A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

0
votes
0answers
15 views

Overactive SQL Injection Attack Firewall Rules

We have a web app that our client's employees use to submit signatures from customers using HTML5 canvas to create PNG images. The signature pad is converted to base64 encoded HTTP POST data. Our ...
0
votes
0answers
5 views

dynamic IP firewall configuration for public-yum.oracle.com and clam AV

I currently have Clam AV installed as the AV solution for an Oracle Linux environment. The firewall that I use allow filtering only through specific IPs and thus currently, I am not able to configure ...
-3
votes
1answer
12 views

juniper srx-100 firewall configuration [on hold]

I am configuring proxy-arp and after commit the following error occurs. Proxy ARP IP address range [203.215.166.85 203.215.166.86] overlaps with interface IP address range [203.215.166.86 ...
0
votes
0answers
12 views

NSClient++ traffic dropped only for external IP traffic

I am trying to use NSClient++/Icinga to monitor our Windows server boxes at remote locations. I have tested the NSClient on our internal network (192.168.1.*) and it works as expected with the server ...
0
votes
0answers
34 views

Why are websites being served correctly for a little while and then not?

I just moved a server behind a Cisco ASA 5525-X and configured the ASA for the first time. The ASA has ACLs to allow bidirectional communication on port 80 to the private IP address on the inside ...
0
votes
2answers
86 views

Linux/Bash: Test if my server is opened to the Internet programmatically/via CLI

RHEL 6 and Bash. It would be easy if I had a remote server to just run nmap from, or even curl/wget, but I only have access to servers on our side of the firewall. I know I can manually check ...
-3
votes
0answers
20 views

Firewall with conditional port opening [on hold]

Does exist a firewall product, that can open ports depending on other existing connections? For example, if there is a tcp connection from IP1 to IP2, then open a port from IP2 to IP3. I am looking ...
0
votes
0answers
18 views

How can I allow NAT from inside to outside and vise-versa when each of my clients will have only one static public IP using an ASA5525-X?

My network topology is pretty basic. My data center provides a router and added a switch just before my cage to provide connectivity to all of the racks. My rack takes the copper drop they provide and ...
0
votes
2answers
26 views

Connection failed between Windows Servers

I'm setting up an infrastructure based on Windows Server 2012. The firewall is turned off and I can't access the Domain controller to check for the group policy. I'm experiencing some connection ...
0
votes
1answer
12 views

What do I need to consider when setting TCP idle timeouts?

What's purpose of having a [low] TCP idle timeouts? E.g., why have a 60 second timeout on a firewall or load-balancer? Is it a memory management or /performance optimization thing? Is there a security ...
0
votes
0answers
13 views

Watchguard XTM 23 blocking company website

The company that I'm working at runs a website and 1 week ago the site started returning 404's whenever anyone tried to access it from our protected network. We immediately checked on the status with ...
-1
votes
1answer
35 views

What is it that makes BSD a popular choice for firewalls? [closed]

What is it that makes BSD a popular choice for firewalls? Is the kernel generally more secure?
0
votes
1answer
22 views

Configure clients to navigate through specific wan. Pfsense

I have a machine with a pfsense running. It is configured with three ethernet cards. LAN 192.168.2.1/21 WAN1 200.41.X.2/24 WAN2 200.41.X.3/24 ISP Gateway 200.41.X.1 This is a connection with 5 ...
-1
votes
2answers
33 views

Block incoming traffic from unresolved IP address

How can I block all the incoming traffic from unresolved IP addresses? I am using CentOS with WHM/cPanel installed. I am getting huge junk traffic and 95% is from unresolved IP addresses and only 5% ...
0
votes
2answers
95 views
+50

Configure firewalld for OpenVPN (server-bridge) in Fedora 20

I've installed an OpenVPN server (server-bridge) on Fedora 20, but I cannot get it to work. I'm almost sure that It's a firewall issue. I'm trying to connect from an OSX client, but I can connect ...
0
votes
0answers
16 views

SonicWall Routing Between VLANS

We have a sonicwall NSA 3500, x4 has 2 vlan interfaces so x4:v300 and x4:v301. Each vlan has an IP v300 is 192.168.100.1 and v301 is 192.168.101.1. I then have x4 connected to a layer 2 only switch ...
0
votes
0answers
5 views

Firewall Ports for Toshiba CIX server

Other then SIP ports: 5060 and 5061 what other ports need to be opened to have a phone set up in a satellite office with via external IP address. Phone Server CIX100 Firewall ASA 5510
0
votes
1answer
24 views

How can I reload IPTables without interrupting existing connections?

