A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

0
votes
0answers
3 views

local port forwarding with failover

There is a number of similar though not identical processes (worker processes) running on the localhost and listening each on its own TCP port, let's say process1 is listening on port 10001 process2 ...
0
votes
0answers
15 views

Port forward linux iptables

My current network setup consists of a physical nic eth1 receiving my public ip from the modem. Next I have kvm/qemu virtual machines running on a virtual network using the ip range 192.168.122.0 - ...
0
votes
0answers
5 views

use of secondary public IP subnet in Sonicwall NSA firewalls

I have a Sonicwall NSA 3500/4500 firewall. I have a primary block of public IP addresses that are working fine but I need to utilize a second block of IPs that are routing over the primary from the ...
2
votes
1answer
43 views

Securing Windows Server 2012 from the internet

I've placed my direct internet connection into the public profile for the firewall and started disabling every rule to block all but RDP. The only rules I am not sure about are these Core Networking ...
1
vote
0answers
18 views

Running a Windows Server connected to the internet [on hold]

I've been running Linux servers online for years so I know security very well for *NIX. However, I recently setup a Windows Server Network at home and decided I wanted to connect one of my Windows ...
0
votes
0answers
5 views

Route some rule on App Rules to second wan on Dell Sonicwall TZ215

Im using Dell sonicwall TZ215 with firmwire SonicOS Enhanced 5.9.0.4-127o and have 2 wan connection. The question is, is it possible to route some rule on App rules to second wan? I'm already try ...
0
votes
0answers
12 views

Opening up the firewall to Google Cloud Messaging

I'm trying analyse the firewall requirements for push notifications on iOS and Android devices. It's relatively simple for iOS: they need the entire 17.0.0.0/8 address block to ensure APNs runs ...
0
votes
1answer
30 views

How to create advanced rules with firewall-cmd?

I want to create a rule using firewalld that uses criteria username or userID and maybe one other module criteria. In iptables, I think you can do things like iptables -A OUTPUT -m owner --uid-owner ...
-2
votes
0answers
14 views

Setting up access rules [closed]

I want to create LAN to WAN rules to allow and deny traffic on port 2525 to 74.22.22.22 A total of 4 rules to create specific to port 2255. A deny all from LAN to WAN, a deny all from WAN to LAN, ...
1
vote
0answers
14 views

Dual WAN and NAT on ZyWall

I have Zyxell ZyWall USG-50 router firewall and I want to configure dual WAN navigation. On WAN1 I've 10Mbits connection and on WAN2 I've 100Mbits connection. I want my LAN to navigate with WAN2 and ...
-1
votes
1answer
27 views

Centos 7 postfix send mail only — what firewall settings? [on hold]

I'm trying to set up a postfix mail server on a local machine behind a Sonicwall. I already have gmail account for normal use @domainname.com but this postfix server is mainly for sending mails from ...
0
votes
0answers
20 views

Windows server 2008 r2 firewall only affecting one interface

I am trying to secure this Windows 2008 R2 server for outside traffic (don't care about inside at the moment). I have two nic's, one for domain and one for outside (two different ip's). By default ...
0
votes
0answers
13 views

Enable IPSec on Firewall

I am using ProfitBrick for my Cloud infra. However, if I enable their firewall, IPsec does not pass through. The ports opened on firewall are: TCP 53 TCP 51 TCP 4500 TCP 500 UDP 4500 UDP 500 Does ...
0
votes
0answers
6 views

openvpn ping: packet response is done on a different (?) port

I am having difficulty pin pointing the exact location of a problem with my openvpn which is running on a Linux server, which sits behind a modem that is in turn connected to the Internet through a ...
0
votes
1answer
23 views

Does ColdFusion use TCP Ports?

