A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

0
votes
0answers
26 views

Opening port 8080 on Windows firewall [migrated]

I am not sure if I am just missing a trick here and it will be something rather simple, or if I am trying to do something that just isn't going to work.. Anyway, I have an asp.net site and I am using ...
-2
votes
0answers
9 views

Redirect to external url [on hold]

Looking to redirect internal users to external url. I've been doing research but keep running into dead ends. Any ideas on how to do this without a complicated set up?
1
vote
0answers
18 views

Firewall and NAT settings in GSM modem for one server

I have a GSM Modem (PSI-MODEM-GSM/ETH) in field with one device behind, acting as a server. The situation is as follows: "PC" | \_________Dynamic IP: 10.103.153.122 | ...
0
votes
2answers
26 views

Firewall/Packet Sniffer - forward HTTP requests to a different address

I have a particularly "hacky" question/solution and looking for some honest feedback. In an enterprise system there are a number of requests that are destined for www.sometargeturl.com. These need ...
0
votes
0answers
21 views

Multiple gateways with linux on same subnet using single NIC

I have the following configuration; Firewall 1 (site 1); x.x.x.x/26 subnet on external 10.0.0.0/8 on internal (internal IP 10.0.0.10) Firewall 2 (site 2); x.x.x.y/26 subnet on external 10.0.0.0/8 ...
2
votes
1answer
22 views

iptables: does a scanner knows if you DROP packets?

I know how REJECT and DROP chain works. But, as I read here REJECT vs DROP when using iptables, user Dagelf said that the server still replies with TCP SYN/ACK. Does the scanner knows that a packet ...
1
vote
2answers
33 views

Communicating between two servers sitting behind their respective NATs

I'm building an web app (Server A) that communicates with a remote server (Server B) that is connected to the internet. Server B resides behind a NAT and is listening to communication on 3 ...
0
votes
0answers
28 views

Force all traffic through VPN

I am using PfSense as a firewall, with its VPN functionality. The client I use is Shrew Soft VPN client. As it is a split tunnel, is there a way I can force all traffic through the VPN connection, ...
0
votes
2answers
51 views

IpTables Configuration Not Working to block ports (Centos 6.2)

I am trying to only allow certain IPs to access port 8209. I have tried a few different methods that I read on ServerFault. This method is the most recent one I have tried. I manually edited my ...
0
votes
1answer
40 views

netscreen sn25 vs cisco asa5505 speed

Current i have 2 server direct connect to 1 juniper netscreen sn25 firewall then go to internet, the intel 350 nic is setup at 100mbps (which should be able go up to 1000mbps). the problem is this ...
0
votes
2answers
31 views

EC2 security policy private address

I have created an EC2 Security Group that allows incoming traffic from a private ip address in the same account. It is my understanding that a private ip address for a classic instance can change ...
-1
votes
0answers
25 views

firewall and load balancer vmware on one physicall server [duplicate]

I have 2 unit server series Rainer SV311C4-2.4 SATA 35 NR, processor Intel Xeon X3430 Quad Core 2.4Ghz 8Mb L3 Cache memory 8GB. Each unit I will install two virtual mechine for firewall and load ...
-1
votes
2answers
52 views

How to handle an abuse complaint? [closed]

I have just received an abuse complaint from my hosting service: [2014-04-04 03:30:23 CET] [Timestamp:1396575024] [11717182.634230] Firewall: *UDP_IN Blocked* IN=eth0 OUT= SRC=My IP ...
-2
votes
3answers
103 views

How do I access port 10,000 on AWS?

How can I access port 10000 on Amazon Web Services? I added port 10,000 to a security group, but I still cannot access it. I can only access the service locally. [root@ip-172-31-15-65 ~]# curl -I ...
1
vote
1answer
33 views

What is proper host in PGAdmin for accessing postgresql through firewall

Here is my situation. I have Postgresql installed on a Windows Server on a LAN. I have an IIS web server set up outside the lan. I want to connect to the postgresql database from the webserver. ...
0
votes
1answer
43 views

FortiGate 80c port forward

I have a FortiGate 80c and I'm getting at a lost on how to port forward to get my OpenVPN service accessible externally. I did setup the VirtualIP assigning tcp 1194 on the internal IP to the ...
0
votes
1answer
32 views

