A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

0
votes
0answers
18 views

Configure firewalld for OpenVPN (server-bridge) in Fedora 20

I've installed an OpenVPN server (server-bridge) on Fedora 20, but I cannot get it to work. I'm almost sure that It's a firewall issue. I'm trying to connect from an OSX client, but I can connect ...
0
votes
0answers
12 views

SonicWall Routing Between VLANS

We have a sonicwall NSA 3500, x4 has 2 vlan interfaces so x4:v300 and x4:v301. Each vlan has an IP v300 is 192.168.100.1 and v301 is 192.168.101.1. I then have x4 connected to a layer 2 only switch ...
0
votes
0answers
3 views

Firewall Ports for Toshiba CIX server

Other then SIP ports: 5060 and 5061 what other ports need to be opened to have a phone set up in a satellite office with via external IP address. Phone Server CIX100 Firewall ASA 5510
0
votes
1answer
20 views

How can I reload IPTables without interrupting existing connections?

I will be adding and removing entries to the script below automatically (adding ports 80/443 with different IP addresses). If I run this script, I am "assuming" that connections will be uninterrupted, ...
0
votes
0answers
8 views

Opening a port range using Open VSwitch

I am locking down a VM on xenserver to allow only port 3389 and the ports required for domain controller authentication on windows. I am trying to do this using Open VSwitch. Locking down and allowing ...
0
votes
0answers
8 views

W2008 R2 SP1, windows firewall dropping zero length packets

I'm trying to harden a Windows 2008 R2 SP1 server, and restrict outgoing packets to known rules. What I'm seeing is firewall log entries showing dropped packets, and the dropped packets are always ...
1
vote
0answers
24 views

Disabling HSTS for managed browsers

What are my options for disabling HSTS both for new sites and for those sites baked into the browser? The use of HTTPS inspection inherently changes the thumbprint of a site by acting as a man in ...
1
vote
1answer
29 views

IPTABLES command that end with ACCEPT or DROP fail on service firewall restart

I have a CENTOS Linux VPS. I have the following in my IPTABLES script to run when my VPN restarts, but I get errors when I do a service firewall restart I've ran each of the commands below manually ...
0
votes
1answer
93 views

I think my server was hacked - how do i know what has been changed? [duplicate]

I have read the following posts which didn't answered my questions: - My linux server was hacked. How do I find out how and when it was done? - How do I know if my Linux server has been hacked? - and ...
0
votes
1answer
37 views

Serving public IP-adresses through two ethernet ports with public subnets, while protecting some interfaces for remote access

Done a lot of research and it's all kind of confusing. Some switches are also firewalls, most firewalls seems to be routers, with or without their own switches, but they're all different depending on ...
0
votes
0answers
24 views

Routing traffic from LAN over VPN link out to 'net; works from router, not from LAN. What route is missing?

I have 3 machines. 2, routers, are connected over a VPN. The 3rd is a PC on the lan behind one of the routers. internet | | ROUTER S1 external: YYY.56.52.56 ...
0
votes
0answers
26 views

ubuntu router configuration problems

My network is configured as follows: ISP Modem <-> Ubuntu (192.168.2.1) <-> Switch (192.168.1.1) <-> devices My device (192.168.1.150) can ping 192.168.2.1 but is unable to ping outside ...
-1
votes
1answer
35 views

Why does this IPTables command create 4 entries?

When I executed this IPTables command: iptables -A INPUT -p tcp -m tcp --dport 9080 -s localhost -d localhost -j ACCEPT iptables -L shows: ACCEPT tcp -- localhost localhost ...
-1
votes
0answers
30 views

iptables service won't start error line 1 fail - centOS 6.5

I can't seem to get my iptables to setup quite right. It seems to keep erroring out at line 1 on the service start. service iptables start iptables: Applying firewall rules: iptables-restore: line 1 ...
0
votes
1answer
64 views

How do I block all access to machine except port 3389 using Open vSwitch

I can allow access to the machine and block everything else using: ovs-ofctl add-flow xenbr0 "dl_src={mac-address} priority=39000 dl_type=0x0800 nw_dst={ip-address} idle_timeout=65000 action=normal" ...
0
votes
1answer
14 views

Windows Server | firewalling remote connections

In my windows server 2012, In the firewall rule for remote desktop connections I have added so that only MY IP address is allowed to connect, now of course I have taken a precaution and added a ...
0
votes
0answers
8 views

Netsh Command To Block All Traffic Except A Program And A Port?