I am trying to access a link on our network. Whenever I try, the page times out. I have discovered that this link is a Adobe ColdFusion web page. Does ColdFusion use a TCP port other than port 80? I ...
2
votes
1answer
55 views

How to find Check Point firewall version from command line

On Check Point firewall's command line, how can I find its version? Major version, minor version and optionally build number.
0
votes
0answers
22 views

Simple IPtables Script for Whitelisting (Amazon Endpoints)

I'm attempting to lockdown an Amazon EC2 instance which has a single open port for Amazon SNS. I can't use security groups to restrict the port as the IP is forever changing, so it must be open to all ...
1
vote
0answers
27 views

TLS Error: Handshake failed. Openvpn Server is behind NAT on dynamic ip

this is a common problem that appears easily in searches and seems to be related to the firewall , yet I can't seem to figure out how to fix it. I have actually asked before, but this time I come back ...
1
vote
0answers
16 views

Exchange 2010 sp3 RPC connectivity between separate physical sites

Good evening! I have installed Exchange 2010 a few times in my life but never in an environment like this. Please don't judge me for this architecture, it wasn't my idea! ;) I have two physical sites ...
4
votes
0answers
93 views

What's the best way to simulate being behind China's Great Firewall? [closed]

We're having issues with an iOS app of ours that uses in-app purchase to unlock downloadable content - but it seems only from China. We see many negative reviews from China for this reason. Our in ...
0
votes
1answer
29 views

Unable to connect to AWS RDS instance

I have set up a AWS RDS instance. I am using "end point" as hostname to establish the connection via MySQL workbench. But the connection is failing. I am sitting behind a company firewall and as per ...
0
votes
1answer
26 views

Saving SonicWALL NAT Policies settings

I have a SonicWALL TZ model that I manage. Now in the [Network] --> [NAT Policies] there are some policies added that have their own checkbox in the [Enabled] column (the other ones have a green ...
1
vote
1answer
36 views

Issue with local php fopen scripts returning 404 on CentOS

I'm having some trouble today with php scripts running on our server which use file_get_contents or similar fopen functions. I think this is an openssl or firewall error but I'm quite new to server ...
0
votes
1answer
18 views

External IP becomes unreachable sporadically

I have a very strange problem - We have a lease line with 50 odd external IP addresses on it. We do a 1:1 assignment and Outgoing IP assignment to interfaces on a pfsense proxy server. For each ...
0
votes
1answer
28 views

Ubuntu Iptables FTP passive mode

I have a problem when trying to define iptables rules in my ubuntu server. I reject all connections and allow some like FTP. The problem is that in passive mode I can connect but I cannot list ...
0
votes
1answer
77 views

Cisco ASA 5550 rebooted itself, logs cleared

we had Cisco ASA5550 in Active/standby mode which worked without any issue for over 1 year. Recently, we started having issue where the VPN tunnels would drop to sites and have internet outages. We ...
0
votes
1answer
34 views

Troubleshooting “Network is unreachable” from within an Amazon VPC

An EC2 instance is running Amazon Linux in a public subnet in a VPC. Here are the outbound rules for its security group: ALLOW TCP on port 80 to 0.0.0.0/0 ALLOW TCP on port 443 to 0.0.0.0/0 ALLOW ...
0
votes
0answers
58 views

Mikrotik OpenVPN Server dropping OpenVPN Connections - Connection reset, restarting [0]

I was able to connect from within my local network connection but from remote site locations the connection looks to be dropping. Could this be a possible firewall issue? I see a connection but it ...
3
votes
1answer
62 views

Firewall: allow all traffic from sources authenticated via. an open ssh connection

I'm looking for a way to avoid the editing of the firewall rules all the time on test and dev servers. I don't want to open up all ports. So I thought maybe there is a way to allow all traffic from ...
-1
votes
1answer
36 views

No Internet on router with pfSense [closed]

Sorry in advance if a similar question has already been posted. I am with Sky for broadband and have a router providing DSL connectivity. I have a cheap 64 bit desktop PC running pFsense as a ...
-2
votes
0answers
36 views

OpenSuse: How to allow an outside network to access the local network?

I want to connect vlans of two separated networks I administer and it's almost complete, Allow me to describe the situation: Network A's firewall is a FortiGate 1000C and the vlan is 192.168.2.0/24 ...
-1
votes
1answer
33 views

Iptables DNAT working in my own network, but not through VPN

For some reasons I need to switch a server ip to another ip, in order to be seen by another computer elsewhere through vpn. So I'm using iptables (didn't know any of that until yesterday) and testing ...
0
votes
2answers
63 views

Windows Server 2012 unable to access specific SSL page

This problem really boggles the mind. I have a standard Windows 2012 server with windows firewall enabled. Using Chrome, I am unable to access a certain HTTPS website while other HTTPS websites can ...
0
votes
1answer
55 views

