A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

2
votes
1answer
85 views

What happen if first rule of first iptable chain target is `RETURN`?

The article Linux Firewall Tutorial: IPTables Tables, Chains, Rules Fundamentals define the RETURN target value as follow: RETURN – Firewall will stop executing the next set of rules in the ...
-1
votes
2answers
36 views

How to check if my network blocks a port on Windows?

I'm trying to connect to a remote SSH server from my Windows machine, however the client (PuTTY) keeps raising an error telling that the remote server refuses the connection. I have already checked ...
0
votes
1answer
12 views

OpenVPN, How to filtering client

I have a problem with limiting "client" with my VPN server. I was reading the FAQ about using iptables with disable option client-to-client, but i cannot run it. The question is how correctly allow ...
0
votes
0answers
17 views

HTTP not redirecting to HTTPS, Router or Firewall Issue?

I manage an application server in a different department from IT and since they implemented a new firewall as part of emergency maintenance, users are having issues accessing the web app(Blackboard). ...
0
votes
1answer
14 views

Setting up a VPN with rules who can connect with who

For delivering updates and support on software I've been working on I have been thinking about setting up a VPN server. The idea would be that the clients are constantly connected but only the traffic ...
2
votes
0answers
43 views

What might be causing specific IPv6 HTTPS servers to send an excessive number of RST packets? [migrated]

Client browsers on my IPv6-enabled home network hang and time out when attempting to load https:// URLs from specific IPv6 sites, such as ones operated by CloudFlare. In those situations, the live log ...
0
votes
0answers
24 views

nginx or apache for reverse proxy if we want to development on top of the reverse proxy [closed]

Right now, we are thinking about building an access gateway which is generally a reverse proxy/firewall where we could apply the policy for traffic such as blocking certain user accessing the site ...
1
vote
1answer
38 views

Limit Connections Per IP Windows 2008 R2 x64

Hello I have been searching for a solution to this, what I want to accomplish is the ability for me to define firewall rules that will limit the amount of connections to certain ports from the same ...
-1
votes
1answer
74 views

Opening port 587 on Debian running on Google Compute Engine

I'm attempting to use port 587 for my server mailing purposes. However, I can't seem to be able to unblock the port even after trying the following : Adding port 587 to the Google Cloud network ...
-2
votes
0answers
13 views

FTP not accessible outside of LAN [closed]

Ok so I really need some help with this, I have XAMPP installed and am hosting a webiste with it for my friends and i to work on. I am able to see the site just fine and also i am able to get to ...
0
votes
0answers
19 views

ISC DHCP Server - Client Uplink Is Not Working

Running a DHCP server, client(s) does not have up-link (0Mbps) and has a downlink (50Mbps.) I am setting up a gateway/router on a PC running Debian Wheezy with ISC-DHCP. I have 1 WAN (eth0) and 2 LAN ...
0
votes
0answers
10 views

CSF not blocking ports [closed]

Yesterday I've installed CSF on my VPS. I blocked many ports on my machine (allowing only these included in /etc/csf/csf.conf However, my services like teamspeak or mumble server are still able to be ...
0
votes
1answer
16 views

WatchGuard XTM510, Dialed in VPN (PPTP) users cant Ping hosted datacentre machine on BOVPN

we have a BOVPN from our network 192.168.1.0/24 range to some hosted environments at a datacentre. 172.15.0.1/20 any machine on our internal network ranges can communicate with the systems at the ...
-3
votes
1answer
32 views

How to create inbound rule on Windows firewall for custom service?

Service is written in C#. It is a server that requires opening port 8080 for inbound connections. It runs as Local System and has unrestricted SID (created by sc tool). If I add in Windows Firewall ...
3
votes
0answers
21 views

Searching Objects on SonicWALL (NSA 2600, SonicOS 6.1)

Ok, this may sound like a dumb question, but does the SonicOS web interface not have a search option for object definitions? One of my clients recently decided to replace their Astaro Security ...
0
votes
2answers
41 views

Assign IPs to programs/processes

I need to assign different IP addresses to different processes (mostly PHP & Ruby programs) running on my Linux server. They will be making queries to various servers, including the situation ...
-2
votes
1answer
24 views

iptables prerouting with match-set

I'm trying to create a iptables entry to redirect a list of ip's to another port. Using ipset I can setup and add lists of ip's and reject them with this command iptables -t nat -A INPUT -p tcp -m ...
-4
votes
0answers
22 views

