router/firewall to redirect data coming from outside to a machine running ubuntu? Here's the deal, I'm supposed to prepare a certain ...
0
votes
2answers
92 views

UFW - deny outbound except for apt-get updates?

What combination of UFW rules would deny all outbound connections except for those which are required to install Ubuntu security updates?
0
votes
1answer
210 views

Incoming traceroute blocked by ufw

One of my Proxmox VMs running Ubuntu 13.04 won't accept incoming trace routes while ufw is enabled. What command do give ufw to allow incoming traceroute(6)s? The following shows up in the syslog ...
-1
votes
1answer
64 views

No access to our server outside LAN

I hope this isn't above the scope of ServerFault. If the question doesn't work here, some direction would be helpful. We've got an Ubuntu development server with 2 nics. One has a public IP and one ...
0
votes
1answer
93 views

Securing database server with IPTables

I have my app (WordPress) and database (MySQL) on separate servers; they are connected on a private network provided by the hosting service provider, and I've taken all the preliminary steps (that I ...
3
votes
3answers
630 views

Apache Server not reachable on Ubuntu VM

I am new to linux/ubuntu, but I want to set up an apache webserver on an ubuntu VM. I created a VM on amazon AWS, installed the apache. But now I can not reach it via browser. I am not sure if the ...
0
votes
2answers
76 views

Ubuntu UFW firewall turns itself off

I have UFW enabled on my server. However, I find that it is disabled at times, showing a status of "firewall not loaded". I enable it, verify that it is running (shows loaded and gives me a list of my ...
4
votes
2answers
151 views

ipv6 multiple addresses and firewall on remote machine

I have an ubuntu server (serverA) which has a couple of IPv6 addresses. One of these is based on it's MAC address, and is known to the network, the other one I presume ubuntu created as a 'private' ...
0
votes
1answer
147 views

How can I un-firewall port 80 on AWS Ubuntu Raring?

I have a web server I'm trying to make accessible, and although from the command line I get a connection by typing telnet localhost 80, it refuses nonlocal connections. The server is an AWS EC2 node, ...
0
votes
2answers
146 views

Opening ports in EC2

I have an ec2 instance. I have opened a port in the security group for cassandra (9160) and have cassandra listening on it. If I use nmap on the instance, that port does not show up, and I cannot ...
0
votes
1answer
408 views

Ubuntu Server DDoS protection [duplicate]

I've seen many articles on DDoS protection, but none work. I need protection for a socket server i'm running on the server. It's running on port 9876 and it's for a flash-based game. when it gets ...
1
vote
3answers
287 views

Testing the limits of UFW with thousands of deny blocks

Here's the deal: I have a persistent Chinese botnet that spams my forum (running on an Ubuntu 12.04.2 server on nginx, etc). I've been using UFW (Ubuntu's "Uncomplicated FireWall") for managing the ...
0
votes
1answer
249 views

Allowing access to redis port for only specific servers with ufw

I've installed ufw on my Ubuntu 10.04 server. The only thing running on that server is going to be ElasticSearch and Redis. Redis uses port 6379. I only want two different IPs to be able to access the ...
0
votes
1answer
203 views

Unknown UDP trafic on fresh Ubuntu 12.04 install

I do configure ufw to deny outgoing trafic by default. On a fresh Ubuntu 12.04 install, I always get some random-like UDP trafic. I am curious to what generates this & how should I allow it (if I ...
1
vote
1answer
617 views

Port 443 is open but IP tables denies it

When I run the following command on my Ubuntu instance: $ nmap host I see that port 443 is open: Starting Nmap 5.21 ( http://nmap.org ) at 2013-03-19 05:36 PDT Nmap scan report for [host redacted] ...
1
vote
1answer
461 views

UFW Firewall Rules ordering?

I have the following rules on our server within UFW: To Action From -- ------ ---- 22 ALLOW 217.22.12.111 22 ...
1
vote
2answers
2k views

iptables NAT/Forwarding with external ADSL router; PCs on the network can't access the internet

I'm setting up a firewall/gateway (Ubuntu server 8.04.1) The firewall has three NIC's: eth0 192.168.0.2 eth1 192.168.1.2 eth2 192.168.2.2 eth1 is connected directly to the ADSL router (which also ...
2
votes
1answer
133 views

Cannot directly reject traffic on port 25

My server is running Ubuntu 10.04.4 LTS and I want to reject traffic to port 25. The goal is this: $ telnet {ip} 25 Trying {ip}... telnet: connect to address {ip}: Connection refused telnet: Unable ...
1
vote
1answer
746 views

Setup puppetlabs-firewall module

Does anyone have experience setting up puppetlabs-firewall module on ubuntu 12.04? The documentation on https://github.com/puppetlabs/puppetlabs-firewall states: At the moment you need to provide ...
1
vote
0answers
115 views

CSF: Changing portflood settings to deny IP longer than second interval?

I've recently been under attack and I'm configuring CSF firewall for my Ubuntu server (latest). I found out portflood settings only block the ip for the specified second count, but I would like ...
1
vote
1answer
112 views

In ufw is there any way to disable logging for a particular rule?

I am using UFW with a default logging policy of "low". I would like to keep this logging on for the default deny action, but disable it for a particular IP address only. So I'd like to create one ...
0
votes
1answer
36 views

Can't connect to service on ubuntu?

