0
votes
2answers
34 views

Can't configure httpd.conf

I have some problems with httpd and can't configure it(can't open in browser). I have done it a lot of times, but now I missing something. I have installed CentOS 6.5 on virtualbox with ubuntu 14. ...
-1
votes
2answers
23 views

Forward Clients to New Server using iptables

Clients are connected to a server A by connecting to the domain name address www.example.com:4444, where www.example.com resolves to the IP address of server A. Question: In order to provide a ...
-1
votes
0answers
27 views

DHCPREQUEST Operation not permitted

I am configuring iptables on a Ubuntu 14.10 VPS. However, I am having a few issues with the following: Jun 25 08:28:23 www dhclient: DHCPREQUEST of 1.2.3.4 on eth0 to 2.3.4.5 port 67 ...
-1
votes
0answers
12 views

Specifying routes among 3 subnets using iptables at firewall server

I have 3 subnets each connected to the same router (cisco router with 3 interfaces). One of these subnets (LAN3) has got an Ubuntu server (named atlas) running iptables to filter traffic and to make ...
0
votes
1answer
83 views

Stop sending packets to private IPs

I have a problem that my server got locked down because it was sending packets to private IPs. My question is, what is the best solution to stop that? Here is the log that I got from my hosting ...
0
votes
0answers
145 views

VPN pptp connection Unable to pass through linux iptables

I have set up a windows VPN server behind Linux - Ubuntu box that is working as firewall and proxy server. Now I want people from outside to be able to connect to the VPN server, but the connection is ...
3
votes
2answers
250 views

fail2ban not working on fresh install of ubuntu 14.04, why?

After installing and configuring fail2ban, I tried to login to my server through ssh with a wrong password. After a few attempts, I tried with the correct password with success. So, fail2ban didn't ...
1
vote
1answer
86 views

Iptables comment module not installed

I want to use -m comment --comment "message" in my iptables rule but do not have the module loaded. Through some searching, the module I need for this is "ipt_comment" but I do not have this ...
0
votes
1answer
43 views

How do I test my firewall rules?

I've setup some rules in ufw and I've turned it on. Now I want to ensure my rules actually block traffic. However, when running nmap -PN -p <my_port> <ip> from my local workstation it ...
0
votes
1answer
92 views

Why does the DOCKER chain show in `ufw raw` but not using `iptables -L`

If I run sudo ufw raw, I can see an iptables chain called 'DOCKER': Chain DOCKER (2 references) pkts bytes target prot opt in out source destination 0 0 DNAT ...
0
votes
3answers
692 views

Block range of IP Addresses

I am getting bombarded with attempted hacks from China all with similar IPs. How would I block the IP range with something like 116.10.191.* etc. I am running Ubuntu Server 13.10. The current line ...
-4
votes
2answers
46 views

How to manage PING replies? [closed]

How can I manage, for example, my Ubuntu mashine so it doesn't (or does) respond to PING(ICMP ECHO_REQUEST - type 8) requests? Normally almost all computers in a LAN network responds to ping with an ...
1
vote
1answer
52 views

Port based routing on ubuntu

My situation: A ubuntu server is part of a LAN with 2 gateways. The one offers high speed with high latency. The other low speed with low latency. My server usually uses GW1 for all traffic (because ...
0
votes
0answers
21 views

iptables segfault messages in syslog [duplicate]

I have an Ubuntu 10.04 64 Bit server that has suddenly started to report a lot of segfaults error in the syslog. The full message in the log is : kernel: .IptabLes[14283:932171]: segfault at 0 ip ...
0
votes
0answers
24 views

fail2ban bans without running? [closed]

I do have a problem with my webserver. Its an Ubuntu 12.04 LTS, with: Apache: Server version: Apache/2.2.22 (Ubuntu) Server built: Mar 19 2014 21:11:10 MySQL: mysql Ver 14.14 Distrib 5.5.35, for ...
0
votes
1answer
513 views

iptables port forwarding (prerouting port 80) and firewall not working together

I have read many articles and answers on this topic and I have been in discussion with Linode support, but no one seems to be able to answer my exact problem. Seems easy - I'd like to use a iptables ...
0
votes
2answers
45 views

