All Questions
166
questions
1
vote
2
answers
8k
views
how to restore iptables after iptables -F?
I used iptables -F on my machine, and what can I do to recover the iptables into the default without rebooting my machine?
I restarted the iptables service and it failed, and I can't find iptables ...
CommunityBot
- 1
2
votes
2
answers
1k
views
iptables drop all packets that do not come from two specific subnets
I want to drop all packets that do not come with a source IP in the subnets 11.2.4.0/24 and 11.2.3.0/24
I thought about doing something like so:
iptables -A OUTPUT ! -s 11.2.4.0/24,11.2.3.0/24 -j DROP
...
11
votes
2
answers
16k
views
Ubuntu IPTables allow only allow 1 country
So I've been looking around on the net for a script that will drop all traffic to all ports except the http(80) and https(443) ports, and then only allow traffic on all other ports from country x (...
0
votes
3
answers
95
views
iptables not dropping udp port for exact ip address
My iptables rules are as follows:
-P INPUT ACCEPT
-P FORWARD ACCEPT
-P OUTPUT ACCEPT
-N f2b
-A INPUT -p tcp -m multiport --dports 80,443 -j f2b
-A INPUT -d (my public facing ip)/32 -p udp -m udp --...
- 93
0
votes
2
answers
1k
views
Mitigating TCP reset style attacks
I appear to be a victim of TCP reset attacks with the purpose of preventing me from downloading specific data. I know this is the case at this stage.
For the time being I am staying at a hotel and so ...
CommunityBot
- 1
0
votes
1
answer
91
views
Block with firewall a dns request containing a certain query
Example
let's say I'm with iptables or nftables
I want to allow a certain traffic like the following one:
iptables -A OUTPUT -d 192.168.1.1 -p udp --dport 53 -j ACCEPT
iptables -A INPUT -s 192.168.1.1 ...
- 465k
0
votes
0
answers
214
views
To allow IPsec NAT-T traffic to pass through, why does the firewall still need to permit ESP when it already allows UDP 4500?
I established an IPsec VPN tunnel between two Juniper SRX routers across NAT, with the NAT being performed by the firewall (a Linux server). When attempting to configure the firewall rules to allow ...
0
votes
1
answer
5k
views
iptables snat does not change source IP
I am on ubuntu (with IP 10.0.0.1) trying to snat packets going out from port 9090. I want to change the source IP to 10.0.0.2
I have added the following rule through iptables:
# iptables -t nat -A ...
0
votes
1
answer
88
views
routing traffic using iptables and l2tp
Internet restrictions in my country have essentially made it impossible for VPNs to work.
As such, I wanted to circumvent this issue by using the following method.
Although "residential" ...
- 465k
1
vote
3
answers
5k
views
iptables SNAT/DNAT explain behaviour
I am new to iptables and I want to understand how iptables nat is working.
I have a linux machine with a lxc container.
The machine network configuration is as follows: eth0 interface which connects ...
CommunityBot
- 1
0
votes
0
answers
28
views
Firewall incoming packets are dropped with VLAN configuration
In my Windows PC, installed scapy tool for sending packets from my system to raspberry Pi board connected to my machine using VLAN.
In my raspberry Pi board, Firewall rules are already configured and ...
- 402
1
vote
1
answer
244
views
IPTables rules and networking with problems 2
My plan is to have a computer that forwards all traffic from internal interface ens19 to openvpn-interface tun0. The system has 2 physical interfaces: ens18 for local network with Internet connection ...
- 11
1
vote
1
answer
380
views
Unable to open port on debian vps
Trying to open 51820 UDP
I do
iptables -A INPUT -p udp --dport 51820 -j ACCEPT
then iptables -L
I can see
ACCEPT udp -- anywhere anywhere udp dpt:51820
then I do
/sbin/...
- 560
0
votes
0
answers
36
views
Iptable rules through two firewalls for an rdp connection
Suppose I have a network topology similar to the one above, if i wanted to rdp into a host on the private network from home these are the following iptable rules i have:
Firewall 1:
$IPT -t nat -A ...
- 101
-1
votes
1
answer
404
views
IPtables dropping packets I can't see with tcpdump and I don't know why?
My IPtables rules are blocking apt update for example:
root@vpn:~# apt update
Ign:1 https://pkgs.tailscale.com/stable/ubuntu jammy InRelease
Ign:2 http://de.archive.ubuntu.com/ubuntu jammy InRelease
...
