A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

0
votes
2answers
17 views

pfsense with three WAN IP and outgoing NAT

similar situation as this one: How to setup pfSense with multiple public IP's i have a pfsense with multiple wlan ip's. I'm using a Hetzner Server with vmware so i have a virtual machine with ...
0
votes
1answer
24 views

Allow port on firewall for internal network

I am trying to setup a Percona Galera Cluster but connection over port 4567 fails but port 3306 works. This is how it looks like on the servers Server percona1: netstat -lptu | grep mysql tcp ...
-2
votes
1answer
16 views

FTP server | Filezilla | issues connecting

so I am trying to setup an FTP server (Filezilla) on my windows 2012 server. I have installed filzilla server and set the port to 14144 (not the default 14147) I have also ensured the the service is ...
0
votes
1answer
33 views

Why should I remove firewall rule after application exit?

I have a server which listens on port 80 for incoming requests - using HttpListener. I've found that to be able to do that, I need to open up the port (add a firewall rule which enables me to listen ...
0
votes
0answers
4 views

linux: how to troubleshoot forwarded port? [migrated]

My home internet connection has a static IP address (eg: 123.123.123.123) I have configured my router to forward port 9000 to an internal host (192.168.1.101). That host is running Ubuntu 14-04. ...
-2
votes
1answer
43 views

How to open port with iptables [closed]

I wanted to open port in centos and after executing openning port commands, the iptables caontents is like below: # Generated by iptables-save v1.3.5 on Thu Nov 20 17:09:28 2014 *filter :INPUT ...
1
vote
1answer
55 views

Why is fail2ban not banning this attack?

I have fail2ban installed to ban bruteforce attempts on the ssh password. There are business requirements for not disabling password authentication on this machine. fail2ban was installed using the ...
-1
votes
0answers
12 views

Route Windows application to specific network interface [migrated]

I have two connections (one wired, one wireless, if relevant). One connection passes thru a proxy (which is not under my control) and is domain controlled. The other is a simple wireless connection ...
4
votes
3answers
91 views

Can't access Exchange OWA from Wireless Subnet - Firewall rule?

The Problem The issue is that I can't access port 80 (or 443) on the Exchange server, unless I add a blanket rule to allow all traffic from the client to the server's subnet. If I add a rule to ...
0
votes
0answers
13 views

Connections from virtual host to internet OK, but to rest of LAN, broken [migrated]

In a notebook running Ubuntu 14.04 I have installed VirtualBox and created a virtual server with Windows 7. The PC is connected to a 192.168.x.y LAN. The virtual server is in a host-only network with ...
2
votes
1answer
37 views

DNS grey listing and long retry intervals - standard practices?

My company's ISP has implemented what I'll term DNS "grey listing" (or they have a configuration problem) - they are blocking inbound DNS queries between [resolver IP, server IP] pairs that haven't ...
0
votes
1answer
27 views

Configure firewall and proxy server or just firewall for outbound connections

I'm actually a software developer and I am working on a web application which uses Recaptcha. I am using Asp.Net C# in a web form application. I am having an issue with the server trying to verify ...
1
vote
1answer
23 views

Cannot Ping Devices Across Interfaces for Shorewall Single IP Three-interface Firewall on Debian Wheezy

Summary I am currently working on a three interface software firewall using Shorewall 4.5.5.3 on Debian Wheezy, and I'm having some difficulty with the loc (eth2) and dmz (eth1) interfaces. The fw ...
0
votes
1answer
24 views

How can I adapt this technique of using a proxy (in firefox) to wget and yum ? [on hold]

I work in a large organization where some people have extremely restricted internet access and some are given a fairly large amount of freedom. The way my organization manages this is by running a ...
1
vote
1answer
71 views

My iptable rules do not allow VPN connections

I have installed OpenVPN on my Archlinux server and modified my iptable rules to allow incoming traffic on port 1194 and forward it to the tun0 interface. When I disable/stop the iptables, the OpenVPN ...
0
votes
1answer
36 views

iptables setting output default to DROP

I have two servers: one web, one database. The db server is on a private network. I thought I needed to restrict the default OUTPUT on the web server to DROP and created OUTPUT rules to to ACCEPT ...
0
votes
0answers
40 views

Blocking HTTPS content with a Watchguard (Websense) vs. SQUID and SQUIDGuard using Transparent Proxy mode

I'm trying to compare these 2 solutions when it comes to content blocking : 1 - A pFSense appliance with SQUID and SQUIDGUARD packages configured 2 - A Watchguard FW that uses Websense So, in order ...
1
vote
1answer
44 views

Linux VPS settings to allow $_SERVER['REMOTE_ADDR'] to get client ip [closed]

I have unmanaged VPS server. I am trying to get client IP form PHP $_SERVER['REMOTE_ADDR'] but it's always gives me same for all users that is server internal IP. I have done some R & D and got ...
0
votes
1answer
15 views

Skype Group Chat in a secured location?

