387 reputation
521
bio website
location
age
visits member for 3 years, 10 months
seen Dec 4 at 17:41

Dec
3
comment iptables -D POSTROUTING -t nat -o tun0 -j MASQUERADE
Updated. Thanks. Copy & paste error
Dec
3
revised iptables -D POSTROUTING -t nat -o tun0 -j MASQUERADE
drop was incorrectly accept
Dec
3
comment Port 53 in Amazon Security Group
The Amazon default rule is 0.0.0.0/0 All Traffic meaning, by default, all outbound traffic is allowed. That default rule has been removed and replaced with the 2 outbound rules above. Shouldn't this only allow outbound traffic on 443 and 80 only?
Dec
3
answered iptables -D POSTROUTING -t nat -o tun0 -j MASQUERADE
Dec
3
asked Port 53 in Amazon Security Group
Dec
1
accepted Why Use a NAT Instance?
Dec
1
comment Why Use a NAT Instance?
Thanks. The main benefit based on our specific application is separation of services. We will evaluate.
Dec
1
comment Why Use a NAT Instance?
@Flimzy yes. Thanks for elegantly wording. Updated again.
Dec
1
revised Why Use a NAT Instance?
clarified
Dec
1
comment Why Use a NAT Instance?
@Flimzy question clarified. Understand why we want the database servers isolated. Also understand that they still need internet access. The question is why use a separate server as a NAT instead of using 1 of the app instances?
Dec
1
revised Why Use a NAT Instance?
clarified the question
Dec
1
asked Why Use a NAT Instance?
Nov
30
awarded  Popular Question
Nov
24
awarded  Popular Question
Oct
21
awarded  Notable Question
Oct
9
comment Apache Instance in Private Subnet not returning packets
@MarkWagner Thank you. Please submit an answer with FORWARD chain so I can award the bounty. My default rules were to DROP forwarded traffic.
Oct
9
revised Apache Instance in Private Subnet not returning packets
added PREROUTING iptables rule
Oct
9
comment Apache Instance in Private Subnet not returning packets
I will add above but this rule is enabled. iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT --to-destination 10.0.10.102:80. Can you explain more about the FORWARD rule or anything that may be wrong with the PREROUTING given?
Oct
8
revised Apache Instance in Private Subnet not returning packets
added netstat output
Oct
8
comment Apache Instance in Private Subnet not returning packets
on the App instance in the private subnet, Apache is listening on port 80. It is not listening on the NAT instance. I don't believe it should be, correct?