A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

0
votes
0answers
7 views

OpenVPN advanced privileged client access customization

I have implemented an OpenVPN server running on Tomato router (Let's call the router TR) the OpenVPN server is using TUN interface which means connections between clients and servers are based on ...
0
votes
0answers
12 views

Cisco 881W Zone Base Firewall

I cannot ping an Internal system to a DMZ system. I have checked the policy map session and everything time I do a ping the match shows the first ping was matched but none of the other pings were ...
0
votes
0answers
22 views

cisco wireless router not allowing full tcp handshake when in router mode

I have a recently-purchased cisco rv220w wireless router. My setup is as follows: Internet -> asa 5505 -> 10.0.1.0 subnet -> wireless router (subnet 10.0.3.0, public facing ip is ...
-3
votes
0answers
16 views

Red 5 on Win 7 64 loading external but not local [on hold]

Ok, so when I run an install of any red5 exe... lets say 1.o.1...and I input (10.0.0.2) as the ip on the prompt and 5080 as port... local I can see my home screen... but cannot access /install /demo ...
-3
votes
0answers
84 views

What is the best practice to build up a secure connection between networks through the internet in the described case [on hold]

I need to deploy services/servers on MyNetwork to be able to serve the described basic infrastructure: Original image Adding more description: 1. I'm having N Customers with their own LAN connected ...
-1
votes
0answers
29 views

firewall tool for OS X Mavericks (specifically for preventing brute force attacks) [migrated]

Here's the deal: Over the last few weeks, I've noticed a large number of authentication failures for both the sshd service and the screensharingd service on my Mac OS X Mavericks server (running ...
0
votes
0answers
26 views

Opening port 8080 on Windows firewall [migrated]

I am not sure if I am just missing a trick here and it will be something rather simple, or if I am trying to do something that just isn't going to work.. Anyway, I have an asp.net site and I am using ...
-2
votes
0answers
9 views

Redirect to external url [closed]

Looking to redirect internal users to external url. I've been doing research but keep running into dead ends. Any ideas on how to do this without a complicated set up?
1
vote
0answers
20 views

Firewall and NAT settings in GSM modem for one server

I have a GSM Modem (PSI-MODEM-GSM/ETH) in field with one device behind, acting as a server. The situation is as follows: "PC" | \_________Dynamic IP: 10.103.153.122 | ...
0
votes
2answers
28 views

Firewall/Packet Sniffer - forward HTTP requests to a different address

I have a particularly "hacky" question/solution and looking for some honest feedback. In an enterprise system there are a number of requests that are destined for www.sometargeturl.com. These need ...
0
votes
0answers
22 views

Multiple gateways with linux on same subnet using single NIC

I have the following configuration; Firewall 1 (site 1); x.x.x.x/26 subnet on external 10.0.0.0/8 on internal (internal IP 10.0.0.10) Firewall 2 (site 2); x.x.x.y/26 subnet on external 10.0.0.0/8 ...
2
votes
1answer
25 views

iptables: does a scanner knows if you DROP packets?

I know how REJECT and DROP chain works. But, as I read here REJECT vs DROP when using iptables, user Dagelf said that the server still replies with TCP SYN/ACK. Does the scanner knows that a packet ...
1
vote
2answers
34 views

Communicating between two servers sitting behind their respective NATs

I'm building an web app (Server A) that communicates with a remote server (Server B) that is connected to the internet. Server B resides behind a NAT and is listening to communication on 3 ...
0
votes
0answers
31 views

Force all traffic through VPN

I am using PfSense as a firewall, with its VPN functionality. The client I use is Shrew Soft VPN client. As it is a split tunnel, is there a way I can force all traffic through the VPN connection, ...
0
votes
2answers
54 views

IpTables Configuration Not Working to block ports (Centos 6.2)

I am trying to only allow certain IPs to access port 8209. I have tried a few different methods that I read on ServerFault. This method is the most recent one I have tried. I manually edited my ...
0
votes
1answer
40 views

netscreen sn25 vs cisco asa5505 speed

Current i have 2 server direct connect to 1 juniper netscreen sn25 firewall then go to internet, the intel 350 nic is setup at 100mbps (which should be able go up to 1000mbps). the problem is this ...
0
votes
2answers
32 views

EC2 security policy private address

I have created an EC2 Security Group that allows incoming traffic from a private ip address in the same account. It is my understanding that a private ip address for a classic instance can change ...
-1
votes
0answers
25 views

firewall and load balancer vmware on one physicall server [duplicate]

