A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

2
votes
1answer
14 views

ipset behave differently when adding IP address from iptables and ipset command

I have a list that created below command ipset create foo hash:ip maxelem 40000000 timeout 180 This is how empty foo look like #ipset list foo Name: foo Type: hash:ip Revision: 1 Header: family ...
0
votes
1answer
23 views

Azure load balancer security group attached to NAT pools

I'm looking to lock down a set of Azure load balancer NAT rules to certain CIDR address ranges via network security groups, for the purpose of not directly exposing SSH/RDP ports to the internet. The ...
0
votes
0answers
20 views

avoid data leak by block internet access for PCs, but allow internet access through remote desktop

In a small network(in my company), I would like to block some computers(PCs) to access the internet, so that sensitive data or files in those PCs can not be leaked. But I still need users of the PCs ...
0
votes
1answer
15 views

ip6tables blocking outgoing+incoming connections

i just changed to a server with ipv6 and therefore i changed my firewall script. Changing my iptables-script to ip6tables does not seem to work though. This is the ipv6 part which neither allows ...
1
vote
2answers
48 views

Which Ports need to be accessible on a Domain Controller for Clients to logon?

We are currently segmenting our network. We will move the servers in another subnet than the clients. Of course the clients still need access to the domain controller to authenticate against it. I ...
0
votes
0answers
9 views

Router in bridge mode, configuration [closed]

my Netgear has the chance to be put on "bridge mode". in that way i's use it to connect to WAN port of my firewall. the question is: must i do some other configuration more than this? for example i ...
0
votes
1answer
35 views

SSH: hangs after “connection established”

I have an AWS EC2 instance to which I can't connect through one of Ubuntu servers. However, I can connect to the AWS instance through any machine(with and without private SSH key), but Ubuntu server ...
-1
votes
2answers
38 views

Can't access to an website even if connected on same network [on hold]

I'm able to access a link from an IP Address but my co-worker can't even though we're connected on the same network ( Both LAN or Wi-Fi ) it's a professional environment so it might be a firewall ...
-1
votes
2answers
45 views

IPTables chains that just RETURN, as set via iRedMail [SOLVED]

I hate to ask this, but I'm pretty sure I have everything configured correctly with iRedMail as the host for my email server/VPS re dovecot, postfix etc (even though everything is pretty much done ...
1
vote
1answer
18 views

Cisco ASA: Part of the traffic via VPN is blocked

We inherited the management of an ASA 5520 running IOS 8.2(3) from a previous company, and now we are switching the connectivity to a VPN from a LAN link directly connected to one of ASA interfaces. ...
-2
votes
0answers
22 views

Any solution to use RoundCube on a Google Cloud VM Instance?

I have launched a Debian 8 instance, installed ISPConfig with Apache2, MySql, and RoundCube. (Following HowToForge tutorial) But when I tried to send or receive emails using RoundCube, no success. I ...
0
votes
0answers
11 views

What other proxy config options do I have when the Windows https proxy requires a username and password for an automated Chrome browser?

I have a Chrome instance driven by Webdriver inside a Docker container in an AWS VPC that needs to access the internet to download some cloudfront content. The Corporate Proxy is setup to require a ...
0
votes
0answers
23 views

Forefront 2010 does not let logins using 'Public or Shared Computer'

I have recently inherited a Forefront TMG 2010 server, and when people try to login and select 'This is a public or shared computer' they are unable to login. No errors, just reloads the same page. ...
0
votes
1answer
30 views

Why is UFW not working?

I've setup some rules on my ufw but I think it's just not blocking anything. This is its current status: ~# ufw status verbose Status: active Logging: on (low) Default: deny (incoming), allow (...
0
votes
1answer
40 views

How can I configure an HAProxy server running behind a firewall?

