A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

0
votes
0answers
8 views

Router in bridge mode, configuration [on hold]

my Netgear has the chance to be put on "bridge mode". in that way i's use it to connect to WAN port of my firewall. the question is: must i do some other configuration more than this? for example i ...
3
votes
2answers
4k views

UFW Firewall Rules ordering?

I have the following rules on our server within UFW: To Action From -- ------ ---- 22 ALLOW 217.22.12.111 22 ...
0
votes
1answer
2k views

Juniper SSG5 suddenly slow throughput

I'm trying to find out where in my configuration the problem might be. About a month ago we were easily getting 100 up 50 down through our provider through the Juniper SSG5. Starting a few weeks ago ...
0
votes
1answer
1k views

Cannot connect to remote port 465

I (actually, not me, rather a friend of mine) have a very strange issue. There's a VPS with CentOS, probably version 5: Linux [hostname] 2.6.18-274.7.1.el5xen #1 SMP Thu Oct 20 17:43:28 EDT 2011 i686 ...
-1
votes
2answers
43 views

IPTables chains that just RETURN, as set via iRedMail [SOLVED]

I hate to ask this, but I'm pretty sure I have everything configured correctly with iRedMail as the host for my email server/VPS re dovecot, postfix etc (even though everything is pretty much done ...
-1
votes
2answers
36 views

Can't access to an website even if connected on same network

I'm able to access a link from an IP Address but my co-worker can't even though we're connected on the same network ( Both LAN or Wi-Fi ) it's a professional environment so it might be a firewall ...
37
votes
6answers
45k views

How can I prevent a DDOS attack on Amazon EC2?

One of the servers I use is hosted on the Amazon EC2 cloud. Every few months we appear to have a DDOS attack on this sever. This slows the server down incredibly. After around 30 minutes, and ...
0
votes
1answer
18 views

SSH: hangs after “connection established”

I have an AWS EC2 instance to which I can't connect through one of Ubuntu servers. However, I can connect to the AWS instance through any machine(with and without private SSH key), but Ubuntu server ...
0
votes
2answers
1k views

grep, count and sort iptables log to get IPs qty and DPT?

How can I grep count and sort iptables log to get IPs quantity and DPT? Like I used this oneliner to get top IP quantity. egrep -w "Invalid Packet" ipfirewall.log | grep -o '[0-9][0-9]*\.[0-9][0-9]*\...
1
vote
3answers
1k views

How to find which local process is sending spam on a Windows Server 2008 server

I am managing a Win Server 2008 system with a number of hosted web sites. Recently I found that something was sending spam through our SMTP server. The logs indicate that the connections were being ...
1
vote
1answer
14 views

Cisco ASA: Part of the traffic via VPN is blocked

We inherited the management of an ASA 5520 running IOS 8.2(3) from a previous company, and now we are switching the connectivity to a VPN from a LAN link directly connected to one of ASA interfaces. ...
3
votes
2answers
8k views

Windows Server 2012 Port Forward for Specifc Host

I am trying to have a specific host be redirected to another port when trying to access a service on port 80. So, when the client (192.168.1.22) requests a connection to the server (192.168.1.10) on ...
-2
votes
0answers
21 views

Any solution to use RoundCube on a Google Cloud VM Instance?

I have launched a Debian 8 instance, installed ISPConfig with Apache2, MySql, and RoundCube. (Following HowToForge tutorial) But when I tried to send or receive emails using RoundCube, no success. I ...
0
votes
1answer
2k views

Allow access to printer between interfaces on Cisco ASA5510

I have a Cisco ASA5510 where we have to separate networks on two separate interfaces. The networks should have nothing to do with each other except that network B needs to access a printer on network ...
0
votes
0answers
10 views

What other proxy config options do I have when the Windows https proxy requires a username and password for an automated Chrome browser?

