A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

0
votes
0answers
8 views

PHP FTP Pasv mode on CentOS 7

I need help with connecting to a FTP server and using the passive mode. They told me I need to open ports 20, 21 and 5000-5100 range. I've got a virtual machine running CentOS 7 on a dedicated server ...
-1
votes
0answers
13 views

Which Firewall Should I Buy [on hold]

I'm considering buying a firewall i don't want anything to expensive but i'm looking for something with nice features like lcd screen showing speeds etc, if you could take time to comment if you have ...
0
votes
0answers
6 views

Pfsense firewall log format and packets data length

In pfsense firewall logs there are many fields described here: https://doc.pfsense.org/index.php/Filter_Log_Format_for_pfSense_2.2 I would like to get some statistics from these logs about traffic, ...
1
vote
0answers
10 views

Connect from one LAN to another LAN through SonicWALL

I have a LAN (LAN 1) on the 192.168.1.1 subnet, and another LAN (LAN 2) on the 192.168.2.1 subnet. LAN 1 is on the X0 interface, LAN 2 is on the X4 interface. I want to be able to access a device ...
0
votes
0answers
10 views

DSL modem in bridge mode but router not accessible from the internet

I have a DLink ADSL modem which I have put into bridge mode and connected to a Fortigate 200A firewall. The Fortigate is able to connect through PPPoE and receives the static public IP. I can browse ...
0
votes
4answers
104 views

How can I limit SSH access to my own 2 IP addresses? [on hold]

I am getting > 100 attempted logins per minute in my /var/log/auth.log so a quick search online on how to limit SSH access to a particular IP address lead me to a question and answer on here. However ...
-3
votes
0answers
25 views

eth0 as a management interface for port 22 and 3389 and everything else through wlan0 (iptables) [on hold]

I would like to use iptables to: Allow port 22 on eth0 Allow port 3389 on eth0 Disallow everything else on eth0 Allow all traffic on wlan0 (web browsing, etc.) Essentially I want to make eth0 the ...
-1
votes
0answers
21 views

Windows server 2008 - Can't access a specific IP [on hold]

I have a fresh install of windows server 2008 on a dedicated server. I would like to remote connect to one of my server tough mysql. I get this error: Warning: mysqli::mysqli(): (HY000/2002): A ...
-4
votes
1answer
24 views

ip6tables -L explanation [on hold]

Can someone explain me the following rules in the INPUT chain of the firewall. Chain INPUT (policy DROP) target prot opt source destination ACCEPT all ...
-1
votes
1answer
20 views

ruleset iptables- user defined chains [on hold]

I am very new in iptables. Learning to use them. I got a hang of some basic commands from https://help.ubuntu.com/community/IptablesHowTo. However, I didnt find good explanations of examples of a ...
1
vote
0answers
70 views

How to simulate network partitions on windows? [on hold]

Working on a project which implements a clustering algorithm. One important property of the clustering is to respect guarantees when face a network partition. To prove that clustering works I need a ...
0
votes
1answer
30 views

Hyper-V disable internal firewall

How can I disable a firewall on my internal network? Problem I have a Hyper-V on a Windows Server 2012 R2 with one VM, when I disable the firewall I can get internet on my VM, but when I turn on ...
0
votes
2answers
32 views

Is there any disadvantage to putting a modem in bridge mode

In order to prevent the need of port forwarding and double natting I plan to put a modem into bridge mode. Are there any side effects or problems that could come of placing a modem into bridge mode in ...
0
votes
1answer
12 views

Not able to connect to GitHub though the Firewall

We have Fortigate Firewall install on the network, What port I should open to connect to the GitHub repository using the https:// protocol. I found a similar question , And allowed the port suggested ...
0
votes
0answers
20 views

Is it possible to provide Internet access for an access point in a wireless network that using web based authentication for Internet users?

There is a web server that is configured to use an access point to connect to the Internet. The access point only needs the wifi password of any network with Internet access to connect to the ...
0
votes
0answers
8 views

Turning extra 6 LANS into “router” like links using Sophos UTM 9 [migrated]

Hey all I just finished up setting up the UTM 9 Home edition and I currently have it up and running with eth0 as the WAN and eth1 as the LAN. However, my motherboard has a total of 8 Ethernet ports ...
0
votes
0answers
7 views

Will enabling Comcast Business Gateway Port triggering lock me out?

