A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

0
votes
0answers
8 views

ICMP packets in firewalld zones

How are the zones in firewalld configured w.r.t ICMP packets? and do they act differently for interfaces and sources? 1. How firewalld route ICMP packets? I would assume the main zones act as they ...
0
votes
1answer
9 views

Opening a port to access a service in an isolated LAN

There is an isolated LAN (completely isolated, does not access outside and outside can't access it). But one of the server has 2 NICs, one of which is on our dev LAN and the other one in the isolated ...
0
votes
0answers
11 views

Windows firewall profile for USB Ethernet

I am using Windows 7 and on my notebook I have an ethernet port which is connected to the companys network. I connected a USB Ethernet to connect other devices through a static IP. I wanted to block ...
0
votes
2answers
26 views

Simplest way to secure debian server on LAN

I currently have a basic debian server setup and connected to my LAN. Am I right in thinking that if I remove the gateway from the network configuration then the box will be unable to communicate ...
0
votes
0answers
8 views

local port forwarding with failover

There is a number of similar though not identical processes (worker processes) running on the localhost and listening each on its own TCP port, let's say process1 is listening on port 10001 process2 ...
1
vote
1answer
27 views

Port forward linux iptables

My current network setup consists of a physical nic eth1 receiving my public ip from the modem. Next I have kvm/qemu virtual machines running on a virtual network using the ip range 192.168.122.0 - ...
0
votes
0answers
7 views

use of secondary public IP subnet in Sonicwall NSA firewalls

I have a Sonicwall NSA 3500/4500 firewall. I have a primary block of public IP addresses that are working fine but I need to utilize a second block of IPs that are routing over the primary from the ...
2
votes
1answer
48 views

Securing Windows Server 2012 from the internet

I've placed my direct internet connection into the public profile for the firewall and started disabling every rule to block all but RDP. The only rules I am not sure about are these Core Networking ...
1
vote
0answers
18 views

Running a Windows Server connected to the internet [closed]

I've been running Linux servers online for years so I know security very well for *NIX. However, I recently setup a Windows Server Network at home and decided I wanted to connect one of my Windows ...
0
votes
0answers
5 views

Route some rule on App Rules to second wan on Dell Sonicwall TZ215

Im using Dell sonicwall TZ215 with firmwire SonicOS Enhanced 5.9.0.4-127o and have 2 wan connection. The question is, is it possible to route some rule on App rules to second wan? I'm already try ...
0
votes
0answers
13 views

Opening up the firewall to Google Cloud Messaging

I'm trying analyse the firewall requirements for push notifications on iOS and Android devices. It's relatively simple for iOS: they need the entire 17.0.0.0/8 address block to ensure APNs runs ...
0
votes
1answer
32 views

How to create advanced rules with firewall-cmd?

I want to create a rule using firewalld that uses criteria username or userID and maybe one other module criteria. In iptables, I think you can do things like iptables -A OUTPUT -m owner --uid-owner ...
1
vote
0answers
14 views

Dual WAN and NAT on ZyWall

I have Zyxell ZyWall USG-50 router firewall and I want to configure dual WAN navigation. On WAN1 I've 10Mbits connection and on WAN2 I've 100Mbits connection. I want my LAN to navigate with WAN2 and ...
-1
votes
1answer
33 views

Centos 7 postfix send mail only — what firewall settings? [closed]

I'm trying to set up a postfix mail server on a local machine behind a Sonicwall. I already have gmail account for normal use @domainname.com but this postfix server is mainly for sending mails from ...
0
votes
0answers
22 views

Windows server 2008 r2 firewall only affecting one interface

I am trying to secure this Windows 2008 R2 server for outside traffic (don't care about inside at the moment). I have two nic's, one for domain and one for outside (two different ip's). By default ...
0
votes
0answers
15 views

Enable IPSec on Firewall

I am using ProfitBrick for my Cloud infra. However, if I enable their firewall, IPsec does not pass through. The ports opened on firewall are: TCP 53 TCP 51 TCP 4500 TCP 500 UDP 4500 UDP 500 Does ...
0
votes
0answers
6 views

openvpn ping: packet response is done on a different (?) port

I am having difficulty pin pointing the exact location of a problem with my openvpn which is running on a Linux server, which sits behind a modem that is in turn connected to the Internet through a ...
0
votes
1answer
25 views

Does ColdFusion use TCP Ports?

