A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

1
vote
1answer
19 views

Port forwarding in pfSense not working

I recently set up a pfSense router and can't get any port forwarding to work from outside my own LAN. I have the following forwarding rule to a local server located at 10.0.1.2: Note that if I ...
0
votes
0answers
12 views

linux firewall, log and display traffic [on hold]

my debian/linux gateway serves many private devices. I want to log all trafficvolume per device and per portusage. Is there a OSS solution with a nice webfrontend to display (sortable) this data?
0
votes
0answers
17 views

Cannot Upload Files Over A Specific Size to Wordpress

When uploading larger files to any WordPress site running on a local server it fails. If I try outside of the network it works fine, if I switch to the other LAN network running and connect to the ...
0
votes
1answer
42 views

Need Required Active Directory Ports for Isolated Environment

We have a 100% isolated environment that needs to communicate with our AD infrastructure outside the isolated environment. I need to know all the ports and whether they're incoming or outgoing. These ...
1
vote
0answers
18 views

Issue with Fail2ban and Mikrotik Firewall

OS: CentOS 7.1 At my organization we are currently assessing using Fail2ban with the firewall on our Mikrotik router. I want Fail2ban to communicate any IP flagged as banned to the Mikrotik ...
1
vote
0answers
25 views

Why does my firewall block outgoing TCP/UDP port 137 ~ 139 + 53 ~ undefined [migrated]

I've got a Draytek Vigor 2930 router which has a default xNetBios -> DNS which blocks "TCP/UDP, Port: from 137~139 to 53~undefined". What is this rule, and what is its purpose?
0
votes
2answers
26 views

How safe is IPtables whitelisting?

I am deploying some VPS and of course, security is a big concern. I read that IPtables whitelisting is the best way to safeguard your machine. So I set up the follwing : echo "Flushing rules" ...
0
votes
0answers
17 views

pfSense Killing Uploads to Any Wordpress Site

I am running a pfSense firewall on version 2.2.6. As far as I remember I have had working rules and have not had any issues uploading to my wordpress sites until this last upgrade. If I try to upload ...
0
votes
2answers
20 views

IPTables: How to log and set a specific log file

Is it possible log all dropped connections by IPTables and set a iptables.log file for logging in /var/log/?
0
votes
2answers
25 views

IPTables: apt-get and wget not working

When resetting IPTables, the apt-get and wget command functions correctly and also downloads what I want. But once I activate this firewall, it isn't functional. Pings still work. I want to allow all ...
0
votes
0answers
10 views

Can't connect to VNC server via OpenVPN

I've got the problem with connecting via VNC to remote computer. Connection goes through OpenVPN and I'm routing 5900 port to localhost.. ssh -p(port) -L5900:vpn adress of machine:5900 ...
0
votes
1answer
22 views

app runs much slower on VPN [closed]

I have an app that accesses the internal network at work. I can run it from home via VPN but when I do, it runs much slower. I suspect that it is getting timeouts caused by the firewall and somehow ...
-1
votes
0answers
4 views

How can a WiFi router recognize MAC address change of a connected device? [migrated]

My teen son and I are playing a hacking game. I've installed an WiFi router with parental controls, MAC filtering, VPN, etc. I block Internet for him, he tries to break out of the cage (for now I'm ...
0
votes
1answer
17 views

How to connect to ftp server from within LAN when the router port-forwards external connection away from it

Sorry for the long question. What it means is this: I am managing a small LAN that is protected by a router. router 192.168.1.1 server 192.168.1.9 client 192.168.1.2 client ...
0
votes
2answers
18 views

Accessing an FTP share via UNC path?

I have an FTP share configured on a server that I can access successfully using ftp://xx.xx.xx.xx/. One of my tools (Release Management) requires a UNC path for access: (it won't let me post ...
-1
votes
1answer
35 views

IPTables: Does blocking spoofing, affect any services? [closed]

Do these rules affect any services/applications? Will apt-get and others still work? - iptables -A INPUT -s 10.0.0.0/8 -j DROP - iptables -A INPUT -s 169.254.0.0/16 -j DROP - iptables -A INPUT -s ...
1
vote
0answers
16 views

Correct Azure VM firewall settings for Azure SQL Database v12

One of the recommendations when a client runs on an Azure VM and needs to connect with your Azure SQL Database v12 is to: Ensure that the port ranges of 11000-11999 and 14000-14999 on your Azure ...
0
votes
0answers
21 views

Windows Firewall - Block IP address

The configuration is exactly as following: I am absolutely certain that 192.168.2.6 is the correct IP address, yet the according computer remains able to access shared files. Where could I go ...
-2
votes
2answers
64 views

How can I find out if a port on a remote server is open as well service listening status on it?

