After resetting a pc running lenny I get iptables errors at boot ("resource temporarily unavailable", "bad rule" etc). "setting up firewall" (Guarddog) is not followed by any errors and the firewall apparently operates ok.How can I restore my iptables to the default installation values?
View 2 RepliesI think I've messed my SELinux boolean values. How to restore default boolean values?
Modified boolean values are stored in
Code:
/etc/selinux/targeted/modules/active/booleans.local
Can I just delete the file and reboot to get the defaults?
I made some changes to the Nvidia Xserver settings and now I get no signal to my monitors. I also have grub configured to only display the main ubuntu kernel and windows so there are no recovery options. How do I restore Xserver to working or default values?
View 6 Replies View RelatedI'm intending to replace my current router (486DX2 w/16MB running FREESCO which has been faithfully working 24/7 for well over a decade) with a debian box with a bit more grunt and newer features. I'm currently setting up my iptables ruleset and am after a bit of advice re the FORWARD policy. A few example rulesets I have found set the default policy to DROP and the have two lines for each port forward, one to allow the traffic and one to direct the incoming packets to the correct machine.
iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 25 -j DNAT --to-destination 10.0.100.10:25
iptables -A FORWARD -i eth1 -p tcp --dport 25 -o eth0 -d 10.0.100.10 -m conntrack --ctstate NEW -j ACCEPT
I'm thinking of setting the default policy to ACCEPT to cut down on typing as my default INPUT policy is DROP and unless there is a valid FORWARD rule for a particular port, the packets aren't going anywhere anyway. Or have I misunderstood something. My googling returned heaps of example scripts & not much intelligent commentary. Alternatively, what do you all use to configure & maintain your debian gateways; hand rolled iptables rules, or any toolset recommendations?
I am unable to restore my iptables from iptables-save after upgrading Fedora. I cannot get iptables-restore to work, and I have resorted to entering rules manually using the GUI.
View 2 Replies View RelatedIPtables creates an error during startup as well as when I try to restart it: Here's the output of:
[Code]....
what could this bei saved my correct iptables file @ Code: /etc/iptables.up.ruleswhere webmin is looking for it.webmin config is to automaticly boot this file and addes a line at.
Code:
/etc/network/interfaces
file
[code]...
So I am creating a LDAP server for my school's Linux lab, so users on our school network can log into the Linux machines.
I found a guide here url...Authentication
But during the install, I get the following error.
update-rc.d: warning: libnss-ldap start runlevel arguments (2 3 4 5) do not match LSB Default-Start values (none)
I get the following error message when attempting to boot: No DEFAULT or UI configuration directive found.
View 1 Replies View RelatedERROR: No configuration file found
No Default or UI configuration directive found!
boot:_
This appears when I try to boot Debian 7.6.0 from my USB drive
somehow in the process of trying to get wireless connection, gdm on start-up now fails. i'm stuck in commandline and i have to manually specify startx everytime.
how to i restore debian back to default starting up in gdm?
i've lost my shutdown button, it just disappeared!
how do i restore it?
Is there a way to restore the default runlevels of procps service? I messed it up while experimenting..
View 1 Replies View RelatedI have installed Windows 7 on my laptop . Now, it directly boot from Windows 7 . I think the MBR overwrote my grub . I have found two methods by google , but still does work .
1: boot from debian install CD, Alt +F2 switch to the console. "grub " "root (hd0,0)" "setup (hd0,0)".
2:boot from CD, mount /dev/scsi/host0/bus0/target0/lun0/part1 /mnt ; chroot /mnt ; grub-install /dev/sda.
A week ago I opened this thread viewtopic.php?f=17&t=61580 in "Board index ‹ Help ‹ Installation" and asked for a moderator to move this to here. Because it hasnt happened up to know, I am reopening the thread here. It would be reeeeally great if somebody could help me with my problem!
I own two computers, one netbook and one laptop. I want to boot my netbook as a diskless client via PXE.I set up a dhcp-, tftp and nfs-server on my laptop but when i boot my netbook, the follwoing messages are displayed:(to make it more clear, i uploaded the whole output and shortened the output below)
[Code]...
I am configuring the iptables in the debain squeeze and then running the: iptables-save
View 4 Replies View RelatedI follow this instructions but after iptables-restore < /etc/iptables.test.rules I see this error # iptables-restore < /etc/iptables.test.rules Bad argument `#' Error occurred at line: 3 Try `iptables-restore -h' or 'iptables-restore --help' for more information. The line 3 is the same as the link - # Allows all loopback (lo0) traffic and drop all traffic to 127/8 that doesn't use lo0
View 3 Replies View RelatedI've been trying to forward some ports using iptables for some time now, but still haven't figured out how to get it to work..What i'm trying to accomplish is to forward all traffic from port 80 to port 8080, and all traffic from port 443 to port 8443, this because i would like to run tomcat as a non-root user, and the original ports can only be used as root.. I've currently setup my iptables like this:
# Generated by iptables-save v1.4.2 on Wed Nov 10 16:44:45 2010
*nat
:PREROUTING ACCEPT [39350:6120333]
[code].....