I will be adding and removing entries to the script below automatically (adding ports 80/443 with different IP addresses). If I run this script, I am "assuming" that connections will be uninterrupted, ...
0
votes
0answers
10 views

Opening a port range using Open VSwitch

I am locking down a VM on xenserver to allow only port 3389 and the ports required for domain controller authentication on windows. I am trying to do this using Open VSwitch. Locking down and allowing ...
0
votes
0answers
8 views

W2008 R2 SP1, windows firewall dropping zero length packets

I'm trying to harden a Windows 2008 R2 SP1 server, and restrict outgoing packets to known rules. What I'm seeing is firewall log entries showing dropped packets, and the dropped packets are always ...
1
vote
0answers
28 views

Disabling HSTS for managed browsers

What are my options for disabling HSTS both for new sites and for those sites baked into the browser? The use of HTTPS inspection inherently changes the thumbprint of a site by acting as a man in ...
1
vote
1answer
32 views

IPTABLES command that end with ACCEPT or DROP fail on service firewall restart

I have a CENTOS Linux VPS. I have the following in my IPTABLES script to run when my VPN restarts, but I get errors when I do a service firewall restart I've ran each of the commands below manually ...
0
votes
1answer
98 views

I think my server was hacked - how do i know what has been changed? [duplicate]

I have read the following posts which didn't answered my questions: - My linux server was hacked. How do I find out how and when it was done? - How do I know if my Linux server has been hacked? - and ...
0
votes
1answer
38 views

Serving public IP-adresses through two ethernet ports with public subnets, while protecting some interfaces for remote access

Done a lot of research and it's all kind of confusing. Some switches are also firewalls, most firewalls seems to be routers, with or without their own switches, but they're all different depending on ...
0
votes
0answers
27 views

Routing traffic from LAN over VPN link out to 'net; works from router, not from LAN. What route is missing?

I have 3 machines. 2, routers, are connected over a VPN. The 3rd is a PC on the lan behind one of the routers. internet | | ROUTER S1 external: YYY.56.52.56 ...
0
votes
0answers
27 views

ubuntu router configuration problems

My network is configured as follows: ISP Modem <-> Ubuntu (192.168.2.1) <-> Switch (192.168.1.1) <-> devices My device (192.168.1.150) can ping 192.168.2.1 but is unable to ping outside ...
-1
votes
1answer
38 views

Why does this IPTables command create 4 entries?

When I executed this IPTables command: iptables -A INPUT -p tcp -m tcp --dport 9080 -s localhost -d localhost -j ACCEPT iptables -L shows: ACCEPT tcp -- localhost localhost ...
-1
votes
0answers
40 views

iptables service won't start error line 1 fail - centOS 6.5

I can't seem to get my iptables to setup quite right. It seems to keep erroring out at line 1 on the service start. service iptables start iptables: Applying firewall rules: iptables-restore: line 1 ...
0
votes
1answer
67 views

How do I block all access to machine except port 3389 using Open vSwitch

I can allow access to the machine and block everything else using: ovs-ofctl add-flow xenbr0 "dl_src={mac-address} priority=39000 dl_type=0x0800 nw_dst={ip-address} idle_timeout=65000 action=normal" ...
0
votes
1answer
14 views

Windows Server | firewalling remote connections

In my windows server 2012, In the firewall rule for remote desktop connections I have added so that only MY IP address is allowed to connect, now of course I have taken a precaution and added a ...
0
votes
0answers
9 views

Netsh Command To Block All Traffic Except A Program And A Port?

I discovered that you can use the netsh commands to control the Windows firewall, I am reading all the possibilities but I didn't found yet what I am looking for. Is it possible to use netsh ...
0
votes
0answers
12 views

Will pfctl -sr show ordered rules when using -o profile?

