A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

0
votes
0answers
5 views

web application audit task require my remote IP to be allowed on application network firewall

I want to audit web application (xyz.com) which is hosted on web server sitting behind the cyberoam firewall. My task is to run scan from my remote machine which has ISP MTNL broadband. My machine ...
1
vote
0answers
10 views

Windows Server spamming devices on other subnets on port 445

I have a Windows Server 2012 that every few seconds sends packets destined for port 445 on local IPs on other subnets. The IPs on other subnets it is trying to reach are devices such as VoIP phones, ...
0
votes
0answers
5 views

Fortigate 60D - Empty log and report

Environment: Fortigate 60D Forti OS 5.0 I can not see any log or report in the firewall. I have already activated forticloud and I recieve empty reports. Is there something that we have to ...
-1
votes
0answers
26 views

Want to filter a single packet out of a TCP stream

I run a gameserver and I have a problem setting up a firewall rule to block an injected packet. First , this is the target data from worldserver without any injection in the exe that connects to the ...
0
votes
1answer
15 views

How do I open specific ports on Linux (an AWS instance of RHEL v. 7)?

I'm using RedHat version 7. My AWS instances are in a security group with ample permissions for inbound connectivity. I can do Yum updates. The servers can ping each other. I can transfer files ...
-3
votes
1answer
30 views

iptables rules for blocking specific packets

Im using the following iptables rule: iptables -A INPUT -p tcp -m tcp --tcp-flags PSH,ACK PSH,ACK -m length --length 52 -m state --state ESTABLISHED -j DROP It does it's job for blocking the ...
0
votes
1answer
17 views

Setup fail2ban with apf

Along with BFD we have recently installed fail2ban on our server, it is CentOS and it uses APF to block IPs. I have hunted online on how to get the two to work however when an IP is blocked by ...
-1
votes
0answers
9 views

modifying the scope of an existing Windows 2008 inbound firewall rule in batch

I have a similar situation as discussed in Configuring many block IPs in Windows Firewall but already have a firewall rule defined(I called it "nuisance connectors"). I'd like to be able to add an IP ...
0
votes
1answer
29 views

Why the firewall seems to work intermittently?

I've this iptables rules on first server which has the role of a client connecting to a second mysql server through LAN adapter. *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT ...
1
vote
1answer
39 views

Linux - show dropped packets form firewall

I am trying to set up a sip trunk and so far everything has gone well. The only issue I face is that the call does is not received when the iptables service is running. By stopping the service ...
-1
votes
0answers
25 views

Incoming connections blocked from some IPs on Centos

I have some server processes running on CentOS. I find that I can connect from some external IPs, e.g., port 4005 has some connections: [root@xxxxx dfxbin]# netstat -an | grep :4005 tcp 0 ...
1
vote
1answer
28 views

Any idea why SFTP works differently based on the client machine/network

I have an odd situation. From Computer A with PSFTP.EXE (putty sftp client) I can connect to a remote sftp server and use dir and chdir to browse around. If I try to get or put files I get a ...
0
votes
0answers
8 views

Re-routing packets back inside the network on a SonicWall firewall

I have two wireless networks, one guest network which uses a 10.0.0.0 network to assign IP address to guests and one internal one who gets the IP address from the internal DHCP (let's say ...
-3
votes
0answers
17 views

Why my website is shown in Parked Domains category [closed]

when I try to access my website from work, I get following error message Access has been Denied! Link: http://technicgang.com/ Category: Parked Domains You are not allowed to access this Link. ...
0
votes
0answers
28 views

What firewall configuration do I need for SFTP to be able to put files on a remote server

I have a situation in production where SFTP (using Putty PSFTP) is working when I connect and list files on a remote server but put and get fail with error permission denied. In my dev environment I ...
0
votes
1answer
21 views

How to pass traffic hrough linux box between modem and router [closed]

My internet comes in through an ATT Uverse modem. The modem output goes into a Fortinet router and fro there into my home network. Now suppose that I want to put a small Linux box (say a Raspberry Pi ...
0
votes
0answers
11 views

How to manage overload of ICMP with PF?

