A Firewall is an application or hardware device used to inspect and filter network traffic.
0
votes
1answer
28 views
Site to Site VPN Tunnels
This is more of a theoritcal question then a problem. With regards to Site to Site VPN links, let's for the sake of the question say we have two Sonicwall Firewalls.
Site A and Site B
SonicwallA ...
-1
votes
2answers
30 views
Shorewall blacklist not working
We are getting dictionary attacks to our SQL server, So I wanted to block some of the IP's using shorewall blacklist.
I mentioned the IP in /etc/shorewall/blacklist as
#ADDRESS/SUBNET ...
0
votes
1answer
29 views
Blocking Port 22 From Unknown IPs Security Measure
A server I'm working on has blocked all unknown addresses from accessing port 22 (via a firewall). An IP address has to be added to the firewall first via a control panel (or command line) before it ...
0
votes
0answers
22 views
How do I allow access to a folder on the server for an application?
I have created a small application which is installed on a number of computers which are on a network. These computers must use remote desktop to login to a number of remote servers.
I want to allow ...
1
vote
1answer
36 views
Suggestions for consolidation of old Linksys routers
I have a very simple small business network that I set up about 10 years ago using a pair of Linksys routers. Over the past couple of years, the routers have become increasingly unstable as the ...
1
vote
0answers
17 views
How does one send Sonicwall firewall logs via gmail?
We have a Sonicwall TZ215 that allows configuration of the logs and alerts to be sent to admin addresses. However, we only have gmail/google accounts available to us and there is no option for ...
0
votes
0answers
15 views
Oracle Database Firewall Post-Install configuration issue
I have recently installed Oracle Database Firewall on a Virtual Machine via VMware, and I can access successfully the interface for the post-install configurations. The problem is that, everytime I ...
0
votes
1answer
27 views
Configure Firewall settings for local and public network
I have a VM on windows azure that is running an SQL server 2012 on windows datacenter 2012,
I want to define a firewall rule so that the sql server can be accessed from anywhere in the private ...
0
votes
0answers
13 views
Is it possible to prepend custom rules with system-config-firewall?
On CentOS 6, is it possible to prepend custom rules with system-config-firewall?
My file looks like:
# Configuration file for system-config-firewall
--enabled
--port=8080:tcp
...
3
votes
2answers
69 views
Will reverse DNS lookup impact firewall performance
Would it generally impact the performance of a firewall if it has to enable a site by domain rather than IP? The context is we have an application that runs on Google Appengine (no fixed IP's) and a ...
-1
votes
0answers
37 views
Find IP of network drive/computer behind firewall [closed]
In our office we are using a Mac Mini with an external drive as our file server. I recently set up a firewall and switch to accommodate our growing number of machines needing access to the internet ...
0
votes
1answer
13 views
Sonicwall App Control Advanced
I have a custom application that accesses a remote range of IP addresses, lets say for example 206.0.0.0 - 206.255.255.255, this is UDP based traffic. The issue is, Sonicwall NSA has been configured ...
0
votes
0answers
20 views
Cannot connect to my VM after reseting the firewall configs
I have a VM running in azure and i played a bit to check some things with its firewall, after that i did a reset to the firewall configurations (from the vm itself) and now i cannot connect to the VM ...
-1
votes
1answer
45 views
iptables - how to improve security and allow dns? [closed]
I don't understand much about iptables, i'm running a server which is only used to run a vpn. Here's my iptables-save:
# Generated by iptables-save v1.4.7 on Sat Jun 1 00:14:41 2013
*security
...
0
votes
1answer
39 views
Newbie, need help deciphering firewall log files (Cisco ASA 5520)
I'm not very familiar with firewall log files, or many of the terms involved in server connections. The lines in question involve a foreign, unauthorized IP interacting with a firewall (Cisco ASA ...
1
vote
2answers
58 views
Why first rule is not being matched in iptables
I have iptables rule which i hope to allow ssh from 2 ips .
Why is counter increasing for second rule and not for first rule.
Even if i try from both ip i am not able to ssh to it.
Chain INPUT ...
4
votes
1answer
40 views
pf slows traffic extremely down
I am running a web and mail server on FreeBSD 9.1. The system is installed on a KVM vServer. Everything works fine - until I enable pf(4). My weblog becomes unconscionably slow. So does all the other ...
