A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

0
votes
2answers
22 views

Connection failed between Windows Servers

I'm setting up an infrastructure based on Windows Server 2012. The firewall is turned off and I can't access the Domain controller to check for the group policy. I'm experiencing some connection ...
0
votes
1answer
11 views

What do I need to consider when setting TCP idle timeouts?

What's purpose of having a [low] TCP idle timeouts? E.g., why have a 60 second timeout on a firewall or load-balancer? Is it a memory management or /performance optimization thing? Is there a security ...
0
votes
0answers
11 views

Watchguard XTM 23 blocking company website

The company that I'm working at runs a website and 1 week ago the site started returning 404's whenever anyone tried to access it from our protected network. We immediately checked on the status with ...
-1
votes
1answer
28 views

What is it that makes BSD a popular choice for firewalls?

What is it that makes BSD a popular choice for firewalls? Is the kernel generally more secure?
0
votes
1answer
17 views

Configure clients to navigate through specific wan. Pfsense

I have a machine with a pfsense running. It is configured with three ethernet cards. LAN 192.168.2.1/21 WAN1 200.41.X.2/24 WAN2 200.41.X.3/24 ISP Gateway 200.41.X.1 This is a connection with 5 ...
-1
votes
2answers
26 views

Block incoming traffic from unresolved IP address

How can I block all the incoming traffic from unresolved IP addresses? I am using CentOS with WHM/cPanel installed. I am getting huge junk traffic and 95% is from unresolved IP addresses and only 5% ...
0
votes
1answer
50 views
+50

Configure firewalld for OpenVPN (server-bridge) in Fedora 20

I've installed an OpenVPN server (server-bridge) on Fedora 20, but I cannot get it to work. I'm almost sure that It's a firewall issue. I'm trying to connect from an OSX client, but I can connect ...
0
votes
0answers
13 views

SonicWall Routing Between VLANS

We have a sonicwall NSA 3500, x4 has 2 vlan interfaces so x4:v300 and x4:v301. Each vlan has an IP v300 is 192.168.100.1 and v301 is 192.168.101.1. I then have x4 connected to a layer 2 only switch ...
0
votes
0answers
3 views

Firewall Ports for Toshiba CIX server

Other then SIP ports: 5060 and 5061 what other ports need to be opened to have a phone set up in a satellite office with via external IP address. Phone Server CIX100 Firewall ASA 5510
0
votes
1answer
21 views

How can I reload IPTables without interrupting existing connections?

I will be adding and removing entries to the script below automatically (adding ports 80/443 with different IP addresses). If I run this script, I am "assuming" that connections will be uninterrupted, ...
0
votes
0answers
8 views

Opening a port range using Open VSwitch

I am locking down a VM on xenserver to allow only port 3389 and the ports required for domain controller authentication on windows. I am trying to do this using Open VSwitch. Locking down and allowing ...
0
votes
0answers
8 views

W2008 R2 SP1, windows firewall dropping zero length packets

I'm trying to harden a Windows 2008 R2 SP1 server, and restrict outgoing packets to known rules. What I'm seeing is firewall log entries showing dropped packets, and the dropped packets are always ...
1
vote
0answers
24 views

Disabling HSTS for managed browsers

What are my options for disabling HSTS both for new sites and for those sites baked into the browser? The use of HTTPS inspection inherently changes the thumbprint of a site by acting as a man in ...
1
vote
1answer
32 views

IPTABLES command that end with ACCEPT or DROP fail on service firewall restart

I have a CENTOS Linux VPS. I have the following in my IPTABLES script to run when my VPN restarts, but I get errors when I do a service firewall restart I've ran each of the commands below manually ...
0
votes
1answer
94 views

I think my server was hacked - how do i know what has been changed? [duplicate]

I have read the following posts which didn't answered my questions: - My linux server was hacked. How do I find out how and when it was done? - How do I know if my Linux server has been hacked? - and ...
0
votes
1answer
38 views

Serving public IP-adresses through two ethernet ports with public subnets, while protecting some interfaces for remote access

Done a lot of research and it's all kind of confusing. Some switches are also firewalls, most firewalls seems to be routers, with or without their own switches, but they're all different depending on ...
0
votes
0answers
25 views

Routing traffic from LAN over VPN link out to 'net; works from router, not from LAN. What route is missing?

