A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

0
votes
1answer
31 views

why my nat iptables rules dont work with marked packets?

System: debian squeeze, Linux server 2.6.32-5-amd64 #1 SMP Tue May 13 16:34:35 UTC 2014 x86_64 GNU/Linux, iptables v1.4.8 lsmod | grep iptable iptable_security 2176 0 iptable_mangle ...
0
votes
1answer
12 views

How to route VPN traffic through a separate internet connection with a SonicWALL firewall?

We have a depot quite some distance from the exchange, the expensive internet connection is only getting 2/1Mb. This causes constant drops as soon as someone downloads anything. We have now got a 4G ...
0
votes
1answer
24 views

rDNS and forward DNS for mail server behind firewall, different IPs

All, Here is my setup : Firewall(x.x.x.114) <--> mail.mailserver.com (FQDN) (x.x.x.118) When sending mail, header has following IP ...."Receivedfrom mail.mailserver.com ([x.x.x.114])", my ...
0
votes
1answer
33 views

Cannot find error in iptables firewall configuration

I'm struggling with a firewall problem on my Centos server. I have the following configuration which when I use it with a service iptables restart and I try to ssh to the server with putty, I cannot ...
0
votes
1answer
13 views

Adding VPN/Firewall to my network

Right my setup is as follows TP-LINK AC1750 Wireless router WAN (Comcast) connects here 1 port connects to TP-LINK 16 port managed switch 16 port switch has static IP, 192.168.0.99 (I've reserved ...
-1
votes
0answers
16 views

Can't connect to SAMBA - ISP is blocking it [migrated]

Security issues aside, I'd like to connect to a SAMBA share from home to a server (dedicated or vps, doesn't matter). The server works perfectly. The issue is on the client side. Let me more clear: ...
0
votes
1answer
14 views

error 500 web page share point

In my environment we are having 3 branches eg:A B C all the branches are protected with cyberoam firewall also ..and IP to IP trafiic is Allowed to all three branches. Recently A branch is able to ...
0
votes
1answer
22 views

Configuring iptables for Haproxy

Ubuntu machine running haproxy with 2 network cards, 1 connected to WAN (called wan0) and another connected to LAN (called lan0). All chains set to DROP traffic. # Masquerade traffic from LAN to WAN ...
0
votes
0answers
19 views

ZyWall USG-100 Firewall block access to internal subnet beyond another router

I'm experiencing a strange problem with a ZyWall USG 100 Firewall, that I can't solve with leaving the firewall enabled on the ZyWall. I have the main network subnet that is 192.40.192.0/24(LAN1 on ...
0
votes
0answers
20 views

How to add an adblocking functionality to my openVPN server? [on hold]

I've just installed openVPN on my (ubuntu) server and generated&installed the clients configurations files on my iPhone and my Macbook. However I would like to add an adblocking functionality: I ...
-1
votes
1answer
24 views

Port Forward Won't work [on hold]

EDIT:URL broken Changed to mediafire I trying a lot of way but it Fail I open an minecraft server idk what i doing wrong all time here some picture I not have 10 reputaion to post images so i make all ...
-2
votes
0answers
23 views

Freebsd block ts3 serverquery port [closed]

I need to close the port 10011 on my freebsd server (i'm new), but, I also need to allow connection to this port from these ips: 108.61.78.149 108.61.78.150 108.61.78.148 108.61.78.147 208.167.225.11 ...
-1
votes
0answers
22 views

Gmail is responding very slow in Google chrome.whereas fast in firefox

gmail works very slow in google Chrome it means when i try to login on gmail it takes too much time to get logged in. whereas it works fine in mozilla firefox. we are using cyberoam as firewall,my pc ...
2
votes
1answer
51 views

Block smtp service to a IP centos 7 Firewall

I would like to know how to block an IP to use smtp service on a server with centos 7 firewall . I try to use something like this : firewall-cmd --permanent --zone="public" --add-rich-rule='rule ...
-1
votes
0answers
23 views

Multi-subnets topology [closed]

I have an Ubuntu Web Server running on a computer with two physical interfaces. However I need that server to serve 4 different local corporate networks and also be in DMZ and connected to internet ...
-2
votes
0answers
18 views

Ports and firewall Rules for Cafe PDQ, CCTV and Customer web browsing

Edit: Question is probably a bit stupid, but now I have written the below, I am getting second thoughts about posting this. But having spent about an 2 hours reading other posts and typing this and ...
0
votes
1answer
34 views

How will the LAN to LAN firewall rule affect the traffic in the rest of the network

I have a following network setup (of course a bit modified from the real situation) I would like to setup a LAN to LAN rule on the ZyWALL firewall so that only certain ports/ip adresses are allowed ...
0
votes
0answers
25 views

rsyslog not discarding despite rule to the contrary

I am running rsyslogd on a new CentOS 6.6 box. I have put in a custom rule to log my firewall messages (via firehol) to a separate file, as per instructions here: ...
0
votes
0answers
30 views

How to block ip/ports using iptables with specific date and time?

