Tagged Questions
0
votes
0answers
9 views
Sonicwall NAT Policy Pritory Ordering not working
I understand that the priorities of the NAT Policies for a Sonciwall UTM device (we have an NSA 3500) are automatically assigned - a couple of quotes below from the Admin manual makes that clear
"By ...
0
votes
0answers
26 views
Bandwidth Management & Visibility at Network Border w/ Multiple WAN Links
There is a network that is designed as described below:
The ISP supplies a single physical link with 4 VLANs running to us through that link.
Each VLAN has a specific purpose, 3 of the VLANs will ...
1
vote
0answers
31 views
Puppet agent (v3.0.1) hangs connecting to master (v3.1.1) in VM behind firewall (with NAT based access) - SOLVED
I am using puppet agent v3.0.1 (On FreeBSD), trying to connect to a puppet master v3.1.1 (On Ubuntu) and the puppet agent hangs with the following debug output:
puppet agent --debug --no-daemonize
...
0
votes
1answer
123 views
NAT / Port Forwarding with iptables firewall [duplicate]
I've got the following setup:
firewall (iptables)
eth0 internal interface, 192.168.2.10
ppp0 external interface, public_ip (IP masquerading)
server1 (192.168.2.11), service 1 (port 443)
server2 ...
1
vote
1answer
51 views
Checkpoint - Wifi Bridge mode kills round trip requests?
I'm fairly sure this is either a NAT or routing question, but it's one that continually has me stumped.
The hardware is a Checkpoint Safe@Office firewall. The default mode of operation is that wired ...
3
votes
1answer
120 views
Dual Cisco Router Stateful Firewall
At my company we have a single Cisco 3925sec/k9 router running BGP with 2 ISPs.
Now we want to purchase a redundant router of the same model to eliminate a single point of failure.
I can set up BGP ...
0
votes
1answer
48 views
NAT/PAT port and address selection
I am currently having some issues with TCP port reused too often (under 2 minutes) for a source NAT and I was wandering what is the algorithm used to select the IP and port for a SNAT.
Here is some ...
0
votes
0answers
60 views
SonicWALL routing in parallel with existing firewall
I am trying to bring a new SonicWall NSA 3500 (latest OS v5.8) online in stages and in PARALLEL with our existing firewall BEFORE cutting-off the old one, and I cannot seem to reach our Exchange (OWA) ...
0
votes
1answer
145 views
IPTABLES nat maintaining source IP address with CSF
We have been using CSF on a virtualized (OpenVZ) environment successfully for a while combining venet and bridged interfaces so we can use public IPs + local addressed virtual systems.
Kernel IP ...
1
vote
2answers
588 views
iptables NAT/Forwarding with external ADSL router; PCs on the network can't access the internet
I'm setting up a firewall/gateway (Ubuntu server 8.04.1)
The firewall has three NIC's:
eth0 192.168.0.2
eth1 192.168.1.2
eth2 192.168.2.2
eth1 is connected directly to the ADSL router (which also ...
1
vote
2answers
171 views
Can a global IPv6 address be NAT'd to an internal IPv4 address at a firewall-level?
As an organisation we've just requested our first IPv6 allocation. At present we are a wholly IPv4 organisation with a global IPv4 address allocation configured on our edge router and used ...
1
vote
1answer
264 views
pfsense firewall filter rules behind nat?
i am new in pfsense
i have vmware which pfsense and windows xp are installed on them
pfsense in using ip 192.168.44.1 for LAN and 192.168.121.129 for wan (which is NAT)
my win xp ip is 192.168.44.2 ...
-1
votes
1answer
91 views
Nginx Forward SSL for single site [closed]
I have a nginx server setup and it works fine for http however i would like to bypass the
proxy for https connection.
I want it so that when someone goes to my ip https:// ip1 (Nginx server) it ...
1
vote
1answer
67 views
NAT ports - how do they work?
I have the following network schema:
Computer A: three nics:
NIC 1 (eth0): dhcp, public internet
NIC 2 (eth1): static 192.168.1.1, gateway for Computer B
NIC 3 (eth2): static 192.168.2.1, gateway ...
0
votes
3answers
335 views
Using a nat rule to translate 80/443 traffic to web server, but internal users cannot access it using external ip/domain name
I am using Cisco ASDM for ASA
I have my internal network called soa. My outside interface is called outside. Let's say my outside IP given to me by my ISP isp is y.y.y.y I have a web server inside ...
2
votes
2answers
115 views
NAT, iptables and problematic ports
I am building a small office network with virtual machines. My schema is this:
Computer A: gateway, ip 1.1.1.1, iptables used for NAT [eth0=public internet dhcp, dhcp; eth1=gateway]
Computer B: ...
