A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

0
votes
1answer
9 views

How to change the webgui password in pfsense from a console?

is there any way to change the password of the webgui administrator user in pfsense from my console? Just to mention i didn't locked my self out from the webgui. Regards, ankso
0
votes
2answers
40 views

My ubuntu server won't allow loopback wget

I have the following rules on my Ubuntu Server 14.04: #!/bin/sh # Flushing all rules iptables -F iptables -X # Setting default filter policy iptables -P INPUT DROP iptables -P OUTPUT DROP iptables ...
-1
votes
0answers
6 views

ezvpn between router 819 & fortigate firewall [on hold]

I want to configure Remote access easy VPN configuration between Fortigate firewall as server and cisco 800 series router as client. Kindly share the configuration for both fortigate firewall and ...
0
votes
1answer
49 views

Nginx, ModSecurity, IP Tables blocking WordPress dos/ddos attack

For the past 14 days I have had my website being hit by millions of WordPress installs over the world which .htaccess is kind of coping with but I am trying to get something to kick them before ...
0
votes
1answer
26 views

Cannot open samba ports on Ubuntu 14.04

I'm newbie to linux firewalls root@Ubntu:~# ufw status verbose state: active logging: on (low) Default: deny (incoming), allow (outgoing), disabled (routed) new profiles: skip 137,138/udp (Samba) ...
-1
votes
0answers
12 views

QoS settings for Wi-Fi calling on pfSense? [on hold]

The new version of iOS 8 as well as Android supports Wi-Fi Calling with multiple cellular providers including T-Mobile in the US. I am currently running pfSense as my primary Internet gateway. I ...
0
votes
1answer
18 views

Best Approach for Accessing Git Repository Behind SSH & VPN [on hold]

I have a CompanyMacBook running OS X that connects to a company VPN (f5 big ip edge client) to access the companies internal git repositories. Now, I have enabled SSH remote access on the ...
0
votes
1answer
25 views

Do ephemeral ports need to be open on the network firewall in order for nginx and sshd to work properly?

Preamble: So, before I actually ask the question, I'd like to point out that I'm somewhat apprehensive about posting this because even as I'm typing this out it it feels like I'm asking someone to ...
1
vote
3answers
22 views

Azure VM: netsh advfirewall firewall

Being the idiot that I am, I ran netsh advfirewall firewall on our VM and managed to block all the ports. Naturally, I am no longer able to access the VM through RDP. Apart from getting the support ...
0
votes
1answer
19 views

Is netbios required with samba -> win7 and what ports are needed for view/read/write functionality?

Basically I do an IT course at my college (United Kingdom) and obviously with it being a college, they have web filters and a restrictive firewall. To bypass the web blocks and to access my rented ...
0
votes
1answer
19 views

UFW: can't connect to SSH with “to 127.0.0.1” option

i tried to restrict the SSH connectivity to a subnet and wanted to set the "to" part to localhost. (Server will be routing over bridge device to virtual servers, and i wanted do drop ssh connections ...
0
votes
0answers
26 views

Filtered port 22 with no firewall settings

I'm trying to connect to an sftp server from a CentOS 5.5 server. The connection is never established. When I run the command: nmap -p 22 -P0 <sftp server address> PORT STATE SERVICE ...
0
votes
1answer
44 views

Port forwarding with 2 interfaces not working

I'm running debian and I've got the following network configuration: eth0 Link encap:Ethernet inet addr:192.168.16.6 Bcast:192.168.16.255 Mask:255.255.255.0 inet6 addr: ...
1
vote
1answer
34 views

Avoiding split brain DNS for a Fortigate Web Proxy

How can I avoid needing a split brain DNS setup with the setup outlined below? Background I have what "should" be a pretty basic setup using a Fortigate 200D. 'Third leg' setup using a DMZ ...
-2
votes
1answer
39 views

Prevent/Stop Namespace Mining [duplicate]

Enviroment: Plesk v12, latest Windows Server 2012 SmarterMail My web hosting provider told me that someone hacked into my server a couple of weeks ago and was hitting various mail servers (Gmail, ...
1
vote
1answer
52 views

Troubleshooting blocked/dropped ports on Sonicwall firewalls

Short of enabling packet capture/monitor on specific rules/policies, is there an easier way to see or to setup a Sonicwall to show blocked ports/services (realtime or as a report)? I think packet ...
3
votes
2answers
155 views

Windows Firewall - blocking IP address ranges en masse - performance considerations?

