0
votes
2answers
28 views

Firewall/Packet Sniffer - forward HTTP requests to a different address

I have a particularly "hacky" question/solution and looking for some honest feedback. In an enterprise system there are a number of requests that are destined for www.sometargeturl.com. These need ...
0
votes
0answers
22 views

Multiple gateways with linux on same subnet using single NIC

I have the following configuration; Firewall 1 (site 1); x.x.x.x/26 subnet on external 10.0.0.0/8 on internal (internal IP 10.0.0.10) Firewall 2 (site 2); x.x.x.y/26 subnet on external 10.0.0.0/8 ...
0
votes
2answers
47 views

limit outbound access for an EC2 instance

Our company is in the process to become PCI compliant and one of the requirement is to limit the outbound access of our servers. We have only 1 EC2 instance that falls in the PCI scope and I would ...
0
votes
0answers
37 views

how to whitelist ip, port, protocol and app on a router?

I am looking for the simplest but robust solution to allow user accounts under Windows Server 2012 to use GitHub.com with the GitHub app, but otherwise not a peep is allowed from the server to reach ...
4
votes
1answer
129 views

Why on linux machines, any packets do not pass except icmp, but correctly pass on windows

There is a cluster on proxmox. In a cluster have vm - configured router (pfsense). In the our net have Windows and Linux machines. There is the problem: Windows-machines have access to the internet, ...
1
vote
0answers
24 views

Zyxell USG200 NAT for local computer using wan address

My WAN public address is linked to the server with NAT. How can I set up the firewall to let all local computer use the same NAT rules for www.mypublicaddress.com address from INSIDE the network? I ...
0
votes
1answer
42 views

Reachability with OSPF on firewalled network

I'm trying to figure out how OSPF establishes routes when used on a network with firewalls. Say I have four routers (A, B, C, and D) and two firewalls (F1 and F2), arranged like so: (LocalA) A - F1 ...
0
votes
1answer
51 views

ASA 5505 - Outside IPs required for VPN Tunnel?

I've set up a Site-Site VPN and it seems the config is fine as the other site can establish the tunnel fine. The problem I have is that my side never tries to bring the tunnel up. Ping/telnet ...
0
votes
2answers
429 views

Routing between multiple Mikrotik Firewalls

I have 2 Miktorik RouterBoards, an RB1100 and a RB951G. The 951G is acting as my Wireless box, and has Guest, Internal and Internet Only Wireless networks. The RB1100 has 3 WAN connections (2x150/10Mb ...
0
votes
0answers
73 views

Routing static IPs

This is probably a simple question for you experts. I have a BT infinity business broadband account, that offers 5 static IP addresses. I'm trying to expose a server on one of those addresses. This ...
0
votes
2answers
102 views

IP Routing with 2 Subnets

We currently have a Cisco ASA on a range with only two usable IP addresses. The Cisco has 217.67.255.31 and the BT NTE box (for the leased line) has 217.67.255.32. (on /32) Now we want to split this ...
1
vote
0answers
55 views

Wireless Bridging two Sonicwall Firewalls

We have two sites (essentially two small buildings side by side but we are unable to run CAT5 cable between them) which are currently linked via a wireless bridge. We will be splitting the sites so ...
0
votes
1answer
608 views

How to set up port forwarding on a NETGEAR ProSafe™ Gigabit 8 Port VPN Firewall FVS318N?

UPDATE: Rule might be right, but app still isn't functional. See more details after the screenshots. I want to forward port 3000 to a machine in the local network (192.168.1.106). So far I've ...
1
vote
3answers
192 views

Securing a guest VM to give it internet access, but block access to host LAN

I have a Linux guest VM running under a Windows host. If I set the networking mode to NAT, the guest can get internet access (which I want), but can also access the hosts LAN (which I dont). For ...
2
votes
2answers
57 views

Cisco Network Object NAT to get Internet?

So I've inherited a Cisco ASA 5505, and I have no experience whatsoever with the things! There are two Network Interfaces both WAN facing, and the LAN interface of course. Now in NAT rules, there are ...
0
votes
1answer
53 views

Site to Site VPN Tunnels

This is more of a theoritcal question then a problem. With regards to Site to Site VPN links, let's for the sake of the question say we have two Sonicwall Firewalls. Site A and Site B SonicwallA ...
0
votes
0answers
36 views

Is there a way to diagnose *where* comms to a port on a windows machine is being blocked?