0
votes
1answer
29 views
Centralising IPTables rules?
When our collection of virtual servers got to a certain size, we moved from hosts files to a DNS server. However, we still have to update the firewall rules on every machine each time a new server is ...
0
votes
0answers
15 views
What is Bonjour Linux IPTables Firewall Ports?
I'm trying to configure my iptables in order to allow Pidgin to use Bonjour protocol, now according to: Bonjour for Windows doesn't work due to firewall settings, I have to allow Multicast DNS / ...
0
votes
0answers
12 views
limit number of connections per IP on Windows Server 2008 R2 Enterprise?
Since I'm unable to install wipfw .. I'll need alternative method to restrict number of connections per IP on specific port if possible. My dedicated is running Windows Server 2008 R2 Enterprise ...
0
votes
1answer
53 views
Prevent DNS responses for specific domain completely
Situation:
Server (Win 2008R2) is being used in a DNS (amplification) DDoS attack. Amplification factor is already down to 1: Set the DNS server to non-recursive and removed all root hints -> DNS ...
0
votes
0answers
14 views
How to restrict number of connections per IP on Windows Server 2008 R2 Enterprise? [duplicate]
Since I'm unable to install wipfw .. I'll need alternative method to restrict number of connections per IP on specific port if possible. My dedicated is running Windows Server 2008 R2 Enterprise ...
-1
votes
0answers
37 views
Iptables: Should I filter all incoming and outgoing packets? [closed]
I'm currently working on a bash script to setup a iptables firewall. It intended to be run on a dedicated server, mainly used for hosting web applications. I have done a lot of research the past days ...
0
votes
3answers
59 views
Can you block an ip with multiple connections? (Apache ddos attack)
My server is under a Apache ddos attack right now. There's a ton of single ip addresses with 30+ connections.
When I use this SSH command:
netstat -n | grep ':80' | awk -F' ' '{print $5}' | awk ...
0
votes
0answers
28 views
Client can not access some HTTPS through Squeeze gateway
I have a gateway (+firewall +proxy) set up on a Squeeze box with 2 NICs.
The problem is the client cannot see some of the HTTPS (for example they can go https://mail.google.com but not ...
-2
votes
1answer
46 views
How do I find out the internal ip address of a router in front of a firewall
We have a network with a firewall and outside of the firewall the router to connect to the isp.
How do I find out what the internal ip is of that router. I do know the external ip, our fixed ip, but I ...
1
vote
0answers
12 views
Only ICMP traffic allowed inbound on ISA Server 2006
I have recently set up a connection to a remote site. The connection between the sites is done at the ISP level (ie, this is not a B2B tunnel on ISA). I'm fairly lightweight in the networking realm, ...
3
votes
2answers
49 views
NTP client on CentOS 5 fails behind Cisco ASA firewall
I have a CentOS server on which I want to set up an NTP client to get accurate time for the server. The server is on a local subnet with NAT behind an ASA 5505 firewall, which acts as NAT router, and ...
0
votes
1answer
24 views
How to recover from bad firewall config in Azure
All our virtual machines recently disappeared from Azure because our trial quotas were reached.
I decided to follow this guide for recovering the VMS: ...
0
votes
0answers
10 views
firewall though webservice mismatch between bindings issue
I am getting this error when trying to call my WCF service:
The message could not be processed. This is most likely because the
action ...
-1
votes
1answer
20 views
jabber connection to another servers doesn't work under firewall
When firewall turned on, jabber server do not connect to another jabber servers. When turn off - all good. The config is (deny by default, allow all outgoing connections):
Source Protocol Remote ...
-2
votes
0answers
45 views
DNS / External IP Addresses
I have a network with a number of public IP addresses. I am trying to get public IP's to resolve internally- so, if I have a public IP 209.251.147.150:44445 which forwards to a server at ...
0
votes
0answers
30 views
Windows Firewall block all, allow one
the problem I'm having is that I've set up my windows firewall to block all incoming traffic and block outgoing traffic by default.
System is Windows Server 2008.
The problem is that when I try to ...
0
votes
1answer
11 views
Connect another LAN to WAN port of Zywall 10w
Preamble: In my company we add a new Vodafone's router that's already compromised my working DHCP server.