I would like to make a basic managment of ICMP overload with packet filter on FreeBSD. The function I would like to realise is:     if target receive too many ICMP from a given source IP address,   ...
0
votes
1answer
38 views

iptables v1.4.21: Couldn't load match `-d':No such file or directory

i am running kerenl 3.14.18 and using iptables 1.4.21, built with these options --static-enable --disable-shared. when i run this command: /sbin/iptables -A PREROUTING -m -d 127.3.0.2/24 -j DNAT ...
0
votes
0answers
4 views

Ganglia server in Google Cloud

Fairly new to the google platform. I needed to open up port 8649 for a ganglia server environment. When I modified the default network and added the port it shows that tcp:8649 is opened. I'm able to ...
0
votes
0answers
23 views

Temporary IPTable Rules when Process Runs

Struggling to find the solution for this and maybe it's easier than I'm making it out to be. I need to open ports in the firewall when a process runs. That process could be requesting the usage of a ...
0
votes
0answers
25 views

Forwarding traffic between interfaces inside a docker container

I have created a docker container executing the following command docker run -it --net=none --cap-add=NET_ADMIN --name firewall ubuntu /bin/bash after I have attached it two interfaces eth0 and ...
0
votes
1answer
33 views

How to allow only subnet for port with iptables

What i am trying to do is to DROP any packets to specific UDP port, except those one from my secured subnet 10.8.0.0/24. iptables -t nat -A --src 10.8.0.0/24 -p udp --destination-port 63210 -j ACCEPT ...
-1
votes
1answer
101 views

Setting up pfsense on a small business network for firewall use

I have approximately 20 machines that will all be on the same subnet with a pfsense firewall. I have no experience with pfsense, so I am just starting out. I have the following configuration: The ...
-3
votes
1answer
29 views

IP address detection through firewall [closed]

Suppose my computer connections are filtered by a firewall on which I have no information and no control. Will the administrators of the network will know which websites I did visit thanks to their ...
0
votes
2answers
49 views

Individuals able to hit our bandwidth cap… Only a recent phenomenon?

We have a 10Mbps (synchronous) connection with our ISP. Recently we have discovered that if a single user is watching Netflix, or if I run Windows Update on a PC, we will totally saturate that 10Mbps ...
0
votes
2answers
32 views

Restricting access to user groups in OpenVPN

I just used the instructions in this tutorial to install OpenVPN on a CentOS 7 server. I am able to ssh and https into the remote CentOS 7 server through the VPN from a client machine. However, it ...
0
votes
1answer
20 views

Proxy action for user-agent blocking with regular expressions not blocking

I have a server behind a Watchguard XTM firewall and want to block incoming RESTClients who has certain user-agents in their request headers. I have implemented several rules to do this: List image ...
1
vote
1answer
14 views

iptables log established connections

I have a rule in my iptables which logs denied connections i.e. -A INPUT -m limit --limit 5/min -j LOG --log-prefix "iptables denied: " --log-level 7 I want a similar rule that logs all established ...
0
votes
2answers
26 views

DNAT on the POSTROUTING chain

What happens if I try to do a DNAT in the POSTROUTING chain of the NAT table in iptables? Suppose I change the destination IP of the packet in the POSTROUTING chain to an address that should get ...
1
vote
2answers
31 views

How to limit external access to mail server?

I use Mdaemon mail server. It can be accessed from internal network and from internet (using mail client and web interface). The problem is I need to limit which users can access their mails from ...
0
votes
0answers
14 views

WatchGuard blocking internal UDP packets

I'm seeing lots of packets that our WatchGuard firewall is dropping. They're all hitting either 255.255.255.255. or 224.0.0.1 using UDP 8612 / 1947 / 17500. Since I've started seeing these messages ...
2
votes
1answer
25 views

UFW rules in place and enabled yet traffic still allowed

I have UFW configured to try and block some unwanted IPs and associated requests. #ufw status |less Status: active To Action From -- ------ ...
1
vote
1answer
56 views

Whitebox firewall in datacenter environment

I am looking into alternatives to commercial firewall appliances. Most of the resources available online describe home network firewalls or sub-gigabit networks. Considering than 10GbE is becoming the ...
1
vote
0answers
11 views

Can a firewall handle packets being sent to it by a network TAP?

