All Questions
7
questions
2
votes
1
answer
11k
views
Block ARP requests (or broadcast message, if possible) from A SPECIFIC HOST in a subnet
My ISP provide username-password for authentication and also register the client's MAC address for authentication.
I am concerned about someone misusing my connection while I am not using it. ...
- 711
1
vote
1
answer
188
views
iptables is treating traffic from different hosts differently in spite of rules
Something spooky is happening here and I don't know how to fix it. Summary: traffic that appears identical to tcpdump is being treated by iptables differently. Details below.
Test setup:
device ...
- 11
11
votes
2
answers
15k
views
Ubuntu IPTables allow only allow 1 country
So I've been looking around on the net for a script that will drop all traffic to all ports except the http(80) and https(443) ports, and then only allow traffic on all other ports from country x (...
- 213
5
votes
1
answer
2k
views
Block Windows 10 P2P updates with a corporate firewall
I work for a small IT company that fix mostly Windows computers, and lately we have an huge issue with Windows 10 updates.
When a new computer enters our network and starts downloading updates, it ...
- 163
1
vote
1
answer
7k
views
How to see connection attempts rejected by firewall in real time?
I am struggling to create an NFS mount from my Mac to a Ubuntu server (the mount works if I do it locally on the server to itself, so I'm confident the issue is network related), and I need to have ...
- 185
0
votes
1
answer
2k
views
iptables SNAT for UDP rule is only applied to some traffic
I want to use Source NAT to change the local IP address of UDP traffic. However, only locally-generated traffic has the NAT rule applied, replies to traffic generated from remote sources do not have ...
- 13
0
votes
1
answer
409
views
Relay TCP upload traffic and make download traffic go directly to the client
This is a supplement for iptables SNAT for UDP rule is only applied to some traffic
In fact, I have three machines:
the client
the target server
the relay server
What's my motivation for doing this?
...
- 13