Questions tagged [iptables]
Iptables is used to set up, maintain, and inspect the tables of IP packet filter rules in the Linux kernel.
1,309 questions
0
votes
0
answers
42
views
What script creates the jumps to the UFW chains?
I want to completely reload my firewall: restore the persistent rules and delete manually added ephemeral iptables rules. I tried this:
iptables -t filter -F
ufw reload
This doesn't restore the jumps ...
- 143
0
votes
0
answers
44
views
Organising download traffic tc qdisc script do not forward data to the right leaf classes
I have been trying to arrange the download tc qdisc script that allows me to reshape the incoming data (download). Here as it looks:
#!/bin/bash
P_CEIL=50
P_DEV=eth0
modprobe ifb numifbs=1
ip link ...
- 1
0
votes
0
answers
75
views
Use iptables to block certain macs in a bridge
Simple bridge configuration:
network:
version: 2
ethernets:
ens192:
dhcp4: true
ens224:
dhcp4: false
ens256:
dhcp4: false
bridges:
br0:
dhcp4: false
...
- 161
0
votes
1
answer
420
views
Set ufw default incoming rule to REJECT instead of DROP
I was fiddling with the ufw settings of my Azure VM and tried whitelisting only one IP (for ssh). I was able to do that using sudo ufw allow from <my_ip> to any port 22. Prior to this, I set the ...
0
votes
0
answers
43
views
Forwarding problem on ubuntu 20+
hello can somebody explain what ubuntu developers changed in ubuntu 20 compare to 18 server versions. that fresh install ubuntu 18 server. making simple forwarding between 2 interfaces - everything ...
0
votes
3
answers
178
views
Simple Iptables setup
I'm trying to create a simple set of Iptables rules for a minimal ubuntu server. SSH, HTTP and https allowed in, nothing else. I thought the following would be it, but it turns out apt-get, ping and I ...
- 1
0
votes
0
answers
107
views
i got a strange problem with iptables: dnat + masquerade not work
OS: Ubuntu-22.04 server
kernel version: 6.8.0-57-generic
hardware
it has 8 physical network adapter. I bound eno49 and eno50 as bond0, and create a bridge interface cni0. the following is my netplan ...
- 1
0
votes
0
answers
69
views
Drop ssh connection packets on port 22
On ubuntu server, I set my ssh port to 2381 and I need all connections of port 22 to my remote IP drop (drop not deny) without any response from the server.
sudo ufw delete allow 22/tcp
sudo apt ...
- 332
2
votes
1
answer
337
views
Cannot reach GitHub on Ubuntu Server
I recently set up an Ubuntu Server, so this is a pretty fresh install, but I'm having problems accessing GitHub. I would appreciate any help figuring this out. I tried to clone my GitHub repo using ...
- 21
1
vote
0
answers
48
views
Does Ubuntu 22.04 on WSL allow setting of ECN bit to 0x01 using iptables command for L4S traffic
root_user@mypc:~$ iptables -t mangle -A OUTPUT -p tcp -j TOS --set-tos 0x01
iptables v1.8.7 (nf_tables): unknown option "--set-tos"
Try `iptables -h' or 'iptables --help' for more ...
- 11
0
votes
1
answer
97
views
Automate `ip route add` whenever it's removed
I've been having a problem making a Wireguard VPN on my router which I can use to reach my home network when I'm away play nice with NordVPN running on my Ubuntu server.
When I connect to the WG VPN, ...
- 1
1
vote
0
answers
213
views
Geoblocking with IPSET and IPTABLES - Occasionally not dropping country
Ubuntu 20.04.6 LTS. LAMP Server. Using Fail2Ban
I've been trying to Geoblocking working on my private server, more for personal interest than anything else. Plus I thought it would reduce the amount ...
- 11
1
vote
1
answer
232
views
UFW blocking internet
Of course, everything worked yesterday.
With the command UFW enabled there is no internet connection.
UFW rules:
Added user rules (see 'ufw status' for running firewall):
ufw allow 22
ufw allow 21
ufw ...
- 11
0
votes
0
answers
44
views
Bidirectional connectivity issue between Client VPN and Docker network
I have a Docker network (10.251.102.0/25) on my LAN (10.251.101.0/24). Clients can connect to the Meraki VPN (Client VPN) without issues. VPN clients can ping and SSH into devices on the LAN, but they ...
1
vote
1
answer
256
views
podman ipvlan l3 network
I have an Ubuntu box "k3" attached to a physical network 192.168.86.0/24 and a tplink deco router on 192.168.86.1. k3's IP is 192.168.86.53.
On the ubuntu box, I created a ipvlan l3 network:
...
- 456