A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

1
vote
0answers
11 views

AWS ec2 has 30:1 Network IN due to Wordpress Hack Bot Scripts, Any way to stop?

My aws instance has 30:1 ratio of network IN to network OUT; this is likely due to various countries pounding the hell out of all my multisite domains. My setup is aws ec2, elasticip aws rds ...
0
votes
0answers
17 views

Accessing a workstation behind a firewall [on hold]

Situation: I have a workstation using school network, and a laptop. I want to be able to (SSH) access my workstation from my laptop from a different network. Problem: School network blocks all ...
0
votes
0answers
12 views

Block outgoing connections on Centos 7 with firewalld

I'm having following rules : public (default, active) interfaces: eth0 sources: services: dhcpv6-client http https ssh ports: masquerade: no forward-ports: icmp-blocks: rich rules:...
2
votes
1answer
25 views

Cannot access to any port of Azure VM except RD (3389)

I have a new Windows Server 2012 Azure Virtual Machine. Everything works fine through RD until I try to access from outside. I cannot access SQL Server service (I gave up after 1 hour of trying ...
-1
votes
0answers
14 views

Will a router try to route traffic coming in from a mirror port? [closed]

I am working on migrating an old bsd based firewall do a new solution. At first, we are going to migrate the firewall service to a new clustered set of machines running FreeBSD+PF. As the policy ...
1
vote
1answer
23 views

Allow Application in Windows 7 Firewall on per-NIC basis

I want to allow an application on a Windows 7 Professional System to only be accessible through the OpenVPN TAP adapter by configuring the Windows Firewall accordingly. Unfortunately I cannot find an ...
0
votes
0answers
6 views

CSF/LFD does not recognize mod_security-Log-entries

unfortunately my CSF/LFD login failure daemon and firewall does not recognize the entries which are added to /var/log/modsec_audit.log. I enabled the mod_security-feature in /etc/csf/csf.conf: # [*]...
-1
votes
0answers
9 views

Freesco cant ping other machines [closed]

Im having some trouble with setting up Freesco on my VMworkstation, hoping someone can help.. I have a freesco VM with 3 NICS NIC 1 - Bridged with host 192.168.0.2 255.255.255.0 GW 192.168.0.1 (my ...
0
votes
0answers
17 views

firewall-cmd on OpenVZ CentOS 7

So I've been trying to set up a webserver on my VPS with CentOS 7. To do this I've used this tutorial. Installation of MySQL/MariaDB and PHP worked successfully. However I can't access my server, ...
0
votes
1answer
27 views

Is there some project/tool for testing web server firewall quality? [closed]

Would like to have a test with different aspects of firewalls. For instance, a test that would output info on: Layer 3/4 attacks DNS amplification attacks SMURF attacks ACK attacks Layer 7 attacks ...
0
votes
0answers
8 views

Merge VPNs of two Watchguard firewalls into one firewall

I have two different Watchguard XTM 515 firewalls. Each has it's own set of VPNs created in them. Now I need to use only one firewall to handle the VPNs of both. But the problem is that I don't know ...
1
vote
1answer
18 views

pfSense Shell : apply config modification without reboot

I'm currently trying to edit the configuration of a running pfSense in production with the pfSsh.php shell. By using the pfSsh.php shell I'm able to modify the configuration but once I write it, it ...
1
vote
1answer
25 views

What is correct iptables chain to put -j NETFLOW

I have a router, with firewall (with drop policy), nats, services. I want to account all factual traffic (inputed before firewal, outputed by services, and passed firewall in forwarding), with its "...
1
vote
1answer
33 views

limiting ip range on openvpn server

We're trying to setup a openvpn server on centos 6. We have blocked all IP adresses except a couple in a whitelist via /etc/hosts.deny, also we did the same with csf.deny (except for the whitelist). ...
1
vote
1answer
22 views

Rule of fail2ban not working when the request is from the brute force attack

I have a situation where some IP from moldova try everyday discover my basic auth credentials with some type of brute force attack. However I have a rule with fail2ban that should avoid this ...
0
votes
0answers
16 views

Jenkins master node incoming port number for slaves?