Device info: SMC Networks Firmware 3.1.6.56 I am remotely logged into a server and configuring the "Comcast Business Gateway". At the current moment, Within the Firewall >> Port Configuration >> ...
5
votes
1answer
220 views

IIS FTP Not Working Remotely Windows Server 2012 R2

We are attempting to duplicate our server in the Azure cloud. Both are Windows 2012 R2 servers. FTP works on the original server but not on the duplicate server. Additionally, the duplicate server ...
0
votes
1answer
15 views

Malware lab with watchguard firewall

I have a quick question. This is more of a concept question than an actual problem, but basically what I'm trying to do is set up a malware analysis lab on one of my company's computers. I already ...
0
votes
1answer
26 views

Can you configure per-network SSH settings?

I'm talking about ssh_config(5). I wonder if you can define a config section or file based on the currently connected network. I'm thinking about that scenario where the corporate firewall blocks ...
-2
votes
0answers
15 views

How to isolate a rebroadcasted wifi network without NAT?

I could just set up this router (Buffalo AP running DD-WRT) in in NAT mode. But I know that's recommended against, so I'm thinking that I could configure the firewall to whitelist traffic to or from ...
1
vote
1answer
31 views

How to block all IPs in CSF except few static IPs?

The title is telling I guess. I'm wondering how to block ALL IPs in csf.deny except few trusted IPs? I've googled but could not find the answer.
0
votes
0answers
25 views

Sonicwall Port Forward through VPN

I am very close to figuring this out, but I am getting stuck at the very end. This is just a lab - nothing I want to implement in real world usage. I have two sites: Site A has my Sonicwall and is ...
0
votes
1answer
14 views

pfSense: Cannot filter flood of multicast packets being blocked by default

There are multiple devices under a different subnet on our LAN sending a flood of multicast packets. I've tried to allow this type of traffic, but it does not seem to work.
2
votes
2answers
59 views

WatchGuard Port Forwarding / Static NAT

I'm trying to forward a specific port on my WatchGuard firewall to an internal host in a specific VLAN. My setup is roughly as follows: INTERNET vv WatchGuard vv--------vv--------vv ...
0
votes
2answers
66 views

do i need to filter the OUTPUT with iptables for a dedicated firewall box?

I already know how to setup a firewall using iptables, but after a visit of the IT Security Department, they said i need to filter the OUTPUT, but, it is pointless to me, i really can find an scenario ...
2
votes
1answer
54 views

Set-NetFirewallRule alternative in Windows Server 2008

I am trying to Enable Powershell Remoting on a Windows Server 2008, but from what I understand, the default firewall exception is that PSRemoting is only allowed if the computer (both client and ...
0
votes
0answers
13 views

Allow traffic using iptables

We have a proxy server that is used for our open access PC's. We want to allow traffic originating and going to our SCCM server, our DHCP server and our Fileserver on all ports. Any idea how to insert ...
0
votes
1answer
54 views

How does TeamViewer get through my firewall even though I set it to “No incoming connections”? [closed]

Here is my firewall settings: Clearly, firewall is on for both private and public networks and it is set to "Block all connections including programs on the list of allowed programs". I did not ...
7
votes
2answers
215 views

Debugging iptables and common firewall pitfalls?

This is a proposed Canonical Question about understanding and debugging the software firewall on Linux systems. In response to EEAA's answer and @Shog's comment that we need a suitable canonical ...
-1
votes
0answers
22 views

Disable any rule relating to dropping inactive SSH connetion

Can someone walk me through how i could check a firewall for any rules relating to dropping an inactive SSH connection. Have been looking everywhere. Reason i am looking for this is an SSH tunnel ...
0
votes
0answers
28 views

How to properly configure security group at AWS?

I'm trying to reach my server's FTP-port by its Elastic IP. I've configured the security group as follows: Inbound Type Protocol Port Range Destination All traffic All All ...
-2
votes
1answer
84 views

Does AWS EC2 blocks torrent sites like torrentz.eu? [closed]

Initially when trying ping torrentz.eu, dns was not resolving the torrentz.eu domain name on my AWS EC2 micro instance(Ubuntu), Then I have added google public dns to the resolv.conf. So my instance ...
0
votes
1answer
23 views

sbs 2008 firewall, allowing only 3 IP numbers to connect to port 25, block all others

I need to allow only 3 IP's to communicate inbound with port 25 on my SBS. I set up two rules (one for TCP and one for UDP) where the rule says "Allow the connection" and in Scope under "Remote IP ...
0
votes
1answer
31 views