XenServer virtual network firewall

We are setting up XenServer machine with several VMs for our ecommerce business. We are intending to distribute services across several VMs (1 for web, 1 billing, 1 email, etc.) The XenServer machine ...
0
votes
0answers
15 views

Xenserver firewall consideration

We are setting up Xenserver for a production environment with seperate VMs for a website, billing, control panel, mail. My question is, should we rely on each server's IPtables or is it necessary to ...
0
votes
1answer
26 views

iptables stopping access to websites

I have iptables set up on a server to only allow whitelisted ips to access it: :INPUT ACCEPT [1695:323274] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [987:756890] :xxx - [0:0] -A INPUT -s 12.34.56.78/32 ...
0
votes
1answer
35 views

Cannot add address object using CLI on Sonicwall NSA2400 (5.9 firmware)

Based on an example from "SonicOS 5.9 Enterprise Command Line Interface Reference Guide" I have tried to add an address object using command below (which is not changed compare to prior firmware): ...
0
votes
0answers
35 views

SonicWall NSA2400 after firmware upgrade to 5.9 - not able to log some intrusion prevention/detection statements

After upgrading firmware to 5.9 version I'm not able to log intrusion prevention/detection for statements like PHP CGI Argument Injection, Remote Command Execution, Remote File Inclusion, WEB-ATTACKS, ...
1
vote
0answers
27 views

PF Firewall Rules Help - Block IP Hammering

I'm having an issue where someone is using a VPN / proxy to hammer my server. They will pick on random URL from my website and perform ~20 requests per second to it. Once I ban the IP address, a few ...
-1
votes
1answer
48 views

SSH through another machine at work to an external server [duplicate]

I'm fairly sure this will have been asked before, I have found similar questions but I do not fully understand how to apply them to my situation. So, sorry for asking again. We have a number of ...
0
votes
0answers
16 views

customised client to client connection configuration inside OpenVPN server

I have two clients with common names [client_sina] and [client_extra] that are connecting to an OpenVPN server on remote place via (TUN21) running on Tomato Router The only physical port of the ...
-1
votes
3answers
90 views

Is blocking SMTP ports prevent server from sending emails?

I have a Centos server with cPanel on it. Yesterday, some hackers had successfully connected to my smpt server and sent thousand of emails from it. What I want to do is blocking every ports except ...
0
votes
0answers
20 views

Connecting internet uplink to switch or firewall

While I am using Cisco kit, this isn't really Cisco related, more general network design. In the past I have connected internet connections straight in to a layer 3 core switch, 3750X's, 6509's and ...
0
votes
2answers
60 views

Firewall high availability

Context: My company is on the verge of a major network improvement, we will expand our network to remote offices via radio bridges. The firewall will be handling: 3 mission critical networks 3 non ...
0
votes
0answers
14 views

Can a web server be secured with just a firewall? [migrated]

I'm about to go online with my first web site, it is a small project hosted on a regular home PC running Windows 7. I want to keep the software footprint at minimum, so it only contains the operating ...
0
votes
1answer
42 views

Forward a port to another server using iptables

I have a server that is configured to block any port, and exceptions are configured like this (for mongo): iptables -A INPUT -p tcp --dport 27017 -s 10.20.1.0/8 -j ACCEPT ...
0
votes
1answer
68 views

How to make an existing caching Nginx proxy use another proxy to bypass a firewall?

My question is about using Nginx as a proxy behind another proxy. (Somewhat confusing.) I want to set up Nginx so it acts as a caching proxy server to an npm mirror. Here is the link: ...
1
vote
0answers
31 views

Cisco ASA 5510 multiple vlans on same interface with different security levels and routing between

Looking to setup on my 0/3 interface multiple vlans and looking to get confirmation that this will work. Ethernet 0/3.1 security-level 20 nameif dev-dmz vlan 502 ip address 172.20.2.1 ...
1
vote
0answers
35 views

Exclude an IP address from an openwrt firewall rule

I am using a wrt54gl with openwrt to try and redirect all traffic on my LAN to a specific server, which will run scapy and other network analysis tools and act as a gateway/firewall to the Internet. ...
-1
votes
1answer
29 views

Connection timed out ftp cannot connect

I have a ubuntu server and am trying to connect using filezilla but keep getting connection timed out. I have done an nmap and the port that is opened for ftp is 21. I have gone onto the server and ...
0
votes
1answer
29 views

Cannot access Asterisk sip from remote location

I've used this tutorial to configure my iptables so I can access asterisk sip from outside of my server. My iptables -L looks like this Chain INPUT (policy ACCEPT) target prot opt source ...
2
votes
2answers
74 views

Can DNS RPZ firewalls protect against IP Access?