I am having trouble with the following: I am setting up an HAProxy load balancer on CentOS 7 behind a firewall. The firewall on the HAProxy server as well as the outside firewall are configured so ...
1
vote
0answers
28 views

CISCO ASA ASDM Allow internal IP to access external IP

I'm running ASDM 7.2 and have 2 servers on the same local ip range that can communicate ok. These 2 servers have external IP's and I need to get them communicating on the external IP's but this fails. ...
0
votes
0answers
37 views

Trying to have a static IP with Elastic Beanstalk applications

My goal is to deploy a web application to Elastic Beanstalk and allow for a user to access that application from their corporate network. Their network controls access to sites using IP addresses and ...
1
vote
1answer
11 views

Accessing internally stored documents via hyperlinks in Websites on a DMZ server

We have a vendor-provided application running internally (LAN) on a Windows/MS-SQL 2012 server, providing access via IIS on the same box. The application is able to store attached documents - these ...
1
vote
0answers
51 views

Iptables firewall causing instability

I've made a script to set an iptables firewall,but it's Causing instability on the local network aplication . The firewall is droping the connection between the clients and the server for a while ...
2
votes
1answer
21 views

How do I add a mangle rule to my saved iptables firewall rules file?

I've set up OpenVPN on my Debian server and would like to add a rule to iptables. I already have a file that lists default filter rules that iptables reads from (pre-up). I tried adding the rule to ...
0
votes
0answers
16 views

Deploying builds from Jenkins Slave

we are trying to get set up to use group instance of Jenkins. Both Jenkins Master and Slaves are cloud hosted. Once the build is completed on the slave we need to deploy it to a development server in ...
-2
votes
0answers
23 views

Cannot get firewall to work

I have 2 machines A and B with 2 ethernet interfaces eth0 (internet) and eth1 (local) a) I want A to act as a FW and would like to install Shorewall on it and have in & outbound traffic go thru A ...
-1
votes
0answers
14 views

ufw not working on openvz vps

I'm trying to make ufw work for an Ubuntu 14.04 vps using openvz. All questions about this problem (like this one) lead to the same site. This one: http://blog.bodhizazen.net/linux/how-to-use-ufw-in-...
0
votes
0answers
19 views

unable to connect to webserver from LAN (access from outside is fine)

We would like to give both our customers and coworkers a single link (subdomain.ourdomain.com) to access a common web application. I set up a web server on a machine connected to LAN, it's accessible ...
0
votes
1answer
16 views

Logstash Grok Filter

I'm sure there is a simple solution to this but I'm new to working Logstash. The filter I'm trying to apply is for some firewall logs and I have a field that will either have a single or two values ...
-1
votes
1answer
47 views

Overwriting Cisco ASA config using only console access

I'd like to be able to apply a pre-written config to a Cisco ASA 5505, but presently I only have access to it via the serial console and not over the network. Various sources suggest pasting the ...
0
votes
0answers
24 views

DMZ with 2 firewall - How to allow access to DMZ from LAN

i following tutorial to setup DMZ with 2 filewall. Diagram Network can be found here --[Modem]------eth0-[External FW]-eth1------eth1-[Internal FW]-eth2-------[Intranet] External FW: eth0: 192.168....
0
votes
1answer
39 views

Can I retrieve email marked as rejected in the SMTP log?

I am using a Sophos UTM 9 SG210 firewall and noticed in the SMTP log that a formerly trusted sender has had 50 legitimate emails rejected. I've since added them to an exemption list, but was ...
1
vote
0answers
35 views

Cisco ASA 5505 Issue - “Flags SYN on interface..”

I've been trying to remotely configure a Cisco ASA 5505 in front of a dedicated server hosted with OVH. Unfortunately my qualifications and even experience very rarely touched on Firewalls. However I ...
1
vote
1answer
107 views

UDP hole punching still required in IPv6, even without NAT?

Background (skip ahead for question) IPv4 needed NAT for address conservation. The firewalling properties of NAT were also beneficial for security. IPv4 NAT firewall rules are "block incoming packet ...
1
vote
0answers
26 views

TC not classifying packets correctly based on iptables MARK

I have machineA that is connected to the internet via eth0. MachineB on the other hand is connected to machineA through a mesh and is connected to the internet via machineA. I am trying to give lower ...
0
votes
0answers
7 views

Mac won't open sites after installing avast [migrated]

Sorry if it's wrong place to ask a question like this. I installed Avast to fix a malware, and then all websites barring few (basically Google) won't open. I've uninstalled avast but the problem ...
-1
votes
0answers
10 views

AirPort Extreme setup with existing Cisco WAP's and Palo Alto Firewall

We have a WiFi network with two Cisco access points and a broadband modem plugged into a Palo Alto PA-500 firewall, from which both wired and wireless clients receive their IP addresses. I have been ...
2
votes
1answer
114 views

How to block TeamViewer?

