Re: iptables, virtualbox and port forwarding

2014-06-11 Thread berenger . morel
Le 29.05.2014 06:56, Igor Cicimov a écrit : Maybe something like this? - Kernel config # sysctl -p net.ipv4.conf.default.rp_filter = 1 net.ipv4.ip_forward = 1 net.ipv4.tcp_syncookies = 1 net.ipv4.conf.all.log_martians = 1 net.ipv4.tcp_keepalive_time = 60 net.ipv4.tcp_keepalive_intvl = 20 net.i

Re: iptables, virtualbox and port forwarding

2014-06-11 Thread berenger . morel
Le 29.05.2014 01:00, Pascal Hambourg a écrit : On that network, I have some VMs with static IPs, and the one on which I try to make the configuration for testing and learning purpose have an apache2 server running and up ( I can query on it from my physical computer ). It is using 2 network int

Re: iptables, virtualbox and port forwarding

2014-05-30 Thread Chris Angelico
On Fri, May 30, 2014 at 8:51 PM, wrote: >> Hoping to find something that you can do entirely under your own >> control. :) > > > You mean, be your own boss? Heh, that's another way of interpreting that statement. But no, what I meant was "some way you can get the test/dev systems you need withou

Re: iptables, virtualbox and port forwarding

2014-05-30 Thread berenger . morel
Humpf... finger mistake. Also, there's fossil if you are in that situation: it's It's a DVCS which integrate a wiki and a bugtracker. Sounds really interesting, but I never took time to really play with it. So, in a situation where you are the only one to use real tools, and do not want to

Re: iptables, virtualbox and port forwarding

2014-05-30 Thread berenger . morel
Le 30.05.2014 12:08, Chris Angelico a écrit : On Fri, May 30, 2014 at 7:04 PM, wrote: What I basically want to do, and I do not understand how they ( my programmer colleagues ) can happily live without that, is a server for source versionning, bug tracking, wikis, etc. This stuff does not

Re: iptables, virtualbox and port forwarding

2014-05-30 Thread Chris Angelico
On Fri, May 30, 2014 at 7:04 PM, wrote: > What I basically want to do, and I do not understand how they ( my > programmer colleagues ) can happily live without that, is a server for > source versionning, bug tracking, wikis, etc. This stuff does not need any > virtual system or network, and is re

Re: iptables, virtualbox and port forwarding

2014-05-30 Thread berenger . morel
Le 28.05.2014 18:05, Joe a écrit : On Wed, 28 May 2014 21:25:23 +1000 Chris Angelico wrote: On Wed, May 28, 2014 at 9:03 PM, Joe wrote: > The point here is that all modern hardware is capable of IPv6, and > even if you aren't using it, malware writers may be. And by > default, a Debian mach

Re: iptables, virtualbox and port forwarding

2014-05-28 Thread Igor Cicimov
Maybe something like this? - Kernel config # sysctl -p net.ipv4.conf.default.rp_filter = 1 net.ipv4.ip_forward = 1 net.ipv4.tcp_syncookies = 1 net.ipv4.conf.all.log_martians = 1 net.ipv4.tcp_keepalive_time = 60 net.ipv4.tcp_keepalive_intvl = 20 net.ipv4.tcp_keepalive_probes = 9 net.ipv4.conf.def

Re: iptables, virtualbox and port forwarding

2014-05-28 Thread Pascal Hambourg
Hello, berenger.mo...@neutralite.org a écrit : > > I am trying to build a virtual network exposing servers accessible from > the LAN. [...] > So I ask for 2 things: > _ help on this particular problem > _ if someone knows about resources to learn and understand how exactly > iptables work, this

Re: iptables, virtualbox and port forwarding

2014-05-28 Thread Joe
On Wed, 28 May 2014 21:25:23 +1000 Chris Angelico wrote: > On Wed, May 28, 2014 at 9:03 PM, Joe wrote: > > The point here is that all modern hardware is capable of IPv6, and > > even if you aren't using it, malware writers may be. And by > > default, a Debian machine is wide open to IPv6, and so

