I'm trying to run conntrack -S to get some stats about NAT with docker.
But I get the error:
conntrack v1.4.4 (conntrack-tools): Can't open /proc interfaces
How can I go about getting statistics about NAT?
Output of lsb_release -a:
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 18.04.3 LTS
Release: 18.04
Codename: bionic
I have a raspberry pi 3B+, all updates installed and want to route only one service through vpn. I opened a vpn with openvpnclient. The service is megatools. Everything other should be going through eth0. Does anybody know how to use ufw without masks and all that confusing stuff? Its 2am sry if I miss some information at this point.
I have an Ubuntu desktop 18.04 on a PC. I installed it as an ipv6 router. This router has two NICs. One NIC as a WAN interface enp4s0. The WAN's ipv6 address is 2001:b010:203f:ff01::0012 /64, and the WAN's gateway ipv6 address is 2001:b010:203f:ff01::ffff /64.
The other NIC as a LAN interface. The LAN's ipv6 address is 2001:b010:203f:0100::1 /64. I enabled net.ipv6.conf.all.forwarding = 1 and net.ipv6.conf.all.accept_ra = 2 on /etc/sysctl.conf. Then I rebooted it and configured my Windows 10 to connect router LAN interface. My Windows 10 ipv6 address is 2001:b010:203f:0100::13 /64 and the gateway ipv6 address is 2001:b010:203f:0100::1. And DNS ipv6 address is 2001:4860:4860::8888.
I can not ping 2001:4860:4860::8888 from my Windows 10. Why can't it route ipv6?
In previous version of Ubuntu I had a firewall rule to block all internet access for my child's account. I just upgraded to Eoan and the system has changed such that my old method doesn't work anymore. My previous method was to add the following line to /etc/network/interfaces
pre-up iptables -A OUTPUT -p tcp -m owner --uid-owner 1001 -j DROP
In Eoan it looks like /etc/network/interfaces does not exist. I gather I can add a script to /etc/network/if-pre-up.d that adds this iptables rule, but I'm not very good with that kind of thing and don't want to bork my network setup. Any tips?
When I try to ping my apache2 server (running on Ubuntu Server 16.04) with its domain name, it succeeds from any computer.
However, if I try to access it with a browser, or use ssh, the server is not found. Curling doesn't even give an error message, even if I wait a while.
I have a static ip set behind a router. When I curl localhost I get the expected result. When I curl or ping any website other than the server itself I get the expected result.
This problem appeared after adding dns servers to the network configuration file. However, removing that line does not fix the issue, even after multiple reboots.
Edit: I checked that the correct ports were open on the router, the firewall, and used netstat to check that apache was listening on the correct ports.
For some of the Ubuntu installations I use netboot mini.iso from http://cdimage.ubuntu.com/netboot/ . This installation method includes the step of configuring proxy. It is very useful for me as I have Squid-Deb-Proxy configured in my network, so I can lower traffic usage by using it.
But I do not see such an option in Ubuntu Desktop graphical installers, for example for Ubuntu MATE. They use Ubiquity as a common. Is it possible to set APT proxy during installation for such installers?
i'm using ubuntu 18.04 and i tried to install dnscrypt using this tutorial
but when i tried to connect to a website it always failed,
i tried to check the status of the dnscrypt service, and it shows error [ERROR] Unable to retrieve server certificates like this:
i tried to edit /etc/resolv.conf and change the nameserver to 127.0.2.1 but when i restarted the NetworkManager, the nameserver goes back to 127.0.0.53
after that i tried to disable these two, but nothing changes
sudo systemctl disable dnscrypt-proxy.service && sudo systemctl disable dnscrypt-proxy-resolvconf.service
nm-applet always gives me a hard time when connecting to wireless. I often have to restart it and make several attempts till it connects to a network. Sometimes even restarting the computer doesn't help. This time I ran it from CLI and I got this:
** (nm-applet:2950): WARNING **: Couldn't connect to accessibility bus: Failed to connect to socket /tmp/dbus-t6ky00XpYq: Connection refused
** (nm-applet:2950): WARNING **: Could not initialize NMClient /org/freedesktop/NetworkManager: The name org.freedesktop.NetworkManager was not provided by any .service files
(nm-applet:2950): nm-applet-WARNING **: Failed to register as an agent: (2) The name org.freedesktop.NetworkManager was not provided by any .service files
(nm-applet:2950): nm-applet-WARNING **: Failed to register as an agent: (2) The name org.freedesktop.NetworkManager was not provided by any .service files
Here is the output of lspci -knn | grep Net -A2
02:00.0 Network controller [0280]: Intel Corporation Wireless 7260 [8086:08b1] (rev 93)
Subsystem: Intel Corporation Device [8086:5070]
Kernel driver in use: iwlwifi
The wifi was working. I closed my laptop. I opened my laptop. The wifi wasn't working anymore, specifically no wifi is found. I tried restarting the network manager, rebooting the PC, trying every solution found on the web, nothing.
