A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

-1
votes
1answer
15 views

No Internet on Router with pfSense

Sorry in advance if a similar question has already been posted I am with Sky for broadband and have a router providing DSL connectivity. I have a cheap 64 bit desktop PC running pFsense as a ...
-2
votes
0answers
18 views

OpenSuse: How to allow an outside network to access the local network?

I want to connect vlans of two separated networks I administer and it's almost complete, Allow me to describe the situation: Network A's firewall is a FortiGate 1000C and the vlan is 192.168.2.0/24 ...
-1
votes
1answer
25 views

Iptables DNAT working in my own network, but not through VPN

For some reasons I need to switch a server ip to another ip, in order to be seen by another computer elsewhere through vpn. So I'm using iptables (didn't know any of that until yesterday) and testing ...
-2
votes
1answer
23 views

Creating a Firewall / Gateway Server [on hold]

I'm looking to increase my server network security by creating a Firewall + Gateway server for a web server. The servers are all part of digital ocean. The webserver is a LAMP stack with multiple ...
0
votes
2answers
43 views

Windows Server 2012 unable to access specific SSL page

This problem really boggles the mind. I have a standard Windows 2012 server with windows firewall enabled. Using Chrome, I am unable to access a certain HTTPS website while other HTTPS websites can ...
0
votes
1answer
27 views

Cannot open port 1337

I am struggling with iptables firewall to open port 1337 externally. My iptables file looks like this: *nat :PREROUTING ACCEPT [0:0] :INPUT ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :POSTROUTING ACCEPT [0:0] ...
1
vote
0answers
12 views

External Access to Internal Network and Websites — Microsoft Networks

I need to be able to expose a set of "internal" web sites to Internet users somehow. Please bear with me as network engineering isn't my forte. I'd appreciate any insight or suggestions to this task. ...
-1
votes
1answer
19 views

Block Dynamic DNS update requests

I need to block all dynamic dns services update requests from my network so that no dyndns client be able to update its IP. Do the major dyndns providers use a standard protocol or each one uses its ...
0
votes
0answers
13 views

PHP FTP Pasv mode on CentOS 7

I need help with connecting to a FTP server and using the passive mode. They told me I need to open ports 20, 21 and 5000-5100 range. I've got a virtual machine running CentOS 7 on a dedicated server ...
-1
votes
0answers
13 views

Which Firewall Should I Buy [on hold]

I'm considering buying a firewall i don't want anything to expensive but i'm looking for something with nice features like lcd screen showing speeds etc, if you could take time to comment if you have ...
0
votes
0answers
8 views

Pfsense firewall log format and packets data length

In pfsense firewall logs there are many fields described here: https://doc.pfsense.org/index.php/Filter_Log_Format_for_pfSense_2.2 I would like to get some statistics from these logs about traffic, ...
1
vote
1answer
15 views

Connect from one LAN to another LAN through SonicWALL

I have a LAN (LAN 1) on the 192.168.1.1 subnet, and another LAN (LAN 2) on the 192.168.2.1 subnet. LAN 1 is on the X0 interface, LAN 2 is on the X4 interface. I want to be able to access a device ...
0
votes
0answers
10 views

DSL modem in bridge mode but router not accessible from the internet

I have a DLink ADSL modem which I have put into bridge mode and connected to a Fortigate 200A firewall. The Fortigate is able to connect through PPPoE and receives the static public IP. I can browse ...
0
votes
4answers
104 views

How can I limit SSH access to my own 2 IP addresses? [on hold]

I am getting > 100 attempted logins per minute in my /var/log/auth.log so a quick search online on how to limit SSH access to a particular IP address lead me to a question and answer on here. However ...
-3
votes
0answers
25 views

eth0 as a management interface for port 22 and 3389 and everything else through wlan0 (iptables) [on hold]

I would like to use iptables to: Allow port 22 on eth0 Allow port 3389 on eth0 Disallow everything else on eth0 Allow all traffic on wlan0 (web browsing, etc.) Essentially I want to make eth0 the ...
-1
votes
0answers
22 views

Windows server 2008 - Can't access a specific IP [on hold]

I have a fresh install of windows server 2008 on a dedicated server. I would like to remote connect to one of my server tough mysql. I get this error: Warning: mysqli::mysqli(): (HY000/2002): A ...
-4
votes
1answer
24 views

ip6tables -L explanation [closed]