One of our services is an extranet for the exclusive use of our 200 employees across the UK. We're seeing a huge number of login attempts from China, Russia, Ukraine and Nigeria. I have large lists of ...
1
vote
1answer
105 views

Can firewall block packets visible in Wireshark?

Wireshark shows that an RTP package is received on a PC. Is it possible that despite detection by Wireshark, something (firewall?) is still prevent the application listening to the required port on ...
0
votes
0answers
25 views

Overactive SQL Injection Attack Firewall Rules

We have a web app that our client's employees use to submit signatures from customers using HTML5 canvas to create PNG images. The signature pad is converted to base64 encoded HTTP POST data. Our ...
0
votes
0answers
13 views

dynamic IP firewall configuration for public-yum.oracle.com and clam AV

I currently have Clam AV installed as the AV solution for an Oracle Linux environment. The firewall that I use allow filtering only through specific IPs and thus currently, I am not able to configure ...
-3
votes
1answer
19 views

juniper srx-100 firewall configuration [closed]

I am configuring proxy-arp and after commit the following error occurs. Proxy ARP IP address range [203.215.166.85 203.215.166.86] overlaps with interface IP address range [203.215.166.86 ...
0
votes
0answers
26 views

NSClient++ traffic dropped only for external IP traffic

I am trying to use NSClient++/Icinga to monitor our Windows server boxes at remote locations. I have tested the NSClient on our internal network (192.168.1.*) and it works as expected with the server ...
1
vote
2answers
108 views

Linux/Bash: Test if my server is opened to the Internet programmatically/via CLI [closed]

RHEL 6 and Bash. It would be easy if I had a remote server to just run nmap from, or even curl/wget, but I only have access to servers on our side of the firewall. I know I can manually check ...
0
votes
0answers
26 views

How can I allow NAT from inside to outside and vise-versa when each of my clients will have only one static public IP using an ASA5525-X?

My network topology is pretty basic. My data center provides a router and added a switch just before my cage to provide connectivity to all of the racks. My rack takes the copper drop they provide and ...
0
votes
2answers
27 views

Connection failed between Windows Servers

I'm setting up an infrastructure based on Windows Server 2012. The firewall is turned off and I can't access the Domain controller to check for the group policy. I'm experiencing some connection ...
0
votes
1answer
16 views

What do I need to consider when setting TCP idle timeouts?

What's purpose of having a [low] TCP idle timeouts? E.g., why have a 60 second timeout on a firewall or load-balancer? Is it a memory management or /performance optimization thing? Is there a security ...
0
votes
0answers
18 views

Watchguard XTM 23 blocking company website

The company that I'm working at runs a website and 1 week ago the site started returning 404's whenever anyone tried to access it from our protected network. We immediately checked on the status with ...
-1
votes
1answer
42 views

What is it that makes BSD a popular choice for firewalls? [closed]

What is it that makes BSD a popular choice for firewalls? Is the kernel generally more secure?
0
votes
1answer
29 views

Configure clients to navigate through specific wan. Pfsense

I have a machine with a pfsense running. It is configured with three ethernet cards. LAN 192.168.2.1/21 WAN1 200.41.X.2/24 WAN2 200.41.X.3/24 ISP Gateway 200.41.X.1 This is a connection with 5 ...
-1
votes
2answers
52 views

Block incoming traffic from unresolved IP address

How can I block all the incoming traffic from unresolved IP addresses? I am using CentOS with WHM/cPanel installed. I am getting huge junk traffic and 95% is from unresolved IP addresses and only 5% ...
0
votes
2answers
167 views

Configure firewalld for OpenVPN (server-bridge) in Fedora 20

I've installed an OpenVPN server (server-bridge) on Fedora 20, but I cannot get it to work. I'm almost sure that It's a firewall issue. I'm trying to connect from an OSX client, but I can connect ...
0
votes
0answers
25 views

SonicWall Routing Between VLANS

We have a sonicwall NSA 3500, x4 has 2 vlan interfaces so x4:v300 and x4:v301. Each vlan has an IP v300 is 192.168.100.1 and v301 is 192.168.101.1. I then have x4 connected to a layer 2 only switch ...
0
votes
0answers
6 views

Firewall Ports for Toshiba CIX server

Other then SIP ports: 5060 and 5061 what other ports need to be opened to have a phone set up in a satellite office with via external IP address. Phone Server CIX100 Firewall ASA 5510
0
votes
1answer
42 views

How can I reload IPTables without interrupting existing connections?

