The firewall tag has no wiki summary.
1
vote
1answer
29 views
FortiGate 60C and Port Forwarding
Without going into too much detail, I'm in over my head due to recent staffing changes and a lot of extra responsibilities falling into my lap that are outside my current area of expertise. So any ...
0
votes
0answers
18 views
are these firewall settings correct on my freebsd server to allow postfix to pass trough?
I'm trying to set a mail server up on my freebsd 7 virtual host.
But when I try to send or revive an email the log files tell me 'connection refused':
Feb 8 17:54:42 vps-id2247 postfix/error[29886]: ...
2
votes
2answers
52 views
Possible to block site using my IP as their nameserver address?
Last week while going through my log files I noticed that a site started to appear sending multiple A and AAAA requests for their ns1/ns2, www, and two subdomains to my DNS server every few seconds, ...
1
vote
2answers
47 views
Linux Firewall authentication based on MySQL?
I have a linux server that many users connect to. I use Squid for http access but I need a software that can grant access control to different ports based on a MySQL database.
IPtables is great but I ...
1
vote
2answers
40 views
how to make chained ssh work with git
I am trying to get round a silly firewall issue. I am trying to chain ssh access to git through a proxy ssh:
~/git-chain:
#!/bin/bash
ssh hosticangetto ssh $*
# End
And then:
$ export ...
-1
votes
1answer
24 views
Debian 6. What would be a good UFW initial firewall configuration?
I opened ports 22 25 80 443 993 995
The output of ufw status is...
Status: active
To Action From
-- ------ ----
22 ALLOW Anywhere
25 ALLOW ...
2
votes
1answer
40 views
Firewall recommendation for Debian 6
What would you recommend to a firewall newbie for a firewall solution that can be handled remotely, maybe either by ssh or the browser?
-2
votes
0answers
54 views
Configure Windows 7 and Ubuntu firewall to prevent LOIC or HOIC attacks [closed]
My laptop is connected most of the time to college network, and I want to keep my laptop safe from LOIC attacks without having to monitor any suspicious activities from any of the IP on the network. ...
-3
votes
0answers
43 views
Overcoming a regional government blocking my site [closed]
My web service is being periodically blocked by a regional government in a certain part of the world for political reasons.
Users trying to access my service are blocked and redirected to a page ...
2
votes
4answers
65 views
How do I determine which firewall ports need opened for web access to a remote system?
I am a web developer, and am working with a client who has a web service that is located at a specific IP/URL. Access to this is filtered by a firewall, so we need a few of our local machines and our ...
4
votes
2answers
42 views
Iptables - Block https response only
I'm quite new to Linux and using iptables. Here is what I am trying to accomplish:
I have an ASP.net client that talks with a web service hosted through web-logic on linux. The communication is over ...
0
votes
0answers
14 views
SBS server and Windows XP service pack 3 firewall issue
I have an issue with one of my client networks running SBS 2008 and Windows XP service pack 3 on the clients. Some, but not all, of the computers are not giving me the option to disable the windows ...
0
votes
1answer
24 views
Configure SQLServer 2000 Win7
I've got SQL Server 2000 running on Win7. There's no management tools so I wonder how do I configure/interact with the server. Main purpose for me is to enable remote connections. I know how to do ...
1
vote
0answers
18 views
Connect to Orange interface in IPCop
I am using IPCop with a red-green-orange configuration. I am trying to access my webserver on the orange interface, from a computer on the green interface, both of which are inside my firewall.
When ...
2
votes
1answer
48 views
Ban Specific IP's on VPS
I have a case where I want to ban specific IP address on my VPS.
To ban the IP's I use SSH Access with this code:
iptables -I INPUT -s my-ip-here -j DROP
The case wich I want to ban is as ...
3
votes
1answer
63 views
pfSense setup recommendations
I want to setup a WAN, DMZ and private LAN.
I want to do a Deny ALL and just open the 4-5 ports that I need to DMZ and a Deny all on the private LAN
on the DMZ are a web web servers, all have public ...
0
votes
2answers
104 views
Alternative to pfSense for a production-ready firewall solution hosted in ESXi
I'm looking for an alternative to pfSense (2) that can be virtualized in VMWare ESXi. I've experienced several problems with pfSense to date and I feel like it is not a totally finished or polished ...
