A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

0
votes
0answers
19 views

Small Office WiFi config for iPhones

I purchased an ASUS RT-AC66u wireless router for use in a small office. I have the router configured as an access point, DHCP is turned off. It is using a static IP of 10.10.10.251. My DHCP server ...
0
votes
0answers
15 views

Cannot access Exchange from guest WiFi

I'm having trouble getting users to be able to connect to Exchange from their cell phones on our wireless. If accessed from completely outside the network, ie from home, then OWA and phone apps sync ...
0
votes
2answers
39 views

Can browse, but can't ping

I am behind a corporate network. I am unable to use git, since it can't resolve server names fatal: Unable to look up someserver.org (port 9418) (No such host is known. ) I can't ping that server ...
-2
votes
0answers
7 views

Replacing DevilLinux firewall [on hold]

We are currently running an x86 firewall using a DevilLinux distribution that starts from USB pendrive (no HDD). There are basically an iptables script and an openvpn server running on the machine. ...
0
votes
0answers
8 views

Extracting Check Point firewall configuration to XML

I need to extract Check Point firewall configuration (roles, management definitions, logs policy and much more) into a readable .XML file. I know that Check Point has a visualization tool, but i ...
0
votes
0answers
32 views

Port forwarding to the router itself on Edgerouter

I recently upgraded one of my customers to a Ubiquiti EdgeRouter Lite, which is a significant improvement over their old ISP-supplied router. To reduce the frequency of attacks against the router's ...
0
votes
1answer
37 views

libvirt and host firewall

Hiho! I'm using libvirt with kvm and that works great. My desire is to lock down the host system using a host firewall. Up to today I always used shorewall as my iptables mangement utility of choice. ...
-2
votes
1answer
27 views

connection to ssh server [closed]

How to connect to ssh server on port 22 from behind very restrictive firewall where is only port 80 and 443 available? I tried port mapping on my ssh client but it says it can map local port higher ...
1
vote
1answer
161 views

iptables block port range with single port exception

I`ve two rules. First blocked all port from range: -A INPUT -m state --state NEW -m tcp -p tcp --match multiport --dports 200:65535 -j DROP and second open one in this range: -A INPUT -i ...
1
vote
1answer
29 views

Some Group Policy defined inbound exceptions not showing on local machine

I am turning on the Windows Firewall for the first time for my domain. I am only worrying about workstations for now, and I have defined a list of inbound exceptions. I have these set up using ...
0
votes
2answers
36 views

Using iptables or similar to redirect traffic to a proxy

I've searched around for an answer to this question, but it seems like most of what I found wasn't specifically what I wanted to do (mostly redirecting traffic on the same host to squid running on ...
-1
votes
1answer
29 views

Firewall High Availability - Active Active set up [closed]

I wish to create a cluster consisting of two or more routers which have firewalls active on them. These routers would be connected to a single ISP through a switch. The basic idea is to make sure ...
0
votes
1answer
33 views

Cannot connect to port over the internet (works from localhost)

I'm running something (=Faye server) on port 9292: david@theta:~$ lsof -ni tcp:9292 COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME ruby 2406 david 13u IPv4 1579461398 0t0 ...
1
vote
1answer
45 views

Cisco ASA - difference between inside_access_in and inside_access_out?

So a minor problem we have is any internal servers have no (non-icmp) access to the outside is being blocked. Our current config is: inside_access_in any ---> any ---> icmp inside_access_out ...
0
votes
1answer
56 views

Rate limit new connections in IPTables instead of Nginx or HAProxy?

I would like to use some form of rate-limiting both 1) new TCP connections and 2) requests over an existing connection to HTTP(S). I will probably handle #2 with nginx or HAProxy (because I have more ...
0
votes
0answers
24 views

Rabbitmq windows firewall configuration

I installed rabbitmq on a remote windows server and I opened up port 5672 in the windows firewall settings. I set access to all programs and I was able to connect to rabbitmq. However when I ...
0
votes
1answer
51 views

Strange TCP Flood / Flood from Port 445

Good Evening. Today I noticed a strange flood on a box that I am working with, here is a dump from tcpdump: 23:21:07.580917 IP (tos 0x0, ttl 64, id 5746, offset 0, flags [DF], proto TCP (6), length ...
0
votes
0answers
50 views