EdgeRouter - signals blocked like ports not forwarded (but they are) [duplicate]

i've been configuring my edgerouter router, it get's the internet but the signals are still blocked, just like ports were not forwarded, what could be the problem, maybe something in my WAN_IN ...
0
votes
2answers
28 views

Access to multiple FTP servers through a firewall

I have 4 web servers for different tasks, behind a firewall. I have a single public IP and I want to connect to my servers with FTP with this IP. I tried to use a different port but no results. So my ...
0
votes
0answers
19 views

2 Vlans on a Cisco PIX 515 with DMZ

I have to install an application server on a networks dmz. The application will sit on a network but has no interaction with the other devices on that network. I was thinking that the firewall(Cisco ...
0
votes
0answers
16 views

how to use --rdest flag in recent table

Here is why I try to accomplish: When receiving a UDP packet, put IP address of the source address in recent table. sudo iptables -A INPUT -p udp --dport xxxxx -m recent --set -j ACCEPT When send ...
-1
votes
1answer
49 views

How should I properly block outgoing http traffic with iptables

I'm experimenting with iptables, and I'm trying to allow all outgoing requests for HTTPS, but to block HTTP. I have the code below; Chain INPUT (policy ACCEPT) target prot opt source ...
3
votes
1answer
35 views

Linux NFLOG - documentation, configuration from C

Several different places (e.g. http://wiki.wireshark.org/CaptureSetup/NFLOG) recommend using Linux's "NFLOG" firewall module to capture packets generated by a particular UID, like this: # iptables -A ...
-3
votes
2answers
27 views

Login before using the internet

How do you setup a user login page in order to connect to the internet just like the one at McDonalds and Radisson Blu? What kind of setup is that? We are in school and would like to have that kind ...
0
votes
1answer
35 views

UFW — How To Open Port 8080

I thought I had allowed connections to http-alt (8080) using ufw. My reasoning for thinking this is because: gerrit2@localhost:~$ sudo ufw status Status: active To Action ...
0
votes
3answers
97 views

Expose a mongodb streaming data server that's behind a firewall, to the internet

I have streaming data on a Windows platform that I capture into Mongodb at fairly high rate of about 800 data points per second. I wish to have access to this data from outside the company, but the ...
0
votes
0answers
12 views

Something in the network is causing my REST interface to respond to requests with an empty body

We import orders from online through a REST interface over HTTP, which sends back JSON responses. I've confirmed that the code itself works, and it works on the test server. For some odd reason, ...
0
votes
1answer
33 views

Use pfSense for outgoing mail?

How/Can/Should I use my pfSense router as an outgoing mail server? I have several webservers and devices on my internal network that need to send mail out to the Internet. However, I don't need a ...
1
vote
1answer
29 views

pfsense: Prohibit all outbound connectivity from inside going out, except for one system's traffic

I've got a lab environment here for some testing of software which should only run on this "lab environment" network. To that end, the "lab environment" has a pfsense firewall sitting on the ...
4
votes
3answers
81 views

ESXi hosted on public IP without firewall

So I've got an interesting problem. I currently rent a couple of servers from Hetzner (a German hosting provider). Each server has a soft firewall and does something like web hosting / database. I ...
0
votes
1answer
37 views

Using nginx to access internet through intranet

I don't know if I am going about this in the right way, but here's what I need to do. I have a website that's available on the internet. But I have some users who only have access to the intranet. I ...
3
votes
1answer
116 views

What are the repercussions of using an EOL Cisco firewall?

I'm looking at using an ASA 5520 for the database of an ecommerce site. According to End-of-Sale and End-of-Life Announcement for the Cisco ASA 5520 Adaptive Security Appliance, this product is ...
0
votes
1answer
34 views

Cisco ASA 5510 Inter-interface routing

I'm trying to setup a Cisco 5510 to route traffic between the outside and inside interfaces where both belong to public IP subnets. Our ISP assigned us a single point-to-point IP (207.107.110.150/30) ...
0
votes
1answer
52 views

PowerShell Firewall Management

I have a bunch of machines that I need to enable Remote Scheduled Tasks Management (RPC), Remote Scheduled Tasks Management (RPC-EPMAP), and Windows Management Instrumentation (WMI-in) on for GPO ...
0
votes
1answer
56 views

server at port 80 seems up, but I can't access it.