0
votes
0answers
14 views
AdTran Netvanta - any reason it should NOT be used as a firewall?
Historically, the consulting company that has recommended and set up the network devices for our company have installed AdTran routers. Then, they would put in place a secondary device for firewall ...
0
votes
2answers
83 views
Iptables not persisting after reboot on CentOS 6.2
I've tried adding a few rules to my iptables but they don't seem to be saving. In order to save them, I've tried running iptables-save and service iptables save. Each time I have run either of those ...
7
votes
5answers
91 views
Managing parallel rules for ipv4 and ipv6 iptables?
We've recently started experimenting with IPv6, and one of the first issues we're having to contend with is dealing with a completely separate set of firewall (Linux iptables/ip6ables) rules for the ...
0
votes
1answer
51 views
Connection not being routed through VPN
Let's say I have a server at 12.34.56.78 that provides PPTP among other things. Right now I'm on a network that has most outbound ports blocked, and I'm using my VPN to break through the firewall. My ...
1
vote
2answers
62 views
Is it possible to assign a VLAN to an alias of network interface in pfsense?
My goal is to build a redundant pfSense cluster (as described in this article : http://doc.pfsense.org/index.php/Configuring_pfSense_Hardware_Redundancy_(CARP)
The problem is that i only have 2 ...
1
vote
2answers
66 views
What would a simple DMZ look like for scenario of database server and (web server+middle tier)?
I have two Linux servers:
The first contains an Oracle 11G database that includes an Oracle HTTP Server
The second contains a Java middle tier plus Apache webserver and Apache Tomcat.
Someone ...
0
votes
0answers
14 views
Draytek Vigor 5510 pro blocking attachments un-necessarily
I have installed Draytek vigor pro 5510 which I may say is one of the hardest ones on the planet to configure but I have now gained success with it in blocking URL(s) successfully but when I implement ...
0
votes
1answer
105 views
FTP Transfer Very Slow When Windows Firewall Enabled
We have a scheduled task that transfers a large file (~130 MB) between two Windows servers using the Windows command-line FTP program. It's painfully slow (taking about 30 minutes) and occasionally ...
2
votes
2answers
32 views
Rate limiting (cutting off) if exceed n connections per minute
What do you suggest I use to rate limit incoming http connections (get/post) based on n connections per minute?
If a particular client makes more than n connections in a given minute, drop all ...
0
votes
2answers
46 views
SSL FTP fails on Windows 7 but not Windows XP clients
We currently use a free SSL-FTP client called Move-It-Freely to transmit data from a custom data entry program at over forty facilities scattered around the state to our central server. Under XP, it ...
2
votes
2answers
58 views
IP Address Conflict with Router/Firewall
I've been having IP issues with my local box for a couple months now. Usually when it starts acting up I don't have the patience to look into it, so I just drop onto DHCP, but this morning I've ...
-1
votes
1answer
46 views
Run web server behind router which I can't change anything in [closed]
I'm currently at a schools network and can't change anything in the routers configuration but I still want to be able to run a web server. I've scanned the router for some open ports and only found ...
1
vote
3answers
59 views
Best way to secure a Windows VPS
I plan to run a web server on a Windows VPS. I want to secure the machine with a firewall, and I thought to open only ports 80 and 3389 (to connect with RDP). Is this a good choice? And what do you ...
7
votes
2answers
160 views
When an IP or a block of IPs are assigned to you, do the network admins just add them to a router?
Let's say there is a router to the internet and a router separates your network from others within a data center.
When the data center provided gives you IP addresses, do they just take a [set] of ...
2
votes
1answer
49 views
Juniper SRX210, How can i enable the port 554, 9001 for 192.168.1.151 local IP?
I have been strugling to solve this but still i can not fix it. I have 192.168.1.151 PC and it has 554 and 9001 TCP/UDP open. But i need to publicly access that. In my juniper srx210 i have this ...
2
votes
2answers
92 views
Need help choosing main cisco WAN/firewall unit ($20kish budget) [closed]
Our IT director has left for greener pastures, and I'm acting as the interim director while we find someone new (I manage the Helpdesk). He budgeted about 20k for a new front end to our internet ...
