-1
votes
1answer
39 views

How should I properly block outgoing http traffic with iptables

I'm experimenting with iptables, and I'm trying to allow all outgoing requests for HTTPS, but to block HTTP. I have the code below; Chain INPUT (policy ACCEPT) target prot opt source ...
-3
votes
2answers
26 views

Login before using the internet

How do you setup a user login page in order to connect to the internet just like the one at McDonalds and Radisson Blu? What kind of setup is that? We are in school and would like to have that kind ...
0
votes
0answers
15 views

How can I add a new physical interface to an Endian Community Firewall?

I just installed the Community Endian Firewall on my system. But it's just recognizing the first 4 interfaces (after going into shell and doing a ifconfig shows br0, br1, br2 and br3). How can I add ...
0
votes
1answer
35 views

Cloud services can't be reached from complex customer infrastructure

We have several services running on a cloud, they all are hosted on Windows Server 2012 R2, have public IP address and specific port. Some of our customers can't reach them because for "some reason" ...
0
votes
2answers
52 views

pfsense CARP - wan failure on firewall

I have recently configured 2 firewall (on 2 DELL PowerEdge R210II with ESXI 5.1) with pfsense. We have several LANs and 2 WANs. Everything is running fine but i have a strange behavior: i can access ...
-5
votes
1answer
75 views

Blocking facebook and other social networking sites from corporate LAN whilst maintaining an audit trail of all sites visited [closed]

I am setting up an office LAN, and I want to give it internet access but i want to be able to do the following: Maintain a black list of sites not to visit (e.g. facebook and other social sites), so ...
1
vote
2answers
68 views

Give internal access to external client

I am newbie in the networking issues. I got a question for which I don’t know how to solve. I have my internal network that has a fixed IP (only accessed by VPN) and I have a server where I put some ...
-1
votes
1answer
37 views

Firewall Based on NIC

I have an IIS 8.5 Server running on Windows Server 2012 r2. The server itself has 2 network cards. Rewrite: Can you block ports based on a network adapter? IE: I have two network adapters, both ...
0
votes
1answer
66 views

Block ip forwarding for specific remote ip address

I use ubuntu as gateway for several hosts. I need advise how to block ip forwarding for specific ip address or specific ip range? I tried to block ip via ufw deny rules, but it looks like ip ...
1
vote
1answer
39 views

Websever behind Sonicwall, Gateway Timeout

I am stuck here, I have a Cradlepoint CBA750B in IP-passthrough mode connected to x1 on my Sonicwall NSA220. Behind the Sonicwall I have a webserver on the LAN. I have X1 set to use DHCP to get the ...
3
votes
1answer
92 views

Need help understanding capturing from Wireshark?

I am having issues with my FTP servers. Connecting, sending and receiving fail sometimes, and it is not consistent. I manage to capture and filter by IP the packets, I just need pointers on what can ...
0
votes
1answer
95 views

How to surf the internet using static IP using SSL VPN [closed]

I have a Fortinet 60D device which configured to use SSL VPN this appliance connect to ADSL router with WAN interface and to my Radius server on LAN interface. The problem is when I go out to the ...
0
votes
0answers
37 views

OpenVPN Server & Two Gateways

I have a network setup as follows: Internet <---> Firewall <---> VPN (1) VPN <---> NAT (2) Internet <---> Firewall <---> NAT (3) (I don't have the reputation to post the picture :/) ...
1
vote
0answers
51 views

Firewall and NAT settings in GSM modem for one server

I have a GSM Modem (PSI-MODEM-GSM/ETH) in field with one device behind, acting as a server. The situation is as follows: "PC" | \_________Dynamic IP: 10.103.153.122 | ...
0
votes
0answers
53 views

Multiple gateways with linux on same subnet using single NIC

I have the following configuration; Firewall 1 (site 1); x.x.x.x/26 subnet on external 10.0.0.0/8 on internal (internal IP 10.0.0.10) Firewall 2 (site 2); x.x.x.y/26 subnet on external 10.0.0.0/8 ...
0
votes
0answers
53 views

Connecting internet uplink to switch or firewall

While I am using Cisco kit, this isn't really Cisco related, more general network design. In the past I have connected internet connections straight in to a layer 3 core switch, 3750X's, 6509's and ...
-4
votes
1answer
48 views

Single machine server with many operating systems [closed]