When working in a secured location - some place that uses HTTPS inspection for the firewall, possibly application level filtering, etc - how do you get Group Chat to work correctly in Skype? Adding ...
0
votes
0answers
18 views

Cannot block team viewer through TMG Server 2010

I am just re configuring the firewall in our computer lab and I have created a block URL list. In it are the URL's to the team viewer: http://dyngate.com/ http://teamviewer.com/ This is set ...
0
votes
0answers
23 views

Trace IP traffic to physical machine under Linux

In my firewall logs I recently see frequent connection attempts from a 10.0.0.0/8 network. This network is used by VirtualBox, but I can exclude that these packets come from those. No physical machine ...
0
votes
1answer
24 views

Limiting number of simultaneous connections to certain host on windows

I have an application which doing TCP connections to some host, accidentally it could be configured to make a lot of connections to that host and overload it. Is there Windows firewall application ...
0
votes
2answers
19 views

Rsync through secure head-node on storage cluster

I wish to use a specific head-node as contact address for my rsync backups, I do no wish to have the backend accessed directly, as it is not as hardened, nor as compatible with the rest of my ...
0
votes
0answers
36 views

Cisco 877 configuration with multiple firewalls behind in parallel using public IP's

I would like to ask how I can configure my cisco 877 adsl router to have multiple firewalls installed in parallel behind the cisco 877 router. I have enclosed a diagram of what I am trying to achieve. ...
-1
votes
2answers
29 views

How to allow all clients access to remote MySQL server? [closed]

So I followed this guide to gain remote access to a MySQL server for my laptop. However, my IP changes and I want to be able to access the server outside my network. How can I allow any client IP ...
0
votes
1answer
13 views

Ubuntu UFW setup on database server for connections to a varying array of clustered applications

I'm a little confused and could use some clarification. Let's say I want to deny all connections to a mongodb server, except for to SSH from my IP and from my IP to port 27017. The way I understand ...
0
votes
1answer
25 views

How to close specific port with SuSEfirewall2?

I'm opening specific ports in a SuSE 11 server to do ssh forwarding. After I finish, how do I close only the ports that I opened? I tried SuSEfirewall2 close EXT TCP 4050 but it seems to close ...
0
votes
1answer
16 views

CentOS - how to tell what conf file CSF (firewall) is using? csf.conf then restart not updating

in /etc/csf/csf.conf the following is setup LF_CPANEL = "5" LF_CPANEL_PERM = "3600" restarting csf by doing the following csf -r does not seem to have an impact on the above attributes. ...
0
votes
0answers
25 views

Why need DHCP Relay (Watchguard) inside the Trusted network?

I run a small network that looks like this: { Win 2008 server , desktops , Wifi AP} -> Switch -> Watchguard XTM21 firewall (the Switch is connected to the XTM's Trusted interface ; the XTM ...
0
votes
0answers
22 views

UDP multicast stream on win server 2k8 R2

so i have 3 mega PCs with win 2k8 installed on them having: 1st) 1 internal NIC and 1 external 2nd) 2 internal NIC and 2 external 3rd) 2 internal NIC and 4 external same stream put on any NIC on 1st ...
1
vote
0answers
22 views

Dovecot/Postfix mail server replies to [SYN] with [RST, ACK] when user attempts to connect (POP3). Likely iptables?

Currently I am trying to trouble shoot an e-mail server that will allow users to send e-mail, but not log in to the server (POP3) or receive e-mail using their Outlook clients. Previously this was ...
0
votes
0answers
16 views

Fail over in Lokiwall Firewall

I have configured lokiwall firewall on my linux machine having multiple interfaces. Dual Routing works fine. However, I wanted to know how does the fail over happen in case a link goes down. Do the ...
0
votes
0answers
55 views

Force all traffic from one user through an OpenVPN tunnel on Debian 6 with iptables and ip route

I’m trying to force all traffic of one user through an OpenVPN tunnel. It is giving me grey hairs. The current situation is that I can either allow all traffic for this particular user, and it will go ...
0
votes
0answers
44 views

Secondary DPM server and access to protection agents at primary server

Disclaimer: This is not an ideal setup. In a perfect world we would have a direct two-way VPN between our site and the remote site. My task is to enlighten the consequences of running a System Center ...
1
vote
1answer
105 views

How to ban Syn Flood Attacks using Fail2Ban?