I have 3 machines. 2, routers, are connected over a VPN. The 3rd is a PC on the lan behind one of the routers. internet | | ROUTER S1 external: YYY.56.52.56 ...
0
votes
0answers
26 views

ubuntu router configuration problems

My network is configured as follows: ISP Modem <-> Ubuntu (192.168.2.1) <-> Switch (192.168.1.1) <-> devices My device (192.168.1.150) can ping 192.168.2.1 but is unable to ping outside ...
-1
votes
1answer
36 views

Why does this IPTables command create 4 entries?

When I executed this IPTables command: iptables -A INPUT -p tcp -m tcp --dport 9080 -s localhost -d localhost -j ACCEPT iptables -L shows: ACCEPT tcp -- localhost localhost ...
-1
votes
0answers
32 views

iptables service won't start error line 1 fail - centOS 6.5

I can't seem to get my iptables to setup quite right. It seems to keep erroring out at line 1 on the service start. service iptables start iptables: Applying firewall rules: iptables-restore: line 1 ...
0
votes
1answer
64 views

How do I block all access to machine except port 3389 using Open vSwitch

I can allow access to the machine and block everything else using: ovs-ofctl add-flow xenbr0 "dl_src={mac-address} priority=39000 dl_type=0x0800 nw_dst={ip-address} idle_timeout=65000 action=normal" ...
0
votes
1answer
14 views

Windows Server | firewalling remote connections

In my windows server 2012, In the firewall rule for remote desktop connections I have added so that only MY IP address is allowed to connect, now of course I have taken a precaution and added a ...
0
votes
0answers
8 views

Netsh Command To Block All Traffic Except A Program And A Port?

I discovered that you can use the netsh commands to control the Windows firewall, I am reading all the possibilities but I didn't found yet what I am looking for. Is it possible to use netsh ...
0
votes
0answers
11 views

Will pfctl -sr show ordered rules when using -o profile?

When I enable the -o profile option with pf will pfctl -sr show me the new order of the rules?
0
votes
1answer
29 views

How to set up routing tables in EC2, so that ping works

I have a wide open security group which I rely on for instances to be able to connect. I also have a private network of 172.*. addresses, as shown here: What do I need to do in order to allow ...
0
votes
0answers
39 views

EC2 Security Groups and Postfix

I am having some difficulty getting ports open on EC2. I setup an EC2 instance and opened up SSH (tcp:22) initially. Then I configured Postfix and was successfully able to connect (telnet to port ...
3
votes
2answers
54 views

How do I find out where my IPTables rules are being stored?

I working on a Debian server and I'm trying to figure out where my IPTable rules are being stored. From looking around on the internet I've found there is generally two locations were these are ...
1
vote
0answers
15 views

`ufw insert 1 deny to any` not working

ufw insert 1 deny to any ufw enable ufw status Status output: Status: active Logging: on (high) Default: deny (incoming), allow (outgoing), disabled (routed) New profiles: skip To ...
8
votes
2answers
190 views

Is it reasonable to use Nagios to check that a service is NOT available?

Suppose I have a server with a private interface and a public interface. Public might have things like HTTP(S) servers, private might have MySQL and SSH. Obviously Nagios is useful to check that the ...
2
votes
1answer
408 views

CentOS 7 Firewall Configuration

In CentOS 6 I could type setup from the command line and I would be presented with a set of tools, one of them being Firewall configuration. I can still do this in CentOS 7, except the list no longer ...
0
votes
0answers
25 views

OpenWRT firewall redirect punch through

I am using an OpenWRT based firmware on a Netgear router as part of a research project that links the router to an existing broadband router to allow members of the public to access the internet via a ...
0
votes
0answers
15 views

Checkpoint Firewall - R75.3 - how to view time of recent CLI change

I'm trying to figure out when a colleague processed a change in the last couple of days. Very in experienced in expert or router modes. Any tips? Regards!
0
votes
1answer
86 views

Bypass squid proxy [closed]

I have a transparent squid proxy that I am using to filter out ads from web traffic which works well enough, however I would like to have the option of bypassing the proxy as well at times when I do ...
0
votes
1answer
36 views

Iptables -j REJECT unavailable [duplicate]

I am somewhat new to Linux networking and running in to a issue with iptables I am just not making any headway on. Two notes before I get in too it. iptables is version 1.4.14, and it is a custom ...
0
votes
1answer
73 views

iptables / firewall blocking traffic (even SSH) on my dedicated box

Can someone please take a look at this iptables data and tell me what's wrong with it? The paste 24h has been a nightmare, I couldn't even SSH to my server, and the only way I could manage to get the ...
2
votes
1answer
94 views

What happen if first rule of first iptable chain target is `RETURN`?