For some reason my FTP packets are blocked by iptables even though I thought I allowed them through
My syslog errors are along this line:
And my iptables ruleset:
I am trying to set up a DMZ host - that is, one multifunctional PC between the WAN and the LAN. I've started with a basic router, and expanding upon that as the need arises. I am currently trying to gain access (from the WAN) to a website hosted on one of the servers in the LAN, but I am having trouble accessing the host from the WAN; I think my iptables configuration may be too restrictive. On the DMZ host, I'm using Debian (Etch). I have setup dhcp3-server, a script to configure iptables and pound (reverse-proxy). The (virtual) machine has 4 network cards: eth0, eth1, eth2, eth3; eth0 is the WAN, eth1 through eth3 serve 3 different virtual LANs.
All machines in the LAN (except one windows 2008 server - I might want to address that problem later) get their IP adresses correctly via dhcp from the DMZ host. All machines on the LAN can access the internet (including the 2008 server if I configure it manually) as they should. If I access http://localhost on the DMZ host, pound reports "The service is not available. Please try again later." - as it should.
I can ping the DMZ host from the WAN on 10.0.0.79 However, if I try to access the DMZ host from the WAN (http://10.0.0.79) I get "Unable to connect" from firefox. I'm sure this is not a pound problem, so I think it's in the iptables, or maybe I should be installing some extra software that I'm unaware of.
[code]....
I have a Debian Jessie 32 bits machine with standard partitions : one EFI, one for the root system and a swap.
I did a dd image backup of it hard drive thinking i would be easy to restore it or clone to another device... but it seems it is not that simple ! My PC won't boot : no bootable drive found !
I did the same once with a 64 bit Debian Jessie which i fixed using an ubuntu live CD with boot-repair, but here with the 32 bits version it doesn't work : it keeps saying i have an EFI incompatible partition and i should use a 64 bits linux...
Note : i boot-repair from a 64 bits ubuntu live cd. Should i use a 32 bits version ? Because i can"t make a 32 bits Debian live CD to boot, usb key won't show up in boot options (32 bits install CD works fine)
I ha read some things and tried some others but nothing works
Grub and EFI are really obscure for me...
How could i fix my debian 32 boot ?
Or how can i properly clone my debian 32 on other PC ? am i missing something using dd ? should i use another tool ?
I try to create some rules to detect an outgoing traffic from my debian jessie that is not from my IP or loop.
#!/bin/bash
/sbin/iptables -N C_OUT_N_LOCAL
/sbin/iptables -N C_OUT_N_LOCAL_LO
/sbin/iptables -A C_OUT_N_LOCAL -m limit --limit 2/min -j LOG --log-prefix "PK: output not local : " --log-level 4
LO_IP="127.0.0.1"
MY_IP="192.168.0.4"
/sbin/iptables -I OUTPUT -p ALL ! -s $LO_IP -j C_OUT_N_LOCAL_LO
/sbin/iptables -A C_OUT_N_LOCAL_LO -p ALL ! -s $MY_IP -j C_OUT_N_LOCAL
I'm having some trouble with the configuration of the iptables. I want to setup a network server to serve as Fail Over (for my 2 ISPs), DHCP and DNS. I have 3 network cards, 2 connected to ISP's routers and 1 that serves as UPLINK for my switch.
I want to add some Iptables rules so I can achieve what I want to do. The problem is that the rules I try to use, they have to effect.... they don't load, here are the rules I am trying to add:
#iptables --table nat --append POSTROUTING --out-interface eth1 -j MASQUERADE
#iptables --table nat --append POSTROUTING --out-interface eth2 -j MASQUERADE
#iptables --table nat --append POSTROUTING --out-interface eth2 -j SNAT --to EXTIP
When I try to check to see if it loads, with the command:
#iptables -L
It returns empty
System Specs:
CPU: Intel Core2 Quad Extreme X9450
Memory: 4GB, Patriot DDR3 PC3-10666 1333Mhz
MoBo: ASUS P5E3 Delux
OpSys: Ubuntu 10.4 (64Bit)
Short Description: I wanted to see what would happen if I upgraded from Kubuntu 8.04 (32bit) to Ubuntu 10.4 (64bit) by copying my home directory then restoring it after the upgrade. It almost worked sans a few interesting problems that I'm hoping might teach me a bit more about how Ubuntu works.
Detailed Description:
1. I copied my home directory to another hard disk.
2. I let the installation disk for Ubuntu 10.4 (64bit) reformat and overwrite the disk that contained Kubuntu 8.04 (32bit) and chose to maintain the partition and swap size for that disk.
3. Once I worked out some bugs in the hardware and got the OS up and running smoothly, I "merged" my home directory with the backup I had created in step one. (Merge was an option given to me when I was attempting to paste the files copied from the backup disk.)
4. It should also be noted that I was trying for a while last night to install TrueCrypt. In order to do that I had to check its "sig" file. The GUI for the gpg installation was complaining that I didn't have gtk+-2.0 installed so I installed gtk (I think it might have been 2.4 or whatever the most recent one was) from source without any errors. It got late so I gave up on attempting to install TrueCrypt any further.