Route Email to external IP Cisco ASA 5515

I have a cisco ASA 5515X with two WAN connections and one LAN connection. As far as I understand, I hace the firewall configured to allow SMTP traffic through WAN2 interface, but not through WAN1. ...
0
votes
1answer
7 views

couchdb public access - start failures eaddrnotavail

If I start the couchdb service it fails and with journalctl-xe i can see the following: start request repeated too quickly for couchdb.service And when i do couchdb -i i get the following error: ...
-2
votes
0answers
6 views

Does Apache need firewall access for code server requests? [migrated]

Would just like quick clarification on something. For a development stack such as LAMP or XAMPP for a local server; does Apache require access over the firewall (e.g. port 80) if, for instance, some ...
0
votes
1answer
39 views

Linux firewall, ADSL bonding, two default routes

I am trying to set up a Linux firewall (ubuntu 14.04) to use two bonded ADSL lines for load balancing purposes. I found by searching the forum link to this: ...
1
vote
1answer
38 views

Docker with a virtualized software firewall ahead

I'm currently working on a Docker setup and here is how I decided to think it : An Ubuntu host, which host : A KVM of an OpenBSD configured and acting as a firewall : The firewall will have it's ...
0
votes
0answers
38 views

How do I diagnose a blocked connection to an internet webserver?

When I browse to three specific sites (which happen to be run by the same provider), I get a 403 Forbidden Nginx error. However, the sites are up. I am able to access the sites when I use a proxy ...
1
vote
1answer
36 views

iptables only blocks OpenVPN on server startup

I'm currently in the process of setting up OpenVPN across multiple data centres on Linode. The OpenVPN set up is working great and I'm now focusing on getting my firewall set up so that my public and ...
1
vote
0answers
58 views

Apache blocking based on combination of ip, request and useragent - Can fail2ban do that?

3 times over the past 48 hours, we had about a 6X spike in traffic lasting a few hours. The server handled it each time, but just barely. This was almost all bad-bot traffic (or maybe failed DOS ...
0
votes
1answer
26 views

Connection lost to VPS While using iptables by default policy as DROP for INPUT, OUTPUT, FORWARD

I'am using iptables in many server's but now stuck with this issue while using default Policy as DROP. Here is my rules which i have used in VPS, Tried many time's everything seems fine but VPS ...
-1
votes
1answer
50 views

Secure cloud to internal Mail setup using UUCP or something more modern

Some of our Linux servers are going to be moved out into a cloud. But the servers need to be able to email our users internally and are required to use our domain name as sender. The server cannot ...
0
votes
2answers
23 views

Can I prevent some of the UFW messages from being logged?

My router broadcasts (sends to 224.0.0.1) something every forty seconds. This is caught by UFW which stores a log entry in syslog: Jan 5 03:49:02 log kernel: [ 1184.788900] [UFW BLOCK] IN=eth0 ...
1
vote
1answer
74 views

How do iptables policies work?

I've added some basic rules: iptables -A INPUT -p tcp --dport 22 -j ACCEPT iptables -A INPUT -p tcp --dport 80 -j ACCEPT Then, command to close all other ports with: iptables -A INPUT -j DROP ...
1
vote
0answers
45 views

firewall-cmd forward rules for interface with multiple ips

I'm looking for a way with firewall-cmd or another command to do the following. An incoming public interface has multiple ip addresses bound to it. How can I forward ports only for one of the ip ...
3
votes
1answer
40 views

Windows Server 2012 Port Forward for Specifc Host

I am trying to have a specific host be redirected to another port when trying to access a service on port 80. So, when the client (192.168.1.22) requests a connection to the server (192.168.1.10) on ...
2
votes
0answers
27 views

PF redirect rule: how to limit the rule to specific user

I was trying to setup a PF redirect rule to force all web traffic from a specific user account to go through a web filter on a shared computer. With iptables, I can use --uid-owner option to limit ...
-1
votes
0answers
34 views

Unable to connect to MySQL with Iptables

I have a web server, lets say its IP is 10.0.0.2 and a separate MySQL server on 10.0.0.3. On the MySQL server I have the following firewall rules: # enable all traffic and delete existing rules ...
0
votes
0answers
8 views

how do torrent clients circumvent router's firewall? [migrated]