0
votes
2answers
134 views
Do I need to enable firewall before Natting? [closed]
I want to make my local server visible over the internet. I've learnt that I'll be able to achieve this through NAT. I'm using a D-Link router, DIR-600. In the application rules it asks me for ...
0
votes
1answer
400 views
Juniper SSG20 IP settings for email server
We have 5 usable external static IP addresses leased by our ISP: .49 to .53, where
.49 is assigned to the Juniper SSG20 firewall and NATed for 172.16.10.0/24
.50 is assigned to a windows box for ...
1
vote
0answers
135 views
iptables dynamic NAT, SNAT: force overload on exhaustion
Is there a way to specify the use of iptables NAT'ing where you can use SNAT for a pool of outside addresses, but when the last IP is about to be used it is used as an overloaded outside IP? I ...
-1
votes
1answer
109 views
Multiple External IP's
I have a Virtual host server that has 6 VM's on it running a Windows SErver 200i8 r2 enviroment. I have two domains externally one of which points to my static IP. How do i use my other static IP's ...
0
votes
0answers
97 views
Translate NAT rule in iptables to Cisco 2901 NAT
We have the following line in our iptables for NAT:
target prot opt in out source destination
DNAT tcp -- * * 1.2.3.169 4.5.6.131 tcp dpt:389 ...
3
votes
1answer
1k views
pfSense router on a LAN with two gateways
I have a LAN with an ADSL modem/router on it. We have just gained an alternative high-speed internet connection at our location, and I want to connect the LAN to it, eventually dropping the ADSL.
...
1
vote
2answers
273 views
NAT translation with Cisco ASA 5505
I am trying to setup NAT translation on a ASA 5505, however the new public IP address never actually becomes available after adding it. I'm sure I'm doing something stupid, but so far the problem has ...
1
vote
1answer
190 views
Configuring a PIX to allow SMTP between DMZ and internal network
I have a Web Server (193.170.4.2) in my DMZ that needs to communicate with the our Exchange Server (10.77.51.87) internally via SMTP. I used access-list acl-dmz permit tcp host 193.170.4.2 host ...
0
votes
0answers
250 views
Sonicwall NAT Policy Loopback
I have an issue and am pretty perplexed over it. I have a sonicwall and its setup with NAT polices and reflexive nat for an internal web server. That is, only 2 policies, no loopback policy, and the ...
4
votes
2answers
814 views
Secure NAT setup with iptables
I have a Debian running device that needs to act as an internet-gateway. On top of that I want to provide a firewall that not only blocks inbound traffic, but also outbound traffic. And I figured ...
0
votes
1answer
91 views
Looking for flexible firewall/NAT software to mimic SOHO gateways [closed]
II am working on a project where I need to create a virtual machine that acts like a home gateway, so I am looking for the firewall/NAT that is most flexible. My hope would be that I could give some ...
1
vote
2answers
2k views
(Zywall USG 300) NAT bypassed when accessing in-house-server From LAN Via domain name
My situations is like this; i host a number of websites from within our joint network solution. On the network is basically 3 categories:
the known public, registered via mac, given static dhcp ...
0
votes
2answers
543 views
Windows Server 2008 dropping connections [closed]
Possible quite similar to this post but I wonder if someone can help me with this issue.
Home Server specs:
Windows Server 2008 Standard (Non-R2)
2 NICs, external one(Realtek) has a firewall on it. ...
0
votes
1answer
251 views
Vyatta internet connection + hosted site on same IP
Having a small issue setting up a vyatta.
The company internet and two different websites are both on the same IP.
Server 1 - Has websites hosted on ports 1000 and 3000 and also has a proxy server ...
0
votes
1answer
161 views
Spoofing Packets?
I host a GameServer and some stupid guy just keeps attacking my Application server with random queries. I have found a solution to block it but he uses different kinds of queries so I have to block ...
0
votes
1answer
668 views
Can I use my pfSense WAN IP as public IP for 1:1 NAT? What about port forwarding?
I have a dual pfSense configuration with CARP. Both WAN interfaces are assigned consecutive WAN IP .150, .151. I think it is silly that pfSense would require them both to have these dedicated IP so I ...
0
votes
1answer
270 views
PFSense new network, NAT and Firewalling
We have a PFSENSE installation with a few physical interfaces defined:
192.168.1.0/24 - LAN
192.168.2.0/24 - WIFI
192.168.3.0/24 - SERVERS
10.61.88.0/23 - New Requirement..... read on
The new ...
0
votes
1answer
277 views
In 2 tier firewall, how to configure so that only the 1st tier is doing the NAT
We recently done a network intra upgrade by adding an additional firewall as the 1st tier firewall, and making the current one 2nd tier. The setup is:
WAN <--> 1st Tier Firewall <--> ...
