duplicate packet to another local host(SIEM)
Swannie asked: We have a Central Syslog server that we use to collect all logs from our hosts and recently got a SIEM that we also want to collect the …
Why cannot I access my website when port 80 is not blocked?
William asked: On my VPS(CentOS 7), the default iptables is: Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT all — 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED ACCEPT icmp — 0.0.0.0/0 …
IPTables source NAT (SNAT) to /etc/ufw/before.rules
Tim asked: I have a need to source NAT (SNAT) traffic between two interfaces in an Ubuntu 18.04 server. I’ve been trying to use the ‘/etc/ufw/before.rules’ file to implement my …
Ubuntu 18.04: Communication to server on localhost stops working after setting a port forwarding rule
muliku asked: I have a Ubuntu 18.04 device with two network interfaces, ethernet and USB LTE modem. There is IP camera connected directly to the ethernet port and it has …
How to write iptables rule to accept certain ICMPv6 types and codes?
sunknudsen asked: I currently have the following: ip6tables -A INPUT -p ipv6-icmp –icmpv6-type 1 -j ACCEPT ip6tables -A INPUT -p ipv6-icmp –icmpv6-type 2 -j ACCEPT ip6tables -A INPUT -p ipv6-icmp …
iptables configuration & logging of dropped packages due to missing ports when using masquerading
Phylu asked: I am setting up iptables for natting of multiple hosts in a server cluster. There will be connection bursts from multiple servers usually to a single system. The …
Stopping IPTables is the only way to make Kubernetes cluster work
user2405589 asked: We have an inhouse 1.17.5 K8s cluster – 5 nodes. I cannot deploy, collect logs, anything on the cluster when IPTables is enabled. [[email protected] ~]# kubectl run –generator=run-pod/v1 …
Is it okay to drop DNS type AAAA queries
NOYB asked: If a DNSSEC server has no zones with AAAA records. What potential problems could there be by dropping DNS type AAAA (28; 0x1c) queries at the firewall? Same …
Cloudflare behind site iptables not blocking HTTP and HTTPS ports
Chathu asked: When the Fail2ban trigger an IP ban action, I want to block all the ports on my Ubuntu Server. Right now, I use banaction = iptables-allports and CSF. …
Network activity through port 17500
ishahak asked: I’m trying to track network activities on my machine running CentOS-7. According to iptables logs, I’m getting many inputs from unknown machines into port 17500. Is there any …