I can't access my server remotely at port 80. First of all, I did not set it up. Someone else did. I am not a sysadmin. But communication between both parts (me and sysadmin) takes time and deadlines ...
0
votes
0answers
23 views

Restricted logins + almost all ports closed : secure? [migrated]

Context : I plan to travel. I want to make a little cloud with my personal server. I wish I could d/l some of my files and eventually upload some files which will not be executed and the whole is ...
1
vote
0answers
11 views

Windows Server 2003 Outbound ftp Very Slow with Windows Firewall enabled

From Windows Server 2003, I'm uploading a file (~50MB) every day at 4:00am to my hosting space in the cloud. I'm doing it by calling "ftp -s:" in a batch file that a Scheduled Task runs. I did what ...
0
votes
2answers
57 views

Forward SSH request to an External Server to an Internal Server

I have a VM config currently where I have 1 external IP pointing to a VM with an Nginx HTTP Reverse proxy serving HTTP Web Pages from several internal VMs without external IPs. I need a similar setup ...
-1
votes
1answer
76 views

Configure Windows Firewall Server 2008 to allow access by only selected IP addresses

I have a server running Windows Server 2008 and I need to configure the firewall if possible to only allow access from a few specified IP addresses, any other IP addresses will get rejected unless ...
0
votes
1answer
85 views

Can't establish a reliable VPN tunnel (ShrewSoft client / ZyWALL USG-50 firewall)

I try to setup an IPSec VPN tunnel through my firewall (ZyWall USG-50), but it doesn't work like it should. quick scheme of my installation: ME [A.B.C.D] --- **INTERNET** | ...
3
votes
1answer
315 views

What IP range do I ask the system administrator to open in order for S3 to work?

I've written some programs for Raspberry Pi, which some small companies have shown interest in. I sold pre-configured Raspberry Pi:s to them, with my program on them, and it works for everybody except ...
0
votes
4answers
130 views

iptables not installed on centos

If a machine does not have iptables installed, is there still a firewall running? If yes, how to I disable / change rules? if I enter the command iptables I receive the response: iptables v1.4.7: ...
0
votes
1answer
55 views

No route to host centos

I am trying to allow a port through a firewall on centos 6. The error I am receiving is telnet: connect to address 80.xx.xx.xx: No route to host The port I am trying to allow is 5666. If I disable ...
-1
votes
0answers
28 views

DHCPREQUEST Operation not permitted

I am configuring iptables on a Ubuntu 14.10 VPS. However, I am having a few issues with the following: Jun 25 08:28:23 www dhclient: DHCPREQUEST of 1.2.3.4 on eth0 to 2.3.4.5 port 67 ...
0
votes
1answer
43 views

Can't connect VPN tunnel when other on same NAT-router is connected

We have recently changed our FW to a ZyWall 310 with drastically improved throughput over the old one. However there is a new problem that occurred, we have several L2TP/IPSec clients that connect to ...
0
votes
0answers
19 views

How can I add a new physical interface to an Endian Community Firewall?

I just installed the Community Endian Firewall on my system. But it's just recognizing the first 4 interfaces (after going into shell and doing a ifconfig shows br0, br1, br2 and br3). How can I add ...
0
votes
0answers
36 views

TFS Check In Issue: The underlying connection was closed: A connection that was expected to be kept alive was closed by the server

I've recently started seeing the below error when attempting to check in code to TFS: The underlying connection was closed: A connection that was expected to be kept alive was closed by the server. ...
1
vote
1answer
113 views

IIS 7.5 Windows authentication not working externally

I'm trying to connect to a asp.net website we have created. It uses Windows authentication and it denies access to non authenticated users web.config: <authentication mode="Windows" /> ...
1
vote
1answer
47 views

How can I make an Azure Web Role accessible only via Virtual Network

I have a web role that I have configured via the NetworkConfiguration section of the .cscfg to be part of a Virtual Network. I only want the web role to be accessed from other computers within the ...
-2
votes
1answer
59 views

Email system architecture and implementation [closed]

It's been over a week already and I am unable to find satisfactory solutions to my problem on the Internet. I hope the experts here could lend a helping hand. I will just go straight on describing the ...