Skip to main content

All Questions

Tagged with
Filter by
Sorted by
Tagged with
1 vote
1 answer
156 views

BIND9 on Ubuntu 20 - Cannot configure Zone to work properly

I installed it on Ubunto 20 and configured two zones Options config file acl internal { localhost; localnets; 192.168.70.0/24; 10.200.157.0/24; }; options { ...
Wism Esmel's user avatar
0 votes
2 answers
785 views

Generate iptables rules while connecting to VPN Server

I'm building a virtual Ubuntu Server(LXC on Proxmox) that shall act as router and tunnel some devices(e.g. AppleTV) of my local network through a VPN (expressVPN). Connecting and routing to different ...
Michael's user avatar
1 vote
0 answers
582 views

DNS only works when I have a port 53 UDP outbound rule *AND INBOUND* rule

I'm locking down both inbound and outbound ports with iptables -P INPUT DROP iptables -P OUTPUT DROP Then, I allow certain traffic to certain servers SSH from my network to the server (inbound) HTTP ...
geekygeek's user avatar
  • 181
1 vote
1 answer
88 views

DNATing DNS requests that aren't going to a particular server. iptables : No chain/target/match by that name

I have some chains that I create in iptables iptables -N dns-requests iptables -N wg0-filter I then create a filter, to pass DNS traffic that are on Port 53. iptables -A wg0-filter -p tcp --dport 53 -...
geekygeek's user avatar
  • 181
0 votes
0 answers
428 views

I wanted to allow outgoing DNS traffic while OUTPUT is on DROP

I currently have a dns server running on my pi , and I am using that as my dns I wanted to ping google.ca while my output chain / input being on drop here are my firewall rules would love to hear some ...
Zak A's user avatar
  • 1
0 votes
0 answers
87 views

help with dns name conflict vpn and docker

I need to access an url via VPN, (estrelaoriente.com) but seems it is conflicting with an docker route (docker.amazee.io): ~$ ping estrelaoriente.com PING estrelaoriente.com.docker.amazee.io (127.0.0....
Bruno Colaço's user avatar
0 votes
0 answers
154 views

Iptables block ping from another ip

I am a beginner in the field could you help me please me : 192.168.15.13 user1 : 192.168.15.14 user2 : 192.168.15.12 I would like to block ping from user1 to user2 using iptables from my ip 192.168.15....
RHT9855's user avatar
0 votes
2 answers
831 views

WiFi AP's have no internet connectivity after seting up IPTABLES

I have set up an Ubuntu 20.04 SERVER to act as a Gateway/Router. Now that the gateway is functioning, I now no longer have WiFi access via several AP's in my house. I am able to connect to the AP's, I ...
Scott Vinzant's user avatar
0 votes
0 answers
157 views

How to test to see if packets are moving between two ports on a dual port NIC

I'm trying to set up a home router on Ubuntu 20.04 Server. I have followed dozens of on-line tutorials, and for the life of me, I can't get this to work. As soon as I get everything set up, nothing ...
Scott Vinzant's user avatar
0 votes
0 answers
331 views

Ubuntu firewall issue

I've broken my ubuntu's dns/firewall settings. I've installed toroxy and dnscrypt and after its deletion I don't have an internet connection even to my router. ping 192.168.100.1 # router address ping ...
Pavel Varenik's user avatar
1 vote
1 answer
166 views

Why is wlo1 not routing DNS response back to enp4s0?

I'm sharing my wifi connection (wlo1) via ethernet (enp4s0) to another device. The packet forwarding worked until the host device rebooted. All routes and IP addresses are static, set up using NMCLI. ...
Kaleb Burklow's user avatar
1 vote
0 answers
241 views

What should my /etc/network/interfaces look like

I’ve relatively new to Ubuntu/Linux and have been mainly following online guides to achieve what i would like. I think however, i have currently messed up my /etc/network/interfaces When I restart my ...
Jonathan Crook's user avatar
2 votes
1 answer
3k views

systemd-resolved iptables rules

Before systemd-resolved my iptables rules for DNS were DNS_SERVER="8.8.8.8 8.8.4.4" echo "Set default INPUT policy to 'DROP'" $IPT -P INPUT DROP for ip in $DNS_SERVER do echo "Allowing DNS ...
Kickaha's user avatar
  • 159
3 votes
0 answers
5k views

how to properly install and configure stubby on a ubuntu server

This is what I have done, according to this instructive: Protect Your DNS Privacy on Ubuntu 18.04/20.04 with DNS over TLS, but it does not work in my localnet. What am I missing? Install stubby on ...
acgbox's user avatar
  • 2,210
2 votes
1 answer
2k views

How to allow DNS lookup with iptables on Ubuntu 18.04 server

I'm using Ubuntu 18.04 Server and trying to make a router. When I execute the following iptables script (which worked just perfectly on Ubuntu 16.04), the DNS lookup from command line stops working. I ...
Todor Andreev's user avatar
1 vote
2 answers
938 views

Setting and configuring a firewall

Newbie here. I've found the following rules to set a firewall, (from the book how Linux works) iptables -P INPUT DROP # the default policy iptables -A INPUT -s 127.0.0.1 -j ACCEPT iptables -A ...
user10089632's user avatar
1 vote
1 answer
1k views

IPtables DNS conflicts

On my VPS, when I run ping 8.8.8.8 It works just fine, but when I do ping google.com it just hangs. The contents of /etc/resolv.conf is: # Dynamic resolv.conf(5) file for glibc resolver(3) ...
user8292439's user avatar
  • 3,798
1 vote
0 answers
45 views

Headless server no longer routing after minor fiddling with DNS and DHCP

Apologies up front for any spelling errors or anything, but I'm forced to write this post on my phone. I'm running ubuntu 16.04.2 LTS headless which I also use as a router for my LAN. Typically I ...
user2329915's user avatar
0 votes
1 answer
141 views

How do I block all analytic websites?