Normally to block in command-line I used iptables. iptables -I INTPUT -s xxx.xxx.xxx.xxx -m time --utc --datestart 2013-09-09T15:00 --datestop 2013-09-09T15:30 -j DROP But the problem is, this ...
0
votes
0answers
20 views

How to forward traffic from ipsec host to local network?

Could anybody explain how to implement forward traffic from host in IPsec to local network. On my server I have 3 network cards: red0 - extern orange0 - dmz green0 - local IPsec builds through ...
1
vote
1answer
33 views

Can't get iptables working in VPS - state and conntrack not possible

I've been browsing and reading documentations all night and I can't figure out any solution... I'm trying to get iptables working on my VPS (Debian 7). But I can't get established connections ...
2
votes
2answers
38 views

Can't SSH, but can TeamViewer [closed]

I would like to SSH into a computer behind a firewall that blocks SSH connections (incoming and outgoing). Amusingly, I can still access the computer using the remote-desktop software TeamViewer. I ...
1
vote
0answers
17 views

UFW Firewall on Ubuntu

I have installed UFW on Ubuntu 14.04. I used following commands to enable a port: sudo ufw allow 9384/tcp When I used the status command (sudo ufw status) it shows me that port is open for both IP4 ...
0
votes
3answers
33 views

Can the firewall prevent the DHCP to give an address, how to fix this?

I am not getting an IP in the subnet 10.0.0.0/24 where the DHCP is working and should serve an IP, I am getting instead only an IP in the subnet 169.254.0.0/16(link local address) that is probably ...
0
votes
0answers
10 views

FreeBSD pf does not allow inbound smtp [duplicate]

I'm trying to figure out why the following simple pf config allows inbound SSH but not smtp (tcp 25). I'm running FreeBSD 10.1-RELEASE-p9, and the SMTP server is postfix 2.11.4. # ...
-1
votes
2answers
48 views

Port forwarding ssh with iptables

Moved from stackoverflow... My new Internet firewall, based on Linux iptables, is working in most regards very well, but the port forwarding does not work: $ ssh -p 7022 [ppp0-ip-address] ssh: ...
0
votes
0answers
49 views

Make NGINX Block All Requests To Direct Server IP - Stop XML-RPC Attacks

Essentially, my website is being attacked by a layer 7 XML-RPC attack and is currently offline and has been offline so I am in need of desperate help. Any assistance would be greatly appreciated :)! ...
0
votes
1answer
37 views

Allowing services to specific hosts using firewalld

Introduction On my database server (CentOS 7) I want to allow access to port 3306 (MySQL) from specific web front-ends (10.10.40.6 and 10.10.40.7 in my example). On top of that I want to allow access ...
1
vote
0answers
20 views

Cisco 5512-x TCP request discarded

We have a fairly basic ACL and NAT rule allowing RDP inbound and NAT'd to a LAN IP (all IPs replaced with IP) object network STATIC-PAT-RDP host IP access-list outside_access_in extended permit ...
0
votes
1answer
82 views

Allow only SSH, FTP and Cloudflare Servers via IPTables

I want to allow only SSH access, FTP access and all communications between my Dedicated Server and all Cloudflare Servers using IPTables. I tried the commands beneath but it seems like I kicked out ...
1
vote
1answer
38 views

FreeBSD pf with NFS

I'm having trouble establishing new NFS connections when my pf is turned on. When I turn off pf on the server and client I'm able to mount with no trouble. I tried keep state and flags S/SA on the ...
1
vote
1answer
50 views

iptables block net range

I'm trying to REJECT network via iptables(8) and for whatever reason it is not doing so: # cat /etc/redhat-release Red Hat Enterprise Linux Server release 6.6 (Santiago) # uname -a Linux X ...
1
vote
0answers
10 views

What would cause pysmb to fail when OSX Finder “Connect to Server…” succeeds? [migrated]

(originally asked on StackOverflow, but I think there are more appropriate experts here): I'm trying to transfer a file from a remote samba share (on a windows server) in a python script (running on ...
2
votes
1answer
29 views

Identify individuals behind SLAAC addresses

We're operating an IPv4 network (on ethernet & Wifi) in a student dorm with ~200 users and want to deploy IPv6 in the long term, with stateless autoconfiguration on a single /64 prefix. ...
-2
votes
0answers
17 views

A service like a router between 2 WAFs. This exists?

