A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

-1
votes
0answers
15 views

Windows 8.1 third party firewalls and Hyper-V virtual switch compatibility [on hold]

I have the following problem: Hyper-V is installed on windows 8.1 with an external virtual switch. Everything works fine with windows firewall. When i try to install any third party firewall on ...
0
votes
2answers
43 views

Limiting IP access geographically

I don't want to cause any offence here, but whenever I take a look at the logs for my servers I can see I am constantly having IP addresses in China try to login to my machines, hoping to get access ...
2
votes
2answers
53 views

Windows firewall, netsh, block all ips from a text file

am using the following scrip to block ip's from a text file into the windows firewall. I'm using windows 2008 R2 @echo off if "%1"=="list" ( netsh advfirewall firewall show rule Blockit | ...
6
votes
2answers
316 views
+100

For an internet-facing, all-roles-in-one Exchange server, what do I need to let through the firewall?

As the result of a recent penetration test, in which we did not fare well, it has been brought to my attention that our internet facing, all-roles-in-one, Exchange 2010 SP3 server has no firewall in ...
-1
votes
0answers
19 views

Want to block torrent traffic (p2p) & other unwanted sites [on hold]

I have a Dlink 260E UTM & subscription IPS/IDS , WCF & antivirus.i want to know how to block P2P traffic on it & other unwanted sites by using IPS/IDS & WCF. I am new to this ...
0
votes
2answers
21 views

Cisco PIX 501 and jumbo frames

We currently have a cisco pix 501 running in our office building and we just got word that our network is going to updated to run jumbo frames. I haven't been able to find much information, but from ...
1
vote
0answers
17 views

Why did BFD add euid=0 to APF IP deny_host.rules?

Trimming down some old deny_hosts today and I noticed this one: # added euid=0 on 11/03/14 11:00:04 with comment: {bfd.sshd} euid=0 Anyone know why the BFD would have added euid=0 root/permissions ...
-1
votes
0answers
30 views

Access to alternative DirectAdmin port is removed from iptables after a while

First i installed csf. Then these auto block rules: http://help.directadmin.com/item.php?id=380 Next i opened a different port in csf for directadmin to listen to. Also added the exception to ...
-1
votes
1answer
21 views

Host-name based web forwarding in software firewall [on hold]

This is another one of those "what should I use instead of Forefront TMG" questions, although I will try to be very specific about my request. Please advise a software firewall product, that would ...
1
vote
1answer
49 views

When iptables is started, there is no ftp access because of timeout

When I start the iptables service, there is no ftp access because of a connection timeout. When I stop the iptables service, ftp works fine. This is the current iptables data: Update: replaced ...
-2
votes
2answers
42 views

How to improve IP tables for web server [closed]

this is my curreny /etc/sysconfig/iptables file for a webserver that must allow http, ftp and ssh access. *filter :INPUT ACCEPT [31395:4050333] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [30540:7083959] -A ...
4
votes
1answer
93 views

firewall and private cloud

We have a private bay in which we built a private cloud with vmware vSphere. We received directly the web trafic on a firewall VM and then we forward the trafic to the appropriate VMs. We are worry ...
0
votes
1answer
27 views

Using Cloud Servers and Firewall

I would like to ask if the configuration of "firewall rules eg. only allowing port 80.. when configuring a server instance on cloud services such as google cloud and amazon aws is securely equivalent ...
1
vote
0answers
24 views

Windows firewall blocking network shares through VPN server

I have a VPN server in front of a 172.16.0.0/24 network. On my client side is a 192.168.1.0/24 network. I am able to successfully VPN in to the server network from the client, and I am trying to ...
3
votes
2answers
90 views

High number connections coming from an IP

On our corporate network we're detecting workstations opening too many connections to the IP address 75.126.196.159 (port 3478) causing the Cisco ASA Firewall 5550 to detect a "SYN Attack" and reach ...
0
votes
0answers
12 views

Fortinet as intermediate router

I have the next scenario: FG1(LAN A) <--IPSEC--> FG2(LAN B) <--IPSEC--> FG3(LAN C) Basically I need that "LAN A" reach "LAN C" through FG2, I've tried with "router policy" and "router ...
0
votes
0answers
26 views

FreeNAS jail port forwarding without DHCP

I'm trying to get port forwarding working correctly with jails, and having trouble (I don't have any experience with ipfw or FreeBSD jails. is ipfw even running by default on FreeNAS? I notice pf is ...
0
votes
0answers
10 views

