Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with iptables
Search options answers only
not deleted
user 5538
is a user-space application to configure the Linux kernel firewall tables. These tables contain chains of rules defining the treatment of network packets.
3
votes
iptables allow only SSH and VPN
The only way to hide it from a scanner and have it online would be to just set:
iptables -P INPUT DROP
iptables -P OUTPUT DROP
iptables -P FORWARD DROP
And nothing else. … So doing both for the same chain is sort of pointless but since there can be weird gotchas with iptables, not a bad idea. …
- 60.1k
0
votes
How to get the iptables logs when Rpi act as router between ETH1 and ETH0
create a rule for syslog touch /etc/rsyslog.d/10-iptables.conf nano /etc/rsyslog.d/10-iptables.conf :msg, contains, "iptables: " -/var/log/iptables.log & ~
Instead try:
module (
load="builtin … :omfile"
template="RSYSLOG_TraditionalFileFormat"
)
if $programname == 'kernel' then {
if $msg contains 'iptables:'
then {
action (type="omfile" file="/var/log/ …
- 60.1k
0
votes
Accepted
Performance of a raspberry pi as a firewall
I am sure the processor + iptables (the linux kernel firewall, which is also used in most routers, but hidden behind a simplified interface) can handle that volume, so that is not a problem. …
- 60.1k
5
votes
How can I disable raspbmc's firewall for SSH access?
If it's there, to stop it:
service iptables stop
If you want to disable it permanently, use:
update-rc.d iptables disable
However
You don't have to completely disable it. … , :FORWARD, :OUTPUT:
-A INPUT -p tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT
Then iptables-restore < iptables-rules.txt. …
- 60.1k
11
votes
Accepted
iptables: nat table does not exist
If there is, you can filter that lsmod | grep -P "ip|nf" to see the ones that are related to iptables/netfilter (and anything else that coincidentally contains those letter combinations). …
- 60.1k
1
vote
Can't ping certain devices on my network
Is it a problem with some sort of configuration on the Pi or is it on one of the APs parts?
I'm presuming the ping fails because it times out, and not because of a firewall you've set up (if it w …
- 60.1k
2
votes
Accepted
Need help for iptables/filter
You haven't mentioned anything else about your configuration besides the iptables rules, which are fairly restrictive on 192.168.43.0/24. … ACCEPT
-A INPUT -s 192.168.43.0/24 -i wlan0 -p tcp -m tcp --dport 68:69 -j ACCEPT
-A INPUT -s 192.168.43.0/24 -i wlan0 -p udp -m udp --dport 51820 -j ACCEPT
You should open everything up there:
sudo iptables …
- 60.1k
5
votes
After I remove swapfile, I can't do anything! How can I revert this problem?
You went about this the wrong way. If you had simply disabled the service (update-rc.d -f dphys-swapfile) instead, it would be much easier to fix.
You could also have just added:
swapoff --all
dphys- …
- 60.1k
1
vote
Specify port number with hostname
-F
iptables-restore < iptables.rules
If you get a "command not found", you have to install the iptables package. … If you had previous firewall (iptables) rules set up, you obviously want to integrate this into them. …
- 60.1k
2
votes
Edit iptables to open a port the safest and easiest way (nano?)
Accept, PROT: tcp, OPT: --, SOURCE: anywhere, DESTINATION: anywhere, tcp dpt: 8092
Chain FORWARD (policy ACCEPT)
Chain OUTPUT (policy ACCEPT)
As per Steve's first comment, your culprit here is not iptables …
- 60.1k