I am trying to access a link on our network. Whenever I try, the page times out. I have discovered that this link is a Adobe ColdFusion web page. Does ColdFusion use a TCP port other than port 80? I ...
2
votes
1answer
57 views

How to find Check Point firewall version from command line

On Check Point firewall's command line, how can I find its version? Major version, minor version and optionally build number.
0
votes
0answers
24 views

Simple IPtables Script for Whitelisting (Amazon Endpoints)

I'm attempting to lockdown an Amazon EC2 instance which has a single open port for Amazon SNS. I can't use security groups to restrict the port as the IP is forever changing, so it must be open to all ...
1
vote
1answer
41 views

TLS Error: Handshake failed. Openvpn Server is behind NAT on dynamic ip

this is a common problem that appears easily in searches and seems to be related to the firewall , yet I can't seem to figure out how to fix it. I have actually asked before, but this time I come back ...
1
vote
0answers
18 views

Exchange 2010 sp3 RPC connectivity between separate physical sites

Good evening! I have installed Exchange 2010 a few times in my life but never in an environment like this. Please don't judge me for this architecture, it wasn't my idea! ;) I have two physical sites ...
4
votes
0answers
95 views

What's the best way to simulate being behind China's Great Firewall? [closed]

We're having issues with an iOS app of ours that uses in-app purchase to unlock downloadable content - but it seems only from China. We see many negative reviews from China for this reason. Our in ...
0
votes
1answer
31 views

Unable to connect to AWS RDS instance

I have set up a AWS RDS instance. I am using "end point" as hostname to establish the connection via MySQL workbench. But the connection is failing. I am sitting behind a company firewall and as per ...
0
votes
1answer
26 views

Saving SonicWALL NAT Policies settings

I have a SonicWALL TZ model that I manage. Now in the [Network] --> [NAT Policies] there are some policies added that have their own checkbox in the [Enabled] column (the other ones have a green ...
1
vote
1answer
37 views

Issue with local php fopen scripts returning 404 on CentOS

I'm having some trouble today with php scripts running on our server which use file_get_contents or similar fopen functions. I think this is an openssl or firewall error but I'm quite new to server ...
0
votes
1answer
20 views

External IP becomes unreachable sporadically

I have a very strange problem - We have a lease line with 50 odd external IP addresses on it. We do a 1:1 assignment and Outgoing IP assignment to interfaces on a pfsense proxy server. For each ...
0
votes
1answer
30 views

Ubuntu Iptables FTP passive mode

I have a problem when trying to define iptables rules in my ubuntu server. I reject all connections and allow some like FTP. The problem is that in passive mode I can connect but I cannot list ...
0
votes
1answer
80 views

Cisco ASA 5550 rebooted itself, logs cleared

we had Cisco ASA5550 in Active/standby mode which worked without any issue for over 1 year. Recently, we started having issue where the VPN tunnels would drop to sites and have internet outages. We ...
0
votes
1answer
36 views

Troubleshooting “Network is unreachable” from within an Amazon VPC

An EC2 instance is running Amazon Linux in a public subnet in a VPC. Here are the outbound rules for its security group: ALLOW TCP on port 80 to 0.0.0.0/0 ALLOW TCP on port 443 to 0.0.0.0/0 ALLOW ...
0
votes
0answers
67 views

Mikrotik OpenVPN Server dropping OpenVPN Connections - Connection reset, restarting [0]

I was able to connect from within my local network connection but from remote site locations the connection looks to be dropping. Could this be a possible firewall issue? I see a connection but it ...
3
votes
1answer
64 views

Firewall: allow all traffic from sources authenticated via. an open ssh connection

I'm looking for a way to avoid the editing of the firewall rules all the time on test and dev servers. I don't want to open up all ports. So I thought maybe there is a way to allow all traffic from ...
-1
votes
1answer
40 views

No Internet on router with pfSense [closed]

Sorry in advance if a similar question has already been posted. I am with Sky for broadband and have a router providing DSL connectivity. I have a cheap 64 bit desktop PC running pFsense as a ...
-2
votes
0answers
39 views

OpenSuse: How to allow an outside network to access the local network?

