CentOS 5 :: Configure Iptables Except Using Terminal?
Mar 19, 2009can i configurfe iptables except using terminal ? like 32-bit interface application
View 1 Repliescan i configurfe iptables except using terminal ? like 32-bit interface application
View 1 RepliesI am using centos 5.3 , and also using webserver in local network
Here is all configuration
1, server
eth0 , 222.80.1.90 this is live ip
eth1 10.0.0.1
2, webserver
eth0 10.0.0.2
I want set iptables on server 1 , to acces webserver from other city ,
How to configure iptables
To expand: I'm trying to set up a box with l7-filter, and I need to patch and compile iptables 1.4.1.1 as part of the process. I ./configured it with the prefix= argument so it would install into /sbin instead of /usr/sbin, and I did a yum remove iptables before installing it so as not to get in the way of the original iptables, but I'm wondering if this is really necessary - it's kind of annoying, because removing the original iptables removes the init.d script, deregisters the service, etc. If I don't, is it possible that iptables 1.4.1.1 might get overwritten in a system update or something, or will yum see that I've got a custom/newer version in there and leave it be?
View 4 Replies View RelatedI found a tool made for Ubuntu called Xautoclick. I downloaded it and it is called "xautoclick-0.30.tar.gz" The installation notes say "tallatBe sure you have the proper development packages for your distribution installed (i.e. something like xserver-xorg-dev, gtk2-dev, et cetera). After that, run:
./configure make sudo make install" I have no clue what to do... I typed in "./configure" in the terminal and it says "bash: ./configure: No such file or directory?
I've got a machine on my network that's just running default Ubuntu 9.10, but I was considering setting up a network dhcp service on it to manage my machines. As such I was just wondering about configuring the iptables for it.
Reading about, I believe all incoming connections are dropped by default in a standard installation of Ubuntu anyway. If so, is it simply a case of enabling UFW and using it to allow the appropriate port for the dhcpd service and not touching anything else and everything should remain secure?
I am trying to figure out how I can configure IPtables to only allow VNC traffic to an internal server over SSH.
My configuration is WAN < --- > Gateway (Ubuntu 9.10 Server) < --- > Internal Server (that I want to control with VNC over SSH)
I have configured iptables in my system and is working. But I cant find iptables kernel folders such as iptables/extensions/Makefile to make a utility Where to locate them? or how to download and install?
View 11 Replies View RelatedI need to configure 60000 lines in iptables. I am using script to create a file and iptables-restore to configure them.
I am getting error on commit and I see that if the file size if larger than around 39000 it failed.
Is there a limit to number of lines in iptables ?
I am encountering problems to configure my firewall (through iptables) to allow apt-get features, like update and install.I have the latest debian server running in a virtual machine in my windows xp and therefore I have two interfaces in this debian server:- NAT Interfaceinet: 10.0.2.15- Host Only Interfaceinet: 192.168.56.101So far my iptable rules drop all packets for default, in exception icmp and ssh that I allow to ping and connect from my windows xp. Both of them I use only the Host interface (192...) to connect to another 192... interface on my windows.
Those are working fine, but apt is not. I know, in this very moment it shouldn't. But I made a lot of attempts trying to configure the iptables allow connections through the 80 and 21 ports from/to NAT and Host. I think I made all possible combination (or not, because it didnt work). But I'm wondering if someone more experient can help me solve this problem.
I have a mail server with IPTABLES enabled.I want to allow access to:
41.0.0.0/8
58.0.0.0/8
61.0.0.0/8
[code]....
I started to use ufw instead of iptables on the terminal, but was wondering if ufw could be installed on a redhat based system? I'm asking, because my office has a mix systems and would prefer to use ufw on these rpm based systems.
View 5 Replies View RelatedI'm looking to use Linux (Ubuntu 9.10) as a network bridge between two subnets. I can configure iptables to permit all traffic on eth0 (subnet 1) to pass to eth1 (subnet 2) but before transmitting that traffic I want to perform further analysis. Is it possible within iptables or via a third-party product such a pyroman, to write a "hook" that then directs that traffic to another application installed on the same host?
View 2 Replies View RelatedI am trying to configure iptables for only HTTP and HTTPS traffic. I start by blocking all traffic, which works, via:
Code:
iptables -F
iptables -P INPUT DROP
iptables -P FORWARD DROP
iptables -P OUTPUT DROP
I then try to allow HTTP and HTTPS on eth0 with these commands, which does not work:
Code:
iptables -A INPUT -i eth0 -p tcp --dport 80 -m state --state NEW,ESTABLISHED -j ACCEPT
iptables -A OUTPUT -o eth0 -p tcp --sport 80 -m state --state ESTABLISHED -j ACCEPT
Code:
iptables -A INPUT -i eth0 -p tcp --dport 443 -m state --state NEW,ESTABLISHED -j ACCEPT
iptables -A OUTPUT -o eth0 -p tcp --sport 443 -m state --state ESTABLISHED -j ACCEPT After these commands I should be able to access the internet. Does anyone know why this is not working?
i am currently trying to install vsFTP onto my new linux server and btw i just started using linux today this is my first time using linux so i got the ftp installed good it got downloaded and everything then i went to open a port for my server for vsFTP i used this comand to open it "-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 21 -j ACCEPT" then i closed it by pressing ESC then :wq! and it brought me back to my comand line again so now when i try to start the ip table thing with the comand "service iptables start" then when i execute that comand putty respondes with this "Applying iptables firewall rules: iptables-restore: line 1 failed [FAILED]"
The install Guide im using: [URL]
I have tried to install and configure Hudson in centos distro version 5.Installed hudson with tomcat by deploying .war files.after configuration was completed, builded a project.It displayed build was completed successfully.but I was not able to download output of build.