Can someone explain me the following rules in the INPUT chain of the firewall. Chain INPUT (policy DROP) target prot opt source destination ACCEPT all ...
-1
votes
1answer
20 views

ruleset iptables- user defined chains [closed]

I am very new in iptables. Learning to use them. I got a hang of some basic commands from https://help.ubuntu.com/community/IptablesHowTo. However, I didnt find good explanations of examples of a ...
1
vote
0answers
70 views

How to simulate network partitions on windows? [closed]

Working on a project which implements a clustering algorithm. One important property of the clustering is to respect guarantees when face a network partition. To prove that clustering works I need a ...
0
votes
1answer
34 views

Hyper-V disable internal firewall

How can I disable a firewall on my internal network? Problem I have a Hyper-V on a Windows Server 2012 R2 with one VM, when I disable the firewall I can get internet on my VM, but when I turn on ...
0
votes
2answers
37 views

Is there any disadvantage to putting a modem in bridge mode

In order to prevent the need of port forwarding and double natting I plan to put a modem into bridge mode. Are there any side effects or problems that could come of placing a modem into bridge mode in ...
0
votes
1answer
12 views

Not able to connect to GitHub though the Firewall

We have Fortigate Firewall install on the network, What port I should open to connect to the GitHub repository using the https:// protocol. I found a similar question , And allowed the port suggested ...
-1
votes
0answers
21 views

Is it possible to provide Internet access for an access point in a wireless network that using web based authentication for Internet users?

There is a web server that is configured to use an access point to connect to the Internet. The access point only needs the wifi password of any network with Internet access to connect to the ...
0
votes
0answers
8 views

Turning extra 6 LANS into “router” like links using Sophos UTM 9 [migrated]

Hey all I just finished up setting up the UTM 9 Home edition and I currently have it up and running with eth0 as the WAN and eth1 as the LAN. However, my motherboard has a total of 8 Ethernet ports ...
0
votes
0answers
9 views

Will enabling Comcast Business Gateway Port triggering lock me out?

Device info: SMC Networks Firmware 3.1.6.56 I am remotely logged into a server and configuring the "Comcast Business Gateway". At the current moment, Within the Firewall >> Port Configuration >> ...
5
votes
1answer
227 views

IIS FTP Not Working Remotely Windows Server 2012 R2

We are attempting to duplicate our server in the Azure cloud. Both are Windows 2012 R2 servers. FTP works on the original server but not on the duplicate server. Additionally, the duplicate server ...
0
votes
1answer
15 views

Malware lab with watchguard firewall

I have a quick question. This is more of a concept question than an actual problem, but basically what I'm trying to do is set up a malware analysis lab on one of my company's computers. I already ...
0
votes
1answer
26 views

Can you configure per-network SSH settings?

I'm talking about ssh_config(5). I wonder if you can define a config section or file based on the currently connected network. I'm thinking about that scenario where the corporate firewall blocks ...
-2
votes
0answers
17 views

How to isolate a rebroadcasted wifi network without NAT?

I could just set up this router (Buffalo AP running DD-WRT) in in NAT mode. But I know that's recommended against, so I'm thinking that I could configure the firewall to whitelist traffic to or from ...
1
vote
1answer
34 views

How to block all IPs in CSF except few static IPs?

The title is telling I guess. I'm wondering how to block ALL IPs in csf.deny except few trusted IPs? I've googled but could not find the answer.
0
votes
0answers
25 views

Sonicwall Port Forward through VPN

I am very close to figuring this out, but I am getting stuck at the very end. This is just a lab - nothing I want to implement in real world usage. I have two sites: Site A has my Sonicwall and is ...
0
votes
1answer
15 views

pfSense: Cannot filter flood of multicast packets being blocked by default

There are multiple devices under a different subnet on our LAN sending a flood of multicast packets. I've tried to allow this type of traffic, but it does not seem to work.
2
votes
2answers
59 views

WatchGuard Port Forwarding / Static NAT

I'm trying to forward a specific port on my WatchGuard firewall to an internal host in a specific VLAN. My setup is roughly as follows: INTERNET vv WatchGuard vv--------vv--------vv ...
0
votes
2answers
66 views

do i need to filter the OUTPUT with iptables for a dedicated firewall box?

