Troubleshooting firewall and routing on Linux

Are there any tools or API hooks for troubleshooting iptables or routing on Linux? (besides the obvious -j LOG) In other words: what to do when tables with 200 or 300 firewalling rules after adding a new rule still doesn’t allow new traffic. Or when a router with over a dozen network interfaces replies to … Read more

How to choose source IP from multiple virtual IP’s based on specific destination

I am having two private IP attached to an interface. inet 10.255.0.127/24 brd 10.255.0.255 scope global eth1 inet 10.255.0.153/24 brd 10.255.0.255 scope global secondary eth1 When traffic leaves the eth1 interface it uses 10.255.0.127 (primary) as the src IP. How can I change the src IP to use 10.255.0.153 (secondary) based on specific destination. For … Read more

Debian – Dual WAN – Static Route on a DHCP Interface

I’ve got two WAN interfaces coming into a Debian 8 VM. WAN 1 – All Internet and local traffic. (0.0.0.0/0) Has a a static IP, thus IP, netmask and gateway are fixed values. WAN 2 – Specific private subnet traffic only (10.100.0.0/16). IP obtained via DHCP, can be anywhere in the 10.0.0.0/8 range. I don’t … Read more

Linux route policy based on tos returning wrong gateway

I have a simulated ad-hoc network running on Docker, using Ubuntu 16.04 as a base. I have a number of routing tables. The table in question, table 102, appears as: root@b22e0eafe06d:~# ip route show table 102 172.17.0.3 via 172.17.0.3 dev eth0 proto static 172.17.0.4 via 172.17.0.4 dev eth0 proto static 172.17.0.5 via 172.17.0.3 dev eth0 … Read more

How to understand this output of ip route list table 255 [closed]

Closed. This question needs details or clarity. It is not currently accepting answers. Want to improve this question? Add details and clarify the problem by editing this post. Closed 3 years ago. Improve this question broadcast 100.125.71.152 dev rmnet_data1 proto kernel scope link src 100.125.71.153 local 100.125.71.153 dev rmnet_data1 proto kernel scope host src 100.125.71.153 … Read more

Routing config between internet load balancers and backend

Im facing a problem due my lack of experiencie on routing. I need to config the next things (all run on my computer virtualized, if works, i will pass it to hardware) [internet] —- [DMZR]–/–[GATEWAY]—/—[LoadBalancer]—/—[BACKEND] internet: 192.168.10.0/24 gateway:10.10.10.0/29 Loadbalancer:10.10.10.0/29 | 10.10.1.0/24 Backend:10.10.1.0/24 Loadbalancer has 2 nic, on on the same net as gateway : 10.10.10.0/29 … Read more

Can a machine(physical or virtual) accept and process UDP packets with a different IP address coming from a known device?

Before everything, thanks for reading the next question. I have script,(ipUDPspoof.rb), which is a client/server script in Ruby (you choose the parameter 1 to be server and 0 to be client, at initialization…for example “sudo ruby sandbox.rb 1” to initialize the server) that will create and send/receive RAW packets in UDP protocol, with different IP … Read more

How to DHCP request a second, different, IP for the same physical interface?

(Similar to this question, but with two different DHCP-assigned IPs) Is there any way to let dhclient or dhcpcd request two different IPs for one physical interface, e.g. via virtual interfaces eth0 and eth0:1? Maybe by letting eth0:1 have a different MAC? Or by creating a virtual eth1 bridged to eth0? Or can I use … Read more