I discovered that you can use the netsh commands to control the Windows firewall, I am reading all the possibilities but I didn't found yet what I am looking for. Is it possible to use netsh ...
0
votes
0answers
11 views

Will pfctl -sr show ordered rules when using -o profile?

When I enable the -o profile option with pf will pfctl -sr show me the new order of the rules?
0
votes
1answer
29 views

How to set up routing tables in EC2, so that ping works

I have a wide open security group which I rely on for instances to be able to connect. I also have a private network of 172.*. addresses, as shown here: What do I need to do in order to allow ...
0
votes
0answers
39 views

EC2 Security Groups and Postfix

I am having some difficulty getting ports open on EC2. I setup an EC2 instance and opened up SSH (tcp:22) initially. Then I configured Postfix and was successfully able to connect (telnet to port ...
3
votes
2answers
54 views

How do I find out where my IPTables rules are being stored?

I working on a Debian server and I'm trying to figure out where my IPTable rules are being stored. From looking around on the internet I've found there is generally two locations were these are ...
1
vote
0answers
15 views

`ufw insert 1 deny to any` not working

ufw insert 1 deny to any ufw enable ufw status Status output: Status: active Logging: on (high) Default: deny (incoming), allow (outgoing), disabled (routed) New profiles: skip To ...
8
votes
2answers
189 views

Is it reasonable to use Nagios to check that a service is NOT available?

Suppose I have a server with a private interface and a public interface. Public might have things like HTTP(S) servers, private might have MySQL and SSH. Obviously Nagios is useful to check that the ...
2
votes
1answer
336 views

CentOS 7 Firewall Configuration

In CentOS 6 I could type setup from the command line and I would be presented with a set of tools, one of them being Firewall configuration. I can still do this in CentOS 7, except the list no longer ...
0
votes
0answers
24 views

OpenWRT firewall redirect punch through

I am using an OpenWRT based firmware on a Netgear router as part of a research project that links the router to an existing broadband router to allow members of the public to access the internet via a ...
0
votes
0answers
12 views

Checkpoint Firewall - R75.3 - how to view time of recent CLI change

I'm trying to figure out when a colleague processed a change in the last couple of days. Very in experienced in expert or router modes. Any tips? Regards!
0
votes
1answer
78 views

Bypass squid proxy [closed]

I have a transparent squid proxy that I am using to filter out ads from web traffic which works well enough, however I would like to have the option of bypassing the proxy as well at times when I do ...
0
votes
1answer
36 views

Iptables -j REJECT unavailable [duplicate]

I am somewhat new to Linux networking and running in to a issue with iptables I am just not making any headway on. Two notes before I get in too it. iptables is version 1.4.14, and it is a custom ...
0
votes
1answer
73 views

iptables / firewall blocking traffic (even SSH) on my dedicated box

Can someone please take a look at this iptables data and tell me what's wrong with it? The paste 24h has been a nightmare, I couldn't even SSH to my server, and the only way I could manage to get the ...
2
votes
1answer
93 views

What happen if first rule of first iptable chain target is `RETURN`?

The article Linux Firewall Tutorial: IPTables Tables, Chains, Rules Fundamentals define the RETURN target value as follow: RETURN – Firewall will stop executing the next set of rules in the ...
-1
votes
1answer
40 views

OpenVPN, How to filtering client

I have a problem with limiting "client" with my VPN server. I was reading the FAQ about using iptables with disable option client-to-client, but i cannot run it. The question is how correctly allow ...
0
votes
0answers
30 views

HTTP not redirecting to HTTPS, Router or Firewall Issue?