I have a Jenkins version 2.8 master node running on Ubuntu 14.04 and my slaves node cannot connect to it unless I disable the firewall via sudo ufw disabled. I have port 8080 already open so folks ...
0
votes
0answers
14 views

Restrict internet access with firewall rules for a VM running on Linux [closed]

I have Red Hat 7 running on my workstation, and Windows 10, used for working with Windows programs, in a virtual machine running on KVM/QEMU. The workstation, fulfilling the role as hypervisor, and ...
3
votes
1answer
553 views

What is the windows server equivalent of iptables?

I found this post however it is outdated and appears to be focused on consumer versions of Windows. What is the Windows Server 2012+ equivalent of iptables?
0
votes
1answer
31 views

issues configuring firewall rules for Postgres on Centos

I am attempting to follow this guide to allow remote connections to postgres http://www.cyberciti.biz/tips/postgres-allow-remote-access-tcp-connection.html At the moment I am running into issues with ...
0
votes
1answer
59 views

NAT firewall, auto-add to whitelist triggered by DNS lookup? [closed]

I am interested in setting up a firewall. This is going to include your usual NAT, with port-forwarding for incoming connections. However I want the outgoing connections to use a whitelist of ...
0
votes
0answers
21 views

Sonicwall inter WAN interface communication

I have the TZ105 sonicwall and X0 is LAN and the rest 4 interfaces are 4 different ISP connections through 4 ISP routers respectively. Basically I cannot get any device connected to an ISP router to ...
0
votes
0answers
24 views

how to set transparent proxy for server to get all request of client

How to set transparent proxy for manually created socket server to get traffic on that port which is socket listening? I had tried : squid- squid server and my server cant run on same port oracle ...
0
votes
0answers
6 views

Symmetric NAT with IPtables - TURN

I need to configure symmetric nat on two linux based ( openwrt ) gateways . I want to check if my TURN server is working correctly instead of STUN. How to perform that with IPtables ? echo "1" >...
0
votes
1answer
38 views

Mac OSX Server > Remove app from firewall

Problem: I want to remove the Screen Sharing app from the Firewall exceptions (but I can't see anyway to do this), so that port 5900 isn't exposed to the internet. (I want to ONLY expose the SSH ...
2
votes
0answers
37 views

WhatsApp call blocking

I'm managing a small network and I'm requested to block WhatsApp calls without blocking its messaging features. As they provide their public IP addresses I thought it'd be straightforward to add some ...
0
votes
0answers
16 views

Windows Firewall causing connection throttling

I have an application running on Win8.1 (or WinServer2012, it makes no difference) that provides two HTTP server listeners in separate processes (one using HTTP.SYS via .NET HttpListener, the other ...
0
votes
0answers
18 views

Restricting SQL Server Management Studio using LogMeIn Hamachi

I have a SQL Server 2016 instance on Windows Service 2012 VM running in Azure. Currently the network security group/firewall allows for port 1433/TCP traffic so I can connect from my PC using SQL ...
0
votes
1answer
37 views

Microsoft Azure Backup Server TCP/UDP Ports to open

Planning to install Microsoft Azure Backup Server in our production environment which is firewall restricted, but I could not find any documents which specify the exact TCP/UDP port requirements. ...
0
votes
0answers
19 views

WinRM Kerberos Authentication With Multiple Domain Controllers

I have configured a Rundeck instance on a Ubuntu host on AWS with the overthere-winrm plugin in order to execute scripts against Windows hosts. The instance is configured to access these hosts as an ...
3
votes
1answer
33 views

ipset behave differently when adding IP address from iptables and ipset command

I have a list that created below command ipset create foo hash:ip maxelem 40000000 timeout 180 This is how empty foo look like #ipset list foo Name: foo Type: hash:ip Revision: 1 Header: family ...
0
votes
1answer
33 views

Azure load balancer security group attached to NAT pools

I'm looking to lock down a set of Azure load balancer NAT rules to certain CIDR address ranges via network security groups, for the purpose of not directly exposing SSH/RDP ports to the internet. The ...
0
votes
0answers
29 views

avoid data leak by block internet access for PCs, but allow internet access through remote desktop

In a small network(in my company), I would like to block some computers(PCs) to access the internet, so that sensitive data or files in those PCs can not be leaked. But I still need users of the PCs ...
0
votes
1answer
22 views

ip6tables blocking outgoing+incoming connections

i just changed to a server with ipv6 and therefore i changed my firewall script. Changing my iptables-script to ip6tables does not seem to work though. This is the ipv6 part which neither allows ...
1
vote
2answers
62 views

Which Ports need to be accessible on a Domain Controller for Clients to logon?