IPTables in Ubuntu SURVIVE restart

I'm trying to find out why the rule -A POSTROUTING -o eth0 -j MASQUERADE keeps surviving reboots. I don't have iptables-persistent installed, there is no /etc/iptables.rules file or additional lines ...
0
votes
1answer
35 views

ufw instead of pure iptables

I am running an Ubuntu server VPS that several people with varying networking skills need to manage. Currently the server is protected by iptables. I am considering using ufw to gain simplicity. What ...
-1
votes
2answers
96 views

tcp port 12202 not opening on ubuntu EC2 instance

I created an EC2 ubuntuu 12.04 instance. i have opened TCP 12202 port through security group console of AWS .But i am unable to open instance port . I tried below commands to open the port . sudo ...
0
votes
1answer
479 views

Iptables rule for squid transparent proxy block http requests

I have some iptables rules in a linux gateway (ubuntu server 12.04) and all works good. I configured a transparent squid proxy and works too. I'm using this rule. $IPT -t nat -A PREROUTING -p tcp ...
1
vote
1answer
108 views

iptables forward incoming ipv4 traffic to ipv6 [closed]

I am new to iptables and I am lost and confused from its configuration. I have work server with IPv4 and IPv6 connection and the home server with only IPv6 connection. How to set up rules for ...
1
vote
0answers
285 views

Ports blocked on ubuntu 13.10 vps

I have been searching all over for an answer, i got a cheap vps server running ubuntu 13.10 and installed webmin which should allow me to go to serverip:10000 But i can't connect to it and ...
1
vote
1answer
69 views

how to forward proxy requests using iptables

I've this schenario ----------------- ---------------- ---------- | SERVER A | ---(port:2128)> | PROXY | ---> | INTERNET | | (10.30.1.1) | ...
1
vote
2answers
24 views

Limiting MySQL User to connect from Second interface

The web server and the MySQL servers have a second interface on a network with no public internet access. How can a MySQL user be restricted to connect only from within the private network and ...
0
votes
1answer
88 views

Cannot close Port 25 after installing postfix

Before installing logwatch (which installs postfix) on Ubuntu 12.04, the port 25 is blocked by iptables/csf PORT STATE SERVICE 25/tcp filtered smtp After installing logwatch (which installs ...
1
vote
1answer
108 views

Ubuntu iptables logs not going to any log file

I am trying to put logs in iptables but I can not find any log in any file. Although when I run dmesg command, I can see the iptables entries. But the same entry doesn't go to any log file. Here is ...
1
vote
1answer
146 views

iptables DNAT port forward to another machine on LAN

I am trying to implement iptables forwarding rules in order to internally redirect packets coming through a specific port. My machine is running under the distribution Ubuntu Server 12.04.3, with UFW ...
0
votes
2answers
87 views

iptables causes infinite loop of GET request

I am trying to reroute HTTP traffic from 80 to 8080 to be used by Burp Suite. Using iptables, my command was: iptables -t nat -A OUTPUT -p tcp --dport 80 -j DNAT --to 127.0.0.1:8080 By doing so, ...
1
vote
0answers
163 views

Using ufw on OpenVZ-based VPSes

I'm facing with a problem to set up ufw on Ubuntu 12.04 running on an OpenVZ-based VPS. I know there is limitations for ufw. I googled a bunch of articles how to resolve the issue (like: ...
0
votes
1answer
118 views

error when adding FTP port on iptables rule

I am trying to add FTP port on my iptable configuration which I suspect the reason I cannot access my FTP via FileZilla. /etc/iptables.firewall.rules *filter # Allow all loopback (lo0) traffic and ...
3
votes
3answers
411 views

Can't stop DDOS [duplicate]

I need a little help dealing with ddos. I'm experiencing 1gb ddos attack on my server and I don't know how to stop it. (1gbs is the maximum speed of the server.) I've the following iptables rules: ...
0
votes
0answers
73 views

Unable to access Splunk via port number on Ubuntu 12.04

Ubuntu 12.04 Server x64 & Splunk 6.0 I installed Splunk according to the documentation. Started Splunk as directed and I am able to see it running in the terminal. I believe I correctly added the ...
-2
votes
1answer
194 views

Ubuntu Server / IpTables / Port Forwarding / NAT

I got referred here from StackOverflow. I'm using IpTables to forward an incoming port on one server to an external server (not on LAN) and the same port. The problem I'm having is that I have to use ...
-1
votes
1answer
333 views