1
vote
2answers
3k views
NAT one public IP to two inside servers on ASA 8.4
for example I want to:
NAT 5.5.5.5 tcp 85 to 192.168.1.5 tcp 85
NAT 5.5.5.5 tcp 33 to 192.168.1.9 tcp 33
NAT 6.6.6.6 tcp 80 443 to 192.168.1.20 tcp 80 443
The way I was going to do this was:
...
2
votes
1answer
106 views
Forward port on same machine?
I'm trying to forward an existing port for an application which can only listen on one port.
The problem is the program and the firewall is on the same computer (Windows Server 2008 R2).
For ...
1
vote
1answer
794 views
Why won't vyatta allow SMTP through my firewall?
I am setting up a vyatta router on VMware ESXi,
But I see to have hit a major snag, I could not get my firewall and NAT to work correctly.
I am not sure what was wrong with NAT but it "seems" to be ...
0
votes
0answers
409 views
Endian Destination NAT
I have installed Endian Community Firewall 2.3 and am clearly misunderstanding/doing something wrong with it. I'm trying to create some destination NAT rules to allow incoming connections to various ...
0
votes
2answers
819 views
Slow upload speeds with pfsense virtual appliance
I have a pfSense virtual appliance set up in front of a Windows server. The pfSense appliance has been configured with two L2L IPSec VPN sites and not too much else. The appliance has two vNics which ...
0
votes
1answer
375 views
Fortigate 310B… internal tunnelled clients can not access interal hosted sites
I have a new Fortinet firewall (310B)
Internal IP is 172.16.1.7
External IP #1 is 164.58.180.210 (secondary 211-222)
External IP #2 is 164.58.12.30
Internal IP is the default gateway. External is ...
3
votes
1answer
2k views
Setup 1:1 NAT using pfSense
pfSense box:
Public IPs 208.43.30.118-.117
Private IP : 192.168.1.1
I need to provide 1:1 NAT mapping to a VM in the private network 192.168.1.5
I am unable to get 1:1 NAT working though it ...
32
votes
5answers
2k views
Will everyone having Globally Accessible IP's in IPv6 be kind of a security nightmare? [duplicate]
Possible Duplicate:
Switch to IPv6 and get rid of NAT? Are you kidding?
I'm thinking about the way that in IPv4 most of the time you have a single point to configure a firewall on, mainly ...
0
votes
1answer
408 views
I would like to redirect port 8140 on my public IP address (ip1) to port 8140 on Internet host (ip2)
edit3:
i would like to get exactly what is descripted in http://shorewall.net/FAQ.htm#faq1g but it doesn't work for me.
edit3 end;
os: debian squeeze
shorwall: 4.4.11.6-3
3 computers a, b & c; ...
0
votes
1answer
486 views
Cisco NAT - Sharing single public IP with multiple services
We have this setup on a SonicWall firewall, but I can't for the life of me figure out how to do it on a new Cisco 5520. Here is what I want to do
External_IP1:25 --> InternalMailGW_IP:25
...
1
vote
0answers
498 views
OpenWRT with VLANs: NAT not working with single Firewall Rule
I have a configuration on my OpenWrt Backfire 10.03 with different VLANs, k2 belonging to fwz2 is one of them. In this testing environment the WAN is DHCP with IP:192.168.1.1:
config 'interface' ...
0
votes
1answer
306 views
Cisco routers “loopback”
I have Cisco RV220W.
I have configured with NAT, and its working good from outside. (From WAN)
But when I is on LAN-side, and visit my ip-address, for instance http://83.213.21.32:80
I am beeing ...
1
vote
2answers
222 views
Unblocking a blocked TCP port on a Sonicwall Tz170 firewall
Anyone with knowledge of Sonicwall's Tz range might be able to help.
Under Firewall >> Service I create a new Service called "remote tcp conn" and add it to a new Service Group.
Then under ...
0
votes
1answer
426 views
NETMAP in iptables,
I need to know the general usage of NETMAP which is used in iptables command(linux's debian OS).
Is NETMAP used in place of other NAT such as SNAT or DNAT or MASQ ????
What is the relation of ...
1
vote
1answer
200 views
Utilizing two outside internet subnets - routing or physical connection ideas?
I am looking for some ideas on how I might utilize a second 5 internet ip address subnet I have available from my isp.
Currently I have the isp cable modem which has 5 ethernet ports on it. It is ...
0
votes
3answers
283 views
Network Firewall forwarding one port to two different internal ip's based on url requested
I have multiple websites running inside my network on 2 different machines, I need to give access to every website from the outside via a firewall router, and they need to stay on port 80. (so a ...
