Questions tagged [iptables]

GENERAL IPTABLES SUPPORT IS OFF-TOPIC. Support questions may be asked on https://superuser.com. An application that allows administrators to configure the packet processing tables provided by the Linux kernel firewall. Use this tag only for questions on programming with iptables. Questions about configuring iptables should be asked on Server Fault (https://serverfault.com/tour).

An application that allows administrators to configure the packet processing tables provided by the Linux kernel firewall. Use this tag only for questions on programming with iptables. Questions about configuring iptables should be asked on Server Fault.

Links:
Linux Firewall Tutorial: IPTables Tables, Chains, Rules Fundamentals
Iptables Essentials: Common Firewall Rules and Commands

2035 questions
0
votes
1 answer

IP Tables - Need understanding on a rule

iptables -A FORWARD -s 0/0 -i eth0 -d 192.168.1.58 -o eth1 -p TCP \ --sport 1024:65535 --dport 80 -j ACCEPT
H4X
  • 177
  • 1
  • 3
  • 8
0
votes
1 answer

Looking for a way to correcly generate an iptables-restore file

I'm building a firewall rule generator and i need to apply all the iptables rule atomically. The only guaranteed way to do that is to use an iptables restore file, which has it's own syntax. The only guaranteed way to generate such a file is to run…
user37203
  • 676
  • 5
  • 21
0
votes
1 answer

android genymotion iptables

I am using Genymotion emulator for Testing My proxy.So I need use iptables to redirect all tcp data to my proxy Port. when I use iptables -t nat -N REDSOCKS it prints 'can't initialize iptables table `nat': Table does not exist (do you need to…
0
votes
1 answer

debian port 80 does not accept remote connections

I have a Node.js express website that was listening on port 9000, the thing which was fine until I changed the port to 80, now it accepts only connection from local: wget http://127.0.0.1/ -O - curl 127.0.0.1:80 Locally it's working fine and they…
EvilThinker
  • 740
  • 1
  • 9
  • 13
0
votes
1 answer

Understanding iptables commands to limit outbound connection bandwidth

I found the following code snippet in the bitcoin source tree which is defined as part of a bash script to control the outbound connections on port 8333. Can someone explain me the exact working of the commands. iptables -t mangle -A OUTPUT -p tcp…
bawejakunal
  • 1,678
  • 2
  • 25
  • 54
0
votes
1 answer

Map ports on edge server to internal SSH services

I have a network. There's an edge server with a public IP address. There are multiple internal services 192.168.0.{1..255} with SSH running on port 22 that can be accessed via a private network from the edge server. I have clients connecting from…
Antti Kuosmanen
  • 830
  • 7
  • 11
0
votes
0 answers

Can a Connection Be Double DNAT Through an Iptables Rule

so say for instance i have an iptables rule that is of the sort iptables -I PREROUTING 1 -p udp 1000 -j DNAT --to-dest 192.168.1.10:1010 is there a way that i can midway through the connection based on say a u32 match or a string match further…
Chris
  • 443
  • 1
  • 5
  • 13
0
votes
0 answers

iptables forwarding through pptp

I am creating my own AOSP that contains my own apps and services. One of those services creates ppp0 interface and tries to link specific apps to be forwarded through that interface. I have tried these commands but it was not working as…
Amirali Amirale
  • 111
  • 1
  • 2
  • 12
0
votes
2 answers

Creating a firewall using iptables

I need to create a file to filter traffic. It should work like this: Input traffic from 192.168.5.0/24 should be blocked unless it's ICMP or from 192.168.5.200 Output traffic to 192.168.5.0/24 should be blocked unless it's ICMP or to…
Daniela
  • 471
  • 7
  • 25
0
votes
0 answers

I can't redirect traffic from port 80 with iptables

As testing I want to redirect traffic from port 80 at a simply webserver with nc If I run the follow command: # iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 8081 # nc -l -p 8081 # echo 1 >…
Stackuser
  • 140
  • 1
  • 12
0
votes
0 answers

Which organization maintain those code -> /home/BR6485EAC/linux-2.6.36.x/net/ipv4/netfilter

Which organization maintain those code -> /home/BR6485EAC/linux-2.6.36.x/net/ipv4/netfilter/ for example, -m weburl match kernel code ipt_weburl.c. Who maintain ipt_weburl.c or others(nf_nat_rtsp.c nf_nat_ipsec.c...etc) I can't find code in…
0
votes
1 answer

yocto custom built linux iptables issue

I am a beginner yocto user and I am working on a custom linux build for olinuxino a20-lime using yocto I am trying to establish an access point using a rtl8192cu based dongle(TP-Link wn823n) I followed this tutorial…
0
votes
1 answer

Redirecting filtered requests to second web server

What I want to do is setup two web servers. One will simply deliver normal content to people that request it and one will put minimal strain on the system and strictly deliver an access denied type of message for hackers. I looked at…
Mike -- No longer here
  • 2,064
  • 1
  • 15
  • 37
0
votes
1 answer

how to block ip address for 24 hours in LINUX Using iptables

How can I block ip address for 24 hours if in 1 second it hits is more than 100 using iptables.?
Vinay Gupta
  • 121
  • 1
0
votes
1 answer

multiple port forwarding via multiple interfaces within virtual machine

i'm trying to create a virtual testing environment. for purpose of testing, i'm going to send udp packets to application running inside the virtual machine. i want to control source ip of the packet when it is received by the application. i tried…
ilj
  • 859
  • 8
  • 18