I am developing a system that comprises an email server. I have so far been unable to connect on port 25 (using telnet), despite having checked the following are set up correctly. Connections to port ...
0
votes
0answers
57 views

Bandwidth Management & Visibility at Network Border w/ Multiple WAN Links

There is a network that is designed as described below: The ISP supplies a single physical link with 4 VLANs running to us through that link. Each VLAN has a specific purpose, 3 of the VLANs will ...
0
votes
1answer
110 views

Firewall connected to a switch using 2 ports (LAN & DMZ), but switch management talks on DMZ port

Someone let me know if I'm off track here. I'm setting up a firewall with 3 ports configured (WAN, LAN, and DMZ). The LAN and DMZ ports both connect to the same switch, on which I will configure a ...
1
vote
1answer
273 views

ASA 5510 - Routing between Interface

I have a WAN interface and 2 LAN interface. I need both the LAN be able to access a server outside the network via the WAN (outside) interface. I am using a ASA 5510 firewall instead of a router, ...
3
votes
1answer
399 views

Rotating outgoing IPs using iptables

I am trying to rotate outgoing IPs using iptables. I want to rotate outgoing connections between three IPs, one by one. Here is what I'm doing with iptables: root@server:~# iptables -t nat -I ...
0
votes
1answer
93 views

Interface ip address discrepancy

This is very strange. Output of ip route show: default via 192.168.1.1 dev eth0 metric 100 192.168.1.0/24 dev eth1 proto kernel scope link src 192.168.1.10 192.168.1.0/24 dev eth2 proto kernel scope ...
0
votes
0answers
58 views

DNS Routing Issue on Our Wireless Router

We have a domain we are hosting internally. We then have a Guest Wireless Belkin Router setup to allow traffic off of our network. The Guest_Wireless Router is setup in front of our firewalls, not ...
0
votes
1answer
236 views

Vyatta change IP packet destination port on forward, based on source IP range

This might be really easy or really impossible - but any help would be great. I want to host a web server with multiple hosts on the same IP but different ports. This host will be routable to the ...
0
votes
1answer
52 views

Firewall traffic routing when visiting a specific website

I've got an odd question/request, here's what it is. We have a block of 5 public static IP addresses and there's a website that they are requesting that we try and set up so that when we visit it ...
0
votes
2answers
330 views

Routing to secondary LAN with Shorewall

I'm setting up Shorewall (4.4.26.1), and have been trying to figure out routing between two LAN segments for the good part of the afternoon. It's time to ask for help. ((INTERNET)) | | ...
0
votes
1answer
103 views

PFSense: Internal server don't see the real ip, only the ip of the gateway pfsense

I'm trying to use a pfsense as a substitute of our hosting centers cisco gateway on my testbed for testing our new firewall The setup is: [Internet]->[Wan: ?? -Hosting Center Router- Lan: ...
0
votes
0answers
450 views

Windows 7 workstation can't access file shares over VPN

Windows 7 workstations that are joined to a Windows Server 2003 R2 domain are unable to access file shares after being moved to a remote location via a VPN. The workstations were previously on the ...
0
votes
1answer
707 views

Fortigate restrict traffic through one external IP

I've got a fortigate 400A at a client's site. They've got a /26 from British Telecom, and we're using 4 of those IPs as a NAT Pool. Is there a way to say that traffic from 172.18.4.40-45 can only ...
0
votes
1answer
286 views

UDP packets to IP addresses other than specific ones not arriving and not shown in Wireshark

I'm writing a service using UDP, but I can't manage to reply to the client. When sending to the client via the DHCP-assigned IP (192.168.1.143) Wireshark shows no sent packets. The server receives ...
0
votes
3answers
615 views

Using a nat rule to translate 80/443 traffic to web server, but internal users cannot access it using external ip/domain name

I am using Cisco ASDM for ASA I have my internal network called soa. My outside interface is called outside. Let's say my outside IP given to me by my ISP isp is y.y.y.y I have a web server inside ...
2
votes
1answer
249 views

Packets marked INVALID in FORWARD rule

I have a firewall that has 3 IP aliases on 1 physical interface. Packets get dropped between these 3 interfaces (either ICMP, HTTP, or anything else). We tracked it down to these packets being marked ...
1
vote
1answer
689 views

What are the security risks in running pfsense on a box with a wireless radio?