Could possibly with single one high end Server with supported Virtualization We can have: - DHCP Server (Virtual Machine 1), - Firewall (Virtual Machine 2), - Squid proxy (Virtual Machine 3) - ...
-1
votes
2answers
144 views

Amazon VPC: How to block inbound traffic on specific IP of an instance while allowing on other IPs of the same instance

Specifications I have an amazon VPC instance with the following specifications: Windows 2003 (32 bit). Two Network Interfaces each with 6 IPs. 6 instances of a software (called backweb) installed ...
0
votes
1answer
61 views

IPTables: Firewall with just one Eth device? [closed]

Admittedly I am a novice in the area of firewalls. But I have read on the IPtables and Firewall theory and command options. There is a general diagram by Rusty Russell, the creator of IPtables: ...
-1
votes
1answer
53 views

Back-to-back router configuration [closed]

I have inherited a network where there are 2 routers supposedly configured back-to-back. They are both on the same subnet and only one serves DHCP. There is the possibility that they are not ...
1
vote
2answers
167 views

KVM: All network traffic to one guest (firewall)

I am currently using a VMWare ESXi 5.5 server for my virtualisation. The network setup is like this: PFSense firewall is the center of it all and connected to: LAN Network (physical NIC 1 assigned by ...
0
votes
0answers
22 views

VPN User ACL not working

i´m currently testing a Cisco 886VA router for VPN usage. First off here is my client config group: crypto isakmp client configuration group VPN_PRIV key xxxxxx dns 192.168.111.100 pool VPN_POOL acl ...
2
votes
1answer
43 views

Allow only one ipaddress through a cisco firewall without pcs knowing there is a proxy server

We have a PC behind a firewall. (ASA 5505) [PC] => [ASA Firewall] => [Corporate Proxy/Firewall/Anything] => [Internet] :- where the PC and ASA Firewall are under our control... and the rest are ...
0
votes
0answers
35 views

Unable to connect to SQL Server over SSL

I am unable to connect to a SQL Server over SSL. This is the current setup: A server at my location sends data to an external service (SQL Server 2008) using SSL. We are using Websense and an ASA for ...
0
votes
0answers
122 views

The Windows Filtering Platform has blocked a connection - Query User

I'm having a problem with a program trying to access port 135. The Windows filtering platform is blocking the communication. In the windows security logs, the following is displayed: The Windows ...
0
votes
0answers
30 views

Prompt User for decision corresponding Firewall Inbound Traffic NOT APPEARING

Normally when an Incoming Traffic comes, there will be "Prompt the User for a decision corresponding this Inbound Traffic" popup. For some weird reason this popup is not coming out and I'm finding ...
6
votes
3answers
582 views

What's wrong with using windows firewall?

I was developing a system which requires connection between two computers. I decided to connect the two machines together via direct ethernet cable. My boss didn't like it as there is no firewall in ...
0
votes
1answer
208 views

Cant open port on Windows 2012R2

I really never had problem with Windows Firewall, however today on new installation i`m trying to open port 110 but i cant. My firewall rule is: printscreen telnet myip 110 Connecting To ...
0
votes
0answers
70 views

how to whitelist ip, port, protocol and app on a router?

I am looking for the simplest but robust solution to allow user accounts under Windows Server 2012 to use GitHub.com with the GitHub app, but otherwise not a peep is allowed from the server to reach ...
2
votes
1answer
41 views

How to provide access to lan mysql DB from a remote server?

Consider the below network configuration: A client connects with its workstation to the application server on the Web. The application is full HTML, so only browsing through HTTPS is enough to ...
4
votes
4answers
269 views

Why on linux machines, any packets do not pass except icmp, but correctly pass on windows

There is a cluster on proxmox. In a cluster have vm - configured router (pfsense). In the our net have Windows and Linux machines. There is the problem: Windows-machines have access to the internet, ...
0
votes
0answers
27 views

VPN Full Functioning Then Enabled 2nd NIC now VPN not functioning

I had a successful VPN solution stood up on a Dell PE 2650. I configured Ethernet Bridging and all was well. Following the successful configuration and connection of a few clients, I got greedy. I ...
1
vote
3answers
752 views

iptables error: unknown option --dport

The command iptables no longer recognizes one of the most commonly used options when defining rules: --dport. I get this error: [root@dragonweyr /home/calyodelphi]# iptables -A INPUT --dport 7777 -j ...
0
votes
0answers
136 views

