A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

1
vote
1answer
21 views

MySQL on LAN not working when IPTables enabled

I have two Centos VM. The IP Addresses are as follows : VM_1 => 10.99.0.10 VM_2 => 10.99.0.12 Apache and PHP are in VM_1 and MySQL is in VM_2. Both are having iptables rules. VM_2 is working ...
1
vote
0answers
18 views

PF rule for Continuity

So it looks like the Continuity on OS X 10.10 creates network interface on the fly (utun2 here) and my PF blocks it, so that I can't make/answer calls. I'm not an admin, just use the IceFloor for PF ...
0
votes
1answer
37 views

Can I block inbound traffic from a certain ISP

The problem My server keeps getting DDoS attacks from IP's belonging to Ecatel in The Netherlands. I wrote them a month ago and still haven't heard anything, and keep blocking individual IP addresses ...
0
votes
0answers
13 views

Publishing Multiple SSL Connections via TMG

I am using a Microsoft TMG 2010 as my Firewall. It is configured in a Three-legged approach, with public facing servers in DMZ. There are two public servers. Once is a Citrix Access Gateway which ...
1
vote
3answers
50 views

Test port reachability from a remote host even though the port is not bound to a service?

I need to check whether a remote host is able to reach a specific port. At the time of test the service bound to that port will be down. The possible issues that the test would address would be : ...
0
votes
0answers
20 views

nslookup gives timeout based on request - what gives?

I have the following strange problem with the DNS lookups in our Windows domain (dns service runs on the domain controller): from machine 'A': dns request for machines in the same network zone ...
0
votes
2answers
38 views

Cisco 887VA - Cannot open port 110

I am trying to configure a Cisco 887VA at work to open port 110, but no matter what I try, it doesn't seem to work. The router is accessed from within the building via a web UI but require CLI ...
0
votes
0answers
37 views

How can I log and maybe even block IPs that send lots of incoming UDP traffic?

we run a voice / teamspeak server which receives legitmate traffic on port 9987 from many ips. Sometimes we get DDoSed. So people use single Servers and send 1-3 Gbits of UDP Floods to that port. This ...
0
votes
0answers
6 views

Smoothwall firewall seems to be preventing “large” uploads

One of our customers has a Smoothwall firewall at the edge of their network. External users should be able to use a mobile app to upload images. The images are sent as base64 encoded strings in a JSON ...
0
votes
1answer
25 views

Making a server “read only” except for me (what the inbound/outbound rules mean)

I have an ec2 instance. It will start a webserver, and my public ip is myip. I ssh into my machine. What should incoming and outgoing rules? Why? I want only my ip to be able to change things on the ...
0
votes
1answer
32 views

Cisco PIX Firewall Version 6.3(5)

I am unable to ssh to any servers. I've exhausted every possible thing except the corporate firewall. Its an old cisco pix firewall. [model] Cisco PIX 501 I'm trying to figure out 1) how to ...
0
votes
1answer
23 views

iptables with sticky forwarding/routing

My iptables is sticking. I have a DNS server behind IPTables and down a NAT'ed OpenVPN pipe. Using tcpdump I see DNS packets hit the outside router but it takes 4 or 5 DNS query attempts before the ...
0
votes
1answer
33 views

multi-wan problems with web services

I recently set up a multi-wan connection for a small company, because they are at the end of the line for any possible ISP, services do go down, and they really depend on their Internet connection. I ...
0
votes
2answers
64 views

IP rules misconfigured, lost access to server

I have to give my IP rule like, DROP if source is not from 127.0.0.1 AND destination is 9200 But unfortunately, I gave it like, DROP if source is not from 127.0.0.1 (missed the port) So I lost ...
-1
votes
0answers
13 views

MS IIS6 FTP behind NAT [closed]

How to configure the IIS6's FTP service to repply the PASSV command with external (WAN) ipv4 address instead the local (LAN) address? I'm aware that IIS7+ have a field named "External Firwall IP ...
0
votes
0answers
8 views

Sonicwall 250m bandwidth

We have an nsa 250m with the SonicOS Enhanced 5.9.0.2-107o version. Is there a way to manage bandwidth by group ? I'm already able to do this this by user with this method Firewalls => Access rules ...
0
votes
0answers
15 views

netsh advfirewall : how to force to prompt matched IP

I have a netsh script that inserts some IP's to block in the Microsoft firewall. All these rules are working perfectly. I would like to create an additional rule to have a popup / prompt from the ...
0
votes
1answer
26 views

ufw seems to block all incoming connections when defaulting to block outgoing

I am currently trying to configure ufw on Ubuntu 12.04 but to my understanding it behaves oddly. i tried allowing just some services on a remote machine, denying everything else. I thought - anyway, i ...
0
votes
1answer
27 views