All the information about my system are here https://pastebin.com/jNP35arP . The info are generated by running
wget -N -t 5 -T 10 https://github.com/UbuntuForums/wireless-info/raw/master/wireless-info && chmod +x wireless-info && ./wireless-info
while connected by USB tethering to an android phone.
the output of dmesg | grep 8821ce is:
[ 4.312082] 8821ce: loading out-of-tree module taints kernel.
[ 4.315335] 8821ce: module verification failed: signature and/or required key missing - tainting kernel
[ 4.322727] RTW: rtl8821ce v5.2.5_1.26055.20180108.1
[ 4.322729] RTW: rtl8821ce BT-Coex version = COEX20170310-1212
[ 4.323011] rtl8821ce 0000:02:00.0: enabling device (0000 -> 0003)
[ 4.349877] RTW: rtw_read_efuse_from_file /system/etc/wifi/wifi_efuse_8821ce.map is not readable
[ 4.358635] Modules linked in: snd_seq gpu_sched btusb ttm uvcvideo btrtl input_leds videobuf2_vmalloc snd_seq_device hp_wmi btbcm 8821ce(OE+) sparse_keymap serio_raw wmi_bmof drm_kms_helper videobuf2_memops btintel k10temp snd_timer videobuf2_v4l2 bluetooth drm videobuf2_common i2c_algo_bit videodev snd fb_sys_fops syscopyarea mc ecdh_generic sysfillrect cfg80211 sysimgblt ecc soundcore joydev hp_accel lis3lv02d input_polldev hp_wireless mac_hid sch_fq_codel parport_pc ppdev lp parport ip_tables x_tables autofs4 hid_generic i2c_amd_mp2_pci usbhid hid nvme psmouse i2c_piix4 ahci r8169 libahci realtek nvme_core wmi i2c_scmi video
[ 4.358775] ? _rtw_malloc+0x2d/0x2f [8821ce]
[ 4.358828] rtw_wiphy_register+0x26/0x53 [8821ce]
[ 4.358872] ? rtw_wiphy_register+0x26/0x53 [8821ce]
[ 4.358915] rtw_cfg80211_ndev_res_register+0x19/0x5b [8821ce]
[ 4.358956] rtw_os_ndev_register+0x116/0x196 [8821ce]
[ 4.358998] rtw_os_ndevs_register+0x9d/0x12f [8821ce]
[ 4.359039] rtw_os_ndevs_init+0x29/0x3f [8821ce]
[ 4.359079] rtw_drv_init+0x3e0/0xaa3 [8821ce]
[ 4.359136] rtw_drv_entry+0x78/0x1000 [8821ce]
[ 4.359224] WARNING: CPU: 5 PID: 390 at /var/lib/dkms/rtl8821ce/v5.2.5_1.26055.20180108.1/build/os_dep/linux/os_intfs.c:1514 rtw_os_ndev_register+0xbb/0x196 [8821ce]
[ 4.359224] Modules linked in: snd_seq gpu_sched btusb ttm uvcvideo btrtl input_leds videobuf2_vmalloc snd_seq_device hp_wmi btbcm 8821ce(OE+) sparse_keymap serio_raw wmi_bmof drm_kms_helper videobuf2_memops btintel k10temp snd_timer videobuf2_v4l2 bluetooth drm videobuf2_common i2c_algo_bit videodev snd fb_sys_fops syscopyarea mc ecdh_generic sysfillrect cfg80211 sysimgblt ecc soundcore joydev hp_accel lis3lv02d input_polldev hp_wireless mac_hid sch_fq_codel parport_pc ppdev lp parport ip_tables x_tables autofs4 hid_generic i2c_amd_mp2_pci usbhid hid nvme psmouse i2c_piix4 ahci r8169 libahci realtek nvme_core wmi i2c_scmi video
[ 4.359282] RIP: 0010:rtw_os_ndev_register+0xbb/0x196 [8821ce]
[ 4.359333] rtw_os_ndevs_register+0x9d/0x12f [8821ce]
[ 4.359373] rtw_os_ndevs_init+0x29/0x3f [8821ce]
[ 4.359413] rtw_drv_init+0x3e0/0xaa3 [8821ce]
[ 4.359462] rtw_drv_entry+0x78/0x1000 [8821ce]
[ 4.397495] WARNING: CPU: 5 PID: 390 at /var/lib/dkms/rtl8821ce/v5.2.5_1.26055.20180108.1/build/os_dep/linux/os_intfs.c:2748 rtw_os_ndevs_register+0xf6/0x12f [8821ce]
[ 4.397497] Modules linked in: snd_seq_midi_event aes_x86_64 crypto_simd cryptd glue_helper snd_rawmidi amd_iommu_v2 fjes(-) snd_seq gpu_sched btusb ttm uvcvideo btrtl input_leds videobuf2_vmalloc snd_seq_device hp_wmi btbcm 8821ce(OE+) sparse_keymap serio_raw wmi_bmof drm_kms_helper videobuf2_memops btintel k10temp snd_timer videobuf2_v4l2 bluetooth drm videobuf2_common i2c_algo_bit videodev snd fb_sys_fops syscopyarea mc ecdh_generic sysfillrect cfg80211 sysimgblt ecc soundcore joydev hp_accel lis3lv02d input_polldev hp_wireless mac_hid sch_fq_codel parport_pc ppdev lp parport ip_tables x_tables autofs4 hid_generic i2c_amd_mp2_pci usbhid hid nvme psmouse i2c_piix4 ahci r8169 libahci realtek nvme_core wmi i2c_scmi video
