I'm not sure that's offensive, but it is closed now
Also, I find the reasoning behind not downvoting spam/offensive posts confusing - do the automatic downvotes not count when it comes to hiding from the front page?
Me neither. I'll agree with offensive as it could be the meaning was "american f**ks" and angry idiot is just asking if the software is american. Not sure if/how that is racist though.
> Bike came into shop on fire. 4th place in queue. Completely destroyed by the time we got to it. Should probably talk to boss about his strict 'first come, first served' policy...
The solution I have removed worked for me but latter I come to know that redirecting port 22 is bad idea. Their are a lot of attack with destination port 22.
@hackingNerd because this will quickly be marked as a dupe, you must indicate why the other question does not work for you, which might give your question a reprieve. More info , and more again IN the question.
@Psycogeek Other question are about routing traffic to other ip address and some does not match with my scenario. I could mention all those in question if you think it would be useful.
@BenN My server is honeypot... so it should look vulnerable as much as possible.
@hackingNerd not likely, pointing to other relative questions is just more likely to get your question in dupe status. if anything you need to create a full question that is less like any other researched questions.
Anyway, cat's link starts at the beginning of that episode, mine starts at the hilarious part, so use the one corresponding to whether you want the full background
@Rahul2001 Err if you don't know about /etc/shadow and /etc/passwd you have no business running a honeypot public server (especially one with access to the school network)
@Bob Latter I will use another interface for my management traffic. Due to some reasons I could implement out-of-band ....
@Bob This is not possible with iptables? what I need for now? I am continuously searching about this... I am not expert in iptables but may mangle chain with packet marking could work for me... Just I need a expert to mentor me....
@hackingNerd I'm not saying it's not possible. If you really want iptables, you can probably do your dport 22 thing with a -j ACCEPT instead of REDIRECT.
I'm saying there's a better way that does not require this.
Connect to your VM's host. Use the VM host's serial console to access the guest.
Or even add an additional interface (NIC) to the VM and use that for management - don't publicly expose this one.
@Bob As I told before I could not add additional interface .... We have just started development. I am just allowed to follow instruction. And for now I have to configure my IPTables to redirect all ports except one. I would be very thankful if you can help.
@hackingNerd => The external connection should be bridged, not NAT or host-only or anything like that. You set it up as a bridged interface to the host's NIC and then configure the external IP directly within the VM. The external IP should not be assigned to the host at all.
Basically, the VM guest and host share a layer 2 connection.
That'll let you see the external source address from within the guest.
@hackingNerd I'm not saying it's not possible. If you really want iptables, you can probably do your dport 22 thing with a -j ACCEPT instead of REDIRECT.
> days represented 1364 rep cap was reached via rep from upvotes *only* on 19 days earned at least 200 reputation on 18 days earned 330 reputation from suggested edits
