General :: How To Go Back To Default Iptables Settings In Ubuntu?
Aug 16, 2009
I'm running Ubuntu 9.04 and started messing around with my firewall, it got a little too complecated for me, so I just would like to be able to somehow restore the default iptables setting. Any idea how I can do this?
I am currently trying to best configure my Natty Narwal linux distro. At boot, the system is configured to automatically connect last Wifi network. When I connect to the WIFI however a whole bunch of instructions are loaded in the IPTABLES.
I have got ubuntu netbook edition installed alongside windows xp and after some custimising i can now only chose the ubuntu option and no others. Can i set settings back to default settings?and how? I guess it would be via terminal commands
I screwed up and deleted my top panel and I cannot figure out how to bring it back to the original default settings. After trying different things found in other posts like
restart X, then in console: gnome-session-remove gnome-panel gconftool-2 --recursive-unset /apps/panel gnome-panel &
now both top and bottom panels are gone. I need help to bring both panels back. I'm on jaunty jackalope 9.04.
Every time after I boot up, I have to follow the info at URL...Do you have any ideas on to make sure that I do not have to do that almost every time I boot up?
In my server the iptables and ip6tables services are not running. But still i am getting some iptables and ip6tables related alerts on my /var/log/messages. My technical leader told me that there might be some mis-configuration in iptables configuration file. But i didnt see anything wrong.
Quote:
Quote:
What does it mean "Jan 25 11:01:32 beteduibsrv3 avahi-daemon[3308]: Leaving mDNS multicast group on interface eth0.IPv6 with address fe80::226:b9ff:fefc:6ec4."
I am using Ubuntu 9.10, I removed the task bar at the bottom of the screen and replaced it with a new one. The problem is when I click on Fire Fox and by default Fire Fox would drop to the bottom of the screen, now it just disappears. Is there any way of putting back the original settings.
The issue is I screw up my smb.conf by SWAT and I want now the default configuration with all comments back. I try:apt-get remove --purge samba > it leaves the default configuration in samba/ directorythe other way is to download source package....apt-get source sambaIs there some other quicker way how to get the default smb.conf file back?Yes but on Debian 5.0:I uninstall samba.Remove samba/ dir.Install samba.I'm unable to bring up nmbd daemon UP - missing samba/ dir with smb.conf. I create samba/ dir with smb.conf and nmbd is fine!
I have been doing some customization to my ubuntu Box related to font settings. Now all the font settings for whole system have been badly scrambled. I am feeling it very hard to reset all the settings too default again.I have been modifying system---> Preference ---> Appearance. if there exists any way to reset my font configuration to default.
I work in a shared computing environment and the default setting is r-x for group and others; it's upto the users to change this. I can chmod and change the permissions for all the files. However any new files created all have the default permissions. Is there anyway to change that so that I don't have to chmod everytime or run chmod as a cronjob?
I'm using OpenSUSE as a guest OS in VMware. Display settings are 1400x1050@60Hz but I want to change them for 1440x900. Using root account I go to Configure Desktop -> Display -> 1440x900. The first problem is that I can't choose 60Hz, only "Auto" or "0.0". I click Apply and the resolution changes, but if I reboot the computer or just logoff... resolution goes back to 1400x1050. My card and monitor properties: [URL]. Another strange thing is that if I click Ok on the Card and Monitor properties (changing from one resolution to another), I can choose to "Test" it, and xfine2 appears but... it ALWAYS says "1400x1050". An screenshoot of xfine2: [URL].
As far as I know hard drives are faster at the beginning of the disk. If this is true, why does Ubuntu put the swap partition to the back of the disk by default?
I am planning to dual boot Bt4 + SL 6 or Debian 6 ( whatever comes first ) So i am wondering what will be the default disk footprint of Bt4... Never used it installed in HDD only in usb install or live mode...
I did something weird and now my text size is like 3pt on every system window, but when I go in and change my window fonts to larger to something that looks normal, it makes my clock, bash, and other fonts absolutely gigantic. Is there any way I can just roll back my system and it's settings? It wouldn't be much bother as I installed the OS yesterday. I'd hate to have to reinstall entirely though
Well here's what I've done in grub.confpassword --md5 BLABLABLA /grub/admin_menu.lstNow that I enter some password, I can go to that menu and run my pvt. OS.But how to get back to original (or say public or default) grub menu?
I'm using Redhat 5 with a video card nvdia fx 1500 and a zalman zm-m220 monitor
Has anyone configured a 3D monitor with redhat?
I'm trying to set the resolution to 1680x1020. I edit /etc/X11/xorg.conf and try to manually enter the resolution but after a reboot it goes back to the default.
which is the file i need to edit to manually enter the resolution.