[ 4.397605] RIP: 0010:rtw_os_ndevs_register+0xf6/0x12f [8821ce]
[ 4.397679] rtw_os_ndevs_init+0x29/0x3f [8821ce]
[ 4.397733] rtw_drv_init+0x3e0/0xaa3 [8821ce]
[ 4.397813] rtw_drv_entry+0x78/0x1000 [8821ce]
I've configured openvpn fully as udp port. The openvpn network address is 10.8.0.0. And I've set up the redsocks proxy like followings.
base {
log_debug = on;
log_info = on;
log = "stderr";
daemon = off;
redirector = iptables;
}
redsocks {
// Local IP listen to
local_ip = 127.0.0.1;
// Port to listen to
local_port = 31338;
ip = 127.0.0.1;
port = 31337;
// Proxy type
type = socks5;
}
And I've setup ssh tunnel as follows.
ssh -fqND 31337 username@xxx.xxx.com
The problem is that I'm going to redirect all incoming packets from openvpn client into redsocks proxy. I've configured iptables, but not working. What essential did I missed?
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
REDSOCKS tcp -- anywhere anywhere
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
MASQUERADE all -- 10.8.0.0/24 anywhere
Chain REDSOCKS (5 references)
target prot opt source destination
RETURN all -- anywhere 0.0.0.0/8
RETURN all -- anywhere 10.0.0.0/8
RETURN all -- anywhere localhost/8
RETURN all -- anywhere link-local/16
RETURN all -- anywhere 172.16.0.0/12
RETURN all -- anywhere 192.168.0.0/16
RETURN all -- anywhere base-address.mcast.net/4
RETURN all -- anywhere 240.0.0.0/4
DNAT tcp -- anywhere anywhere to:127.0.0.1:31338
Please help me.
ps: I've also added iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE, but still now working.
I've referenced on https://dtbaker.net/blog/redirect-all-traffic-through-transparent-socks5-proxy-in-linux/.
Each time I try to connect by ftps:// by Nautilus (Ubuntu Files), I receive the message below:
The site's identity can't be verified:
The certificate does not match the identity of the site.
Certificate information:
Identity:[...]
Verified by: [...]
Expires: [...]
Fingerprint (...):[...]
Are you really sure you would like to continue?
[No][Yes]
I receive this message each time when I try to connect.
How to compare or confirm this Fingerprint to get it verified and to not to get this message again?
I am a very new user of Ubuntu and booted my Lenovo 3000 n500 laptop with Ubuntu 14.04.4. Every time it's displaying "disconnected - you are offline". But the same file is used for my friend's PC and that is flawless.
The TP-Link WN725N V3 works on Ubuntu 18.04.3 out of the box.
Sometimes, the adapter is not seen by the system at startup, I have to unplug and plug it back in. I considered the driver but it is for earlier kernels.
Is there something I can do to get the adapter to be on every time at start up?
I am not sure if that's the case.
It's just an observation: when I am on an internet with high speed everything goes smoothly, while when I use a specific low speed wifi, it gets very laggy.
And I am not talking about the webpages load speed(which should obviously be slower) but about the entire system, which includes: animations, opening of a new app, autocomplete etc. In short, all processes that should not depend on the internet.
