Displaying 20 results from an estimated 20000 matches similar to: "iptables rules"
2006 Sep 18
2
iptables console login
Peace,
    I have messages like (on a centos 3.8 box)
NET: 21 messages suppressed.
martian source 10.255.255.255 from 10.0.0.138, on dev eth0
on my screen.  In the same time it is being logged to a file.
Are there any way to stop the logging of these messages on the console 
and still logged to a file (/var/log/messages)
Thank you.
Hameed
2010 Mar 29
4
iptables rules
I've got a server with several ip's on eth0. I want to block all traffic
*except* to port 80 on them, but not on any other IPs, so that
eth0 is www.xxx.yyy.zzz
eth0:1 is www.xxx.yyy.ggg
eth0:2 is www.xxx.yyy.hhh
I've tried
-A RH-Firewall-1-INPUT -p tcp -d www.xxx.yyy.ggg --dport ! 80 -j DROP
-A RH-Firewall-1-INPUT -p tcp -d www.xxx.yyy.hhh --dport ! 80 -j DROP
and restarted (and
2005 Aug 24
2
FTP timout
Hi all,
    I have 2 CentOS 3.5 boxes & i do backups on the LAN
Recently, I always get FTP timout error with large files "700 MB and more" . 
i tried to log and do manual backup with FTP command and i also got the same result "FTP timeout"
i tried to google and i did 
# modprobe ip_conntrack_ftp
but still get the same timeout message
Any one can help???
Hameed
2011 Mar 03
2
[Bug 706] Iptables randomly reject some packets that have accept rule
http://bugzilla.netfilter.org/show_bug.cgi?id=706
Jan Engelhardt <jengelh at medozas.de> changed:
           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |jengelh at medozas.de
--- Comment #1 from Jan Engelhardt <jengelh at medozas.de>  2011-03-03 14:20:30
2005 Aug 25
1
Fw: FTP timout
Thank you very much.
 I had turned firewall OFF and it is working.
> ----- Original Message ----- 
> From: "Greg Knaddison" <greg.knaddison at gmail.com>
> To: "CentOS mailing list" <centos at centos.org>
> Sent: Wednesday, August 24, 2005 4:17 PM
> Subject: Re: [CentOS] FTP timout
>
>
> On 8/24/05, Abd El-Hameed Ayad <hamid at
2006 Feb 16
4
FTP Server and IPTables?
I'm having a heck of a time getting vsftpd to work properly. When Iptables are 
OFF, it works fine, and when iptables is on, it dies. When I try ftp from a 
command line, here's what the session looks looks like: 
[root at mylaptop ~]# ftp ftp.server.com
Connected to ftp.server.com.
220 Welcome to My Company FTP
530 Please login with USER and PASS.
530 Please login with USER and PASS.
2009 Sep 15
2
iptables
Hi,
I have an existing iptables as follows:-
# Firewall configuration written by system-config-securitylevel
# Manual customization of this file is not recommended.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:RH-Firewall-1-INPUT - [0:0]
-A INPUT -j RH-Firewall-1-INPUT
-A FORWARD -j RH-Firewall-1-INPUT
-A RH-Firewall-1-INPUT -i lo -j ACCEPT
-A RH-Firewall-1-INPUT -p
2007 Jun 07
2
Standard RH iptables analysis
This is a standard RedHat / CentOS firewall configuration, where I
told it, through the standard RH setup GUI, that I want ssh and
snmp allowed through.
  Chain INPUT (policy ACCEPT)
  target     prot opt source               destination         
  RH-Firewall-1-INPUT  all  --  anywhere             anywhere            
  
  Chain FORWARD (policy ACCEPT)
  target     prot opt source              
2008 Feb 26
1
/etc/sysconfig/iptables on a stock CentOS 5 install
Greetings:
i have a pretty stock CentOS 5 machine with ports 80 and 22 exposed, so
my /etc/sysconfig/iptables file is pretty standard/straightforward.
my question is:  how is this config file initially generated?  i'd  
like to
re-create it, and add a couple of rules .... so i don't want to lose  
what's
in there already.
i see that my /etc/sysconfig/system-config-securitylevel has
2006 Nov 21
1
Top process automatically killed
Hi,
    Can modifications to /etc/security/limits.conf cause top process to 
be automatically killed.