Could anyone please explain me how the deluge torrent client can get incoming requests to my local machine from the Internet, while I'm behind router's firewall and do not have any port forwarding ...
-2
votes
1answer
40 views

Opinions about firewall rules for vps [closed]

I just switched to a new vps, which I installed Linux and I wish to harden it a bit by applying firewall rules using iptables. I use Firewall Builder to create my rules and I would like some ...
2
votes
2answers
91 views

How to have ntpd serve only my local subnet

I have a few servers with public Internet IP addresses like A.B.C.x. One of my hosts (A.B.C.10) runs ntpd and I have it syncing it's time from europe.pool.ntp.org. Now I only want to allow hosts ...
0
votes
0answers
65 views

Set up pfSense on AWS VPC?

I am attempting to setup pfSense as a nat box for internal servers on a VPC. I have followed the guides posted for configuring access and have followed the AWS instructions for setting up and ...
-2
votes
1answer
70 views

Iptables block connection from specific IP - to another IP [closed]

My server with dnsmasq will send Facebook.com (for example) to DNS 8.8.8.8. All other websites go trough another dns server. When i use:sudo iptables -A INPUT -p udp -s 8.8.8.8 --sport 53 -j DROP With ...
0
votes
1answer
91 views

Forwarding Ports on Centos 7

I'm working on a CentOS 7 server and I'm trying to get JBoss to work the way I want it too. I'm running Java 8 and JBoss(wildly) 8. I have gotten those installed and working on the default ports, ...
0
votes
2answers
68 views

Limiting IP access geographically

I don't want to cause any offence here, but whenever I take a look at the logs for my servers I can see I am constantly having IP addresses in China try to login to my machines, hoping to get access ...
2
votes
2answers
140 views

Windows firewall, netsh, block all ips from a text file

am using the following scrip to block ip's from a text file into the windows firewall. I'm using windows 2008 R2 @echo off if "%1"=="list" ( netsh advfirewall firewall show rule Blockit | ...
6
votes
2answers
353 views

For an internet-facing, all-roles-in-one Exchange server, what do I need to let through the firewall?

As the result of a recent penetration test, in which we did not fare well, it has been brought to my attention that our internet facing, all-roles-in-one, Exchange 2010 SP3 server has no firewall in ...
0
votes
2answers
24 views

Cisco PIX 501 and jumbo frames

We currently have a cisco pix 501 running in our office building and we just got word that our network is going to updated to run jumbo frames. I haven't been able to find much information, but from ...
1
vote
0answers
20 views

Why did BFD add euid=0 to APF IP deny_host.rules?

Trimming down some old deny_hosts today and I noticed this one: # added euid=0 on 11/03/14 11:00:04 with comment: {bfd.sshd} euid=0 Anyone know why the BFD would have added euid=0 root/permissions ...
1
vote
1answer
58 views

When iptables is started, there is no ftp access because of timeout

When I start the iptables service, there is no ftp access because of a connection timeout. When I stop the iptables service, ftp works fine. This is the current iptables data: Update: replaced ...
-1
votes
2answers
47 views

How to improve IP tables for web server [closed]

this is my curreny /etc/sysconfig/iptables file for a webserver that must allow http, ftp and ssh access. *filter :INPUT ACCEPT [31395:4050333] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [30540:7083959] -A ...
4
votes
1answer
100 views

firewall and private cloud

We have a private bay in which we built a private cloud with vmware vSphere. We received directly the web trafic on a firewall VM and then we forward the trafic to the appropriate VMs. We are worry ...
0
votes
1answer
30 views

Using Cloud Servers and Firewall

I would like to ask if the configuration of "firewall rules eg. only allowing port 80.. when configuring a server instance on cloud services such as google cloud and amazon aws is securely equivalent ...
1
vote
0answers
40 views

Windows firewall blocking network shares through VPN server

I have a VPN server in front of a 172.16.0.0/24 network. On my client side is a 192.168.1.0/24 network. I am able to successfully VPN in to the server network from the client, and I am trying to ...
3
votes
2answers
184 views

High number connections coming from an IP

On our corporate network we're detecting workstations opening too many connections to the IP address 75.126.196.159 (port 3478) causing the Cisco ASA Firewall 5550 to detect a "SYN Attack" and reach ...