In my log, I am frequently seeing dropped ips like this: > Oct 30 17:32:24 IPTables Dropped: IN=eth0 OUT= > MAC=04:01:2b:bd:b0:01:4c:96:14:ff:df:f0:08:00 SRC=62.210.94.116 > ...
0
votes
1answer
55 views

Do blocking input ports increases security?

1-Do blocking unused input ports in firewall increases system security? How? (as there is no daemon listening on those ports anyway) 2-Do dropping those unused ports will positively or negatively ...
0
votes
0answers
31 views

Intermittent SSH problems with a specific server from a specific Wifi router

I've been ssh'ing into a specific server from my home office via Wifi and Time Warner Cable internet for years with no problem. In recent months, I started having problems, where I'd be unable to ...
0
votes
0answers
13 views

Using a Barracuda F400 Firewall Router Without a Modem

I'm looking into a problem where VoIP phones don't ring for some of the incoming calls that I believe might be due to the network configuration. Do you need a modem if you are using a Barracuda F400 ...
0
votes
1answer
37 views

Fail2ban jail.local vs jail.conf

Does jail.local file act as an override to jail.conf or as a replacement to jail.conf? When I was learning about Fail2Ban from tutorials, most of them usually say either to copy jail.conf to ...
1
vote
1answer
46 views

MySQL on LAN not working when IPTables enabled

I have two Centos VM. The IP Addresses are as follows : VM_1 => 10.99.0.10 VM_2 => 10.99.0.12 Apache and PHP are in VM_1 and MySQL is in VM_2. Both are having iptables rules. VM_2 is working ...
1
vote
0answers
28 views

PF rule for Continuity

So it looks like the Continuity on OS X 10.10 creates network interface on the fly (utun2 here) and my PF blocks it, so that I can't make/answer calls. I'm not an admin, just use the IceFloor for PF ...
0
votes
1answer
55 views

Can I block inbound traffic from a certain ISP

The problem My server keeps getting DDoS attacks from IP's belonging to Ecatel in The Netherlands. I wrote them a month ago and still haven't heard anything, and keep blocking individual IP addresses ...
0
votes
0answers
16 views

Publishing Multiple SSL Connections via TMG

I am using a Microsoft TMG 2010 as my Firewall. It is configured in a Three-legged approach, with public facing servers in DMZ. There are two public servers. Once is a Citrix Access Gateway which ...
1
vote
2answers
89 views

Test port reachability from a remote host even though the port is not bound to a service?

I need to check whether a remote host is able to reach a specific port. At the time of test the service bound to that port will be down. The possible issues that the test would address would be : ...
0
votes
0answers
29 views

nslookup gives timeout based on request - what gives?

I have the following strange problem with the DNS lookups in our Windows domain (dns service runs on the domain controller): from machine 'A': dns request for machines in the same network zone ...
0
votes
2answers
51 views

Cisco 887VA - Cannot open port 110

I am trying to configure a Cisco 887VA at work to open port 110, but no matter what I try, it doesn't seem to work. The router is accessed from within the building via a web UI but require CLI ...
0
votes
0answers
44 views

How can I log and maybe even block IPs that send lots of incoming UDP traffic?

we run a voice / teamspeak server which receives legitmate traffic on port 9987 from many ips. Sometimes we get DDoSed. So people use single Servers and send 1-3 Gbits of UDP Floods to that port. This ...
0
votes
0answers
13 views

Smoothwall firewall seems to be preventing “large” uploads

One of our customers has a Smoothwall firewall at the edge of their network. External users should be able to use a mobile app to upload images. The images are sent as base64 encoded strings in a JSON ...
0
votes
1answer
32 views

Making a server “read only” except for me (what the inbound/outbound rules mean)

I have an ec2 instance. It will start a webserver, and my public ip is myip. I ssh into my machine. What should incoming and outgoing rules? Why? I want only my ip to be able to change things on the ...
0
votes
1answer
41 views

Cisco PIX Firewall Version 6.3(5)

I am unable to ssh to any servers. I've exhausted every possible thing except the corporate firewall. Its an old cisco pix firewall. [model] Cisco PIX 501 I'm trying to figure out 1) how to ...