Recently, I have realized that doubleclick is not blocked by firefox ad blocker because google is sponsoring this add-on. How can I properly block any google analytic and google doubleclick (or ...
Janos's user avatar
  • 11
1 vote
0 answers
102 views

WCCP + SQUID = client browser "This page can’t be displayed"

I implement this scenario: ISP <==> ASA <==> SWITCH <==> LAN + SQUID Squid server is within the same INSIDE ASA Interface but different VLAN. tcpdump -nni wccp0 -p tcp and port 80 ...
Dian Andriani's user avatar
1 vote
1 answer
3k views

Accidently flushed iptables - restore

Im running ubuntu 16.04 and i have accidently flushed my iptables while trying to troubleshoot a slow internet issue. I used following command iptables -F Now i cannot open any website, log into ...
Ejaz's user avatar
  • 185
1 vote
0 answers
112 views

Resolve domain names to IP's based on physical adapter

System Configuration eth0 NIC to the LAN/WAN/Internet (working, don't want to mess with it) eth1 NIC eth2 NIC Objectives Assign a static IP to eth1 and eth2 and assign IPs (DHCP) on separate ...
ngm_code's user avatar
  • 111
1 vote
2 answers
5k views

How do I allow DNS through interface filtering using iptables in Ubuntu Headless

I've seen some questions referring to static DNSs, openVPN server pushes etc, but none of them really apply or they require GUI tools and I am using a headless Ubuntu Core that I SSH into. root@...
DeeJayh's user avatar
  • 378
1 vote
0 answers
3k views

Dnsmasq and Iptables for routing

I'm using a Raspberry Pi with two ethernet ports as a router. The network looks like this. "Internet" <--(…)--> Fritz!Box <--(172.16.x.y)--> [eth1, dhcp] Raspberry Pi [eth0, static] <--...
Markus's user avatar
  • 1,585
2 votes
1 answer
183 views

DNS not resolving on same network only from outside - 3 days of headache already

I have a domain forwarded to my apache server let's say test.example.com. This works fine outside my home network I can reach it via mobile (4G). But on my laptop I can't reach it. Also I can't ...
tim0101's user avatar
  • 41
5 votes
2 answers
19k views

iptables - redirect DNS queries

I already have the following iptables rules applied in order to masq all of the wlan1 traffic through wlan0. *filter :INPUT ACCEPT [48:6144] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [47:6078] -A INPUT -i ...
vonHerman's user avatar
0 votes
1 answer
1k views

The server cant resolve host names

Please help with the following problem. Server is running under Ubuntu 14.04 server 32x. IP tables: INPUT DROP [0:0] :FORWARD DROP [0:0] :OUTPUT ACCEPT [0:0] -A INPUT -p icmp -j ACCEPT -A INPUT ...
Maxim  Ilin's user avatar
5 votes
0 answers
10k views

Using Ubuntu 14.04 as router with iptables, clients can't go online. Probably DNS issue, iptables setting needed [closed]

CORRECTION 3: SOLVED! I needed to add the the official DNS server of my departement's VLAN as DNS to the clients. I've read through a large number of posts about iptables issues when using Linux as ...
zerweck's user avatar
  • 150
2 votes
0 answers
4k views

Not pinging with host-name and can't ssh using hostname [duplicate]

I have setuped a DNS server in Centos6.5 and its working with every client machines other than ubuntu, now i have issue with ubuntu While im trying to ping from desktop machine to DNS server as ping ...
Babin Lonston's user avatar
0 votes
1 answer
3k views

Iptables and bind9 to forward to google's dns

Hello i have a very hard time on getting along with iptables and bind9 as my internal network dns server. It's configured to forward my queries to google's dns (8.8.8.8). The main problem is i can't ...
John Bassos's user avatar
3 votes
1 answer
17k views

Redirect requests mapped to a DNS IP Address

For this command lines: sysctl net.ipv4.ip_forward=1 iptables -t nat -A PREROUTING -p tcp --dport port -j DNAT --to-destination ip:port iptables -t nat -A POSTROUTING -j MASQUERADE I can reroute ...
Nihal's user avatar
  • 31
7 votes
2 answers
32k views

'/etc/hosts' , http links are redirecting, but https links are not redirecting

I edited /etc/hosts file and entered below information : 127.0.0.1 test.com //working 127.0.0.1 https://test.com //not working . from the above info, http://test.com is redirecting to 127....
user avatar
5 votes
3 answers
46k views

How do I allow all possible IPs for Gmail servers through my ufw firewall?

I am currently using the following rule: ufw allow out from my_local_ip to any port 587 This is a little too lax for my liking. I would like to tighten it up and restrict it to only gmail's smtp ...
nomadicME's user avatar
  • 163