We are currently segmenting our network. We will move the servers in another subnet than the clients. Of course the clients still need access to the domain controller to authenticate against it. I ...
0
votes
1answer
57 views

SSH: hangs after “connection established”

I have an AWS EC2 instance to which I can't connect through one of Ubuntu servers. However, I can connect to the AWS instance through any machine(with and without private SSH key), but Ubuntu server ...
-1
votes
2answers
54 views

IPTables chains that just RETURN, as set via iRedMail [SOLVED]

I hate to ask this, but I'm pretty sure I have everything configured correctly with iRedMail as the host for my email server/VPS re dovecot, postfix etc (even though everything is pretty much done ...
1
vote
1answer
20 views

Cisco ASA: Part of the traffic via VPN is blocked

We inherited the management of an ASA 5520 running IOS 8.2(3) from a previous company, and now we are switching the connectivity to a VPN from a LAN link directly connected to one of ASA interfaces. ...
0
votes
0answers
12 views

What other proxy config options do I have when the Windows https proxy requires a username and password for an automated Chrome browser?

I have a Chrome instance driven by Webdriver inside a Docker container in an AWS VPC that needs to access the internet to download some cloudfront content. The Corporate Proxy is setup to require a ...
0
votes
0answers
23 views

Forefront 2010 does not let logins using 'Public or Shared Computer'

I have recently inherited a Forefront TMG 2010 server, and when people try to login and select 'This is a public or shared computer' they are unable to login. No errors, just reloads the same page. ...
0
votes
1answer
56 views

Why is UFW not working?

I've setup some rules on my ufw but I think it's just not blocking anything. This is its current status: ~# ufw status verbose Status: active Logging: on (low) Default: deny (incoming), allow (...
0
votes
1answer
75 views

How can I configure an HAProxy server running behind a firewall?

I am having trouble with the following: I am setting up an HAProxy load balancer on CentOS 7 behind a firewall. The firewall on the HAProxy server as well as the outside firewall are configured so ...
1
vote
0answers
32 views

CISCO ASA ASDM Allow internal IP to access external IP

I'm running ASDM 7.2 and have 2 servers on the same local ip range that can communicate ok. These 2 servers have external IP's and I need to get them communicating on the external IP's but this fails. ...
0
votes
0answers
45 views

Trying to have a static IP with Elastic Beanstalk applications

My goal is to deploy a web application to Elastic Beanstalk and allow for a user to access that application from their corporate network. Their network controls access to sites using IP addresses and ...
1
vote
1answer
13 views

Accessing internally stored documents via hyperlinks in Websites on a DMZ server

We have a vendor-provided application running internally (LAN) on a Windows/MS-SQL 2012 server, providing access via IIS on the same box. The application is able to store attached documents - these ...
1
vote
0answers
51 views

Iptables firewall causing instability

I've made a script to set an iptables firewall,but it's Causing instability on the local network aplication . The firewall is droping the connection between the clients and the server for a while ...
2
votes
1answer
27 views

How do I add a mangle rule to my saved iptables firewall rules file?

I've set up OpenVPN on my Debian server and would like to add a rule to iptables. I already have a file that lists default filter rules that iptables reads from (pre-up). I tried adding the rule to ...
0
votes
0answers
16 views

Deploying builds from Jenkins Slave

we are trying to get set up to use group instance of Jenkins. Both Jenkins Master and Slaves are cloud hosted. Once the build is completed on the slave we need to deploy it to a development server in ...
0
votes
1answer
27 views

unable to connect to webserver from LAN (access from outside is fine)

We would like to give both our customers and coworkers a single link (subdomain.ourdomain.com) to access a common web application. I set up a web server on a machine connected to LAN, it's accessible ...
0
votes
1answer
17 views

Logstash Grok Filter

I'm sure there is a simple solution to this but I'm new to working Logstash. The filter I'm trying to apply is for some firewall logs and I have a field that will either have a single or two values ...
-1
votes
1answer
54 views

Overwriting Cisco ASA config using only console access

I'd like to be able to apply a pre-written config to a Cisco ASA 5505, but presently I only have access to it via the serial console and not over the network. Various sources suggest pasting the ...