Setup a very Basic DMZ for WordPress

We are thinking of switching our corporate website from externally hosted and designed, to an internal WordPress server. This is so we can maintain direct control, as well as run our own traffic ...
0
votes
3answers
53 views

iptables actively refused everything despite exceptions

I was following the centos wiki page on iptables but no mater what I change only port 22 opens. Using various port scanning websites they all say the server is actively refusing connections on all ...
0
votes
2answers
178 views

Stop China from connecting to my Google Compute Engine server

My company has a Google Compute Engine server hosted in North America. We get so many Chinese IP addresses sending requests to port 11 that it is costing us money for the ingress. Our firewall blocks ...
1
vote
1answer
26 views

CISCO SSL VPN (multiple Sites) [closed]

I'm having a small issues and I'm sure it's NAT related. Our Users connect to SSL VPN in Ft. Worth. We also have a site up in Dallas. There is a current Site to Site connection there with full ...
0
votes
1answer
54 views

WAN IP Ranges and NAT [closed]

Let's say we have a router with a WAN IP assigned by DHCP: 1.1.1.1/255.255.255.255 The ISP subnet for it's lan interface is 82.5.167.161/255.255.255.248 My firewall behind this router is on WAN IP: ...
0
votes
0answers
36 views

Cannot trace bug in iptables firewalls config

I seem to have a bug in my iptables configuration - when I comment out hte final line (drop) it works fine - when I uncomment it, I cannot ssh into my server - can anyone spot what I'm doing wrong? ...
1
vote
0answers
45 views

How to combine multiple route hops using one (pfSense) router?

I am trying to come up with a way to consolidate two routers into one. I have the following network configuration: LAN <-- a/24 --> NAT Firewall <-- x/29 --> Router <-- y/30 --> ...
1
vote
0answers
24 views

Remote WOL over CISCO/FW not Forwarding

I'm trying to accomplish a Wake-on-LAN by triggering the two servers' public IP addresses. Internally, the WOL works like a charm (by either the internal or external IP), externally however, it does ...
0
votes
1answer
62 views

why my nat iptables rules dont work with marked packets?

System: debian squeeze, Linux server 2.6.32-5-amd64 #1 SMP Tue May 13 16:34:35 UTC 2014 x86_64 GNU/Linux, iptables v1.4.8 lsmod | grep iptable iptable_security 2176 0 iptable_mangle ...
0
votes
1answer
59 views

How to route VPN traffic through a separate internet connection with a SonicWALL firewall?

We have a depot quite some distance from the exchange, the expensive internet connection is only getting 2/1Mb. This causes constant drops as soon as someone downloads anything. We have now got a 4G ...
0
votes
1answer
46 views

rDNS and forward DNS for mail server behind firewall, different IPs

All, Here is my setup : Firewall(x.x.x.114) <--> mail.mailserver.com (FQDN) (x.x.x.118) When sending mail, header has following IP ...."Receivedfrom mail.mailserver.com ([x.x.x.114])", my ...
0
votes
1answer
42 views

Cannot find error in iptables firewall configuration

I'm struggling with a firewall problem on my Centos server. I have the following configuration which when I use it with a service iptables restart and I try to ssh to the server with putty, I cannot ...
0
votes
1answer
24 views

Adding VPN/Firewall to my network

Right my setup is as follows TP-LINK AC1750 Wireless router WAN (Comcast) connects here 1 port connects to TP-LINK 16 port managed switch 16 port switch has static IP, 192.168.0.99 (I've reserved ...
0
votes
1answer
47 views

Configuring iptables for Haproxy

Ubuntu machine running haproxy with 2 network cards, 1 connected to WAN (called wan0) and another connected to LAN (called lan0). All chains set to DROP traffic. # Masquerade traffic from LAN to WAN ...
0
votes
0answers
80 views

ZyWall USG-100 Firewall block access to internal subnet beyond another router

I'm experiencing a strange problem with a ZyWall USG 100 Firewall, that I can't solve with leaving the firewall enabled on the ZyWall. I have the main network subnet that is 192.40.192.0/24(LAN1 on ...
2
votes
1answer
97 views

Block smtp service to a IP centos 7 Firewall

I would like to know how to block an IP to use smtp service on a server with centos 7 firewall . I try to use something like this : firewall-cmd --permanent --zone="public" --add-rich-rule='rule ...