So I'm trying to get OpenVPN to work on port 53 - sadly this isn't working.
I used IP tables to map port 53 to port 1194 (standard OpenVPN port)
Here's what I run to do this:
iptables -t nat -A PREROUTING -p udp --dport 53 -j REDIRECT --to-port 1194
iptables -I INPUT -p udp --dport 53 -j ACCEPT
This works as the connection is fine except for when I try to visit new domains!
I'd like to allow mail through iptables and DROP policy but this script doesn't work what it is wrong here:
## FLUSH de reglas
iptables -F
iptables -X
iptables -Z
iptables -t nat -F
## policy
iptables -P INPUT DROP
iptables -P OUTPUT ACCEPT
iptables -P FORWARD DROP
# localhost
iptables -A INPUT -i lo -j ACCEPT
# Allow my ip
iptables -A INPUT -s MY_IP -j ACCEPT
# 80 port
iptables -A I
I've setup IPTables with the following script...
Hi
I'm having some problems with my VPS running Ubuntu Server 11.04 x64.
I am trying to configure iptables for ubuntu 10.04 and I have a problem with iptables -L lagging on rows where the destination or source address is not localhost or anywhere.
I have sendmail installed on Ubuntu 10.04 solely for the use of the php mail() function.
I am running a server which needs UDP ports 1000:11000 opened, as well as TCP 10011 and 30033 open to function.
I have a set of iptables rules set to allow SSH and those ports, and intentionally left out 2010 as I am getting attacked on that port. The server does not block the incoming IP even when told to do so.
I'm working on a virtual machine, i wrote this to block all ports except 555 and 443 : {{{{ $ sudo iptables -A INPUT -i eth0 -p tcp --dport 555 -j ACCEPT - $ sudo iptables -A INPUT -i eth0 -p tcp --dport 443 -j ACCEPT - $ sudo iptables-save }}}} then I went to /etc/network/interfaces and wrote this as comment: {{{ pre-up iptables-restore < /etc/iptables.rules }}} +++ right now i'm
# Generated by iptables-save v1.4.8 on Sat Apr 27 19:02:58 2013
*filter
:INPUT ACCEPT [812:348051]
:FORWARD ACCEPT [154:112203]
:OUTPUT ACCEPT [1781:859968]
-A INPUT -s 192.168.0.50/32 -i eth0 -p tcp -m tcp --dport 3128 -j ACCEPT
-A INPUT -s 192.168.0.50/32 -i eth0 -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -s 192.168.0.50/32 -i eth0 -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -s 192.168.0.60/32
Email this page