I already know how to setup a firewall using iptables, but after a visit of the IT Security Department, they said i need to filter the OUTPUT, but, it is pointless to me, i really can find an scenario ...
2
votes
1answer
56 views

Set-NetFirewallRule alternative in Windows Server 2008

I am trying to Enable Powershell Remoting on a Windows Server 2008, but from what I understand, the default firewall exception is that PSRemoting is only allowed if the computer (both client and ...
0
votes
0answers
13 views

Allow traffic using iptables

We have a proxy server that is used for our open access PC's. We want to allow traffic originating and going to our SCCM server, our DHCP server and our Fileserver on all ports. Any idea how to insert ...
0
votes
1answer
56 views

How does TeamViewer get through my firewall even though I set it to “No incoming connections”? [closed]

Here is my firewall settings: Clearly, firewall is on for both private and public networks and it is set to "Block all connections including programs on the list of allowed programs". I did not ...
7
votes
2answers
215 views

Debugging iptables and common firewall pitfalls?

This is a proposed Canonical Question about understanding and debugging the software firewall on Linux systems. In response to EEAA's answer and @Shog's comment that we need a suitable canonical ...
0
votes
0answers
29 views

How to properly configure security group at AWS?

I'm trying to reach my server's FTP-port by its Elastic IP. I've configured the security group as follows: Inbound Type Protocol Port Range Destination All traffic All All ...
-2
votes
1answer
94 views

Does AWS EC2 blocks torrent sites like torrentz.eu? [closed]

Initially when trying ping torrentz.eu, dns was not resolving the torrentz.eu domain name on my AWS EC2 micro instance(Ubuntu), Then I have added google public dns to the resolv.conf. So my instance ...
0
votes
1answer
25 views

sbs 2008 firewall, allowing only 3 IP numbers to connect to port 25, block all others

I need to allow only 3 IP's to communicate inbound with port 25 on my SBS. I set up two rules (one for TCP and one for UDP) where the rule says "Allow the connection" and in Scope under "Remote IP ...
0
votes
1answer
31 views

Setup a very Basic DMZ for WordPress

We are thinking of switching our corporate website from externally hosted and designed, to an internal WordPress server. This is so we can maintain direct control, as well as run our own traffic ...
0
votes
3answers
53 views

iptables actively refused everything despite exceptions

I was following the centos wiki page on iptables but no mater what I change only port 22 opens. Using various port scanning websites they all say the server is actively refusing connections on all ...
0
votes
2answers
184 views

Stop China from connecting to my Google Compute Engine server

My company has a Google Compute Engine server hosted in North America. We get so many Chinese IP addresses sending requests to port 11 that it is costing us money for the ingress. Our firewall blocks ...
1
vote
1answer
26 views

CISCO SSL VPN (multiple Sites) [closed]

I'm having a small issues and I'm sure it's NAT related. Our Users connect to SSL VPN in Ft. Worth. We also have a site up in Dallas. There is a current Site to Site connection there with full ...
0
votes
1answer
54 views

WAN IP Ranges and NAT [closed]

Let's say we have a router with a WAN IP assigned by DHCP: 1.1.1.1/255.255.255.255 The ISP subnet for it's lan interface is 82.5.167.161/255.255.255.248 My firewall behind this router is on WAN IP: ...
0
votes
0answers
36 views

Cannot trace bug in iptables firewalls config

I seem to have a bug in my iptables configuration - when I comment out hte final line (drop) it works fine - when I uncomment it, I cannot ssh into my server - can anyone spot what I'm doing wrong? ...
1
vote
0answers
45 views

How to combine multiple route hops using one (pfSense) router?

I am trying to come up with a way to consolidate two routers into one. I have the following network configuration: LAN <-- a/24 --> NAT Firewall <-- x/29 --> Router <-- y/30 --> ...
1
vote
0answers
24 views

Remote WOL over CISCO/FW not Forwarding

I'm trying to accomplish a Wake-on-LAN by triggering the two servers' public IP addresses. Internally, the WOL works like a charm (by either the internal or external IP), externally however, it does ...
0
votes
1answer
65 views

why my nat iptables rules dont work with marked packets?

System: debian squeeze, Linux server 2.6.32-5-amd64 #1 SMP Tue May 13 16:34:35 UTC 2014 x86_64 GNU/Linux, iptables v1.4.8 lsmod | grep iptable iptable_security 2176 0 iptable_mangle ...