369 reputation
519
bio website
location
age
visits member for 3 years, 8 months
seen 2 days ago

Oct
21
awarded  Notable Question
Oct
9
comment Apache Instance in Private Subnet not returning packets
@MarkWagner Thank you. Please submit an answer with FORWARD chain so I can award the bounty. My default rules were to DROP forwarded traffic.
Oct
9
revised Apache Instance in Private Subnet not returning packets
added PREROUTING iptables rule
Oct
9
comment Apache Instance in Private Subnet not returning packets
I will add above but this rule is enabled. iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT --to-destination 10.0.10.102:80. Can you explain more about the FORWARD rule or anything that may be wrong with the PREROUTING given?
Oct
8
revised Apache Instance in Private Subnet not returning packets
added netstat output
Oct
8
comment Apache Instance in Private Subnet not returning packets
on the App instance in the private subnet, Apache is listening on port 80. It is not listening on the NAT instance. I don't believe it should be, correct?
Oct
8
comment Apache Instance in Private Subnet not returning packets
Correction: ping does work to external network -> ping google.com. Ping fails to network public ip -> ping X.X.X.X fails
Oct
8
revised Apache Instance in Private Subnet not returning packets
reorganized for clarity. Added tcpdump details. Reworded question. added ping & wget details
Oct
3
revised Apache Instance in Private Subnet not returning packets
Added additional details to help
Oct
3
comment Apache Instance in Private Subnet not returning packets
@Andrew iptables -t nat -A POSTROUTING -j MASQUERADE. Ping does not work. wget does though.
Oct
3
comment Apache Instance in Private Subnet not returning packets
@EEAA yes this is AWS. Source/destination checking is disabled. Forwarding is enabled in /proc/sys/net/ipv4/ip_forward. Is there somewhere else to check on the forwarding?
Oct
2
asked Apache Instance in Private Subnet not returning packets
Oct
1
comment Should a NAT host be separate from a Bastion host
@John edited the question to elicit fact based answers. Can you provide your insight?
Oct
1
revised Should a NAT host be separate from a Bastion host
changed question so it is not opinion based
Oct
1
accepted Share Ruby Programs between Linux users
Oct
1
accepted Security Auditing on Ubuntu 14.04 LTS
Oct
1
asked Should a NAT host be separate from a Bastion host
Sep
29
accepted MySQL via SSL on VPC private subnet
Sep
27
awarded  Popular Question
Sep
25
revised MySQL via SSL on VPC private subnet
added 60 characters in body