Questions tagged [ip-forwarding]
The ip-forwarding tag has no usage guidance.
146
questions
0
votes
2
answers
94
views
iptables: IP forwarding restricted to pings. Why?
After reinstalling OpenSuSE Leap 15.5 on a SOHO server, which acts AS a Firewall, the machines on the internal network (169.254.164.0/24) can't reach any hosts on the internet save for pings. But no ...
- 123
0
votes
0
answers
37
views
iptables DNAT works for first curl request, then hangs
I want to forward all packets coming to 192.168.1.10:8070 on interface wlan0 to 10.59.99.4:8080 on interface wg0.
I added these two rules to iptables:
-A PREROUTING -p tcp --destination 192.168.1.10 --...
- 1
0
votes
0
answers
39
views
Internet Forwarding
I am looking for Internet Routing. Right now we have 2 offices one in Germany and One in Dubai. Everyone is connected through VPN Tunnel of the German office. The German office wants to connect to our ...
- 1
0
votes
0
answers
31
views
iptables default deny all, allow IP unrestricted access
I have successfully setup a raspberry pi to function as an access point. I have a pi connected via ethernet to my router, and am able to connect to the pi's wifi network and access other devices on ...
- 101
1
vote
0
answers
112
views
Forwarding all trafic with ipv6
I have two ubuntu server, one server from Iran and other from England
On the England server run V2ray vpn and i should have some tunnel from iran server to foreign country for best quality of speed ...
- 11
0
votes
0
answers
124
views
With iptables, is it possible to route only certain domains?
I'm routing specific devices through a separate gateway device that connects to a Tailscale VPN exit node.
I'm using this command so my device can act as NAT router to Tailscale:
sudo iptables -t nat -...
- 143
0
votes
0
answers
54
views
kernel ip_forward behave weirdly
I am trying to setup a side router (192.168.50.5) at my home. My server has this setup.
OS:
CentOS 9 Stream
Kernel:
net.ipv4.ip_forward = 1
net.ipv6.conf.all.forwarding = 1
net.ipv4.conf.all....
- 338
0
votes
0
answers
483
views
Route traffic to Kubernetes cluster using iptables
I have a kubernetes cluster (currently only 1 node) running on my root server (netcup) and try to route traffic to it. Im pretty bad in networking so hopefully someone can help me.
On the cluster ...
- 111
0
votes
1
answer
535
views
proper way of NATing and Routing when using TUN interface with iptables
edit: I'm a newbie in networking and discovering new things :)
I created a TUN interface programmatically and able to interact with.
I set it up and running by
ifconfig myTun 10.10.1.1/24 up
and its ...
0
votes
2
answers
196
views
can i able to ip forward and keep original client ip from server A to B?
im web developer and i have not good knowledge about devOps and server config,
i use this code for forwarding data from server a to b from client my mean is:
client---------->serverA--------->...
- 3
0
votes
0
answers
817
views
SOCAT command for UDP relay using single port
I am using SOCAT linux command for relaying udp packets. Currently I am simulating using VMware.
I used sudo socat -T 10 UDP4-LISTEN:132,reuseaddr,fork UDP4:192.168.11.130:130,bind=192.168.11.131:133 ...
- 113
0
votes
1
answer
88
views
iptable's ip forwarding results in weird behaviour
My target is simple : Build a high volume, fast, low latency soft switch using IP forwarding. I have a server test 'Server' and 2 test clients : 'Client1' & 'Client2'.
'Client1:c1' is sending udp ...
- 113
0
votes
0
answers
57
views
IP routing beween local pc and GCP VM using zerotier interface to access application
I am running application on 192.168.196.199:8080 on local PC. This application is accessible inside GCP VM using Zerotier interface i.e:
curl 192.168.196.199:8080
Generates Some Response
GCP VM has ...
0
votes
0
answers
691
views
iptables -j MASQUERADE for a specific network interface: after connecting to a VPN and changing the default route, connection in the peer is lost
I use to forward traffic from my wireless card to network namespaces.
I create the network namespace, virtual ethernet interfaces and all the rest:
ip netns add nsx
ip link add vethx type veth peer ...
- 133
0
votes
1
answer
43
views
IP-Forwarding has outgoing data but loses ingoing data after a few packages
I've reached absolute rock bottom on a network configuration that I'm dealing with, so I'm hoping some of you guys might have some ideas for something I haven't thought about.
I'm struggling a lot ...
- 1
1
vote
1
answer
567
views
forwarded TCP traffic is refragmented on Linux despite the "Don't fragment" flag
We have 2 VPN servers at the same hoster. The servers are virtual and they have different Linux distros. The VPN clients establish https connections to the same Amazon EC2 server. The TCP packets from ...