In light of mounting allegations that TeamViewer has been hacked, and that criminals are somehow gaining unauthorized access to TeamView-enabled workstations, we would like to block TeamViewer ...
1
vote
0answers
14 views

Sonicwall TZ205 with EnGenius ESB300 as Guest Wireless AP, Need to keep networks apart

I have a SonicWall TZ205 with an EnGenius ESB300 as a Guest Wireless AP. I would like to keep these networks segregated. Interface X0 is the LAN, X1 is WAN and the EnGenius is connected to X4 in AP ...
0
votes
2answers
53 views

Is it safe to open all UDP ports range?

I've setted some main ports - 20, 21, 22, 23, 53, 80, 443 for incoming and outgoing TCP connections. If i want to connect from inside my server to another ftp server, it uses random UDP port in range ...
0
votes
1answer
87 views

Access Point Iptable/Route rule for allowing device discovery? Devices can connect manually, but not automatically. Multicast/Upnp issue?

I setup a wireless access point on my server and for some reason, everything works but automatic discovery features. I can't see any other devices, upnp devives aren't discovered, and I think it's a ...
0
votes
1answer
28 views

How can I check that the firewall is disabled for a TUN/TAP interface?

while trying to diagnose a UDP multcast issue on an OpenVPN client configuration and I've come across this block in the config file: # Use the same setting as you are using on # the server. # On most ...
0
votes
1answer
90 views

Windows server 2012, unable to access site in some ports from outside

We have our website hosted in a windows server 2012 server. Some staging sites are also hosted on same server in different port numbers like 5015, 5014. Now I wanted one more site to be added and ...
0
votes
0answers
28 views

Cannot communicate from VM instance in Google compute

We are using Google compute engine with a Gateway VM having public IP and couple of other VM's with private IP to host our test and production environment. All of them are running on Debian ...
0
votes
0answers
14 views

Firewall-Rules on Proxmox-Node cause VPS to be offline

I'm using proxmox to virtualize some small machines based on KVM. To do so I created the following network-config on the KVM-VPS: # This file describes the network interfaces available on your ...
0
votes
1answer
62 views

Router configuring without NAT

i just addes a fw to my network. it manages 2 WAN using load balancing.enter image description here a router i reached to configure, while the other no. in my netgear router i reset all settings, ...
0
votes
1answer
25 views

frequent delay of 5-10 sec in sending commands from putty redhat. Why?

When we type a command from putty, it suddenly hangs for a period of 5-10 sec or more, but the commands are sent to terminal later. So seems to be a latency which occurs frequently. But, I might be ...
-3
votes
1answer
20 views

Telnet times out on local machine but works externally

Im trying to get inbound mail working with postfix. Nothing is showing up, even in the maillog. Outbound works perfectly, but inbound doesnt. If i use telnet from an external server over port 25, i ...
0
votes
0answers
101 views

Can't reach a Kubernetes service on a guest node

I have tried to run the guestbook example in Kubernetes Github repository but I can't reach this service from my local host. My test enviroment consists of two virtual machines (with CentOS7) ...
-1
votes
1answer
34 views

Open port 8082 on ubuntu for remote access

I need to open port 8082 on my linux box for remote access. I can access the application on port 8082 locally, but not from my other box. Ports 8080 and 8081 are accessible locally as well as remote. ...
0
votes
1answer
20 views

Connection between sql workbech on my Laptop and Mysql on Google cloud compute engine (not cloud sql)

Is there anyway to open a port 3306 between MySQL database running on compute engine in google cloud (not cloud SQL) and MySQL workbench running on your local machine to connect ? I was able to ...
0
votes
1answer
26 views

Allowing remote connections to SQL Express

On Windows 2008 Server R2, I installed SQL Server Express 2014 successfully and enabled TCP/IP on the default port (1433) and also added an inbound firewall rule to add port 1433. The database option ...
0
votes
2answers
19 views

Unable to browse tomcat from web browser in EC2

I have configured Security Groups, my tomcat is running in 8080 port. But I am unable to browse from web browser. Please anyone there to help me ? Public IP is : 52.39.220.183 When I do curl http://...
1
vote
0answers
34 views

cisco asa public server nat issue

I have been tasked with some ASA configuration coming in a few weeks, and to test out some configuration options I have setup a web server on my local network which I would like to be able to access ...