Dropping packets with Open Vswitch and OpenFlowControl

I am trying to setup some Flows with ovs-ofctl to block all unwanted incoming packets for a VM. The commands I use are: ovs-ofctl add-flow xenbr0 "priority=65000, table=0, tcp, dl_src=*, nw_src=*, ...
1
vote
0answers
215 views

Sonicwall NSA 2400 Not switching back to Primary VPN after Failover

We are experiencing an issue with our SonicWall NSA 2400 Firewall. We have a secondary gateway over IPSec setup in the event of a failure of our main ISP (which is unfortunately common). The ...
0
votes
1answer
257 views

why does yum update fail in cent os 6.4 when wget and curl succeeds

I am using Cent OS 6.4 in a corporate lab and the yum update fails with the below error: I am able to access the same repositories through browser. [root@LAB1 ~]# yum update Loaded plugins: ...
0
votes
3answers
65 views

How do I stop someone from saturating my line & wasting CPU cycles

My web host shows inbound & outbound traffic with mrtg. I have a steady 3.5mbps inbound traffic from Nigeria. Even assuming the source IPs & destination ports are blocked with Iptables & ...
1
vote
1answer
359 views

How do I allow only certain IPSet set's to access a certain port with iptables?

I'm using IPSet to build IP ranges for different countries as follows : # Canada ipset -F ca.zone ipset -N ca.zone nethash for IP in $(wget -O - http://www.ipdeny.com/ipblocks/data/countries/ca.zone) ...
0
votes
1answer
24 views

How do I specify the external IP when using iptables masquerade?

I'm using this rule to allow internet access through OpenVPN: -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE However traffic via the VPN is coming from the box's primary IP. eth0 has a /29 ...
7
votes
2answers
365 views

How to configure a small network of computers within a larger university network?

I have a small computer lab (8 HP workstations, 1 HP server, 2 NAS boxes, 1 HP networked printer) where currently all the devices are connected directly to my university's network. Each device has an ...
0
votes
0answers
102 views

Shutting Down Firewall Rules for TMG 2010

Since TMG is being sunsetted next year we have decided to go with a new firewall/web filter and put the TMG 201O server off the network and used ONLY as a front-end authentication/proxy piece for our ...
0
votes
1answer
123 views

Can't obtain ip-addres from my DHCP server

I can't obtain a ip-addres from my dhcp-server and it's going trough a firewall (pfsense), The firewall(pfsense) and DHCP server are two virtual machines on my physical server(ESXI). As rules i use ...
0
votes
2answers
484 views

How to globally limit total number of TCP connections with iptables?

I'm having quite a difficult time figuring out how to REJECT both inbound and outbound connections from a machine with iptables once the total number of TCP connections hits a global maximum without ...
0
votes
0answers
12 views

VPN through Netscreen Firewall

I have 2 netscreen FWs , I'd like to create Dialup VPN to FW2 as endpoint , passing thru FW1 client ------ FW1 ----- FW2 Is that possible ? I allow 'ANY' from client on FW1 to FW2 endpoint But ...
1
vote
2answers
144 views

How to identify and differentiate networks so I can set location?

I am a developer and know just whatever sysadmin/networking/etc stuff I've picked up over a lifetime of computing and developing (not an inconsiderable amount, but I am very far from an expert on any ...
0
votes
1answer
73 views

Iptables log clent IP to file

Im trying to track whether some ports are being used, and what by, as I want to close them. I have made some iptables traffic counters, and have worked out is a small amount of traffic, coming into a ...
0
votes
2answers
521 views

Routing between multiple Mikrotik Firewalls

I have 2 Miktorik RouterBoards, an RB1100 and a RB951G. The 951G is acting as my Wireless box, and has Guest, Internal and Internet Only Wireless networks. The RB1100 has 3 WAN connections (2x150/10Mb ...
0
votes
1answer
113 views

route cisco sg300 traffic through Watchguard firewall

I need help in determining what I need to research. I have two cisco SG300 switches (sg300-52 & sg300-28) and a Watchguard firewall (XTM-23). The internet connection currently passes through our ...
-2
votes
1answer
100 views

VLAN routing setup with VPN on Cisco ASAs

We currently have two ASA5515-X firewalls, what we want to do is dedicate one of them to providing AnyConnect VPN and two site to site VPNs only, with the second ASA handling firewall ACLs for ...
3
votes
1answer
383 views

Symmetric NAT and UDP Hole Punching

I've read this question, but the explanation of Symmetric NAT wasn't detailed enough. Please could someone help me to understand the following paragraphs? I read this about Symmetric NAT: Each ...