A service like a router between 2 WAFs. This exists? I have the following situation: 2 different WAFs (CloudFlare and Incapsula) and would like to have a service above the two that I can define ...
0
votes
0answers
5 views

firewalld allow connections to a port for only a subnet of IPs [duplicate]

I am on Fedora 21 Workstation on my PC. By default, all ports through firewalld are open on Fedora 21. When I open a service accessible through a port (such as a CouchDB or a SQL server or a simple ...
2
votes
1answer
53 views

How to test iptables settings by port scanning?

I want to test my iptables and prove that it only allows traffic for given Protocol / Port - combinations. How I can use as a target for a port scan?
2
votes
1answer
62 views

Port 8080 remains closed even when opened with iptable and nodejs is listening on it [duplicate]

I am trying to install a nodejs server listening to port 8080 that I opened with iptable but when I run nmap or a web tools I always get the message that the port is closed. I'm on a Ubuntu vps. ...
1
vote
1answer
99 views

Chinese Firewall DDoS and IPtables not working

Recently my server has been hit with DDoS's coming from the Great Chinese Firewall. As per the advice in one of the replies in mod_security block requests by http-host header, and the advice in ...
0
votes
0answers
44 views

IPTABLES and GEOIP: Show Custom Webpage to Blocked Visitors

Because of legal protection, as a first stage of launching my project I will focus on couple of countries only. The number of supported countries will grow. I know, it is possible to block or allow ...
0
votes
1answer
25 views

Do I need to set rules for source and destination ports for outgoing rules on iptables?

I'm using puppetlabs firewall module and I'm having troubles setting up iptables for a simple web host. I'm following this guide and want to set up additional rules. ...
0
votes
1answer
12 views

Concurrent connections per IP

I need to make a few changes to a firewall configuration, but before I do I'd like to see the number of concurrent Apache connections per IP. This command produces a nice list: #netstat -ntu | awk ...
-5
votes
3answers
85 views

How I can Block all China to entry to my server [closed]

How I can Block China to entry to my server ? All China country ? By ipset and iptables I want by this to avoid DDOS attacks OS: CentOS 6.6 Thanks.
-1
votes
1answer
28 views

Does Sophos firewall support outgoing FTPS connections?

Is it possible to connect through a Sophos firewall to an external FTPS server? With FileZilla and connection mode "Require explicit FTP over TLS", the log shows: Status: Connecting to x.x.x.x:21... ...
2
votes
0answers
49 views

Iptables content blocking firewall

I have setup a firewall with iptables to ratelimit connections based on content. The following is an example of one of my rules that stops wordpress bruteforce attacks. `iptables -A INPUT -p tcp -m ...
53
votes
5answers
7k views

I accidentaly forbid SSH connection to a remote server… What's next?

Let's say it again, we all make mistakes, and I have just made one. A brief history: I was doing some stuff on a VPS (Debian) I'm renting, when I noticed some strange behaviour. Using the netstat ...
2
votes
1answer
31 views

Load average increasing along with firewall throughput

I've just pushed a large change to my backend code and I've noticed a massive increase in the load average in the few hours since the push. I looked at Munin for what the problem might be and I ...
2
votes
2answers
235 views

How to open port for a specific IP address with firewall-cmd on CentOS?

I would like to open port 4567 for the IP address 1.2.3.4 with the firewall-cmd command on a CentOS 7.1 server. How can I achieve this, as the documentation I could find was too specific on this?
0
votes
2answers
179 views

iptables block client ip internet access and keep LAN access

With the increase of appliances having network access and the potential for hacking, I want to block specific ip address from accessing the internet, but allow LAN access. For instance, I use a ...
-1
votes
3answers
86 views

Why can i not ping my host behind the firewall. Cisco asa 5505 [closed]

Can anyone please help me to figure out what in my configuration of the Cisco asa 5505 is wrong or missing. I have multiple host behind my firewall these hosts run different websites on port 80. I am ...