GCE firewall with Source Tags

Created an instance in GCE, tagged 'tagA' Created firewall rule: tcp:12345, source tag tagA, target tag tagA On the instance executed: nc -l 0.0.0.0 -p 12345 netstat -an | grep 12345 tcp ...
0
votes
0answers
18 views

pfSense: Captive Portal is extremely slow

I migrated my pfSense firewall (2.0.2) from an old computer to a more powerful server. I set up the newest pfSense version 2.1 and migrated via export and import my complete settings. Now I encounter ...
0
votes
0answers
19 views

Asterisk Firewall access Rules

I have a questions regarding the firewall rules for Asterisk VoIP server. I have a restricted access to UDP/TCP port 5060, which seems to be blocking calls. I want to make sure that my VoIP Server ...
0
votes
1answer
25 views

Redirect client cloud traffic [closed]

We recently moved our email to Office365 which has as expected put additional strain on our Internet connection. However, we are moving some services to the cloud which will stretch our Internet ...
0
votes
0answers
16 views

amazon ec2 instance going to a remote ip using openswan tunnel is up but no traffic being established on the remote ip

I having establishing a vpn tunnel to a remote peer/public ip using amazon ec2 openswan. The tunnel is up but no traffic has been seen on our side or the remote side? Is there I been missing? Please ...
-3
votes
0answers
36 views

Large number of requests, high outgoing traffic [duplicate]

I have a VPS on Linode with Ubuntu 12.04 LTS on which I run my staging server (protected with basic HTTP authentication). I the recent days, I received a high number of requests from a handful of IPs ...
-1
votes
3answers
50 views

ping and traceroute does not work when UFW deny outgoing by default

How to make ping and traceroute work after setting UFW with deny outgoing by default? Here is my UFW configuration: sudo ufw status verbose Status: active Logging: on (low) Default: deny (incoming), ...
0
votes
0answers
50 views

Enabling the Internet Connection on an EC2 Windows Server 2012 Machine

I've disabled the firewall: netsh firewall set opmode disable I've made sure to accept all inbound and all outbound connections: Is there anything that I should be installing or adding on to the ...
0
votes
0answers
15 views

windows firewall , some ports not listening

I've added an inbound connection rule for my windows 8 firewall on windows server 2012: I've restarted the Windows Firewall. When I check that port using this program, it says that it is not ...
0
votes
1answer
52 views

Juniper SSG5 suddenly slow throughput

I'm trying to find out where in my configuration the problem might be. About a month ago we were easily getting 100 up 50 down through our provider through the Juniper SSG5. Starting a few weeks ago ...
0
votes
2answers
37 views

Is a sonicwall tz105 firewall necessary for my network? [closed]

I was not exactly sure how to best word my question above. I am trying not to ask a subjective question but I really want a little advice from someone who knows more about this, and have a few ...
0
votes
1answer
34 views

Is it possible to block HTTP traffic from specific machines?

I have some web crawlers, and a specific website seems to be blocking traffic temporarily after some time. The thing is, even though all clients have the same external IP address (they access the ...
0
votes
0answers
26 views

Remove mapping drives from RDP to user from exteral network

I would like to know if you guys have a solution to my problem. I have a terminal server 2012 that can be accessed remotely after a VPN connection and from the LAN. My question is how can I create a ...
0
votes
0answers
35 views

Dynamic IP Blocking on FORTIGATE 200A Firewall

I have FORTIGATE 200A firewall protecting a IIS Server running a ASP.NET website (windows server 2008 and IIS7) I'm not familiar with Fortigate configurations and options. I recently had "attacks" ...
0
votes
2answers
37 views

pfsense with three WAN IP and outgoing NAT

similar situation as this one: How to setup pfSense with multiple public IP's i have a pfsense with multiple wlan ip's. I'm using a Hetzner Server with vmware so i have a virtual machine with ...
-2
votes
1answer
19 views

FTP server | Filezilla | issues connecting

so I am trying to setup an FTP server (Filezilla) on my windows 2012 server. I have installed filzilla server and set the port to 14144 (not the default 14147) I have also ensured the the service is ...
0
votes
1answer
36 views

Why should I remove firewall rule after application exit?