I will be adding and removing entries to the script below automatically (adding ports 80/443 with different IP addresses). If I run this script, I am "assuming" that connections will be uninterrupted, ...
0
votes
0answers
26 views

Opening a port range using Open VSwitch

I am locking down a VM on xenserver to allow only port 3389 and the ports required for domain controller authentication on windows. I am trying to do this using Open VSwitch. Locking down and allowing ...
0
votes
0answers
12 views

W2008 R2 SP1, windows firewall dropping zero length packets

I'm trying to harden a Windows 2008 R2 SP1 server, and restrict outgoing packets to known rules. What I'm seeing is firewall log entries showing dropped packets, and the dropped packets are always ...
1
vote
0answers
48 views

Disabling HSTS for managed browsers

What are my options for disabling HSTS both for new sites and for those sites baked into the browser? The use of HTTPS inspection inherently changes the thumbprint of a site by acting as a man in ...
1
vote
1answer
42 views

IPTABLES command that end with ACCEPT or DROP fail on service firewall restart

I have a CENTOS Linux VPS. I have the following in my IPTABLES script to run when my VPN restarts, but I get errors when I do a service firewall restart I've ran each of the commands below manually ...
0
votes
1answer
120 views

I think my server was hacked - how do i know what has been changed? [duplicate]

I have read the following posts which didn't answered my questions: - My linux server was hacked. How do I find out how and when it was done? - How do I know if my Linux server has been hacked? - and ...
0
votes
1answer
45 views

Serving public IP-adresses through two ethernet ports with public subnets, while protecting some interfaces for remote access

Done a lot of research and it's all kind of confusing. Some switches are also firewalls, most firewalls seems to be routers, with or without their own switches, but they're all different depending on ...
0
votes
0answers
31 views

Routing traffic from LAN over VPN link out to 'net; works from router, not from LAN. What route is missing?

I have 3 machines. 2, routers, are connected over a VPN. The 3rd is a PC on the lan behind one of the routers. internet | | ROUTER S1 external: YYY.56.52.56 ...
0
votes
0answers
39 views

ubuntu router configuration problems

My network is configured as follows: ISP Modem <-> Ubuntu (192.168.2.1) <-> Switch (192.168.1.1) <-> devices My device (192.168.1.150) can ping 192.168.2.1 but is unable to ping outside ...
-1
votes
1answer
39 views

Why does this IPTables command create 4 entries?

When I executed this IPTables command: iptables -A INPUT -p tcp -m tcp --dport 9080 -s localhost -d localhost -j ACCEPT iptables -L shows: ACCEPT tcp -- localhost localhost ...
0
votes
1answer
80 views

How do I block all access to machine except port 3389 using Open vSwitch

I can allow access to the machine and block everything else using: ovs-ofctl add-flow xenbr0 "dl_src={mac-address} priority=39000 dl_type=0x0800 nw_dst={ip-address} idle_timeout=65000 action=normal" ...
0
votes
1answer
19 views

Windows Server | firewalling remote connections

In my windows server 2012, In the firewall rule for remote desktop connections I have added so that only MY IP address is allowed to connect, now of course I have taken a precaution and added a ...
0
votes
0answers
16 views

Netsh Command To Block All Traffic Except A Program And A Port?

I discovered that you can use the netsh commands to control the Windows firewall, I am reading all the possibilities but I didn't found yet what I am looking for. Is it possible to use netsh ...
0
votes
0answers
13 views

Will pfctl -sr show ordered rules when using -o profile?

When I enable the -o profile option with pf will pfctl -sr show me the new order of the rules?
0
votes
1answer
37 views

How to set up routing tables in EC2, so that ping works

I have a wide open security group which I rely on for instances to be able to connect. I also have a private network of 172.*. addresses, as shown here: What do I need to do in order to allow ...
0
votes
0answers
52 views

EC2 Security Groups and Postfix

I am having some difficulty getting ports open on EC2. I setup an EC2 instance and opened up SSH (tcp:22) initially. Then I configured Postfix and was successfully able to connect (telnet to port ...
3
votes
2answers
64 views

How do I find out where my IPTables rules are being stored?

I working on a Debian server and I'm trying to figure out where my IPTable rules are being stored. From looking around on the internet I've found there is generally two locations were these are ...