i would like to know whats the minimal iptables config for turning my ubuntu box into a router
i just tryed this one and works:
echo "1" > /proc/sys/ipv4/ip_forwarding
and
sudo iptables -A POSTROUTING -t nat -j MASQUERADE
[code]....
Im having problems turning my server into a gateway. I followed this guide- [URL]- and I cant get it to work.In my server I installed two new gigabit network cards, and I cant seem to be able to get it to work.
View 2 Replies View RelatedI am thinking of moving the router behind a server and connecting the server directly to the internet via a modem. Are there any security issues related to doing this? or other things I should be aware of. Iptables are implemented on the server blocking access on unused ports.
View 2 Replies View Relatedturning a Ubuntu 10.04 desktop into a server. Ok, so let me start off with my goal. I am using this machine for hosting only 1 website using joomla, php, mysql, and apache. I want a desktop version because I dont like the black and white terminal.
At this point I have successfully installed all Ubuntu 10.04 desktop and all updates.
When searching around for this solution, I found that I could run the command sudo apt-get install ubuntu-server and get all the features the server edition has. When running this command it comes back telling me that it cannot be found. I also found that both the server and desktop edition are the same but the desktop edition comes with all the extras that I will need to delete. I also found out that I will need to use lamp on the server to get php and all the other server stuff, but I also found that some people recommended that I install the server apps using the synaptic search. My question is, what route should I take to turn this ubuntu 10.04 desktop into a dedicated web server. (Not Test Server). Remember, I would like to stay with the desktop and not black and white terminal.
Some time ago I've opened a thread about ACPI - as it turned out - killing my server. You may read it here if interested.My question is how can I enable Hyperthreading support in my kernel without enabling any part of ACPI?(Boot flag acpi=ht causes the same issue as described in above thread, so enabling any part of ACPI in any manner is not desirable)My kernel:
[root@sheridan ~]# uname -a
Linux sheridan.******** 2.6.35.11-83.fc14.x86_64 #1 SMP Mon Feb 7 07:06:44 UTC 2011 x86_64 x86_64 x86_64 GNU/Linux
Im new in linux i want to configure my redhat machine as both router and transparent proxy!
View 1 Replies View RelatedI want to access files on my ubuntu server wireless. Is there a way I can do that? I'm sorry if this is a stupid question, but I'm kind of new at this whole server thing.
View 5 Replies View RelatedI'm going to start a new thread because previous searches have not totally satisfied my question. I've read all day about doing this but each inquiry leads to discussion of configuring the router. I am also not network savy. I would like to set up an FTP server on my home computer (presently Ubuntu 8.10). I have only one computer. I am using DSL with my telephone line for internet connection. I do not use a router.
Is it possible to do this with no router and only a DSL ISP connection?
What is the best option: leave the ADSL modem as the router of my network, or use a Debian Linux server in place?
Info:
* there is high traffic on my network (at work time);
* 7 PCs on the network;
* Debian Linux server: PC - Intel Pentium IV 3.06 Ghz - 2 GB RAM.
Can you make a ftp server behind wifi router?802.11g
View 3 Replies View RelatedI'm getting my first server in a few weeks. I hear a lot about people using their server as a router. That sounds like an interesting prospect, as I think it would increase security and control, with all web traffic going through one central hub so to speak.If I do this, how do I handle wireless? Do I just hook my wireless router to my server, basically making the internet connection go through the server before it gets to the router?
View 8 Replies View RelatedI have a LAMP server in work with five different web sites on it. All the sites are below average traffic and page upload time seem OK but I want to tweak my hardware anyway. I have tweaked Apache already.
Occasionally (more often recently) my Internet speeds when I use the same WAN connection myself for general surfing the speed is extremely slow. When I look in the logs I can "Access Denied to *.*.*.*" over and over. It's a robot I know but I think it causes a kind of DoS on my Standard router, generally slow everything down. I think a professional router would be better able to deal with that sort of traffic.