Cannot open port 1337

I am struggling with iptables firewall to open port 1337 externally. My iptables file looks like this: *nat :PREROUTING ACCEPT [0:0] :INPUT ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :POSTROUTING ACCEPT [0:0] ...
1
vote
0answers
27 views

External Access to Internal Network and Websites — Microsoft Networks

I need to be able to expose a set of "internal" web sites to Internet users somehow. Please bear with me as network engineering isn't my forte. I'd appreciate any insight or suggestions to this task. ...
-1
votes
1answer
28 views

Block Dynamic DNS update requests

I need to block all dynamic dns services update requests from my network so that no dyndns client be able to update its IP. Do the major dyndns providers use a standard protocol or each one uses its ...
0
votes
0answers
25 views

PHP FTP Pasv mode on CentOS 7

I need help with connecting to a FTP server and using the passive mode. They told me I need to open ports 20, 21 and 5000-5100 range. I've got a virtual machine running CentOS 7 on a dedicated server ...
0
votes
0answers
15 views

Pfsense firewall log format and packets data length

In pfsense firewall logs there are many fields described here: https://doc.pfsense.org/index.php/Filter_Log_Format_for_pfSense_2.2 I would like to get some statistics from these logs about traffic, ...
1
vote
3answers
35 views

Connect from one LAN to another LAN through SonicWALL

I have a LAN (LAN 1) on the 192.168.1.1 subnet, and another LAN (LAN 2) on the 192.168.2.1 subnet. LAN 1 is on the X0 interface, LAN 2 is on the X4 interface. I want to be able to access a device ...
0
votes
0answers
28 views

DSL modem in bridge mode but router not accessible from the internet

I have a DLink ADSL modem which I have put into bridge mode and connected to a Fortigate 200A firewall. The Fortigate is able to connect through PPPoE and receives the static public IP. I can browse ...
-1
votes
1answer
26 views

ruleset iptables- user defined chains [closed]

I am very new in iptables. Learning to use them. I got a hang of some basic commands from https://help.ubuntu.com/community/IptablesHowTo. However, I didnt find good explanations of examples of a ...
1
vote
0answers
79 views

How to simulate network partitions on windows? [closed]

Working on a project which implements a clustering algorithm. One important property of the clustering is to respect guarantees when face a network partition. To prove that clustering works I need a ...
0
votes
1answer
57 views

Hyper-V disable internal firewall

How can I disable a firewall on my internal network? Problem I have a Hyper-V on a Windows Server 2012 R2 with one VM, when I disable the firewall I can get internet on my VM, but when I turn on ...
0
votes
2answers
69 views

Is there any disadvantage to putting a modem in bridge mode

In order to prevent the need of port forwarding and double natting I plan to put a modem into bridge mode. Are there any side effects or problems that could come of placing a modem into bridge mode in ...
0
votes
1answer
15 views

Not able to connect to GitHub though the Firewall

We have Fortigate Firewall install on the network, What port I should open to connect to the GitHub repository using the https:// protocol. I found a similar question , And allowed the port suggested ...
0
votes
0answers
15 views

Will enabling Comcast Business Gateway Port triggering lock me out?

Device info: SMC Networks Firmware 3.1.6.56 I am remotely logged into a server and configuring the "Comcast Business Gateway". At the current moment, Within the Firewall >> Port Configuration >> ...
5
votes
1answer
286 views

IIS FTP Not Working Remotely Windows Server 2012 R2

We are attempting to duplicate our server in the Azure cloud. Both are Windows 2012 R2 servers. FTP works on the original server but not on the duplicate server. Additionally, the duplicate server ...
0
votes
1answer
17 views

Malware lab with watchguard firewall

I have a quick question. This is more of a concept question than an actual problem, but basically what I'm trying to do is set up a malware analysis lab on one of my company's computers. I already ...
0
votes
1answer
27 views

Can you configure per-network SSH settings?

I'm talking about ssh_config(5). I wonder if you can define a config section or file based on the currently connected network. I'm thinking about that scenario where the corporate firewall blocks ...
1
vote
1answer
52 views

How to block all IPs in CSF except few static IPs?

The title is telling I guess. I'm wondering how to block ALL IPs in csf.deny except few trusted IPs? I've googled but could not find the answer.