I want to check if a set of ports are opened or closed on some remote servers. I went through various discussions on the subject and most of the people suggested to use nmap, nc and telnet ...
0
votes
1answer
42 views

PsExec Slow to connect when Windows Firewall Enabled

situation: running PsExec takes 20 seconds with windows firewall and 1 second with it disabled. Exceptions added to firewall: opened ports 135 and 445 (both tcp) as per ...
0
votes
0answers
9 views

Block certain SOAP requests [closed]

I have a soap service running on my network. The problem is that the soap exposes some management functions that (malicious) clients should not be able to invoke. They should only call some restricted ...
1
vote
0answers
15 views

Opensuse 13.2 firewall: allow openmpi

I am trying to run simple openmpi test on two servers. mpirun --report-bindings --host serv1.cell,serv2.cell -np 2 hostname Both servers runs OpenSuse 13.2 and have similar network inteface ...
0
votes
1answer
29 views

Can't manage / ping Sonicwall's LAN interface from across MPLS

We have two of our sites connected via an MPLS that bypasses our firewall. Traffic between the sites, when hitting our core switch is routed directly to a second interface on our ISP's router. The ...
-1
votes
0answers
8 views

Zywall USG 50 - Closed out [closed]

We got a zywall usg 50 in our little rack. Some other guy had to forbid a IP to the ZyWall. After doing this, he came to me. We cant access the Webpanel any more. Also no other Services like ssh or ...
-1
votes
1answer
172 views

port 80 is open by iptables but Connection timed out

I have nginx on my server, I run the script below to add rules to iptables: #!/bin/bash ip=/sbin/iptables services='22 25 53 80 443 5432 8000 8080' $ip -F; $ip -t nat -F; echo -e "Opening port 22 ...
0
votes
1answer
63 views

Telnet: Unable to connect to remote host

Related Threads: SMTP server works, but telnet to port 25 does not Can't connect to SMTP server The problem I have a server running Debian 3.2.65-1 and i am having some problems to connect other ...
0
votes
1answer
33 views

Check if IP address is allowed through firewall

Our cloud service requires that the client's server allow specific IP addresses be whitelisted in their firewall. If the IPs aren't whitelisted, the end users will experience issues, but the end users ...
0
votes
2answers
36 views

Azure VM instance IP firewall

I assigned an instance-level IP address to my Azure VM. I then configured the SSH "endpoint" from the Azure portal and defined a deny-all policy. However, this policy seems to only affect the cloud ...
1
vote
1answer
46 views

Blocking suspicious IPs on firewalls - still relevant?

In interest of improving security, does it make sense to block suspicious IPs on internet facing firewalls? Does anyone know of any reliable block lists? Thanks, Mark
0
votes
1answer
76 views

Watchguard, accessing server with public IP from internal network

I can't go trough it. I need access from my internal network to a server with public IP. I have private network with few VLANs, and then I'm using Watchguard m400 firewall. The server, that I want to ...
0
votes
1answer
27 views

ASA 5505 blocks users

I have recently installed an ASA 5505. But now i have users that are being blocked/kicked from the internet. What can i do to prevent this? Here is the running config: Result of the command: "sh ...
0
votes
0answers
6 views

Comcast SBG and ZyWALL

Hello and thank you for reading. I will try and keep this short and sorry if the answer to this question is a 'Duh' moment. At my place of business we have Comcast internet, coming in on a cable ...
0
votes
0answers
15 views

Linking fail2ban with a RDBMS

I would like to maintain a highly dynamic RDBMS table that will be insert/update/deleted from from multiple hosts (a kind of global blacklist for all my servers). The table would have a couple basic ...
0
votes
0answers
16 views

Why my firewall rules aren't working in my NanoStation m2?