Restrict access to some addresses for some OpenVPN clients

I have a VPN server on FreeBSD to access a LAN in which there are several machines. Some of the LAN machines offer un-autenthicated services. I want some VPN clients to access only one of the ...
-1
votes
0answers
22 views

Sonicwall + BT Infinity VDSL: how to use routed static public IP addresses [duplicate]

I have a UK BT Infinity VDSL2 connection. The ISP provide a modem, I dial a PPPOE connection over that modem from the sonicwall. The sonicwall receives a dynamic public IP address, and then my ...
0
votes
0answers
55 views

Is the IP based filtering in Amazon EC2 enough to ensure security?

I am hosting a webserver using Amazon EC2 and want it to be accessible only from a particular IP. I have set up my security groups to allow connections from only that IP. ...
1
vote
0answers
32 views

NoVNC being blocked behind firewall, how can I find the port being blocked?

We have an OpenStack cloud running internally and wanted to allow student's access to the NoVNC console from within Openstack's Horizon web panel. Everything work's internally however after adding ...
0
votes
0answers
39 views

Setting up a firewall to route between interfaces on a gateway

I've been trying to setup a firewall on my debian gateway with iptables. The gateway is connected to a a network 12.120.0.0/24 on eth0 behind a NAT and the subnetwork behind it is 12.120.4.0/24 eth1. ...
0
votes
2answers
46 views

sonicwall-multiple IP's for same interface

I am new to sonicwall.Is there any way to add multiple ip's to a sonicwall interface ?. In my lab there are two local networks connected to same switch (networks are overlapped). I need to communicate ...
1
vote
1answer
34 views

why i see two kind of IP at my ping?

i have a Windows Server 2008 R2 with external DNS Server on it. all domains works fine but when i ping one of theme i get this result and site is down . C:\Users\Administrator>ping xxx.com ...
0
votes
1answer
30 views

HAProxy fails to connect when Shorewall firewall is enabled on web servers

I have a fairly standard HAProxy / Web Cluster setup, which is running perfectly fine - as long as I don't enable the Shorewall firewall on the web cluster servers. As soon as I do, error messages ...
0
votes
1answer
29 views

Router/Firewall Hardware Failure Testing

My company has a Sonicwall Pro 3060 Enhanced that has been in service 24/7 for about 10 years since it was originally purchased. Lately the box has seemed to have hiccups in passing traffic (although ...
1
vote
1answer
82 views

Port open or not?

I am trying to access the Atlassian Crowd server to configure it, which is listening on port 8095. I can access it from localhost. If I disable the firewall (iptables stop), I can access from a remote ...
0
votes
0answers
38 views

Cisco ASA 5525 and multiple internet interfaces

I'm replacing a firewall this weekend with a pair of ASA 5525's. The network configuration is as follows :- Inside LAN - 192.168.1.x Internet 1 - 62.0.0.x Internet 2 - 52.0.0.x The currently ...
0
votes
1answer
38 views

Iptables working without configuration

I am currently going to port a Red Hat 6.4 machine and I need its firewall configuration, but something is going on. iptables -L shows a list of rules as expected, but at the same time I can't find ...
0
votes
1answer
26 views

Firewall Rule One way smb in two network

Im trying to make an one way smb firewall rule in a MikroTik firewall rule The thing is I have two network one on 192.168.1.0/24 and one 192.168.3.0/24 192.168.3.0 is the network that should be able ...
0
votes
0answers
4 views

Open ports for Age of empires in ubuntu router using iptables [migrated]

The purpose of this question is to learn how to correctly use iptables. As I am currently living in the dormitories in the University and I am using a small netbook as a router to provide wifi in my ...
1
vote
1answer
39 views

iptables + postfix cant send email

Recently my host provider sent me a letter about some sort of attack from my server. I'm not into security so i found some tutorial and closed all unused ports with iptables. Here is my iptables ...
0
votes
0answers
35 views

Is it advisable to disable URL Path Length restrictions from firewall?