First, Here is the contents of the /etc/security/limits.conf
*                hard    cpu             2
*                soft    nproc           5
*                hard    nproc           10
mailnull         hard    nproc           100
What i have noticed that top process is always killed, But
2012 Aug 03
1
[SOLVED] iptables rule question for Centos 5
We have a simple configuration so we could get by with this
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j
ACCEPT
-A RH-Firewall-1-INPUT -s "SOURCIPADDRESS"  -j REJECT --reject-with
icmp-host-prohibited
it doesn't scale well but servies the purpose.
_____________________________________
"He's no failure. He's not dead yet."
William
2007 Sep 29
1
samba with iptables
Hi,
system info:
ubuntu 7.04 (Host OS)
samba 3.0.24 (installed with apt-get)
vmware-server 6.0.1
windows XP (Guest OS)
I was using the iptables script provided by iptablesrocks.org. It's been
quite useful, but I ran into a problem when I tried to connect samba.
Without any iptables rules, I have no problem when connecting host
os(ubuntu samba server) from guest os Windows XP.
I referenced
2017 May 28
1
Ovirt Hosted-Engine VM iptables
Hi
I would like to add rules into the iptables of the Hosted Engine VM in 
Ovirt.
the version is oVirt Engine Version: 4.1.1.8-1.el7.centos
I have tried using the normal process for iptables (iptables-save etc), 
but it seems that the file
/etc/sysconfig/iptables
this is ignored in the Ovirt Engine VM.
How can I add permanent rules into the Engine VM?
Kind regards
Andrew
2016 Jun 21
2
Redirecting port 8080 to port 80 - how to add in /etc/sysconfig/iptables file?
Hello again,
unfortunately the following /etc/sysconfig/iptables file does not work:
*nat
:INPUT ACCEPT
:OUTPUT ACCEPT
:PREROUTING ACCEPT
:POSTROUTING ACCEPT
#-A PREROUTING -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 8080
-A PREROUTING -p tcp -m tcp -d 144.76.184.154/32 --dport 80 -j REDIRECT
--to-ports 8080
COMMIT
*filter
:INPUT DROP
:OUTPUT ACCEPT
:FORWARD DROP
-A INPUT -m state --state
2016 Jun 20
3
Redirecting port 8080 to port 80 - how to add in /etc/sysconfig/iptables file?
Good evening,
on a CentOS 7 LAMP (not gateway) dedicated server I am
using iptables-services with the following /etc/sysconfig/iptables:
*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [294:35064]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type any -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp -m
2013 Aug 15
2
Samba4 and iptables
Hi everyone,
I had posted recently about getting Samba4 to work on CentOS 6.4 but 
having changes only replicating in one direction, from the Win2k3 AD but 
not back to it.  I solved the problem, this time, by disabling iptables. 
  I find it a bit hard to understand.  These are the rules I have set up:
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [52:5888]
-A INPUT -m state
2011 Jan 04
9
Netinstall & NFS using local server.
Dear CentOS community,
I have install centos via CD, DVD and Directly off the net via http and FTP. Now I want to do a NFS install from a local server and a client. Both, client and server are in the same vlan 10.14.10.0/255.255.255.0. 
The server has a static 10.14.10.15 address and the client gets its own address via DHCP. I download the DVD image from one of the mirrors and placed it under
2019 Apr 24
2
Iptables blocks out going connetion some times
Hi?guys.
There is a wierd problem with iptables recently, hopes somebody can help me.
I have installed Centos 7.2.1511 on a bare metal Dell server these days,
disabled firewalld and enabled iptables.services, and setup a group of very
simple rules, as the following:
# iptables-save
# Generated by iptables-save v1.4.21 on Tue Apr 23 09:15:14 2019
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT
2009 Aug 03
3
firewall question
My firewall config is below...
I am trying to figure out why another machine has access to port 5038 on 
my machine
based on these firewall rules.
I thought the reject at the bottom would take care of all other ports?
It does not.
I have restarted with "server iptables restart" and same thing. I can 
connect from another machine
to my machine on port 5038. How do I prevent this?
2014 Jan 07
2
Forward http traffic
Hello,
On CentOS 6.5 x86_64 I have (/etc/sysconfig/iptables):
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:RH-Firewall-1-INPUT - [0:0]
-A INPUT -j RH-Firewall-1-INPUT
-A FORWARD -j RH-Firewall-1-INPUT
-A RH-Firewall-1-INPUT -i lo -j ACCEPT
-A RH-Firewall-1-INPUT -p icmp --icmp-type any -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A