I would like to set up a logging system for rtorrent, the only way that i could think of this would be to set up bandwidth moniters in the ip tables but im not sure how to go around this.
So I know Linux has iptables, I'm rather new to linux, and I'm wondering, are the stock settings with Ubuntu/Kubuntu safe? Is there anything I need to do make them more secure? I tried adding rules myself for some things but ended up just not being able to do anything so I had to reset back to stock with iptables -F. Should I be safe running as-is?
I'm currently using a homemade Python script to parse script kiddie IP addresses from logfiles.To this point, I've simply been DROPping any requests from these IPs using iptables.I thought it might be fun to redirect their traffic back to them, but as I am not an expert at iptables, I was wondering if I should use FORWARD or PREROUTING.
I have a server with 14 IP's on eth0. I'm using virtual interfaces to handle the IP's, but the iptables don't seem to work on the virtual interface. It blocks ports that I want open. I'm not that great with iptables, I use what I have because it works for me, but as far as tweaking it, I'm pretty lost.
My iptables: # Simple Firewall configuration # # Set default policies -------- *filter :INPUT ACCEPT [0:0] :FORWARD DROP [0:0] :OUTPUT ACCEPT [0:0] # # Internal Networks ----------- #-A INPUT -s <private.class.C>/24 -d <private.class.C>/24 -i eth1 -j ACCEPT # # Loopback -------------------- -A INPUT -s 0/0 -d 0/0 -i lo -j ACCEPT # # Accept established connections -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT # # Services -------------------- # # For SSH gateway -A INPUT -p tcp -s 0/0 -d 0/0 --dport 22 -m state --state NEW -j ACCEPT # # For SMTP gateway -A INPUT -p tcp -s 0/0 -d 0/0 --dport 25 -m state --state NEW -j ACCEPT # # For FTP server -A INPUT -p tcp -s 0/0 -d 0/0 --dport 20 -m state --state NEW -j ACCEPT -A INPUT -p tcp -s 0/0 -d 0/0 --dport 21 -m state --state NEW -j ACCEPT -A INPUT -p udp -s 0/0 -d 0/0 --dport 53 -m state --state NEW -j ACCEPT # # HTTP services -A INPUT -p tcp -s 0/0 -d 0/0 --dport 80 -m state --state NEW -j ACCEPT # # HTTPS services -A INPUT -p tcp -s 0/0 -d 0/0 --dport 443 -m state --state NEW -j ACCEPT # # POP-3 services #-A INPUT -p tcp -s 0/0 -d 0/0 --dport 110 -m state --state NEW -j ACCEPT # # IMAP services -A INPUT -p tcp -s 0/0 -d 0/0 --dport 143 -m state --state NEW -j ACCEPT # #PLESK #-A INPUT -p tcp -s 0/0 -d 0/0 --dport 8443 -m state --state NEW -j ACCEPT # #Games -A INPUT -p tcp -s 0/0 -d 0/0 --dport 28960 -m state --state NEW -j ACCEPT -A INPUT -p udp -s 0/0 -d 0/0 --dport 28960 -m state --state NEW -j ACCEPT -A INPUT -p tcp -s 0/0 -d 0/0 --dport 27666 -m state --state NEW -j ACCEPT -A INPUT -p udp -s 0/0 -d 0/0 --dport 27666 -m state --state NEW -j ACCEPT -A INPUT -p tcp -s 0/0 -d 0/0 --dport 28961 -m state --state NEW -j ACCEPT -A INPUT -p udp -s 0/0 -d 0/0 --dport 28961 -m state --state NEW -j ACCEPT -A INPUT -p tcp -s 0/0 -d 0/0 --dport 28962 -m state --state NEW -j ACCEPT -A INPUT -p udp -s 0/0 -d 0/0 --dport 28962 -m state --state NEW -j ACCEPT -A INPUT -p udp -s 0/0 -d 0/0 --dport 27015 -m state --state NEW -j ACCEPT -A INPUT -p tcp -s 0/0 -d 0/0 --dport 27015 -m state --state NEW -j ACCEPT -A INPUT -p udp -s 0/0 -d 0/0 --dport 27016 -m state --state NEW -j ACCEPT -A INPUT -p tcp -s 0/0 -d 0/0 --dport 27016 -m state --state NEW -j ACCEPT -A INPUT -p udp -s 0/0 -d 0/0 --dport 27017 -m state --state NEW -j ACCEPT -A INPUT -p tcp -s 0/0 -d 0/0 --dport 27017 -m state --state NEW -j ACCEPT -A INPUT -p tcp -s 0/0 -d 0/0 --dport 27020 -m state --state NEW -j ACCEPT -A INPUT -p udp -s 0/0 -d 0/0 --dport 27020 -m state --state NEW -j ACCEPT
# Disallow fragmented packets -A INPUT -f -j DROP # # Log & Block broadcast packets -A INPUT -d 255.255.255.255/0.0.0.255 -j LOG -A INPUT -d 255.255.255.255/0.0.0.255 -j DROP # Log & Block multicast packets -A INPUT -d 224.0.0.1 -j LOG -A INPUT -d 224.0.0.1 -j DROP # # Log and drop all other incoming packets -A INPUT -j LOG -A INPUT -j DROP # COMMIT
I've started a new job and have inherited a couple of RHEL4 64-bit servers. The firewall on them is currently disabled. I'm struggling to get them up and running as iptables is not the most user-friendly application. This lead me to downloading and trying a GUI front-end: Guarddog. Great app! But it doesn't have the default behavior I'm looking for. Here is what I need:
Default behavior: Firewall should be wide open, allowing ALL ports/IP's/TCP/UDP in and out of the server. Blacklist: Oracle TCP port 1521 needs to be blocked in/out of the server.