- 558
0
votes
1
answer
485
views
OpenVPN tun not forwarding traffic
I'am wondering how to forward traffic from a gateway to a subnet.
network setup
I have this working setup. Host A, HOST C, and HOST VPN have interfaces from internal network IP addressing and ...
- 1
0
votes
0
answers
333
views
Manual routing & SNAT doesn't work with Openvpn
I cannot figure out which configurations went wrong so that manual routing with OpenVPN cannot work.
Here is the general idea to hide the Client's public IP under the Server's:
[App -> tun0(10.0.0....
- 530
0
votes
0
answers
762
views
IPv6 forwarding enabled but not working. How to get it to work?
My system is running Debian GNU/Linux 11 (bullseye)
My network is configured with two interfaces, one to my ISP and one to my lan.
I am using systemd-networkd to manage the interfaces. The problem is ...
0
votes
0
answers
369
views
Forward web requests to another IP and port over VPN
I have the following setup
Web browser (192.168.5.10) ——> Home Ubuntu Server (192.168.5.15) ————->VPN over the internet———>to a public IP——> Work Server (192.168.6.90) ——-> Web ...
- 215
1
vote
1
answer
5k
views
Why is a system sending "ICMP time exceeded in-transit" messages when forwarding packets?
I have the following setup
| laptop A connected via Wireguard to a server - 192.168.20.3 |
🠛
| server B with Wireguard (192.168.20.0) and connected to a LAN (192.168.10.2). Forwarding is enabled |
...
- 3,607
2
votes
2
answers
594
views
Can't chain more than one network namespace together
Problem Statement
With the below configuration a veth pair is created between the default/main net namespace and a netns called ns1.
The config also creates a second veth pair: veth2 is in netns ns1 ...
- 4,212
0
votes
1
answer
1k
views
Iptables: how to allow forwarding from wireguard NIC only to some IP
Context
I successfully integrated Wireguard in my LAN so I could access my NAS (192.168.1.45) from the outside.
|Router| ===:5182=> |VPN server| ====> |NAS|
192.168.1.254 ...
- 133
1
vote
1
answer
753
views
Route traffic through IPSec tunnel with gateway host
Considering the strongswan wiki, this appears to be a standard problem, but I can't get it working quite right.
Network layout
The local site (client and gateway) is under my control, the remote site ...
- 115
1
vote
0
answers
394
views
Linux Kernel IP Forward activated, firewalld is bypassed?
On a Linux Centos7, I have some traffic that is routed with static routes from one interface to another.
I did notice that with firewalld activated, both interfaces added in a zone, and nothing ...
- 11
1
vote
1
answer
257
views
DNS lookup not working when using Ubuntu as an access point
I have a Ubuntu system with a wired connection to a router, and a USB connection to 4G internet via an iPhone. I want to be able to connect other clients to the router and access the internet via the ...
- 113
1
vote
0
answers
58
views
Suddenly ipforwarding uses local ip adresses for forwarded packages in ubuntu 16.04
I had two ubuntu servers (LB1 and LB2) which are directly connected to the internet.
The servers both had ipv4 forwarding active.
These two servers share their internet connection to some other ...
- 11
1
vote
1
answer
341
views
Having static IP allocated, still have to use DHCP, otherwise it does not work. Why?
I have a static IP address allocated by my Internet provider. However, support told me I have to use DHCP on my network interface, otherwise it may not work (and it actually does only work with DHCP). ...
- 111
0
votes
0
answers
1k
views
Forwarding Traffic from TUN interface to XX
My setup is the following: I'm writing a program that creates a tun interface and writes raw (Layer 3) packets to that interface. For example a ICMP ping packet (to make things easy).
Now i want to ...
0
votes
0
answers
9k
views
WireGuard handshake fails to be received
EDIT: I figured it out, solution below.
I've been attempting to set up WireGuard as a VPN gateway manually instead of using wg-quick, as I don't want to route the local machine's traffic over the ...
0
votes
1
answer
369
views
Is IP Forwarding possible for OpenVPN using pfSense on Google Cloud Platform?
I have a scenario with a pfSense machine (subnet x.x.0.0) on GCP, IPSEC vpn with 10 Site-to-Site is working normal but OpenVPN is not, the struggle resides in routing the packets through OpenVPN ...
google-compute-engine
0
votes
1
answer
115
views
EdgeRouter Route Incoming Traffic to another Public Network/Server
I am curious if this is possible in theory? At my colo datacenter, I have a lot of public IP addresses (/21) on a 1GB circuit using an Edge Router 6P (not using BGP). I want to temporarily rent a ...
- 146
0
votes
1
answer
566
views
Kernel IP forwarding not enabled for ethernet interface on boot
To enable IP forwarding on boot in Debian, you put the following in /etc/sysctl.conf:
net.ipv4.ip_forward=1
I've done it thousands of times, and it has always worked without issues. But there is this ...
