Skip to main content

All Questions

Tagged with
0 votes
1 answer
535 views

Creating Subnet IP address : IPv4 block sizes must be between a /16 netmask and /28 netmask

I'm new to AWS and I'm looking to create a subnet. Whenever I try the defaults subnets under I get either the error message "IPv4 block sizes must be between a /16 netmask and /28 netmask." ...
Christian Fuh's user avatar
3 votes
1 answer
1k views

Do AWS Security Groups and rules and Network ACLs REJECT or DROP traffic?

AWS Security groups and AWS VPC Network ACLs are 2 solutions for controlling traffic in VPCs. When rules in either deny an IP packet, do they REJECT or DROP (in the iptables sense)? That is: are ...
turtlemonvh's user avatar
1 vote
3 answers
4k views

Public and private subnet in VPC

IANA established certain blocks of IP as private IP range(shown below) 10.0.0.0 – 10.255.255.255 (255.0.0.0) 172.16.0.0 – 172.31.255.255 (255.255.0.0) 192.168.0.0 – 192.168.255.255 (...
overexchange's user avatar
2 votes
1 answer
454 views

NAT setup on AWS

This might sound ridiculous for some, but am trying to setup NAT on lightsail so that I can access my private ec2 instances which are connected using VPC peering. Suppose if 172.31.x.x is my ...
Hari Aakash's user avatar
1 vote
1 answer
3k views

Instance in private subnet can connect internet but can't ping/traceroute

I have an AWS VPC with some public subnets and a private subnet, like the image below. Both instances can connect to the internet (INSTANCE A connects through NAT GATEWAY instance) NAT GATEWAY can ...
Daniel Costa's user avatar
1 vote
1 answer
283 views

Unable to connect to a member server within a vpn network or vice versa, but why?

I've created a test VPC in AWS for an OpenVPN proof of concept. In this VPC I've lunched a linux member server and an OpenVPN server AMI from AWS Marketplace, installed it and configured it. As a ...
Itai Ganot's user avatar
  • 10.9k
1 vote
0 answers
403 views

Unable to connect to web server hosted in private subnet of VPC via NAT hosted in public subnet

I have hosted my android/web application on a EC2 instance in the private subnet (10.0.1.0) of my VPC. This instance has apache-tomcat installed on it, but does not have a public IP. I also have a ...
AP-'s user avatar
  • 11
3 votes
1 answer
3k views

Port 53 in Amazon Security Group

Everything works as expected. This question is for learning purposes only. Using Amazon Security Groups in a VPC. Outbound rules are: 0.0.0.0/0 Port 80 0.0.0.0/0 Port 443 Iptables allows OUTPUT ...
csi's user avatar
  • 1,605
10 votes
4 answers
16k views

AWS VPC + IPtables + NAT: Port Forwarding is not working

Yesterday, I posted a question here but I think was not clear enough in my words. BTW, This question is not a duplicate. I have AWS VPC Setup as below. GOAL/PROBLEM: SSH to Server A from internet. ...
slayedbylucifer's user avatar
4 votes
2 answers
16k views

port forwarding through AWS VPC NAT

Yes, I have already scoured the internet and read most of the popular IPTables / DNAT guides / pages / posts. My Problem Summary I have a VPC with several subnets. One subnet in particular requires ...
user1521764's user avatar
12 votes
2 answers
17k views

How to persist iptables configuration on Amazon EC2 VPC NAT Ami? [duplicate]

I have a small script like this to configure the iptables: #!/bin/bash PRE_STR="iptables -t nat -A PREROUTING -p tcp -j DNAT" FOR_STR="iptables -A FORWARD -p tcp -j ACCEPT" #########################...
d0x's user avatar
  • 223
3 votes
2 answers
4k views

VPC SSH port forward into private subnet

Ok, so I've been racking my brain for DAYS on this dilema. I have a VPC setup with a public subnet, and a private subnet. The NAT is in place of course. I can connect from SSH into a instance in the ...
CP510's user avatar
  • 189
0 votes
1 answer
2k views

iptables redirect UDP packet to multiple destinations [duplicate]

Possible Duplicate: How to Tee udp packets onto a different host I'm running some instances in Amazon's Virtual Private Cloud. One instance is inside a VPN only subnet (10.128.1.0/24) connected ...
Brandon's user avatar
  • 151