When I enable the -o profile option with pf will pfctl -sr show me the new order of the rules?
0
votes
1answer
31 views

How to set up routing tables in EC2, so that ping works

I have a wide open security group which I rely on for instances to be able to connect. I also have a private network of 172.*. addresses, as shown here: What do I need to do in order to allow ...
0
votes
0answers
41 views

EC2 Security Groups and Postfix

I am having some difficulty getting ports open on EC2. I setup an EC2 instance and opened up SSH (tcp:22) initially. Then I configured Postfix and was successfully able to connect (telnet to port ...
3
votes
2answers
55 views

How do I find out where my IPTables rules are being stored?

I working on a Debian server and I'm trying to figure out where my IPTable rules are being stored. From looking around on the internet I've found there is generally two locations were these are ...
1
vote
0answers
19 views

`ufw insert 1 deny to any` not working

ufw insert 1 deny to any ufw enable ufw status Status output: Status: active Logging: on (high) Default: deny (incoming), allow (outgoing), disabled (routed) New profiles: skip To ...
8
votes
2answers
191 views

Is it reasonable to use Nagios to check that a service is NOT available?

Suppose I have a server with a private interface and a public interface. Public might have things like HTTP(S) servers, private might have MySQL and SSH. Obviously Nagios is useful to check that the ...
2
votes
1answer
696 views

CentOS 7 Firewall Configuration

In CentOS 6 I could type setup from the command line and I would be presented with a set of tools, one of them being Firewall configuration. I can still do this in CentOS 7, except the list no longer ...
0
votes
0answers
30 views

OpenWRT firewall redirect punch through

I am using an OpenWRT based firmware on a Netgear router as part of a research project that links the router to an existing broadband router to allow members of the public to access the internet via a ...
0
votes
0answers
19 views

Checkpoint Firewall - R75.3 - how to view time of recent CLI change

I'm trying to figure out when a colleague processed a change in the last couple of days. Very in experienced in expert or router modes. Any tips? Regards!
0
votes
1answer
102 views

Bypass squid proxy [closed]

I have a transparent squid proxy that I am using to filter out ads from web traffic which works well enough, however I would like to have the option of bypassing the proxy as well at times when I do ...
0
votes
1answer
36 views

Iptables -j REJECT unavailable [duplicate]

I am somewhat new to Linux networking and running in to a issue with iptables I am just not making any headway on. Two notes before I get in too it. iptables is version 1.4.14, and it is a custom ...
0
votes
1answer
78 views

iptables / firewall blocking traffic (even SSH) on my dedicated box

Can someone please take a look at this iptables data and tell me what's wrong with it? The paste 24h has been a nightmare, I couldn't even SSH to my server, and the only way I could manage to get the ...
2
votes
1answer
95 views

What happen if first rule of first iptable chain target is `RETURN`?

The article Linux Firewall Tutorial: IPTables Tables, Chains, Rules Fundamentals define the RETURN target value as follow: RETURN – Firewall will stop executing the next set of rules in the ...
-1
votes
1answer
44 views

OpenVPN, How to filtering client

I have a problem with limiting "client" with my VPN server. I was reading the FAQ about using iptables with disable option client-to-client, but i cannot run it. The question is how correctly allow ...
0
votes
0answers
32 views

HTTP not redirecting to HTTPS, Router or Firewall Issue?

I manage an application server in a different department from IT and since they implemented a new firewall as part of emergency maintenance, users are having issues accessing the web app(Blackboard). ...
0
votes
1answer
20 views

Setting up a VPN with rules who can connect with who

For delivering updates and support on software I've been working on I have been thinking about setting up a VPN server. The idea would be that the clients are constantly connected but only the traffic ...
1
vote
1answer
68 views

Limit Connections Per IP Windows 2008 R2 x64

Hello I have been searching for a solution to this, what I want to accomplish is the ability for me to define firewall rules that will limit the amount of connections to certain ports from the same ...
-1
votes
1answer
163 views

Opening port 587 on Debian running on Google Compute Engine

I'm attempting to use port 587 for my server mailing purposes. However, I can't seem to be able to unblock the port even after trying the following : Adding port 587 to the Google Cloud network ...
0
votes
0answers
36 views

ISC DHCP Server - Client Uplink Is Not Working

Running a DHCP server, client(s) does not have up-link (0Mbps) and has a downlink (50Mbps.) I am setting up a gateway/router on a PC running Debian Wheezy with ISC-DHCP. I have 1 WAN (eth0) and 2 LAN ...