I have 2 unit server series Rainer SV311C4-2.4 SATA 35 NR, processor Intel Xeon X3430 Quad Core 2.4Ghz 8Mb L3 Cache memory 8GB. Each unit I will install two virtual mechine for firewall and load ...
-1
votes
2answers
54 views

How to handle an abuse complaint? [closed]

I have just received an abuse complaint from my hosting service: [2014-04-04 03:30:23 CET] [Timestamp:1396575024] [11717182.634230] Firewall: *UDP_IN Blocked* IN=eth0 OUT= SRC=My IP ...
-2
votes
3answers
104 views

How do I access port 10,000 on AWS?

How can I access port 10000 on Amazon Web Services? I added port 10,000 to a security group, but I still cannot access it. I can only access the service locally. [root@ip-172-31-15-65 ~]# curl -I ...
1
vote
1answer
33 views

What is proper host in PGAdmin for accessing postgresql through firewall

Here is my situation. I have Postgresql installed on a Windows Server on a LAN. I have an IIS web server set up outside the lan. I want to connect to the postgresql database from the webserver. ...
0
votes
1answer
50 views

FortiGate 80c port forward

I have a FortiGate 80c and I'm getting at a lost on how to port forward to get my OpenVPN service accessible externally. I did setup the VirtualIP assigning tcp 1194 on the internal IP to the ...
0
votes
1answer
33 views

XenServer virtual network firewall

We are setting up XenServer machine with several VMs for our ecommerce business. We are intending to distribute services across several VMs (1 for web, 1 billing, 1 email, etc.) The XenServer machine ...
0
votes
0answers
16 views

Xenserver firewall consideration

We are setting up Xenserver for a production environment with seperate VMs for a website, billing, control panel, mail. My question is, should we rely on each server's IPtables or is it necessary to ...
0
votes
1answer
26 views

iptables stopping access to websites

I have iptables set up on a server to only allow whitelisted ips to access it: :INPUT ACCEPT [1695:323274] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [987:756890] :xxx - [0:0] -A INPUT -s 12.34.56.78/32 ...
0
votes
1answer
39 views

Cannot add address object using CLI on Sonicwall NSA2400 (5.9 firmware)

Based on an example from "SonicOS 5.9 Enterprise Command Line Interface Reference Guide" I have tried to add an address object using command below (which is not changed compare to prior firmware): ...
0
votes
0answers
39 views

SonicWall NSA2400 after firmware upgrade to 5.9 - not able to log some intrusion prevention/detection statements

After upgrading firmware to 5.9 version I'm not able to log intrusion prevention/detection for statements like PHP CGI Argument Injection, Remote Command Execution, Remote File Inclusion, WEB-ATTACKS, ...
1
vote
0answers
28 views

PF Firewall Rules Help - Block IP Hammering

I'm having an issue where someone is using a VPN / proxy to hammer my server. They will pick on random URL from my website and perform ~20 requests per second to it. Once I ban the IP address, a few ...
-1
votes
1answer
49 views

SSH through another machine at work to an external server [duplicate]

I'm fairly sure this will have been asked before, I have found similar questions but I do not fully understand how to apply them to my situation. So, sorry for asking again. We have a number of ...
0
votes
0answers
16 views

customised client to client connection configuration inside OpenVPN server

I have two clients with common names [client_sina] and [client_extra] that are connecting to an OpenVPN server on remote place via (TUN21) running on Tomato Router The only physical port of the ...
-1
votes
3answers
95 views

Is blocking SMTP ports prevent server from sending emails?

I have a Centos server with cPanel on it. Yesterday, some hackers had successfully connected to my smpt server and sent thousand of emails from it. What I want to do is blocking every ports except ...
0
votes
0answers
21 views

Connecting internet uplink to switch or firewall

While I am using Cisco kit, this isn't really Cisco related, more general network design. In the past I have connected internet connections straight in to a layer 3 core switch, 3750X's, 6509's and ...
0
votes
2answers
61 views

Firewall high availability

Context: My company is on the verge of a major network improvement, we will expand our network to remote offices via radio bridges. The firewall will be handling: 3 mission critical networks 3 non ...
0
votes
0answers
14 views

Can a web server be secured with just a firewall? [migrated]

I'm about to go online with my first web site, it is a small project hosted on a regular home PC running Windows 7. I want to keep the software footprint at minimum, so it only contains the operating ...
0
votes
1answer
43 views

Forward a port to another server using iptables

I have a server that is configured to block any port, and exceptions are configured like this (for mongo): iptables -A INPUT -p tcp --dport 27017 -s 10.20.1.0/8 -j ACCEPT ...
0
votes
1answer
70 views

How to make an existing caching Nginx proxy use another proxy to bypass a firewall?