I have two NanoStation m2 as AP and Repeater for a wireless network (make them device1 and device2), both working in BRIDGE mode. Both devices are connected as WDS pairs to each other because they ...
2
votes
0answers
20 views

Do new Windows firewall rules affect currently open connections?

If I added a rule to windows firewall that blocked an ip or port currently used by an open connection, does that rule take effect immediately or only after the connection were closed? I.e, If I have ...
0
votes
1answer
38 views

Open port 1194 for openvpn service

I am looking to open the openvpn service on my CentOS VM. When I run nmap -sU localhost -p 1194, the following is output: Starting Nmap 6.40 ( http://nmap.org ) at 2016-01-08 13:23 GMT Nmap scan ...
-1
votes
0answers
33 views

CentOS 7.1 blocked ports - no firewal

I am rather new to the CentOS community and I having difficulty with a server blocking ports except for a few open ones. What I don't understand is that I do not have firewall or iptables installed on ...
7
votes
1answer
198 views

Iptables with -m and -p parameter

I have this rule in my iptables: iptables -A INPUT -p tcp -m tcp --dport 9191 -j DROP Do I really need "-m tcp"? I already am using "-p tcp", so should I use "-m tcp" to be more secure?
-1
votes
1answer
47 views

SSH connection refused, probably server firewall, how to solve? [duplicate]

I'm trying to connect to my server via SSH. I get the (well-known) error: ssh: connect to host 12.345.678.910 port 2222: Connection refused So I first thought the problem was with my modem, but ...
3
votes
1answer
18 views

enabling ufw disables some of the settings in sysctl.conf

When I add rules to ufw and then enable it, some of my settings in sysctl.conf become void so I have to do sysctl -p after doing ufw enable. So for example one of my settings in sysctl.conf is to not ...
-1
votes
1answer
44 views

I've installed and enabled ufw firewall, and I cannot connect to my server [closed]

I've installed ufw firewall on my little server, with ssh and web services. But, when enabled, the ssh connection lost, and I could neither connect to the hosted web via web browser. What has ...
2
votes
2answers
72 views

IP Tables, is it possible to limit requests per minute and timeout IP?

I am trying to setup a firewall that limits to 3 connections per IP and also ban the IP for an hour if > 30 connection attempts in one minute. This is for port 80 only. Is this all possible with ...
-5
votes
1answer
22 views

Mirotik : Client from interface 1 cant access client from interface 2

I have a mikrotik here. Both interface 1 and 2 have same network (10.10.30.0) and dhcp pool. I can ping any client on interface 1 from mikrotik and also any client on interface 2. But I cant use to ...
2
votes
1answer
83 views

Logging NAT mappings on a Mikrotik router

I am looking for suggestions on how to configure a Mikrotik router to log NAT session setup and ideally teardown. However, setup only is sufficient for my immediate needs. I found a method to log ...
0
votes
0answers
38 views

iptables user-defined chain not working

I am testing rate limiting to outbound IP's using iptables with user defined chains. So far I have only been able to get this to work with inbound traffic to my server. I cant seem to rate limit ...
0
votes
1answer
94 views

How to set 1Mb speed per host in pfsense

Currently we are using pfsense latest version and I want to assign download speed upto 1Mbps per host and also setup squid proxy and working on bridgh mode in pfsense box.
1
vote
1answer
58 views

Unable to access IP addresses within my own country. pfSense showing packets hit WAN

I have a pfSense firewall that has a WAN with multiple public IP addresses. I use NAT to port forward certain external IPs to internal IPs. I can connect from anywhere except same country. When ...
0
votes
0answers
24 views

AWS: EC2 VPC blocks outbound requests

I have an EC2 instance in VPC and I managed to break the security group rules. I made a new security group that allows all protocols from anywhere and any port, thinking that it would open up ...
3
votes
1answer
24 views

UFW - Rules by Service Versus Port and Protocol

What is the difference between creating allow/deny rules via a service versus a port and protocol? For example: ufw allow ssh versus ufw allow 22/tcp or even, ufw allow ssh/tcp. Which is the 1) ...
0
votes
0answers
14 views

Not able to block site on pfsense firewall with squid+squidgaurd

Currently running pfsense latest version and set the transparent proxy using squid with squidgaurd for filter but https is not enable because this feature not work well. So that I want to block sites ...