I have a server which listens on port 80 for incoming requests - using HttpListener. I've found that to be able to do that, I need to open up the port (add a firewall rule which enables me to listen ...
0
votes
0answers
4 views

linux: how to troubleshoot forwarded port? [migrated]

My home internet connection has a static IP address (eg: 123.123.123.123) I have configured my router to forward port 9000 to an internal host (192.168.1.101). That host is running Ubuntu 14-04. ...
1
vote
1answer
102 views

Why is fail2ban not banning this attack?

I have fail2ban installed to ban bruteforce attempts on the ssh password. There are business requirements for not disabling password authentication on this machine. fail2ban was installed using the ...
-1
votes
0answers
12 views

Route Windows application to specific network interface [migrated]

I have two connections (one wired, one wireless, if relevant). One connection passes thru a proxy (which is not under my control) and is domain controlled. The other is a simple wireless connection ...
4
votes
3answers
123 views

Can't access Exchange OWA from Wireless Subnet - Firewall rule?

The Problem The issue is that I can't access port 80 (or 443) on the Exchange server, unless I add a blanket rule to allow all traffic from the client to the server's subnet. If I add a rule to ...
2
votes
1answer
43 views

DNS grey listing and long retry intervals - standard practices?

My company's ISP has implemented what I'll term DNS "grey listing" (or they have a configuration problem) - they are blocking inbound DNS queries between [resolver IP, server IP] pairs that haven't ...
0
votes
1answer
51 views

Configure firewall and proxy server or just firewall for outbound connections

I'm actually a software developer and I am working on a web application which uses Recaptcha. I am using Asp.Net C# in a web form application. I am having an issue with the server trying to verify ...
1
vote
1answer
31 views

Cannot Ping Devices Across Interfaces for Shorewall Single IP Three-interface Firewall on Debian Wheezy

Summary I am currently working on a three interface software firewall using Shorewall 4.5.5.3 on Debian Wheezy, and I'm having some difficulty with the loc (eth2) and dmz (eth1) interfaces. The fw ...
0
votes
1answer
26 views

How can I adapt this technique of using a proxy (in firefox) to wget and yum ? [closed]

I work in a large organization where some people have extremely restricted internet access and some are given a fairly large amount of freedom. The way my organization manages this is by running a ...
1
vote
1answer
108 views

My iptable rules do not allow VPN connections

I have installed OpenVPN on my Archlinux server and modified my iptable rules to allow incoming traffic on port 1194 and forward it to the tun0 interface. When I disable/stop the iptables, the OpenVPN ...
0
votes
1answer
40 views

iptables setting output default to DROP

I have two servers: one web, one database. The db server is on a private network. I thought I needed to restrict the default OUTPUT on the web server to DROP and created OUTPUT rules to to ACCEPT ...
0
votes
0answers
115 views

Blocking HTTPS content with a Watchguard (Websense) vs. SQUID and SQUIDGuard using Transparent Proxy mode

I'm trying to compare these 2 solutions when it comes to content blocking : 1 - A pFSense appliance with SQUID and SQUIDGUARD packages configured 2 - A Watchguard FW that uses Websense So, in order ...
1
vote
1answer
57 views

Linux VPS settings to allow $_SERVER['REMOTE_ADDR'] to get client ip [closed]

I have unmanaged VPS server. I am trying to get client IP form PHP $_SERVER['REMOTE_ADDR'] but it's always gives me same for all users that is server internal IP. I have done some R & D and got ...
0
votes
1answer
28 views

Skype Group Chat in a secured location?

When working in a secured location - some place that uses HTTPS inspection for the firewall, possibly application level filtering, etc - how do you get Group Chat to work correctly in Skype? Adding ...
0
votes
0answers
49 views

Cannot block team viewer through TMG Server 2010

I am just re configuring the firewall in our computer lab and I have created a block URL list. In it are the URL's to the team viewer: http://dyngate.com/ http://teamviewer.com/ This is set ...
0
votes
0answers
31 views

Trace IP traffic to physical machine under Linux

In my firewall logs I recently see frequent connection attempts from a 10.0.0.0/8 network. This network is used by VirtualBox, but I can exclude that these packets come from those. No physical machine ...
0
votes
1answer
33 views

Limiting number of simultaneous connections to certain host on windows

I have an application which doing TCP connections to some host, accidentally it could be configured to make a lot of connections to that host and overload it. Is there Windows firewall application ...