Re: iptables, virtualbox and port forwarding

2014-05-28 Thread Tony van der Hoff
On 28/05/14 14:29, Andrei POPESCU wrote: > On Mi, 28 mai 14, 21:39:24, Chris Angelico wrote: >> >> It's off-topic for this list, > > CC: and Reply-To: -offtopic, this time for real :( > Please disregard the other post > Followup to list just puts it straight back there. >> but I would be very cu

Re: iptables, virtualbox and port forwarding

2014-05-28 Thread Andrei POPESCU
On Mi, 28 mai 14, 21:39:24, Chris Angelico wrote: > > It's off-topic for this list, CC: and Reply-To: -offtopic, this time for real :( Please disregard the other post > but I would be very curious to know how > much extra, on average, people would pay in order to get an IPv6 > netblock. Maybe it

Re: iptables, virtualbox and port forwarding

2014-05-28 Thread Andrei POPESCU
On Mi, 28 mai 14, 21:39:24, Chris Angelico wrote: > > It's off-topic for this list, CC: and Reply-To: -offtopic > but I would be very curious to know how > much extra, on average, people would pay in order to get an IPv6 > netblock. Maybe it really isn't commercially important. ISP: You can get

Re: iptables, virtualbox and port forwarding

2014-05-28 Thread Chris Angelico
On Wed, May 28, 2014 at 9:31 PM, Brad Rogers wrote: > On Wed, 28 May 2014 21:25:23 +1000 > Chris Angelico wrote: > > Hello Chris, > >>still trying to convince his ISPs that IPv6 is worth supporting > > Hard, isn't it? > > Several (many?) ISPs in these parts seem to be doing the equivalent of > st

Re: iptables, virtualbox and port forwarding

2014-05-28 Thread Brad Rogers
On Wed, 28 May 2014 21:25:23 +1000 Chris Angelico wrote: Hello Chris, >still trying to convince his ISPs that IPv6 is worth supporting Hard, isn't it? Several (many?) ISPs in these parts seem to be doing the equivalent of sticking their fingers in their ears and humming loudly, when if custome

Re: iptables, virtualbox and port forwarding

2014-05-28 Thread Chris Angelico
On Wed, May 28, 2014 at 9:03 PM, Joe wrote: > The point here is that all modern hardware is capable of IPv6, and > even if you aren't using it, malware writers may be. And by default, a > Debian machine is wide open to IPv6, and some of its software is > listening to it. Run a netstat to see which

Re: iptables, virtualbox and port forwarding

2014-05-28 Thread Joe
On Wed, 28 May 2014 11:36:03 +0200 berenger.mo...@neutralite.org wrote: > > I do not think I need ipv6 for now. I'll start with the probably > easier ipv4, and maybe someday I'll experiment with the v6, if I have > the opportunity to work in a v6 LAN. > > The point here is that all modern har

Re: iptables, virtualbox and port forwarding

2014-05-28 Thread berenger . morel
Le 28.05.2014 00:13, Joe a écrit : On Tue, 27 May 2014 18:24:41 +0200 berenger.mo...@neutralite.org wrote: Hello list. I am trying to build a virtual network exposing servers accessible from the LAN. I have done a lot of searches on the web and it worked last week, but since then, I have re

Re: iptables, virtualbox and port forwarding

2014-05-27 Thread Chris Angelico
On Wed, May 28, 2014 at 8:13 AM, Joe wrote: > This package is relatively recent, and when I needed to address this > problem, I had just built a Linux-From-Scratch system, so I took their > init script skeleton and made a pseudo-daemon, entering a set of > iptables commands at boot. This is an alt

Re: iptables, virtualbox and port forwarding

2014-05-27 Thread Joe
On Tue, 27 May 2014 18:24:41 +0200 berenger.mo...@neutralite.org wrote: > Hello list. > > I am trying to build a virtual network exposing servers accessible > from the LAN. > I have done a lot of searches on the web and it worked last week, but > since then, I have restarted my computer and had

iptables, virtualbox and port forwarding

2014-05-27 Thread berenger . morel
Hello list. I am trying to build a virtual network exposing servers accessible from the LAN. I have done a lot of searches on the web and it worked last week, but since then, I have restarted my computer and had the nice surprise to learn that the iptables command does not save it's configurat