I noticed in early August that I was unable to get to SharePoint Online sites, most Microsoft Update pages, Microsoft Support pages, Microsoft.com, etc. as they all appeared to be returning a blank ...
4
votes
5answers
215 views

Requests take a really long time from certain ISP

We have an Apache server with PHP running on a virtual machine. Document roots are inside the users' home folders (/home/users/{first letter}/{username}/), and /home/users/ is mounted over NFS. It ...
0
votes
0answers
3 views

OpenShift Origin: isolating application containers from local network [migrated]

My network with OpenShift Origin is setup like this: A firewall running pfSense (172.16.0.1 + external IP) A ProCurve J9029A switch (if that helps...) An Ubuntu-based Virtualbox hypervisor ...
0
votes
1answer
64 views

Trouble with Fail2Ban UFW Portscan Filter

I'm trying to create a filter for fail2ban that recognises port scans in the UFW logs. I've confirmed my ban action is working correctly on other filters and am having trouble creating the correct ...
0
votes
2answers
79 views

How to change the webgui password in pfsense from a console?

is there any way to change the password of the webgui administrator user in pfsense from my console? Just to mention i didn't locked my self out from the webgui. Regards, ankso
0
votes
2answers
69 views

My ubuntu server won't allow loopback wget

I have the following rules on my Ubuntu Server 14.04: #!/bin/sh # Flushing all rules iptables -F iptables -X # Setting default filter policy iptables -P INPUT DROP iptables -P OUTPUT DROP iptables ...
0
votes
2answers
194 views

Nginx, ModSecurity, IP Tables blocking WordPress dos/ddos attack

For the past 14 days I have had my website being hit by millions of WordPress installs over the world which .htaccess is kind of coping with but I am trying to get something to kick them before ...
0
votes
1answer
191 views

Cannot open samba ports on Ubuntu 14.04

I'm newbie to linux firewalls root@Ubntu:~# ufw status verbose state: active logging: on (low) Default: deny (incoming), allow (outgoing), disabled (routed) new profiles: skip 137,138/udp (Samba) ...
0
votes
0answers
205 views

QoS settings for Wi-Fi calling on pfSense firewall/gateway?

The new version of iOS 8 as well as Android supports Wi-Fi Calling with multiple cellular providers including T-Mobile in the US. I am currently running pfSense as the primary Internet gateway for ...
0
votes
1answer
71 views

Do ephemeral ports need to be open on the network firewall in order for nginx and sshd to work properly?

Preamble: So, before I actually ask the question, I'd like to point out that I'm somewhat apprehensive about posting this because even as I'm typing this out it it feels like I'm asking someone to ...
1
vote
3answers
35 views

Azure VM: netsh advfirewall firewall

Being the idiot that I am, I ran netsh advfirewall firewall on our VM and managed to block all the ports. Naturally, I am no longer able to access the VM through RDP. Apart from getting the support ...
0
votes
1answer
33 views

Is netbios required with samba -> win7 and what ports are needed for view/read/write functionality?

Basically I do an IT course at my college (United Kingdom) and obviously with it being a college, they have web filters and a restrictive firewall. To bypass the web blocks and to access my rented ...
0
votes
1answer
40 views

UFW: can't connect to SSH with “to 127.0.0.1” option

i tried to restrict the SSH connectivity to a subnet and wanted to set the "to" part to localhost. (Server will be routing over bridge device to virtual servers, and i wanted do drop ssh connections ...
0
votes
0answers
32 views

Filtered port 22 with no firewall settings

I'm trying to connect to an sftp server from a CentOS 5.5 server. The connection is never established. When I run the command: nmap -p 22 -P0 <sftp server address> PORT STATE SERVICE ...
0
votes
1answer
47 views

Port forwarding with 2 interfaces not working

I'm running debian and I've got the following network configuration: eth0 Link encap:Ethernet inet addr:192.168.16.6 Bcast:192.168.16.255 Mask:255.255.255.0 inet6 addr: ...
1
vote
1answer
108 views

Avoiding split brain DNS for a Fortigate Web Proxy

How can I avoid needing a split brain DNS setup with the setup outlined below? Background I have what "should" be a pretty basic setup using a Fortigate 200D. 'Third leg' setup using a DMZ ...
-2
votes
1answer
95 views

Prevent/Stop Namespace Mining [duplicate]

Enviroment: Plesk v12, latest Windows Server 2012 SmarterMail My web hosting provider told me that someone hacked into my server a couple of weeks ago and was hitting various mail servers (Gmail, ...