What router or device would be good for a web connection when the primary purpose is a web server connection? How much money should I be thinking of spending on the router?
Because of the configuration of my house, I need two routers.I have a DLink ADSL router as my main router and the Belkin N1 as my repeater.I have set up the IP address in the Belkin to be 10.1.1.10 - my DLink is 10.1.1.1. I have disable the dhcp in the Belkin and set the DNS as ISP provided. [URL]..I have set the channel to 11 and in the Ubuntu Network Manger I have set the IPV4 to Link Local Only. I can see the Belkin and connect with my PC.but it will not take me through to the internet.
View 9 Replies View RelatedI am planning to setup a home network with Ubuntu.the home network consists of ~3/4 computers; a mediaserver (reelbox) and 2 more PCs.Can I setup the server as a DSL router and get rid of my modem/router I have right now?
View 3 Replies View RelatedI'm setting up a home network and trying to set up a Ubuntu Server (10.04) as a samba file server and a web server.I installed Ubuntu 10.04 Server and the automatic network configuration during installation failed. I've looked into host.conf, networks, interfaces, hosts and resolv.conf and either my settings are wrong or it's something else. I have a Win7 computer connected to same router and DSL modem and it works fine (edit: most of the time--- see below).
More information:
*ifconfig shows eth0 is broadcasting but without an IP address
*route shows an empty routing table
Code:
sudo route add default gw 192.168.1.254 doesn't work:
SIOCADDRT: No such process
[code]
sudo /etc/init.d/networking restart doesn't work:
[code].....
I build a LAMP server behind a router.The current situation is:1.I could access index.html of apache within the LAN.2.I could access the vsftp outside of the LAN.3.I could access the ssh outside of the LAN.I have configured my router to do reflections(although I don't know it's correct or not.). I think the LAMP works good since I could use it inside the LAN. The configuration of the router is at least partly right because ssh and vsftp work fine(I test by browsing the ip:74.***.***.*** in the lan, not 192.168.1.8 --this also works. ).I cannot access web service outside the LAN. And the error message is "Oops! Google Chrome could not connect to 74.***.***.***"Did I miss some configuration of router?Apache2?Ubuntu? I use the ubuntu server 2010.10 version.
View 1 Replies View RelatedRecently I installed Debian on one of my machines to act as a router and file server. I'm pretty comfortable to work from the the command-line (ssh), still I can't shake of the felling of wanting a web GUI for configuration. Since I haven't found anything that can be installed on Debian (don't like webmin), I either need to do my own GUI or go the virtualization way.
I was thinking of running some kind of router distro and virtualize a file server distro or just a regular distro. I don't know maybe this virtualization path is just a bad idea, I dunno, so I ask for your advice and comments.
I'm trying to get my SSH server I set up on my home box working from behind a router. A 2wire 2700HG-B gateway, in fact. Now, I know my server is working fine, because I can get into it via loopback, anywhere inside the LAN from another machine, OR if I go into the router's config and enable DMZ for the machine. However, I don't like having DMZ on all the time because of the kludge-ness of it, and the security issue of the complete absence of a hardware firewall.If I try to port forward and access it from outside the LAN using the external IP (or my DynDNS, because it's dynamic), it just times out. I have a nonstandard port (45) for the listen port of the server, to keep away hack attempts if I were using the standard 22. I used this to see if the port was open, and it said it was. But, I tried the trick of telnetting the IP with that port, and it also timed out, instead of printing stuff about OpenSSH.
Attached is a screenie of my router's firewall page, so you all can look at it and see if I'm an idiot and doing it wrong. You might notice uTorrent there, it's because this machine is a dual-boot with 7, and the router doesn't differentiate the OS's. Also the SSH @ 46 port is for the Windows side, with freeSSHd. I changed the port on that one so the client I have can distinguish them, so it can run a reachability test.