My question is about using Nginx as a proxy behind another proxy. (Somewhat confusing.) I want to set up Nginx so it acts as a caching proxy server to an npm mirror. Here is the link: ...
1
vote
0answers
33 views

Cisco ASA 5510 multiple vlans on same interface with different security levels and routing between

Looking to setup on my 0/3 interface multiple vlans and looking to get confirmation that this will work. Ethernet 0/3.1 security-level 20 nameif dev-dmz vlan 502 ip address 172.20.2.1 ...
1
vote
0answers
38 views

Exclude an IP address from an openwrt firewall rule

I am using a wrt54gl with openwrt to try and redirect all traffic on my LAN to a specific server, which will run scapy and other network analysis tools and act as a gateway/firewall to the Internet. ...
-1
votes
1answer
30 views

Connection timed out ftp cannot connect

I have a ubuntu server and am trying to connect using filezilla but keep getting connection timed out. I have done an nmap and the port that is opened for ftp is 21. I have gone onto the server and ...
0
votes
1answer
29 views

Cannot access Asterisk sip from remote location

I've used this tutorial to configure my iptables so I can access asterisk sip from outside of my server. My iptables -L looks like this Chain INPUT (policy ACCEPT) target prot opt source ...
2
votes
2answers
76 views

Can DNS RPZ firewalls protect against IP Access?

I am looking into DNS-RPZ firewalls. Can they protect against users browsing to http://{ip-address}? If so how does that work? Given no name resolution is required?
0
votes
2answers
27 views

ipf filter on solaris 11 crashes

First I run: sudo netservices limited then sudo ipf -D disable sudo ipf -E enable sudo ipf -f /home/aubrey/ipf.conf sudo ipfstat -io I also disabled ssh in system services After a few hours I ...
0
votes
1answer
22 views

change timeout for dropped ip traffic

I am behind a corporate firewall, which simply drops (swallows) all ip-traffic to unknown ip-addresses. It takes a lot of time for Linux (Ubuntu 13.10) to abort my erroneous connection-attempts, ...
-1
votes
2answers
35 views

tcp port 12202 not opening on ubuntu EC2 instance

I created an EC2 ubuntuu 12.04 instance. i have opened TCP 12202 port through security group console of AWS .But i am unable to open instance port . I tried below commands to open the port . sudo ...
1
vote
2answers
27 views

The output of ifconfig for a Internet USB dongle

This question has been asked on the net before but the answers are simply not convincing or even accurate. I get the following output for ifconfig for the ppp0 device (of course, x, y, a, b are ...
1
vote
1answer
14 views

Error in cross server sqlcmd execution due to firewall issue

I have an application server with an IP of 10.107.0.100 and one database server on which SQL Server 2012 is installed, with an IP of 10.107.0.101. Remote connections are made to this server, and the ...
-4
votes
1answer
47 views

Single machine server with many operating systems [closed]

Could possibly with single one high end Server with supported Virtualization We can have: - DHCP Server (Virtual Machine 1), - Firewall (Virtual Machine 2), - Squid proxy (Virtual Machine 3) - ...
1
vote
3answers
79 views

Despite of several attempts, unable to open port 25

This question may have been asked many times here but after several failed attempts, I repeat the history: How do I open port 25 port on my server running CentOS. Here is my iptables config: Chain ...
-1
votes
2answers
77 views

Amazon VPC: How to block inbound traffic on specific IP of an instance while allowing on other IPs of the same instance

Specifications I have an amazon VPC instance with the following specifications: Windows 2003 (32 bit). Two Network Interfaces each with 6 IPs. 6 instances of a software (called backweb) installed ...
1
vote
3answers
83 views

How to block ALL communications with an IP-address using iptables?

I have a FreeBSD system behind a Linux-based router (using DD-WRT firmware). The FreeBSD system is running sshd and is regularly probed by various script-kiddies. It currently runs a script, that, ...