The Results: This morning the computer seemed to boot faster than it had been before, but I was left without a functioning Theme manager. It will open, and I can click on all of its features, but nothing seems to do anything. For example: If I right click on the desktop and choose "Change Desktop Background" Then select "Get more themes online", nothing happens. Also if I select the "theme" tab, there are only two themes listed when there used to be about 9 by default.
Questions: 1.) Is there a way to restore the files that are important for correct system operation (possibly all the files starting with a dot ".*") in my home directory to there default state like they would have been from a fresh install, but without doing a fresh install and without loosing any of the documents or archives in my home file?
2.) Is this even the correct approach or might this cause more problems? For example, if your computer had this problem would you try and restore the home directory, or would you troubleshoot each problem as it arises one at a time until everything became stable?
3.) What could I do next to continue troubleshooting the theme manager?
I'll keep researching and trying to find some links that can help while I wait for your responses. If I find anything that helps I'll post the fix here.
I own two computers, one netbook and one laptop. I want to boot my netbook as a diskless client via PXE. I set up a dhcp-, tftp and nfs-server on my laptop but when i boot my netbook, the follwoing messages are displayed:(to make it more clear, i uploaded the whole output and shortened the output below)
[Code]...
I managed to set up an openvpn server, ip-forwarding and a nat iptable rule for that.
Almost everything works as expected, but my problem is:
Smartphone -> VPN -> Internet ==> works (by ip and hostname)
Smartphone -> VPN -> machine in my local network by IP ==> works
Smartphone -> VPN -> machine in my local network by its hostname => DOES NOT WORK
Machine w/ VPN server -> ping to machine in local network by ip or hostname => works
So, i wonder why i cant access a local machine through the vpn by its hostname. I guess I'm missing a forwarding rule??
iptables dump:
# Generated by iptables-save v1.4.21 on Sun Feb 7 20:56:52 2016
*nat
:PREROUTING ACCEPT [786:59064]
:INPUT ACCEPT [728:53047]
:OUTPUT ACCEPT [19:1487]
:POSTROUTING ACCEPT [20:1576]
-A POSTROUTING -s 10.8.0.0/24 -j MASQUERADE
COMMIT
# Completed on Sun Feb 7 20:56:52 2016
a good IPTABLES protocol to reject all incoming ssh trafiic except for a single IP or IP range?
View 4 Replies View RelatedI have a strange iptables issues. I have just built a new Debian install and starting adding some real basic rules (see below) the problem seems to be that the localhost itself can't get any returning traffic. That is, it seems to be allowed outgoing traffic but not the connected, returning traffic. Ordinarily allowing Established Connections would resolve this, see the rule below, but it hasn't. Why this doesn't work. Removing the last DROP in the INPUT chains obviously makes the traffic work!
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -j ACCEPT -p tcp --dport 22
iptables -A INPUT -j ACCEPT -s x.x.x.x
iptables -A INPUT -j ACCEPT -s x.x.x.x
iptables -A INPUT -j ACCEPT -s x.x.x.x -p tcp --dport 80
iptables -A INPUT -j ACCEPT -s x.x.x.x -p tcp --dport 8080
iptables -I INPUT 1 -i lo -j ACCEPT
iptables -A INPUT -j DROP
I upgraded from Karmic to Lucid recently. Before upgrading, I had customized my desktop on Karmic with Compiz, Emerald and new set of fonts. After upgrade (which appears to have gone smoothly, yay!), my desktop retained the previous appearance settings. I want to try the factory default gnome appearance settings for Lucid and still stuck with restoring fonts.
What I have done till now:
0. Enabled Visual Effects from Appearance menu.
1. Theme -> Changed to Human
2. Window Manager -> Still using Compiz
3. Window Decorator -> Switched from Emerald to GTK
4. Font -> Changed first 3 font types in the Font tab to Sans, size 10, 4th to Sans Bold and 5th to Monochrome. Rendering -> subpixel smoothing (LCD)
What I want:
1. Is this the default setting? Have I missed anything in restoring default settings?
2. I have done too many changes to firefox font rendering over time. How do I restore default 10.04 font settings for Firefox? I would ideally love to have an option in Ubuntu which would help me restore factory settings.
I need to set ulimit values according to
I used
Code:
ulimit -c unlimited
ulimit -s unlimited
ulimit -u unlimited
But after I log again to my session values are set to default. Now can I set this values so they don't change after log out of after reboot?
I'm trying to use these cookie cutter rules that I found. But every time I use them, after a few seconds my wifi connection goes dead. The exception was the first time I used then. Which lasted me a couple of minutes.
By dead I mean I can no longer open a webpage or ping google.
iptables -N LOGGING
iptables -A INPUT -j LOGGING
iptables -A OUTPUT -j LOGGING
iptables -A LOGGING -m limit --limit 2/min -j LOG --log-prefix "IPTables-Dropped: " --log-level 4
iptables -A LOGGING -j DROP