Questions tagged [iptables]

iptables is the userspace command line program used to configure the Linux 2.4.x and 2.6.x IPv4 packet filtering ruleset. It is targeted towards system administrators. Please, when asking a question about iptables, add the output from the following command: iptables -L -v -n

iptables is userspace utility complementary to Linux kernel-level Netfilter firewall.

When seeking help in regards of the firewall configuration it's advisable to supply iptables-save output to give a readable ruleset listing possibly appending it with iptables -L -v -n — to give matching ruleset information.

6626 questions
2
votes
2 answers

How to make incoming and outgoing IP same on a multiple IP binding server

I have a centos 6 VPS configured 1 network interface binding with 4 IPs, for example 172.x.x.11, 172.x.x.12, 172.x.x.13, 172.x.x.14 binding with venet0:0, venet0:1, venet0:2, venet0:3. I have pptpd service running on the server. Client can connect…
Alex Liao
  • 23
  • 4
2
votes
1 answer

Bandwidth Manager Using Squid

I am trying to create a internet distribution software for an ISP (an internet distributor or a school or other such organizations) like the one here It will have restrictions and policies for users to limit bandwidth/speed/duration etc according to…
haywire
  • 131
  • 5
2
votes
2 answers

Routing through OpenVPN gateway

I have the following setup: ++++++++++++++++++ + OpenVPN server +........ . . . . (cat pictures) ++++++++++++++++++ | | __|__________________________________________Internet________________ | …
Secoe
  • 303
  • 2
  • 8
2
votes
1 answer

openvpn client cant reach external internet

Setting up an openvpn server with tls auth and ip forwarding. I could connect to the vpn server just fine, but couldn't reach any outside connections I could not successfully ping 8.8.8.8 the google dns service but I knew I could connect to the vpn…
2
votes
1 answer

what is the --kerneltz in iptables command

I am using iptables for my project but facing some problem as follow. 1.in iptables 1.4.7 iptables -A INPUT -s 10.0.4.247 -m time --datestart 2013-5-16T12 --datestop 2013-5-16T16 -j DROP or iptables -A INPUT -s 10.0.4.247 -m time --localtz…
pradipta
  • 281
  • 1
  • 3
  • 8
2
votes
1 answer

Iptables rules order

I have following script, which I found somewhere in the Internet, and I modified it a little bit to suit my needs. My question is: If I understood output of iptables-save my iptables rules are maderight, but I just want to make sure. Here is my .sh…
Jevgeni Smirnov
  • 492
  • 1
  • 6
  • 22
2
votes
2 answers

IPTABLES with AND conditions

I need to apply an iptables rules using --string option. I need to match on --hex or ascii 2 strings that are never localized on the same area. Each samples I tried DROP only one of my two strings, so I have false positive. I need to DROP the 2…
doc
  • 21
  • 1
  • 3
2
votes
4 answers

Locally examine network traffic of remote machine

I have root access to my dd-wrt router at 192.168.0.1 and computer at 192.168.0.100. I need to get the traffic comming through the router(in the Internet and out) from some other computer(192.168.0.101) and examine it in let's say wireshark on my…
2
votes
0 answers

CentOS 6 IPTables commands not responsive, firewall is down

We have had this issue before but we thought it was due to installing CSF. This has now happend again where none of the commands for IPTables return anything. 'iptables -L' doesn't display anything, restarting doesn't bring it back to blinking…
2
votes
1 answer

Is this THE MOST comprehensive commands to completely reset your iptables?

I'm running a VPS, and would like to reset the iptables' rules to its fresh-out-of-the-box default state. These are the commands I've come up with: #!/bin/sh echo "Resetting all iptables rules..." #Reset default table policies iptables -P INPUT…
Honey Badger
  • 829
  • 3
  • 11
  • 15
2
votes
3 answers

OpenVPN - Client traffic is not entirely routed through VPN

I installed OpenVPN on my dedicated server. Using Viscosity or Tunnelblick on the client, I successfully connected to this server. However, after some tests, I realized that not all the traffic generated by the client goes through the server.…
Pierre Espenan
  • 141
  • 1
  • 7
2
votes
1 answer

How to configure iptables rules for connecting 2 eth to the net (forwarding & masquerading)

need some help on configuring iptables rule for forwarding and masquerading Given I have these configuration: switch1 ---- (eth1) ----- router ---- (eth2) -----…
AjPrames
  • 21
  • 2
2
votes
1 answer

Using IPtables to prevent users on your server from port scanning other servers

Some of our users are launching port scans on Internet servers. These users connect to our servers using ssh and openvpn. We obviously suspend their accounts where appropriate however I'd like to find a technical solution that either prevents the…
Michelle
  • 923
  • 5
  • 20
  • 30
2
votes
2 answers

How to gain control of growing log files in 3 separate directories on my VPS?

I've got a VPS account that I set up with lxadmin. I've got a stats file at /home/http/tanguay.info/stats/ which is filling up extremely fast. Looking in it, I see that there are 1000s of entries with a referer that is obviously a spam site. How…
Edward Tanguay
  • 1,209
  • 4
  • 22
  • 31
2
votes
1 answer

Can't Access CouchDB Remotely

Please keep in mind that I have this installed on an Amazon EC2 instance running the latest version of Ubuntu Server. I have changed the bind_address to 0.0.0.0. netstat -an | grep 5984 yields the following: tcp 0 0 0.0.0.0:5984 …
Willem Ellis
  • 123
  • 6