The article Linux Firewall Tutorial: IPTables Tables, Chains, Rules Fundamentals define the RETURN target value as follow: RETURN – Firewall will stop executing the next set of rules in the ...
-1
votes
1answer
40 views

OpenVPN, How to filtering client

I have a problem with limiting "client" with my VPN server. I was reading the FAQ about using iptables with disable option client-to-client, but i cannot run it. The question is how correctly allow ...
0
votes
0answers
31 views

HTTP not redirecting to HTTPS, Router or Firewall Issue?

I manage an application server in a different department from IT and since they implemented a new firewall as part of emergency maintenance, users are having issues accessing the web app(Blackboard). ...
0
votes
1answer
19 views

Setting up a VPN with rules who can connect with who

For delivering updates and support on software I've been working on I have been thinking about setting up a VPN server. The idea would be that the clients are constantly connected but only the traffic ...
1
vote
1answer
62 views

Limit Connections Per IP Windows 2008 R2 x64

Hello I have been searching for a solution to this, what I want to accomplish is the ability for me to define firewall rules that will limit the amount of connections to certain ports from the same ...
-1
votes
1answer
146 views

Opening port 587 on Debian running on Google Compute Engine

I'm attempting to use port 587 for my server mailing purposes. However, I can't seem to be able to unblock the port even after trying the following : Adding port 587 to the Google Cloud network ...
0
votes
0answers
35 views

ISC DHCP Server - Client Uplink Is Not Working

Running a DHCP server, client(s) does not have up-link (0Mbps) and has a downlink (50Mbps.) I am setting up a gateway/router on a PC running Debian Wheezy with ISC-DHCP. I have 1 WAN (eth0) and 2 LAN ...
0
votes
1answer
36 views

WatchGuard XTM510, Dialed in VPN (PPTP) users cant Ping hosted datacentre machine on BOVPN

we have a BOVPN from our network 192.168.1.0/24 range to some hosted environments at a datacentre. 172.15.0.1/20 any machine on our internal network ranges can communicate with the systems at the ...
-3
votes
1answer
59 views

How to create inbound rule on Windows firewall for custom service?

Service is written in C#. It is a server that requires opening port 8080 for inbound connections. It runs as Local System and has unrestricted SID (created by sc tool). If I add in Windows Firewall ...
3
votes
1answer
35 views

Searching Objects on SonicWALL (NSA 2600, SonicOS 6.1)

Ok, this may sound like a dumb question, but does the SonicOS web interface not have a search option for object definitions? One of my clients recently decided to replace their Astaro Security ...
0
votes
2answers
41 views

Assign IPs to programs/processes

I need to assign different IP addresses to different processes (mostly PHP & Ruby programs) running on my Linux server. They will be making queries to various servers, including the situation ...
-2
votes
1answer
42 views

iptables prerouting with match-set

I'm trying to create a iptables entry to redirect a list of ip's to another port. Using ipset I can setup and add lists of ip's and reject them with this command iptables -t nat -A INPUT -p tcp -m ...
0
votes
2answers
32 views

Access to multiple FTP servers through a firewall

I have 4 web servers for different tasks, behind a firewall. I have a single public IP and I want to connect to my servers with FTP with this IP. I tried to use a different port but no results. So my ...
0
votes
0answers
24 views

2 Vlans on a Cisco PIX 515 with DMZ

I have to install an application server on a networks dmz. The application will sit on a network but has no interaction with the other devices on that network. I was thinking that the firewall(Cisco ...
0
votes
0answers
17 views

how to use --rdest flag in recent table

Here is why I try to accomplish: When receiving a UDP packet, put IP address of the source address in recent table. sudo iptables -A INPUT -p udp --dport xxxxx -m recent --set -j ACCEPT When send ...