In my network pfsense is the firewall and router for my entire network. It is the only machine with direct WAN access. All other machines are behind it (and connected through a switch). I am trying to ...
3
votes
3answers
1k views

What are the security risks of using pfsense in a virtualised environment?

I am thinking of using pfsense on my ubuntu server box. I'd virtualise pfsense with virtualbox, and have it route and firewall all traffic both on and destined to my server as well as the the rest of ...
0
votes
1answer
672 views

Using firewall in routed or transparent mode

For the last years we've been using a Sonicwall PRO 2040 firewall in a relatively small hosting environment. But we want to upgrade to a faster box which also support IPv6 and preferably we'd like to ...
2
votes
1answer
531 views

Routing between subnets on different vlans connected by a router/firewall

I have two networks that I'd like to connect with a router/firewall to filter traffic between the two. One network is on a public subnet, let's say 64.22.12.192/27 and the other network is on a ...
2
votes
1answer
368 views

Amazon AWS VPC how to open a port? [duplicate]

Possible Duplicate: How to setup a MySql server to accept remote connections? I have a VPN with public and private subnets; I am considering only public subnet for now. The node 10.0.0.23, ...
1
vote
2answers
960 views

Destination Based Routing with Fortigate 60B Firewall

First let me start off that I'm not very knowledgeable when it comes to networking so some terms what not may be over my head. I just know enough to get around. So all traffic goes through the WAN 1 ...
3
votes
1answer
2k views

pfSense router on a LAN with two gateways

I have a LAN with an ADSL modem/router on it. We have just gained an alternative high-speed internet connection at our location, and I want to connect the LAN to it, eventually dropping the ADSL. ...
1
vote
0answers
188 views

Checkpoint NGX FW1 Routing Between Networks

We have an old Checkpoint NGX FW1 firewall which we have to maintain. For the most part we leave it alone and it just chuggs away and works. The person who originally set it up left years ago and ...
-2
votes
1answer
410 views

Force virtual machine to only connect to the internet through a VPN whose IP dynamically changes, and never use ISP connection?

I want to set up a Windows virtual machine where the only network access allowed is via a VPN connection. If the VPN connection fails, the VM should never be allowed access through my normal (ISP) ...
-1
votes
2answers
456 views

Route ssh traffic based on hostname using FreeBSD/pf?

I have a proxy/firewall machine running FreeBSD 9, using PF to route and filter traffic as needed. Now I'm setting up a git server, which runs over ssh, but I'm already using port 22 for ssh. I would ...
3
votes
3answers
305 views

identify a router that cuts certain port

Is there a way to identify which particular router between me and some server blocks connections on certain port? I am in a hotel in Thailand, where they have recently changed some settings in their ...
0
votes
2answers
235 views

Blocking ports on the public IP assigned to lo interface in GNU/Linux

I have setup my Ubuntu server as a router and webserver by following the answer given here. My ISP facing interface eth0 has a private 172.16.x.x/30 ip and my lo interface has a public IP as mentioned ...
0
votes
1answer
868 views

Allow access to printer between interfaces on Cisco ASA5510

I have a Cisco ASA5510 where we have to separate networks on two separate interfaces. The networks should have nothing to do with each other except that network B needs to access a printer on network ...
2
votes
3answers
1k views

Isolate clients on same subnet?

Given n (e.g. 200) clients in a /24 subnet and the following network structure: client 1 \ . \ . switch -- firewall . / client n / (in words: all clients connected to one ...
-1
votes
1answer
183 views

blocking specific dns servers

We want to block specific DNS server requests on our network. We tried null routing the DNS servers that were to be blocked, and it seems DNS requests are still getting through. Any suggestions ...
3
votes
2answers
419 views

Blocking a network device from communicating with another device on the LAN

I have been working with the firewall/router distribution Pfsense for a while now and I have been trying to figure out how to "isolate" a server on my LAN from other computers on my LAN by using ...
0
votes
1answer
762 views

Public subnet configuration on a Cisco ASA 5520

I'm trying to set up a Cisco ASA 5520 as the main entry point for our datacenter setup. This setup includes: Three private networks (management, SAN and backup) that are used in a cloud server ...
1
vote
0answers
72 views

shorewall prevents routing from protected zone entities to other protected zone entities

I'm using shorewall as the firewall and gateway for a production site. The site also has a couple of VPNs running into it that are hosted on a different server on the same site (in the protected ...