Route internet traffic through one nic and local traffic through a second nic
Matt Schramm asked: I am trying to route traffic through a specific interface based on its destination. OS is CentOS 7. I am setting up a mini MPI farm where …
CentOS iptables NAT, client cannot connect to WAN from LAN
Tom B asked: I have the following configuration: 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo …
Why does ACCEPT all for all destinations in iptables not allow port 8445?
Joel Ginsberg asked: I have a test server which has the following IPtables configuration: [[email protected] /]# iptables –list Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT all — …
Iptables udp blocking issue
Iftakharul Alam asked: If I had to block port 144 for udp on eth1 in an active way, for packets with source port 8080, but block it actively so not …
iptables INPUT DROP NEW what effect will this have?
John Von Neumann asked: I’m currently working through the Linux Firewalls book and have a set of rules setup which dictate rules to follow around every STATE except for NEW …
correctly routed responses to NATed packages via OpenVPN are rejected by client
singinWhale asked: I have the following setup: Dedicated server S with static public IP address on eth0 running OpenVPN as server on tun0 and performing NAT from tun0 to eth0 …
How to update an ipset name-based entry
WoJ asked: I need to handle on my firewall (Firehol, which is then transformed into iptables) a few dynamic entries. In an ideal world I would use a name (instead …
Redirecting OpenVPN traffic to Burp Suite
Pan Ziyue asked: I have a Linux Mint VM that I spun up as a transparent proxy for iOS devices. My intention is to tunnel all traffic from the iOS …
iptable – REJECT target – not accepted as valid target
Eric asked: Platform: Linux {hostname} 3.13.0-145-generic #194-Ubuntu SMP Thu Apr 5 15:20:44 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux System is not allowing usage of REJECT as –jump target. According to …
attack from China on the mail server
Emilio Galarraga asked: What is the best way to avoid this kind of attack on the mail server? Mar 22 21:47:46 mail dovecot: imap-login: Disconnected (auth failed, 1 attempts in …