- 141
1
vote
2
answers
1k
views
Static route - gateway not used
I'm trying to use gateway address 10.10.121.10 in order to forward TCP traffic via this machine. I would like to make that traffic from my machine is going over 10.10.121.10 and that machine 10.200.32....
- 171
1
vote
1
answer
5k
views
Port Forward through wireguard tunnel
I have a raspi connected to the Internet with a wireguard roadwarrior tunnel to the office.
The raspi should forward traffic at the "raspi Intranet" to the office net to a specific server.
...
- 11
1
vote
1
answer
4k
views
NFTables: is it possible to forward traffic without masquerading it?
I have a remote server (B) that forwards certain incoming traffic to another port of a different server (A, dest).
With "masquerade" I only see traffic coming from the forward server (B), is ...
- 25
0
votes
1
answer
538
views
Forward incoming connection to another server, but forward the connection IP address as well
I have two Linux servers. I need to forward the incoming connection from server A (1.1.1.1:25565) to server B (2.2.2.2:25598) (as an example). I've tried multiple iptables rules, with partial success. ...
- 11
-3
votes
1
answer
154
views
Iptables forward webinterface of E3531
I have a Raspberrypi with an E3531 UMTS Stick connecting to the Internet. Since the Rpi is headless I wanted to make the Webinterface of the Stick available over the IP of the Rpi.
The Stick builds a ...
- 1
0
votes
0
answers
210
views
Forwarding bonded connection to local network through stateful firewall - ArchLinux
I'm using Arch Linux to set up a firewall for a school which will stream each classes' video to students at home, so I need a strong and safe connection, that's why I was thinking about bonding ...
0
votes
0
answers
43
views
I need help connecting to system running as gateway
I need some help with a new network I set up. I have a network setup according to the Masquerade Alternative on this answer, with the tap and bridge, and everything is mostly working.
Here's a (bad) ...
- 1
0
votes
0
answers
6k
views
Wireguard on Windows 10 - remote LAN access issues
I have a work LAN (192.168.0.0/24) with a bunch of Windows 10 and Linux machines that I need to have access to from anywhere. Since it is behind an ISP NAT and is not accessible from outside, I had to ...
0
votes
0
answers
45
views
Circumventing Local Subnet Control Restrictions with Iptables
I have three wireless speakers that, for security reasons, only permit local subnet control. My network is setup such that the wired and wireless devices are on separate subnets, so right now the ...
0
votes
0
answers
778
views
Forwarding Home Game-Server through GRE Tunnel | Can't ping remote GRE IPs
I am having trouble routing my game-servers through GRE. I do not receive a ping from either side when pinging them. I can ping the local GRE interface; however, I cannot ping the remote GRE interface....
- 11
1
vote
0
answers
233
views
Kubernetes cluster not working after setting up IP forwarding
I am doing a research project and our end goal is to essentially construct a kubernetes cluster using several Raspberry Pis. I've included the fact that we are using Raspberry Pis for reference, but I ...
- 11
2
votes
2
answers
1k
views
Subnet to subnet forwarding traffic
I'am wondering how to forwarding traffic from a gateway to subnet.
network setup
I have this working setup, Host A behind tunnel can ping HOST B 10.151.0.1 but not HOST C 10.151.0.2.
If I TCPDUMP ...
- 21
1
vote
2
answers
665
views
How can I forward / redirect http to a public IP with nginx?
I have a domain example.com with DNS A record pointing to a public ip x.x.x.x.
I need to get all http and https requets from that server and forward that traffic to another public ip y.y.y.y.
Any ...
0
votes
1
answer
314
views
Why IP address overlapping occurs in IP forwarding table?
My understanding of an IP forwarding table is that they have a listing of different networks (identified by their IP ranges) and connects it to the next-hop router. However, I'm surprised why two ...
- 103
0
votes
1
answer
194
views
Forward ISP IPv6 from LAN to secondary LAN
I want to forward (or bridge, next to routing ipv4) the IPv6 internet connection from the LAN1 to LAN2.
IPv6 internet is accessible on LAN1.
I have a windows server, configured as NAT router between ...
1
vote
1
answer
2k
views
In IPv6 router gets the Router solicitation message, but not respond with Router advertisement
We setup a IPv6 network with two ubuntu systems and we make one PC as HOST and other as ROUTER(based on the concept of SLAAC).
The host sent the "Router solicitation" message, but the router not ...
- 31
0
votes
1
answer
1k
views
OpenVPN - Access to other client private network
I know that this title seems to be "over answered", but really I had no luck while searching...
EDIT: I've updated the diagram and the question, to be more precise
To better explain my situation, ...
- 131