-1
votes
0answers
42 views
FTP Linux Proftpd Entering Passive Mode and then times out failed to recieve directory listings
I was making a c# ftp winform interface when ran into problem of connecting with server. it gives error Entering passive mode(xx.xx/// and request times out, i am using debian linux, ftp server is ...
0
votes
1answer
89 views
how to make curl uploads faster with firewall
We recently moved a new server and are facing the slow upload issues . We suspect this because of firewall . how do I make sure applications like ftp,curl become faster with firewall.
Any inputs ...
-2
votes
1answer
115 views
Can an attacker exploit the vulnerability of the firewall to access the www server?
What happens if an attacker has found a technique for sending packets through the firewall to the DMZ without the packets being checked?
Suppose the attacker doesn't know the internal addresses of ...
0
votes
1answer
40 views
File uploads taking more time
We recently moved to a new server. We have observed that the file upload done from the ftp command is taking around 5sec for 5MB file. But same file uploaded through CURL command is taking about 140 ...
-1
votes
2answers
26 views
Server: firewall setting
we just got a new server: CentOS 5, (linux) on 64 bit.
How do we see and change the firewall setting? - especially unblock PORT=8888 and PORT=9999 (for two java applets).
p.s. we've tried iptable - ...
1
vote
1answer
104 views
Smoothwall Express interface issues
I have a SmoothWall Express box that is currently configured with a Green and Purple interface. Both interfaces are in the same /24 subnet (which seems odd to me). The green interface (address of ...
1
vote
0answers
52 views
Virtual networks connected to a computer acting as firewall (KVM)
I have successfully created a schema like this with VirtualBox, but now I have to do a final project and I would like to do it with KVM and Virtual Machine Manager (virt-manager).
I am having some ...
0
votes
2answers
63 views
NFS support in iptables (or other firewall)
How do I enable NFS mounts/shares with iptables with DROP policy?
NFS uses dynamically assigned ports, thus it is difficult to use with firewalls.
I have an NFS server and a few clients.
I would ...
0
votes
0answers
31 views
Identify Deprecated Rules on Checkpoint Firewall
I've been asked to find the deprecated rules among the thousands of rules in our Checkpoint firewall.
I could do it by writing a perl program to analyze the log and lists of objects & rules, but ...
0
votes
0answers
13 views
How can I use an extra desktop as a basic home firewall? [migrated]
I have an extra desktop PC with 2 NICs that I'd like to use as my home firewall. I'll install a linux distro meant to be used as a firewall on the desktop.
I was thinking of placing it in between the ...
2
votes
3answers
137 views
How to block ssh from a certain area
This might sound like a bit of a strange question, but I've just taken a sample of over 80 IPs which have failed SSH authentication, and I've mapped them using an online mapping tool.
All of them ...
1
vote
1answer
46 views
TCP/IP ports necessary for CIFS/SMB operation
If I want to allow Windows networked drives between two firewalled computers, do I need to open ports 137-139, or is port 445 sufficient? I have to submit a form and get approval to open firewall ...
0
votes
0answers
19 views
Barracuda Spam Firewall - Multiple Destination, Same Domain
Is there a way to configure a Barracuda Spam Firewall to deliver messages to multiple destinations? I have a mail server and a backup mail server and would like to deliver messages to both to keep ...
0
votes
2answers
47 views
Shorewall enabling MySQL port
I've recently set up an ubuntu server to host my site - I need to open up port 3306 for MySQL access on my server.
I'm currently using shorewall on my server - how can open incoming connections to ...
0
votes
1answer
50 views
nmap external localhost with iptables
I have a status monitor that I wish to set up using nmap to show all my externally open ports. Naturally nmap came to mind.
Unfortunately I use an iptables firewall and allow all traffic on the ...
0
votes
1answer
34 views
Replacing ISA firewall, on SBS 2003, with hardware firewall and what to do with the redundant NIC
We currently have a SBS 2003 with 2 NICs - one LAN side, one WAN. The SBS has an ISA Firewall. We are replacing this server with new hardware and SBS 2011, in the near future.
As part of this change, ...
2
votes
1answer
52 views
Forward port on same machine?
I'm trying to forward an existing port for an application which can only listen on one port.
The problem is the program and the firewall is on the same computer (Windows Server 2008 R2).
For ...