I have a service i just installed on a ubuntu workstation machine. Say its running under port 511. I can connect locally : telnet localhost 511 When i try to connect from a remote machine it fails ...
0
votes
1answer
290 views

Can these IPv4 and IPv6 firewall rules be hardened any further? [closed]

I am running Ubuntu 10.04. Here are the IPv4 firewall rules that I've been using now for a few months: *filter #Allow all loopback (lo0) traffic and drop all traffic to 127/8 #that doesn't use lo0 ...
1
vote
0answers
364 views

Cannot open port 8080 on Amazon EC2

I am having difficulty getting my Varnish/Nginx Wordpress setup working. I had set up varnish to listen on poert 80, and nginx to listen on port 8080, with a rule on wp-admin URLs to pass through to ...
1
vote
2answers
355 views

PureFTPd is using ports above 50000 even with PassivePortRange specified

I have installed the pure-ftpd package with PureFTP 1.0.24 on Ubuntu 10.04 using apt-get. Even though, this is the default port range, I've added the file /etc/pure-ftpd/conf/PassivePortRange ...
3
votes
3answers
1k views

What are the security risks of using pfsense in a virtualised environment?

I am thinking of using pfsense on my ubuntu server box. I'd virtualise pfsense with virtualbox, and have it route and firewall all traffic both on and destined to my server as well as the the rest of ...
0
votes
1answer
433 views

Opening ports with IPTables not working - Ubuntu

So, I have these rules set in iptables: # iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT tcp -- anywhere anywhere ...
1
vote
3answers
977 views

How to open UDP port 7777 from iptables/firewall on Ubuntu 11.04

I need to enable the port 7777 from my VPS which runs Ubuntu 11.04, I have added rules from the iptables which is listed here, Chain INPUT (policy ACCEPT) target prot opt source ...
1
vote
1answer
763 views

Ubuntu 12.04 open port 80 inside WLAN

I have an nginx server running on ubuntu 12.04 that serves http through port 80 and https through port 443. Everything works fine if I access it from the same computer via localhost, 127.0.0.1 or the ...
0
votes
0answers
214 views

Ubuntu and uwf - ERROR: '/lib/ufw/user.rules' is not writable

Every time I try and update a rule I get this error. # sudo ufw allow from 111.111.111.111 sudo: unable to resolve host myserver ERROR: '/lib/ufw/user.rules' is not writable How do I resolve?
-2
votes
1answer
338 views

Zookeeper - cant telnet into xxx.xxx.xxx.xxx 2181 on one server. Any other - no issue

I have three zookeeper nodes in tokyo, london, and freemont on linode servers. All are gossiping. I have a monitoring server in tokyo. I have NOT activated the zookeeper firewall on all zookeeper ...
2
votes
2answers
369 views

Is it safe to only allow SSH access from certain IPs?

I'm currently installing CSF (http://www.configserver.com/) for my Ubuntu server and in CSf you're able to specify the ports you want everyone to be able to access, and if your IP is in the allowed ...
1
vote
2answers
438 views

EC2, Ubuntu, RVM, Rails, Passenger, Apache — requests to my domain just time out

Problem: I believe I've done everything required to deploy my app, but when I go to my new URL, I get a "problem loading page, server took too long to respond" error from the browser. Stats: I'm ...
2
votes
1answer
226 views

Can't reach my alternative SMTP port

I can't seem to reach my open SMTP ports. I opened 587 and 2525, and it shows they're listening: tcp 0 0 0.0.0.0:587 0.0.0.0:* LISTEN tcp 0 0 ...
0
votes
2answers
1k views

Save changes to iptables

I've got iptables running, as I can use the following command... sudo /sbin/iptables sudo /sbin/iptables -t nat -I PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080 but I cant do.... service ...
0
votes
3answers
2k views

Ubuntu only allow incoming access from 192.168.0.0/8 or server IP address

How can I make it that only approved IP addresses have access to my Ubuntu server 12.04 I only just set it up.
0
votes
2answers
200 views

open mysql to any connection on ubuntu

I simply want to open up mysql to be accessible from any server ip. I have already commented out the bind-address in /etc/mysql/my.conf. I have already setup the user account within mysql. I have ...
0
votes
1answer
2k views

Allow SFTP in iptables

I have just purchased a VPS from linode and am going through the setup guide. I have everything running (apache2, php, mysql etc) but I am being denied access via SFTP when using fileZilla to upload a ...
0
votes
2answers
2k views

Problems opening Gedit using X11 in new Ubuntu installation

I've just installed Ubuntu 11.10 and created a new user (and added them to the sudo group). When I log in as the new user (not root) and try to open gedit I get the following error: ** ...
2
votes
1answer
293 views

IPTables unable to nat trough VPN

I have a VPN connection to a server on a remote location. I want other pc's to be able to reach the webserver on the remote location trough the VPN connector. But i can't get where i want. This is ...
3
votes
1answer
622 views

iptables preroute localhost

I would like to forward all incoming traffic from a certain port to another one using iptables. The problem is that prerouting doesn't work for traffic from localhost. This topic suggests a solution: ...
9
votes
4answers
33k views

Which ports do I need to open in the firewall to use NFS?

I'm running Ubuntu 11.10 - setting up NFS to share a directory among many other servers. Which ports are required to be opened on the firewall?