387 reputation
621
bio website
location
age
visits member for 3 years, 10 months
seen Dec 4 at 17:41

1d
awarded  Notable Question
Dec
3
comment iptables -D POSTROUTING -t nat -o tun0 -j MASQUERADE
Updated. Thanks. Copy & paste error
Dec
3
revised iptables -D POSTROUTING -t nat -o tun0 -j MASQUERADE
drop was incorrectly accept
Dec
3
comment Port 53 in Amazon Security Group
The Amazon default rule is 0.0.0.0/0 All Traffic meaning, by default, all outbound traffic is allowed. That default rule has been removed and replaced with the 2 outbound rules above. Shouldn't this only allow outbound traffic on 443 and 80 only?
Dec
3
answered iptables -D POSTROUTING -t nat -o tun0 -j MASQUERADE
Dec
3
asked Port 53 in Amazon Security Group
Dec
1
accepted Why Use a NAT Instance?
Dec
1
comment Why Use a NAT Instance?
Thanks. The main benefit based on our specific application is separation of services. We will evaluate.
Dec
1
comment Why Use a NAT Instance?
@Flimzy yes. Thanks for elegantly wording. Updated again.
Dec
1
revised Why Use a NAT Instance?
clarified
Dec
1
comment Why Use a NAT Instance?
@Flimzy question clarified. Understand why we want the database servers isolated. Also understand that they still need internet access. The question is why use a separate server as a NAT instead of using 1 of the app instances?
Dec
1
revised Why Use a NAT Instance?
clarified the question
Dec
1
asked Why Use a NAT Instance?
Nov
30
awarded  Popular Question
Nov
24
awarded  Popular Question
Oct
21
awarded  Notable Question
Oct
9
comment Apache Instance in Private Subnet not returning packets
@MarkWagner Thank you. Please submit an answer with FORWARD chain so I can award the bounty. My default rules were to DROP forwarded traffic.
Oct
9
revised Apache Instance in Private Subnet not returning packets
added PREROUTING iptables rule
Oct
9
comment Apache Instance in Private Subnet not returning packets
I will add above but this rule is enabled. iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT --to-destination 10.0.10.102:80. Can you explain more about the FORWARD rule or anything that may be wrong with the PREROUTING given?
Oct
8
revised Apache Instance in Private Subnet not returning packets
added netstat output