That's because Vodafone refuse to disable the DHCP server of their router.
So I figure out ...
-1
votes
0answers
33 views
How to setup transparent firewall using ArchLinux [migrated]
I am trying yo setup a Transparent Firwall using ArchLinux.
My setup looks like this:
(ISP, IP: 10.90.10.254)
\
\
\ (eth0-> ip: 10.90.10.1 gateway: 10.90.10.254)
+-----------+
| ...
0
votes
1answer
40 views
Cisco IOS Router and Azure VPN - tunnel established, but traffic is not flowing
I am trying to connect a Cisco IOS router to Azure via the IPSec VPN. I have used the Cisco ISR template to establish a tunnel from my router to Azure. In the Azure control panel, I can see that the ...
0
votes
1answer
21 views
Multiple webservers behind firewall done correctly?
Basiclly I have a firewall and behind it i have a webserver which is a webportal for clients, a second webserver that hosts their webpages
and a DNS server
I want to route the traffic through that ...
-2
votes
0answers
22 views
How to use RDP or direct proxy [closed]
I apologize in advance, I am not sure how to even phrase the question. Basically, I spend a good deal of time in a library, but there is a very restrictive firewall in place. However, I can use RDP ...
0
votes
1answer
44 views
Can't connect to my own machine through public IP
I couldn't figure out why I can't make a connection through my public IP. When using a local IP it works.
I have the proper firewall port exceptions, and my router NAT has the configurations for port ...
-1
votes
0answers
37 views
Small company AD, VPN, web server setup [closed]
I've recently inherited a small network to administer as a my secondary responsibility, and have a number of items to take care of in the next little while. I've spent a few days reading, and do have ...
-1
votes
0answers
19 views
Disable http https traffic from csf [closed]
I want to know how to block traffic from http and https services
i don't want to close port 80 , i want to know how to drop all traffic only from http and https services
0
votes
1answer
34 views
How to redirect a packet to localhost in pf?
I am trying to redirect packets that are going to internal network to localhost of firewall.
I wrote this rule but it doesn't work.
int_net = "{10.0.0.0/24}"
ext_if = "{igb0}"
int_if = "{igb1}"
rdr ...
0
votes
0answers
23 views
Is there a way to diagnose *where* comms to a port on a windows machine is being blocked?
I am developing a system that comprises an email server.
I have so far been unable to connect on port 25 (using telnet), despite having checked the following are set up correctly. Connections to port ...
0
votes
0answers
30 views
--utc option is not working in iptables
I am using iptables v1.4.7/8.
I used the following command
iptables -A INPUT -s 10.0.4.247 -m time --utc --datestart 2013-5-23T7 --datestop 2013-5-23T9 -j DROP
my utc time
date -u
Thu May 23 ...
0
votes
1answer
48 views
Is using iptables to rate limit on port 80 considered wasteful?
I was thinking of adding the following rule to my IP tables:
-A INPUT -p tcp -m state --state NEW -m recent --update --dport 80 --seconds 5 --hitcount 10 -j DROP
-A INPUT -p tcp -m state --state NEW ...
0
votes
1answer
14 views
Unified Threat Management
This might be a simple question:
On what layers of the OSI model does Unified Threat Management work?
And what devices do you recommend for using this?
Thanks,
Dempsey
0
votes
1answer
33 views
Any issues with multiple services on the same server as the firewall? [closed]
I am wondering if anyone has any input in regards to having one server as your firewall, backup server, email server, etc. I am trying to keep costs down and would like to know if there are any ...
0
votes
0answers
24 views
Forwarding all outbound http traffic to a proxy on a Linux machine
I want to:
Forward all the outbound http traffic on my CentOS machine to a proxy on host a.b.c.d 8080
Except for foo.com and bar.com
what are seamless ways to do this.
Notes:
I cannot modify ...
3
votes
6answers
431 views
Force clients to use proxy
Here's my network configuration:
The proxy server is running Ubuntu with Squid on port 3128 and DansGuardian on port 8080.
I'd like to force all clients to use the proxy server - specifically, ...
0
votes
1answer
43 views
How to route the traffic from a specific port through a socks 5 server?
I'm running oracle sql on port 1521. However I can connect on it from a remote server only through a socks5 proxy(due firewall restriction). The client that I use to connect to the sql server doesn't ...