I am looking into DNS-RPZ firewalls. Can they protect against users browsing to http://{ip-address}? If so how does that work? Given no name resolution is required?
0
votes
2answers
26 views

ipf filter on solaris 11 crashes

First I run: sudo netservices limited then sudo ipf -D disable sudo ipf -E enable sudo ipf -f /home/aubrey/ipf.conf sudo ipfstat -io I also disabled ssh in system services After a few hours I ...
0
votes
1answer
21 views

change timeout for dropped ip traffic

I am behind a corporate firewall, which simply drops (swallows) all ip-traffic to unknown ip-addresses. It takes a lot of time for Linux (Ubuntu 13.10) to abort my erroneous connection-attempts, ...
-1
votes
2answers
34 views

tcp port 12202 not opening on ubuntu EC2 instance

I created an EC2 ubuntuu 12.04 instance. i have opened TCP 12202 port through security group console of AWS .But i am unable to open instance port . I tried below commands to open the port . sudo ...
1
vote
2answers
26 views

The output of ifconfig for a Internet USB dongle

This question has been asked on the net before but the answers are simply not convincing or even accurate. I get the following output for ifconfig for the ppp0 device (of course, x, y, a, b are ...
1
vote
1answer
14 views

Error in cross server sqlcmd execution due to firewall issue

I have an application server with an IP of 10.107.0.100 and one database server on which SQL Server 2012 is installed, with an IP of 10.107.0.101. Remote connections are made to this server, and the ...
-4
votes
1answer
47 views

Single machine server with many operating systems [closed]

Could possibly with single one high end Server with supported Virtualization We can have: - DHCP Server (Virtual Machine 1), - Firewall (Virtual Machine 2), - Squid proxy (Virtual Machine 3) - ...
1
vote
3answers
79 views

Despite of several attempts, unable to open port 25

This question may have been asked many times here but after several failed attempts, I repeat the history: How do I open port 25 port on my server running CentOS. Here is my iptables config: Chain ...
-1
votes
2answers
75 views

Amazon VPC: How to block inbound traffic on specific IP of an instance while allowing on other IPs of the same instance

Specifications I have an amazon VPC instance with the following specifications: Windows 2003 (32 bit). Two Network Interfaces each with 6 IPs. 6 instances of a software (called backweb) installed ...
1
vote
3answers
78 views

How to block ALL communications with an IP-address using iptables?

I have a FreeBSD system behind a Linux-based router (using DD-WRT firmware). The FreeBSD system is running sshd and is regularly probed by various script-kiddies. It currently runs a script, that, ...
1
vote
1answer
15 views

How can I remove the ACL of PIX firewall?

I'm just trying to how PIX works. Anyway how can I remove the ACL from my GNS3's PIX? PIX-SECU(config)# show access-list access-list cached ACL log flows: total 0, denied 0 (deny-flow-max 4096) ...
0
votes
1answer
23 views

Issue connection to SQL from PHP

I've got a Windows workstation which I am successfully able to connect to a SQL 2012 Server over ODBC using the servers IP address. When I start php 5.4 built in web server and try connect to the ...
0
votes
1answer
55 views

IPTables: Firewall with just one Eth device? [closed]

Admittedly I am a novice in the area of firewalls. But I have read on the IPtables and Firewall theory and command options. There is a general diagram by Rusty Russell, the creator of IPtables: ...
0
votes
1answer
23 views

cisco firewall access rules for intra-subnet traffic

I have a Cisco 5505 in our office, and everything is on the 10.0.1.0 network. We have a cheap wireless router that we would like to use. The router is sitting behind the inside interface, and is ...
1
vote
0answers
35 views

Microsoft Forefront TMG, IIS and SQL server on one server

We have a Windows 2008 VPS with IIS and SQL Server, hosted by a provider. We use it for hosting web applications on the Internet. The only firewall we can use is Windows firewall. I would like to have ...
-1
votes
1answer
59 views

blocking all countries except 4 at vlan level, will cisco asa 5505 hold?

First our server hold an application that only serve 4 countries. We had a repeated ddos from bonnet so would like to block all traffic except for the 4 countries that the application serve. the idea ...