This will help get us passed our company's security vulnerability scan. (We aren't able to patch/upgrade Oracle at this time because we'd lose vedor support with a legacy app). I will use these settings as a starting point, and then once I learn more and get more comfortable with iptables (or a GUI app) then I can fine tune things to make them more secure. As far as I know (correct me if I'm wrong) once I get a script I just copy it into /etc/rc.firewall and it will load when iptables starts.
Im new to fedora 11 and iptables, and i need to set the following set of instruction so VirtuaBox can accept request from lan, to the mailServer in the guest os, but after restart fedora i have to input it all again.How can it become permanent entry in iptables.
to back-up and eventually restore compiz settings, is it enough to back-up and restore the .compiz directory in $HOME? Reason is that the setting in my classic gnome set-up are different and partially conflict with the unity settings. Since I want to be able to run both environment (to give Unity a chance) I'd like to be able to switch settings easily.
I've installed the latest version of Ubuntu on one of my systems. I need to wipe it out and replace it with another OS for testing. After a week or so I'll reinstall Ubuntu.I've customized the looks and feel of Ubuntu desktop and have changed many other settings at a number of places. Is there a way so I can save my settings (like the desktop background, the screen saver settings, colors, terminal window settings including its fonts etc., and others) in a file or a set of files which can then be imported directly when I'd reinstall Ubuntu?
Could someone please tell me how to turn my password settings back on for mintupdate? Somehow it got turned off. I don't like how software can be updated without my password now.
I was trying out a theme from gnome-look (elegant gnome) and it had an option to change my gdm theme. I used it, did not like the look, but when I uninstalled it said there was no back-up. Now my gdm looks like something from windows 95! How can I reset it back to the original settings? I tried reinstalling GDM in synaptic but no change
I wish to change the default location of IPtables file from /etc/sysconfig to somewhere else. But i am confisued about it. please help me to solve this problem.
I've read the instruction about setting up the iptables rules to filter all port except HTTP, SSH, FTP. I require first remove all default iptables rules and set default rules to all chains as DROP: # Set default-deny policies for all three default chains $IPTABLES -P INPUT DROP $IPTABLES -P FORWARD DROP $IPTABLES -P OUTPUT DROP
Then allow only some ports: #Accept inbound packets that are part of previously-OK'ed sessions $IPTABLES -A INPUT -j ACCEPT -m state --state ESTABLISHED,RELATED # Accept inbound packets which initiate SSH sessions $IPTABLES -A INPUT -p tcp -j ACCEPT --dport 22 -m state --state NEW # Accept inbound packets which initiate FTP sessions $IPTABLES -A INPUT -p tcp -j ACCEPT --dport 21 -m state --state NEW # Accept inbound packets which initiate HTTP sessions $IPTABLES -A INPUT -p tcp -j ACCEPT --dport 80 -m state --state NEW # Log anything not accepted above $IPTABLES -A INPUT -j LOG --log-prefix "Dropped by default:"
But I hired a VPS from other country so the only mean I can manage it is via SSH. If I setup the default rule to DROP first, I afraid that I can no longer connect via SSH to tell iptables allow SSH So my question is: - Does the IP tables take effect immediately after I input a rule? - Is there any mean to run this as a batch job (create a script and run all these rules one time). - My VPS has a web control panel which have a terminal via web. Is this a native terminal or just a connection via port 80 or 22?