How to Setup iptables for a squid proxy with just one HW-NIC

I got a Server with a static ipadress for rent and now i want to setup a transparent proxy on this server. after i configured the squid for testing purposes with the listener "http_access allow all", ...
0
votes
3answers
81 views

iptables + nat to internal web server

We run ubuntu on our gateway machine. We have a DNAT iptables rule sending traffic on 80 and 3306 to an internal ip address that runs a webserver. It doesn't work at all. eth1 is the wan interface, ...
3
votes
1answer
296 views

LXC networking with public IP

I have installed LXC in ubuntu server 12.04 using this link. It was installed successfully and i am able login using ubutu/ubuntu as username and password. Then I tried to setup network for LXC ...
0
votes
1answer
279 views

NAT rules betweek 2 network interfaces (with iptables)

this is the current network that I have: UBUNTU: eth0: ip: 212.83.10.10 bcast: 212.83.10.10 netmask 255.255.255.255 gateway 62.x.x.x eth1: ip: 192.168.1.1 bcast: ...
-1
votes
1answer
64 views

No access to our server outside LAN

I hope this isn't above the scope of ServerFault. If the question doesn't work here, some direction would be helpful. We've got an Ubuntu development server with 2 nics. One has a public IP and one ...
0
votes
1answer
74 views

How can I proxy ICMP requests?

I have a ubuntu server that receives many ping requests from various other servers in the network. I would like to be able to proxy these requests. Using iptable rules I can see how to DROP or ACCEPT ...
0
votes
0answers
82 views

Make local OpenVPN server show client's IP as localhost

I have an OpenVPN server, Tomcat and Jenkins server all running on the same DigitalOcean instance. I want to only be able to access Jenkins' web interface when I'm connected to the VPN. I can close ...
0
votes
1answer
41 views

Allow HTTP packet from specific hosts on an ec2 instance strictly

I have an ec2 instance (proxy) which is being used as http proxy server. There are some other hosts (hostA, hostB, hostC), I want the proxy server will only allow connection from those hosts. For ...
0
votes
1answer
93 views

Securing database server with IPTables

I have my app (WordPress) and database (MySQL) on separate servers; they are connected on a private network provided by the hosting service provider, and I've taken all the preliminary steps (that I ...
-1
votes
1answer
47 views

IPtables filters vanishes - Ubuntu server

I have used IPtables commands to block some IP`s, but now when I use #iptables -L to see the current filters, nothing is in there in my Ubuntu iptables firewall. I use the command like this: ...
0
votes
0answers
38 views

Add iptable rule before networking starts on Ubuntu Server

I have a Ubuntu 10.10 server. I have an iptable rule that needs to get added before networking is started. How can I do that? I've tried this: ...
1
vote
3answers
267 views

ipv6 on Ubuntu server - how do I secure?

On our Ubuntu server, ipv4 & ipv6 are enabled. We have taken these steps so far. Enabled iptables & ip6tables Copied the rules exactly from our iptables to ip6tables Do we need to make ...
1
vote
1answer
71 views

Cannot Limit Connections With Iptables: “No chain/target/match by that name.”

I am trying to limit the the number of connections to my Ubuntu server to no more than 10 in the most recent 50 seconds for any individual IP. I am trying to do this with iptables. I have never ...
1
vote
1answer
543 views

iptables blocking access to SMTP on port 25

I have iptables running on my server that blocks access on all ports except the ones I allow. One of those ports needs to be SMTP on port 25, and I have the following rule in place for that: -A INPUT ...
5
votes
2answers
1k views

Why is iptables not blocking an ip address?

I have configured fail2ban to monitor a certain pattern of malicious traffic I'm getting and ban IP addresses associated. Everything seems to be working great -- the regex is matching the pattern ...
0
votes
2answers
228 views

IPTables isn't forwarding anything

I currently have set up IPTables on my server to forward certain ports on a specific interface (venet0:1) to a second server, at a different IP. My config file looks like this: # Generated by ...
-3
votes
2answers
519 views

iptables No chain target match by name [closed]

Hi all into my Ubuntu server I want to block ftp port for all but I when I launch command: iptables -A INPUT -p tcp --destination-port 21 -j DROP Return me this error: iptables: No ...