I build a LAMP server behind a router. The current situation is:
1.I could access index.html of apache within the LAN.
2.I could access the vsftp outside of the LAN.
3.I could access the ssh outside of the LAN.
I have configured my router to do reflections(although I don't know it's correct or not.). I think the LAMP works good since I could use it inside the LAN. The configuration of the router is at least partly right because ssh and vsftp work fine(I test by browsing the ip:74.***.***.*** in the lan, not 192.168.1.8 --this also works. ).
I cannot access web service outside the LAN. And the error message is "Oops! Google Chrome could not connect to 74. Did I miss some configuration of router?Apache2?Ubuntu? I use the ubuntu server 2010.10 version.
post the "perfect" tutorial for setting up a router and firewall for Ubuntu 10.10 Server 64-bit? I'm kind of a n00b when it comes to Linux, so I get really confused with some things, I have seen things on the ubuntu wiki about this... but it really confuses me =
I'm trying to setup my ubuntu sys as a router and firewall... Internet -> Ubuntu (Router) -> Switch (no DHCP on it) -> Computers I've already setup bind and dhcp3 and got those working perfectly... I've also setup Squid3 and Dansguardian for content filtering (blocking ads and such) and got them working too... I want to set it all up to be transparent, and allow the system itself to function as a powerful firewall router, giving absolutely NO issues to client computers connected, and no speed reduction at all.... I want to setup the firewall to allow all outgoing connections, but block everything incoming (stealth the network)... Forcing all http/s traffic to pass through dansguardian, then to squid...
But am very confused on how to pull this off... The system is running Ubuntu 10.10 Server 64-bit, with 4 GB of RAM, 320 GB SSD, and two 1Gb NIC cards... Sorry if I'm not very clear, I do speak english perfectly, but just kinda new to the "Linux world", I was using SONICWALL but that's getting a little too costly to my network and wanna do a free alternative... Something completely CUSTOM, not using some network security distro.
I have been searching google for a while now and have not found exactly what I am looking for. I would like to use my fresh install of ubuntu server 11.04 as my router/gateway for my home. I am not an expert at linux by any means but I can usually figure stuff out. I believe I need iptables, bind, and a few others probally. It eventually will also be a samba server but I have done a little with samba before. I do have 2 network cards, my router at the moment is starting to die and would love to have a more powerful router. I would also like to figure out how to do port forwarding in the router, as well as be able to see the load on the network cards. Maybe there is a program to show usage by user? As well as be able to do packet pritorization.
View 4 Replies View RelatedI want to do is setup a gateway(or router, idk what Ubuntu refers to it as.). So my set up would be Modem>Server>Switch>Router. I know that I need to set up it up as a DHCP server as well. I would also like to setup it up as a firewall too. I already have two Gbit cards that are already configured. So how do I do this? I already tried one tutorial, but it was old and was for Debian. I also installed ebox, but I couldnt figure that out either.
View 2 Replies View Relatedi had a very old server given to me. it's a Compaq Prosignia 200. it has a 166 pentium, more than 64 mb of ram(unkown because i see 2 32mb sticks and there are 2 more smaller sized sticks), a cd drive, a 6 gb hdd, and enough pci slots for 3 nic. i'd like to use it for a router for my 2 home pc's. i have no idea what im doing or if the hardware itself will run as a router. i do have a 25mb connection and dont really want to lose my bandwidth.probably too much to ask but i thought i'd give it a go.
View 10 Replies View RelatedI am running an apache2 server in ubuntu. When I connect my laptop directly to my modem, I can access my web page (from any computer or phone) without any problems.I start getting weird issues when I try running my web server behind my DLink 524 router. It will run perfectly for about an hour or so then the web page will become inaccessible from any computer except the one which I am running my server on. I have made sure to forward and requests to port 80 on my machine and I have also set the router firewall to allow access through port 80 and port 443. I don't get any error messages in my apache2 log when my site goes down.Since the site worked perfectly when my computer was connected directly to my modem, I figure it has to be a router problem.