I manage an application server in a different department from IT and since they implemented a new firewall as part of emergency maintenance, users are having issues accessing the web app(Blackboard). ...
0
votes
1answer
19 views

Setting up a VPN with rules who can connect with who

For delivering updates and support on software I've been working on I have been thinking about setting up a VPN server. The idea would be that the clients are constantly connected but only the traffic ...
2
votes
0answers
43 views

What might be causing specific IPv6 HTTPS servers to send an excessive number of RST packets? [migrated]

Client browsers on my IPv6-enabled home network hang and time out when attempting to load https:// URLs from specific IPv6 sites, such as ones operated by CloudFlare. In those situations, the live log ...
1
vote
1answer
61 views

Limit Connections Per IP Windows 2008 R2 x64

Hello I have been searching for a solution to this, what I want to accomplish is the ability for me to define firewall rules that will limit the amount of connections to certain ports from the same ...
-1
votes
1answer
138 views

Opening port 587 on Debian running on Google Compute Engine

I'm attempting to use port 587 for my server mailing purposes. However, I can't seem to be able to unblock the port even after trying the following : Adding port 587 to the Google Cloud network ...
0
votes
0answers
35 views

ISC DHCP Server - Client Uplink Is Not Working

Running a DHCP server, client(s) does not have up-link (0Mbps) and has a downlink (50Mbps.) I am setting up a gateway/router on a PC running Debian Wheezy with ISC-DHCP. I have 1 WAN (eth0) and 2 LAN ...
0
votes
1answer
36 views

WatchGuard XTM510, Dialed in VPN (PPTP) users cant Ping hosted datacentre machine on BOVPN

we have a BOVPN from our network 192.168.1.0/24 range to some hosted environments at a datacentre. 172.15.0.1/20 any machine on our internal network ranges can communicate with the systems at the ...
-3
votes
1answer
56 views

How to create inbound rule on Windows firewall for custom service?

Service is written in C#. It is a server that requires opening port 8080 for inbound connections. It runs as Local System and has unrestricted SID (created by sc tool). If I add in Windows Firewall ...
3
votes
0answers
31 views

Searching Objects on SonicWALL (NSA 2600, SonicOS 6.1)

Ok, this may sound like a dumb question, but does the SonicOS web interface not have a search option for object definitions? One of my clients recently decided to replace their Astaro Security ...
0
votes
2answers
41 views

Assign IPs to programs/processes

I need to assign different IP addresses to different processes (mostly PHP & Ruby programs) running on my Linux server. They will be making queries to various servers, including the situation ...
-2
votes
1answer
42 views

iptables prerouting with match-set

I'm trying to create a iptables entry to redirect a list of ip's to another port. Using ipset I can setup and add lists of ip's and reject them with this command iptables -t nat -A INPUT -p tcp -m ...
0
votes
2answers
31 views

Access to multiple FTP servers through a firewall

I have 4 web servers for different tasks, behind a firewall. I have a single public IP and I want to connect to my servers with FTP with this IP. I tried to use a different port but no results. So my ...
0
votes
0answers
24 views

2 Vlans on a Cisco PIX 515 with DMZ

I have to install an application server on a networks dmz. The application will sit on a network but has no interaction with the other devices on that network. I was thinking that the firewall(Cisco ...
0
votes
0answers
17 views

how to use --rdest flag in recent table

Here is why I try to accomplish: When receiving a UDP packet, put IP address of the source address in recent table. sudo iptables -A INPUT -p udp --dport xxxxx -m recent --set -j ACCEPT When send ...
-1
votes
1answer
64 views

How should I properly block outgoing http traffic with iptables

I'm experimenting with iptables, and I'm trying to allow all outgoing requests for HTTPS, but to block HTTP. I have the code below; Chain INPUT (policy ACCEPT) target prot opt source ...
3
votes
1answer
65 views

Linux NFLOG - documentation, configuration from C

Several different places (e.g. http://wiki.wireshark.org/CaptureSetup/NFLOG) recommend using Linux's "NFLOG" firewall module to capture packets generated by a particular UID, like this: # iptables -A ...
-3
votes
2answers
38 views

Login before using the internet

How do you setup a user login page in order to connect to the internet just like the one at McDonalds and Radisson Blu? What kind of setup is that? We are in school and would like to have that kind ...
0
votes
1answer
100 views

UFW — How To Open Port 8080

I thought I had allowed connections to http-alt (8080) using ufw. My reasoning for thinking this is because: gerrit2@localhost:~$ sudo ufw status Status: active To Action ...
0
votes
3answers
120 views

Expose a mongodb streaming data server that's behind a firewall, to the internet

I have streaming data on a Windows platform that I capture into Mongodb at fairly high rate of about 800 data points per second. I wish to have access to this data from outside the company, but the ...