I want to connect vlans of two separated networks I administer and it's almost complete, Allow me to describe the situation: Network A's firewall is a FortiGate 1000C and the vlan is 192.168.2.0/24 ...
-1
votes
1answer
34 views

Iptables DNAT working in my own network, but not through VPN

For some reasons I need to switch a server ip to another ip, in order to be seen by another computer elsewhere through vpn. So I'm using iptables (didn't know any of that until yesterday) and testing ...
0
votes
2answers
66 views

Windows Server 2012 unable to access specific SSL page

This problem really boggles the mind. I have a standard Windows 2012 server with windows firewall enabled. Using Chrome, I am unable to access a certain HTTPS website while other HTTPS websites can ...
0
votes
1answer
61 views

Cannot open port 1337

I am struggling with iptables firewall to open port 1337 externally. My iptables file looks like this: *nat :PREROUTING ACCEPT [0:0] :INPUT ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :POSTROUTING ACCEPT [0:0] ...
1
vote
0answers
28 views

External Access to Internal Network and Websites — Microsoft Networks

I need to be able to expose a set of "internal" web sites to Internet users somehow. Please bear with me as network engineering isn't my forte. I'd appreciate any insight or suggestions to this task. ...
-1
votes
1answer
31 views

Block Dynamic DNS update requests

I need to block all dynamic dns services update requests from my network so that no dyndns client be able to update its IP. Do the major dyndns providers use a standard protocol or each one uses its ...
0
votes
0answers
29 views

PHP FTP Pasv mode on CentOS 7

I need help with connecting to a FTP server and using the passive mode. They told me I need to open ports 20, 21 and 5000-5100 range. I've got a virtual machine running CentOS 7 on a dedicated server ...
0
votes
0answers
15 views

Pfsense firewall log format and packets data length

In pfsense firewall logs there are many fields described here: https://doc.pfsense.org/index.php/Filter_Log_Format_for_pfSense_2.2 I would like to get some statistics from these logs about traffic, ...
1
vote
3answers
36 views

Connect from one LAN to another LAN through SonicWALL

I have a LAN (LAN 1) on the 192.168.1.1 subnet, and another LAN (LAN 2) on the 192.168.2.1 subnet. LAN 1 is on the X0 interface, LAN 2 is on the X4 interface. I want to be able to access a device ...
0
votes
0answers
34 views

DSL modem in bridge mode but router not accessible from the internet

I have a DLink ADSL modem which I have put into bridge mode and connected to a Fortigate 200A firewall. The Fortigate is able to connect through PPPoE and receives the static public IP. I can browse ...
-1
votes
1answer
27 views

ruleset iptables- user defined chains [closed]

I am very new in iptables. Learning to use them. I got a hang of some basic commands from https://help.ubuntu.com/community/IptablesHowTo. However, I didnt find good explanations of examples of a ...
1
vote
0answers
81 views

How to simulate network partitions on windows? [closed]

Working on a project which implements a clustering algorithm. One important property of the clustering is to respect guarantees when face a network partition. To prove that clustering works I need a ...
0
votes
1answer
63 views

Hyper-V disable internal firewall

How can I disable a firewall on my internal network? Problem I have a Hyper-V on a Windows Server 2012 R2 with one VM, when I disable the firewall I can get internet on my VM, but when I turn on ...
0
votes
2answers
71 views

Is there any disadvantage to putting a modem in bridge mode

In order to prevent the need of port forwarding and double natting I plan to put a modem into bridge mode. Are there any side effects or problems that could come of placing a modem into bridge mode in ...
0
votes
1answer
16 views

Not able to connect to GitHub though the Firewall

We have Fortigate Firewall install on the network, What port I should open to connect to the GitHub repository using the https:// protocol. I found a similar question , And allowed the port suggested ...
0
votes
0answers
15 views

Will enabling Comcast Business Gateway Port triggering lock me out?

Device info: SMC Networks Firmware 3.1.6.56 I am remotely logged into a server and configuring the "Comcast Business Gateway". At the current moment, Within the Firewall >> Port Configuration >> ...
5
votes
1answer
295 views

IIS FTP Not Working Remotely Windows Server 2012 R2

We are attempting to duplicate our server in the Azure cloud. Both are Windows 2012 R2 servers. FTP works on the original server but not on the duplicate server. Additionally, the duplicate server ...