View 13 Replies View RelatedMm sorry for the silly questions but I dont seem to be able to get my server to listen to my router or the other way around. when i httpd i get the error (99)Cannot assign requested address: make_sock: could not bind to address 192.168.1.1:8080I am using a Billion 5200G router I have also been trying all night with my BELKIN router but no success.
1) I have a nameserver I set up at Enom days ago the site has been registered for about 9 months now ns1.startwebhostingnow.com
2) When I try to access ns1.startwebhostingnow.com I get through to my routers administartion area so the nameserver seems to direct to the right place.
3) I have a PPoE LLC connection from my ISP with one static IP but like i said the nameserver seems to direct to my router but no further.
4) I have set up the server in the System/Administration/server settings/http area servername ns1.startweb hostingnow.com with an ip of 192.168.1.1 on port 8080
5) In the NAT router area I have DMZ set as 192.168.1.53 which should be my servers ip address
6) In the NAT Virtual Server I have: RuleApplicationProtocolStart PortEnd Port Local IP Address1 HTTP_Server TCP 8080 8080 192.168.1.53
Fresh install of 10.04.1 server; installs seamlessly; finds network no problem.
However, establishing static connection is driving me batty. Will not take. I've reconfigured "interfaces" file several times. My fingers are numb ifdown-ing and ifup-ing and /etc/init.d/network restart-ing.
I have two files in /etc/network ... interfaces and interfaces~ (one static and the other dhcp). I can switch them in and out of play. The dhcp works and pings out like a champ. static is dead, just dead. Cannot ping router ... nothing.
I have an Actiontec GT724WGR and I am having problems with my Ubuntu server. I set up a subdomain on freedns.afraid.org with my main computer's external ip. However whenever I use the link that was made it goes to my router configuration page instead of onto my server. I have already set up a static ip for my server enabled DMZ hosting and under port forwarding applied every single rule that applied to servers.
View 2 Replies View RelatedI have an old tower that I've installed Ubuntu onto. It connects fine online with a mobile broadband stick. I also have an old wireless router knocking about, and I've been trying to network up my house wirelessly using the tower as a router, if that makes any sense. Long story short, this is my setup
Internet ==> Mobile Broadband ==> Tower ==> Wireless Router ==> Wireless Devices.
I know that it's complicated, but I'm sure that it can be done. I've tried playing around with bind9, and playing with dhcp and the like. I feel that I am close.... but no cigar. how to route all traffic from the router
Using Ubuntu 10.04 LTS.
I have an intranet server behind a NAT router. Very standard linksys router home setup. The server has a static IP. I used port forwarding in the router to use SSH and log into the server remotely - it works OK.
I want no one outside my home network to access any webpages on the server unless they're authenticated.. I know I could port forward like with ssh but with http port 80 and then see webpages , but again this would open it up to anyone with my cable modem's IP - wouldn't it?
I need a secure way like SSH that requires a password before anyone could access port 80 and http from the server from a remote network.
How do I do this? And on the local network people can get served pages normally as usual. Just remote would need authentication. Must be commonly done(?)
I want to set up a Linux box as a wireless router to replace our existing Netgear WNR1000 router, as I believe the Netgear does not support the coming IPv6 protocol. Unfortunately, it is not flashable with OpenWRT or DD-WRT presently.
As we have Comcast, our cable modem acts as a dumb modem according to the customer support guy I talked to, and our router is the one that asks for the IP address from DHCP. Thus, when Comcast switches over to IPv6, I don't believe my existing router would work, correct?
My idea is to take a Linux box and put two NICs and a wireless adapter in it, using IPCop or Smoothwall to set up a router. I could then enable IPv6 support for when we have IPv6 with Comcast. Is that possible? Would there be a way to get BIND to hand out private IP addresses in the same subnet on the both the LAN NIC and the wireless card?