- 9,996
0
votes
1
answer
141
views
IPTables rules and networking with problems
I'm using a Fritzbox for normal network and an own installed Router on rpi3 for an own network with openvpn, dnsmasq and iptables. Over the last few years the setup worked good. You can find the ...
- 11
2
votes
2
answers
3k
views
configure iptables to block all(as much as possible) bittorrent traffic
good day all
This is my current iptables setup
# Generated by iptables-save v1.4.7 on Wed Apr 9 13:50:31 2014
*filter :INPUT DROP [0:0] :FORWARD DROP [0:0] :OUTPUT ACCEPT [0:0] :LOGDROP - [0:0]
-...
CommunityBot
- 1
1
vote
0
answers
91
views
Reroute and tunnel udp connection to another server
I have been trying to establish a connection between a vps and a dedicated bare metal server for a month now. Basically, vps will act as a tunnel to connect to my dedicated server, I'm doing this to ...
1
vote
1
answer
879
views
iptables - How do I restrict access to just local devices on the network?
I have a WireGuard VPN Server running on a Debian 12 host with no problems, listening on a specific UDP port, and all is working great with no issues. I can connect from my phone WireGuard client ...
- 465k
1
vote
0
answers
378
views
Unable to traceroute but able to ping
I need to connect to my own server that runs Linux Mint.
After installing Tailscale on both PCs (client and server) I can successfully ping the server from client, but I'm unable to traceroute it.
...
- 56.1k
4
votes
1
answer
2k
views
nftables: How to stop further chain traversal after accept verdict
Context : https://wiki.nftables.org/wiki-nftables/index.php/Configuring_chains
If a packet is accepted and there is another chain, bearing the same hook type and with a later priority, then the packet ...
1
vote
0
answers
144
views
Kali Linux takes way too long to load the GUI after entering the password? IPTABLES
After entering the passward to login, it takes way too long to load GUI.
I think the issue is with the firewall, when I enable it the GUI loads way two long to load. More than a minute, if it's ...
- 7,360
0
votes
1
answer
336
views
How to send back TCP packets using iptables
I am trying to demonstrate TCP communication with a Ubuntu 18.04 box (which mocks a QNX setup) that does not have a listener installed. Consider that due to some license issues it might not be ...
- 8,457
0
votes
2
answers
5k
views
limit max UDP bandwidth per IP using iptables?
'm using a VPS to host a VPN for DDoS protection, but I've been wanting to find a way to rate-limit UDP traffic per IP to prevent UDP floods. I'm looking for something to only allow X MBPS of traffic ...
- 1
2
votes
2
answers
1k
views
Change all rules in iptables when changing IP address
I have a network gateway system using iptables to allow/deny traffic to/from an internal network. I have to manually add and remove rules in iptables depending on the requirements of the entities in ...
- 3,667
0
votes
1
answer
601
views
iptables ESTABLISHED,RELATED in combination with DNS rules
I'm reading Chapter 3 in "Cybersecurity for Small Networks" (Seth Enoka) and have added the following iptables rules in an Ubuntu 22.04.1 virtual machine:
# Generated by iptables-save v1.8.7 ...
- 465k
4
votes
3
answers
1k
views
Is this firewall completely secure?
I'd like to know if there's any holes/flaws in this firewall setup. I want to lock down the server as much as possible so it is impossible to hack in to. The only services running are openvpn and ssh. ...
- 265
0
votes
1
answer
3k
views
IPTables issue allowing queries to DNS server
I've been given a task to create a DNS server for a subdomain with a delegated DNS zone. I did test the zone file and using the dig tool, I can confirm it is working when called for localhost and the ...
- 1,238
0
votes
1
answer
546
views
How to setup firewall rules to allow whitelisted IP for communication over eth0
I have to setup firewall rules for my onboard network(for list of device which are connected via eth0 interface) during boot up of Linux device.
By default all communication over eth0 should be ...
1
vote
0
answers
342
views
iptables forwarding stops working after suspending or rebooting
I am trying to forward packets received by a PC on port 16080 to port 3389 to another PC connected to it via Ethernet, where enp1s0 is the Ethernet interface and 10.42.0.66 is the IP of the connected ...