Without this observation it looks like it randomly whether works fine all day long without any lags, or it does all day long, same load. Tried 19.10 and it sucked basically always.
My laptop did the latest update and when did the restart the WiFi and wired connection are not functioning any more.
I'm use Ubuntu 18.04 LST and the laptop is a Hp with AMD Ryzen 5 CPU
I have a PC which I want to use as a common server for all my devices. I want to be able to keep it in my basement and use it's gui desktop on my raspberry pi 4(I also want to plug in my 2 monitors on to that and get 2 displays), or use it's gui desktop on my laptop when I'm on my bed.
I have tried using tigervnc with xfce but that is still very slow and laggy even if all the devices are wired. Is there a way I can do this?
As per the solutions available on ubuntu I tried to do following:
vim etc/NetworkManager/NetworkManager.conf and then I tried to modify managed=false to managed=true in the conf file, but since it is a read only file so I could not do so. How to do it?
I am using rasbian and this is the only website I ever got help at, sry.
There are three different network devices running on my pi. eth0 tun0 and tun1. I want all of the traffic to go through eth0 except for one service that should go through tun1 (that service is megatools). tun0 should be just open for networking (connecting to home-network when on mobile; its an openvpn-server).
I know of ufw and iptables, but they use ips and masks. This is not my field. Can anybody help me? I have already seen a similar question for this topic but I dont understand a single word.
deleted deleted deleted deleted deleted deleted deleted deleted deleted deleted deleted deleted
I have Ubuntu 10.04 install DELL R710 server
I have configured the network bonding using the below steps
sudo apt-get install ifenslave
-------------------------------------------
vi /etc/network/interfaces
# The loopback network interface
auto lo
iface lo inet loopback
# The primary network interface
auto eth0
iface eth0 inet manual
bond-master bond0
auto eth1
iface eth1 inet manual
bond-master bond0
auto bond0
iface bond0 inet static
address 172.24.1.10
gateway 172.24.1.1
netmask 255.255.255.0
dns-nameservers 172.24.1.50
dns-search xxx.xxx
bond-mode balance-rr
bond-miimon 100
bond-lacp-rate 1
bond-slaves none
----------------------------------------------------------
cat /proc/net/bonding/bond0
Ethernet Channel Bonding Driver: v3.5.0 (November 4, 2008)
Bonding Mode: load balancing (round-robin)
MII Status: up
MII Polling Interval (ms): 100
Up Delay (ms): 0
Down Delay (ms): 0
Slave Interface: eth0
MII Status: up
Link Failure Count: 0
Permanent HW addr: xx:xx:xx:xx:xx:xx
Slave Interface: eth1
MII Status: up
Link Failure Count: 0
Permanent HW addr: xx:xx:xx:xx:xx:yy
----------------------------------------------------------------
**its not showing the bonding speed .**
---------------------------------------------------------
ethtool eth0
Settings for eth0:
Supported ports: [ TP ]
Supported link modes: 10baseT/Half 10baseT/Full
100baseT/Half 100baseT/Full
1000baseT/Full
Supports auto-negotiation: Yes
Advertised link modes: 10baseT/Half 10baseT/Full
100baseT/Half 100baseT/Full
1000baseT/Full
Advertised pause frame use: No
Advertised auto-negotiation: Yes
Link partner advertised link modes: Not reported
Link partner advertised pause frame use: No
Link partner advertised auto-negotiation: No
Speed: 1000Mb/s
Duplex: Full
Port: Twisted Pair
PHYAD: 1
Transceiver: internal
Auto-negotiation: on
MDI-X: Unknown
Supports Wake-on: g
Wake-on: g
Link detected: yes
ethtool eth1
Settings for eth1:
Supported ports: [ TP ]
Supported link modes: 10baseT/Half 10baseT/Full
100baseT/Half 100baseT/Full
1000baseT/Full
Supports auto-negotiation: Yes
Advertised link modes: 10baseT/Half 10baseT/Full
100baseT/Half 100baseT/Full
1000baseT/Full
Advertised pause frame use: No
Advertised auto-negotiation: Yes
Link partner advertised link modes: Not reported
Link partner advertised pause frame use: No
Link partner advertised auto-negotiation: No
Speed: 1000Mb/s
Duplex: Full
Port: Twisted Pair
PHYAD: 1
Transceiver: internal
Auto-negotiation: on
MDI-X: Unknown
Supports Wake-on: g
Wake-on: g
Link detected: yes
both network card speed is 1000MBPS. How do I check the bond0 network speed.