So I rechecked configuration,found that i havent set artifact file pattern to archive. how to set artifact file pattern and how to get build output. how to manage hudson by using configure system and configure options.what is the correct way to configure public hudson?.
I want to set up a printer with the command line only in fedora 12. I have been searching for a few days now. Is their a way to avoid using the system-config-printer gui? I searched through the fedora docs and their seems to be no information available.
View 3 Replies View RelatedHow do I configure the screensaver timeout value in terminal?
I am trying to do so without using a GUI method (System --> Preferences --> Screensaver).
I was trying to configure a static Ip on openSUSE but didn't get very far...I would like to do it through the terminal.
View 4 Replies View RelatedI'm pretty new to Ubutnu and Linux in general so take it easy on me. I'm a Senior at the University of Houston and part of our final project involves running an application in Ubuntu that was developed by another university. It installs fine, but when I run the command the launch the configure gui I get a strange warning message.
View 2 Replies View RelatedI have a hardware design which is completely tested and verified on windows OS. My hardware is connected to hyper terminal. Whenever I give a command from hyper terminal then my hardware will response in what way I need. As I am new to linux os I don't know how to open or how to configure hyper terminal in linux. I stopped my work completely.
View 1 Replies View RelatedHow do I know what sound system my Centos 5.5 install is using and how would I configure which soundcard output to use? I want to use the digital coax output from my M-Audio PCI soundcard, which appears to be detected and loaded. When I launch MPD, it autodetects an alsa sound system, but programs like alsamixer don't exist and I can't hear any sound out of the digital coax output. I haven't checked the 3.5mm stereo out yet.A little confused as to which documentation to be looking at at this point.
View 9 Replies View RelatedI have just installed Debian Squeeze on my spare computer (dual booted with Ubuntu 11.04) and I cannot connect to the internet using Squeeze. Due to my ISP, I have to manually connect this computer and on Ubuntu copying and pasting a text file such as this into the terminal works with no problems.What do I need to do to manually configure my Squeeze internet connection?
View 5 Replies View RelatedThis problem has lasted for several months, but I can't find anything like bug report in debian related website.
Basically my problem is after genome-terminal (version 3.4.1.1) is launched, I want to change profile setting such as font, color, etc. However, when I click the button `Edit > Profiles > Edit`, nothing happens (no dialogue pop up). `Edit > Profiles > New` And `Edit > Profiles > Delete` function correctly.
I've got an Ubuntu Server 11.04 running and the primary use of it is to store backup files using Deja Dup, connecting through SSH using shared key (no passwords) authentication. This works on the LAN and WAN, which is what I want. I also want to set up an HP Officejet 5610 MFD to be shared on the LAN only, for printing and scanning. The server obviously doesn't have a GUI.
I've searched and come up with some near misses, but everywhere I try it seems someone is using a GUI on the system serving the printer. See: [URLs]
What I'd really like would be a post like the following one. It seems to be what I'm looking for, but it is from 2006 using Ubuntu 6.## and that build ran on cupsys rather than cupsd if I read correctly. I haven't found an updated guide/post like the one below.
[URL]
I seem to be having an issue with iptables, every so often the server starts loosing packets and then goes off completley, if I manage to login to ssh I can stop iptables and this resolves the problem, however it keeps doing this. Is it possible to stop anything being added to iptables?
View 6 Replies View RelatedI have just done the upgrade to CentOS 5.4, but it seems that the iptables library libipt_time.so is no longer provided in /lib/iptables in the distribution. The currently installed version is iptables-1.3.5-5.3
I am getting this error message: iptables v1.3.5: Couldn't load match `time':/lib/iptables/libipt_time.so: cannot open shared object file: No such file or directory
Have the -m time components been moved to another library or removed from iptables? How do I stop iptables from trying to load this non-existent library?
When I try something like, I get:
iptables -A FORWARD -p udp -m length --length 39 -m u32 --u32 '27&0x8f=7' --u32 '31=0x527c4833' -j DROP
iptables: No chain/target/match by that name.
So I re-compiled the kernel enabling WAN Router, and all the subsections. Downloaded latest iptables, removed the RPM one, installed the iptables from source.. Guess what, same error!
PS: iptables -m u32 -h works, it displays a page of info.
I am having difficulties setting up Symmetric NAT through iptables and I hope you can help me with this issue. First things first: "A symmetric NAT is one where all requests from the same internal IP address and port, to a specific destination IP address and port, are mapped to the same external IP address and port.If the same host sends a packet with the same source address and port, but to a different destination, a different mapping is used. Furthermore, only the external host that receives a packet can send a UDP packet back to the internal host."
Need: I am working on a SIP application and SIP apps face a problem with NATed networks. STUN is a solution to such a problem and my SIP application has an embedded STUN client functionality. Scenario and Technical Details:
[Code]...
part of my current work involves cutting and pasting file names to text files. Double clicking on the terminal should select the "word" (and triple clicking selects the line). Many of my files contain special characters such as a "+" sign, and double clicking only seems to select up to the plus sign. (The "+" is useful information, so renaming he files isn't really an option, plus it would take too long).
Is it possible in gnome terminal (or a different terminal - gnome terminal is the default on this system) to reconfigure this so it selects up to the whitespace, rather than the "+" sign?
I'm trying to open port 119. I already have a few ports open. I've used webmin to open both incoming and outgoing ports. iptables --list --numeric gives me:
Code:
...
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:10000
[code]....