I have an Ubuntu machine setup as a home internet router. I would like to block internet access for particular IP address or mac address. Is it easily possible? I use UFW as a firewall. Answer You can set iptables filter by ip address, for example: iptables -A FORWARD -o eth1 -s 192.168.1.100 -j DROP … Read more
I want to restrict all traffic from my ubuntu-machine to come or go from the local network (eth0) or from or to my VPN (tun0). It should be possible to connect the router in the local network but not possible to leave the local network not using the VPN. Since i have no experience with … Read more
This question already has answers here: Loopback to forwarded Public IP address from local network – Hairpin NAT (12 answers) Closed 4 years ago. I have an Ubuntu server that sits in a DMZ. The server has a private IP address (10.x.x.x) and the firewall has a public IP address. All network traffic from internet … Read more
Closed. This question needs details or clarity. It is not currently accepting answers. Want to improve this question? Add details and clarify the problem by editing this post. Closed 6 days ago. Improve this question lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536 inet 127.0.0.1 netmask 255.0.0.0 inet6 ::1 prefixlen 128 scopeid 0x10<host> loop txqueuelen 1000 (Local Loopback) RX … Read more
This is a unique problem related to DNS queries(tcp/udp 53) even with correct UFW/iptables rules and does not relate to /etc/resolv.conf I can ping google DNS 8.8.8.8 but cannot resolve google.com after turning on the host ufw. Tried searching everywhere and updated ufw and iptables accordingly to allow DNS queries and allow established connection. My … Read more
For security reasons I want to turn off SSH when I don’t use it and turn it on again via a VNC connection as I can connect to my web server remotely over the Digitalocean control panel’s console instead, and turn on SSH that way. Is below the best way of doing it? sudo stop … Read more
This question already has an answer here: SMTP 25 closed even though I allow everything in firewall (Debian server running sendmail) (1 answer) Closed 8 years ago. I am trying to configure sendmail and ufw on an ubuntu server (ServerA) so that another server (ServerB) can send mail through it. In my /etc/mail/access file I … Read more
The basic configuration is the following: To Action From — —— —- Anywhere DENY xx.xxx.xxx 22/tcp ALLOW Anywhere 80/tcp ALLOW Anywhere 22/tcp (v6) ALLOW Anywhere (v6) 80/tcp (v6) ALLOW Anywhere (v6) Not using ipv6, verivied ipv4. varnish and nginx logs show the ipv4 address that should be nuked from space. ubuntu 16.04, ufw 0.35 iptables … Read more
I have ubuntu 16 vps with openvpn running. I would like to reject all incoming connections expect http and https for /www/. Allow incoming connections only from users which use vpn service running on this VPS. So the question is how to do it? or Where I can read about it? I am completely new … Read more
I have two Ubuntu servers with identical Samba configs and same UFW rules for Samba’s ports but the difference is that one with 14.04 works just fine and the other with 12.04 denies access from everywhere. When UFW is disabled on the 12.04 server Samba connections are allowed again. Though, when UFW is enabled there … Read more