We have the intention of examining incoming mails for security purposes. In order to do so we figured out the solution will include: Network TAP - To copy all SMTP traffic to the firewall Firewall - ...
0
votes
1answer
10 views

Cannot access IIS Express from another machine

I can access the IIS express website fine from my local machine, either via localhost, or via its IP address. However when I try to browser to that IP address from another machine, it times out. I ...
0
votes
1answer
7 views

Barracuda Web Application Firewall WAF - HTTP - Barracuda Does Not Filter Links Clicked on Page

I am trying to figure this out. Basically the virtual IP 192.168.1.110 will filter port 80 to the real ip address 192.168.20.110. I can confirm this in the logs. When I click any link on the page ...
0
votes
1answer
28 views

FTP and WWW services don't acknowledge connections

I have Lubuntu 14.04 LTS with vsftpd and the lamp stack (apache2, etc.) installed. Everything works fine on the LAN. Externally, the services don't acknowledge connection attempts. I can see packets ...
-3
votes
1answer
54 views

What is the point of a firewall?

Newbie question: I have set up a new Linux server. I have got SSH running on port 22. I have got Apache running on port 80. I am told I should enable a firewall but why is that? 80 and 22 are the ...
0
votes
2answers
51 views

DNS servers trying to send data to google+ - google DNS

I was looking through my watchguard traffic today and noticed a lot of traffic going from my two local DNS servers to "Google-Plus". I'm assuming watchguard has that labeled incorrect as the IP ...
0
votes
0answers
45 views

Does firewalld handle the common attack rules of iptables by default?

I'm in the process of migrating servers to CentOS 7 from 6.5 and the most major change appears to be the shift from iptables to firewalld. My prior experience with iptables tells me that there are a ...
1
vote
1answer
41 views

Which incoming port is required by JIRA's outgoing (SMTP) e-mail functionality?

I have a JIRA 6.3.15 installed on an Ubuntu 14.04 in a VirtualBox VM. The host system for VirtualBox also is an Ubuntu 14.04. I configured JIRA to use SSL (as described here ...
0
votes
0answers
42 views

What is inserting “/*SC*/” and “/*EC*/” into HTML email comments?

Something is inserting the strings "/*SC*/" and "/*EC*/" into the HTML comments within emails received by our corporate email system: We use MS Exchange at multiple locations, but this is only ...
-1
votes
1answer
34 views

How to open a mysql port for 2 server connected in LAN

I have 2 servers connected togheter in LAN, and both on external network too. One eth0 and the other eth1 adapter. On both servers I've installed mysql. I'm able from both server to connect to their ...
-3
votes
1answer
48 views

What is the easiest way to block access from all countries except for one? [closed]

I have a Ubuntu 14.04 server which runs a game server and it's under heavy DDos attack right now. It's not a English-speaking community, so I don't need access from any other countries but mine. All ...
0
votes
0answers
26 views

VPN-tunnel renegotiation problems

I have an application running on top of Celery with redis as a broker. Redis is hosted at our datacenter but the workers are hosted on a separate line. We have setup two-way communcation between the ...
0
votes
0answers
5 views

How to configure iptables to set public IP for outgoing traffic from private IP [migrated]

I have multiple public IPs at home: 1.1.1.1 (main IP) 2.2.2.2 (additional IP) In my local network, I have two computers, let's say 192.168.1.1 (PC1) 192.168.1.2 (PC2) Infront of the computers I ...
0
votes
0answers
3 views

Securing remote access to local server behind NAT router [migrated]

I want to remotely access a Linux server in my private local LAN via HTTPS and SSH. The server ist connected to my DSL router (German Fritz!Box). As I can't directly access my server because of ...
-2
votes
3answers
88 views

How to detect what's blocking my incoming traffic on Ubuntu 14.04 LTS, if it's NOT iptables and NOT EC2 Security Group?

I have SSH root access to an EC2 instance. It's Ubuntu 14.04 LTS. I have nginx web server listening on all interfaces on port 80 TCP. It's accessible from this server but not from the outside. ...
0
votes
0answers
17 views

Two network connections - how do I control what traffic goes to/from each of them? [migrated]

I have two internet connections on my computer (one WiFi and one with ethernet cable). The issue is that I want to make sure that one of the connections (the WiFi) is "reserved" to only handle all ...
0
votes
1answer
25 views

How to list EC2 security group *rules* from within instance?

I have SSH root access to an EC2 instance but no access to the AWS Console / AWS KEY & SECRET. My incoming traffic to this host on all TCP ports except 22 TCP seems to be blocked - I cannot ...