I have a Chrome instance driven by Webdriver inside a Docker container in an AWS VPC that needs to access the internet to download some cloudfront content. The Corporate Proxy is setup to require a ...
0
votes
0answers
23 views

Forefront 2010 does not let logins using 'Public or Shared Computer'

I have recently inherited a Forefront TMG 2010 server, and when people try to login and select 'This is a public or shared computer' they are unable to login. No errors, just reloads the same page. ...
-1
votes
0answers
28 views

Security and chaining firewall, very specific scenario [closed]

I'm in a very specific scenario where i need to secure as much as possible a single server in a Datacenter connected only to the internet (no company network, just a lone Windows Server computer alone ...
1
vote
1answer
135 views

allow only one ip and block others by using cmd in windows firewall

I want to allow one IP address that can connect to internet (whitelist) and block others' connections through internet using Windows Firewall on Server 2008 using command prompt. Is it possible to ...
0
votes
1answer
27 views

Why is UFW not working?

I've setup some rules on my ufw but I think it's just not blocking anything. This is its current status: ~# ufw status verbose Status: active Logging: on (low) Default: deny (incoming), allow (...
0
votes
2answers
2k views

Access print server through firewall?

At my workplace, we have two fiber networks setup, one for the business network and the other for process control (industrial manufacturing). On the business network, there is a standard print server ...
1
vote
2answers
166 views

Server sending packets every 5 minutes to 3 IPs

Been noticing in our firewall logs that three connections are being constantly established every 5 minutes from our web server and trying to send a packet to destination port 43 (whois port) cycling ...
0
votes
1answer
33 views

How can I configure an HAProxy server running behind a firewall?

I am having trouble with the following: I am setting up an HAProxy load balancer on CentOS 7 behind a firewall. The firewall on the HAProxy server as well as the outside firewall are configured so ...
0
votes
1answer
85 views

Windows server 2012, unable to access site in some ports from outside

We have our website hosted in a windows server 2012 server. Some staging sites are also hosted on same server in different port numbers like 5015, 5014. Now I wanted one more site to be added and ...
0
votes
1answer
555 views

One workstation gets slow access to the server, but others are fast

I've just setup a machine with Windows Server 2008. It hosts various services, like IIS, POP3, SMTP, Music for Squeezeboxes, VNC. All was working well for the first week or so. One day I needed to ...
1
vote
0answers
26 views

CISCO ASA ASDM Allow internal IP to access external IP

I'm running ASDM 7.2 and have 2 servers on the same local ip range that can communicate ok. These 2 servers have external IP's and I need to get them communicating on the external IP's but this fails. ...
0
votes
0answers
34 views

Trying to have a static IP with Elastic Beanstalk applications

My goal is to deploy a web application to Elastic Beanstalk and allow for a user to access that application from their corporate network. Their network controls access to sites using IP addresses and ...
1
vote
1answer
11 views

Accessing internally stored documents via hyperlinks in Websites on a DMZ server

We have a vendor-provided application running internally (LAN) on a Windows/MS-SQL 2012 server, providing access via IIS on the same box. The application is able to store attached documents - these ...
3
votes
3answers
3k views

How to enable firewall on Centos 7?

My firewall is currently inactive. systemctl status firewalld firewalld.service Loaded: masked (/dev/null) Active: inactive (dead) I used the following command to enable the firewall # systemctl ...
1
vote
2answers
3k views

Juniper SSG5 DHCP IP Pool is full. Unable to offer IP address to client

hope we have some Juniper guys around, I have configured a Juniper SSG5 as our main firewall/router the DHCP server set on interface bgroup1 to have a rang from 10.10.10.76 to 10.10.10.210 All ...
1
vote
2answers
839 views

How can I make an Azure Web Role accessible only via Virtual Network

I have a web role that I have configured via the NetworkConfiguration section of the .cscfg to be part of a Virtual Network. I only want the web role to be accessed from other computers within the ...
2
votes
1answer
21 views

How do I add a mangle rule to my saved iptables firewall rules file?

I've set up OpenVPN on my Debian server and would like to add a rule to iptables. I already have a file that lists default filter rules that iptables reads from (pre-up). I tried adding the rule to ...
1
vote
0answers
42 views

Iptables firewall causing instability

I've made a script to set an iptables firewall,but it's Causing instability on the local network aplication . The firewall is droping the connection between the clients and the server for a while ...
-1
votes
0answers
14 views

ufw not working on openvz vps

I'm trying to make ufw work for an Ubuntu 14.04 vps using openvz. All questions about this problem (like this one) lead to the same site. This one: http://blog.bodhizazen.net/linux/how-to-use-ufw-in-...
-2
votes
0answers
23 views

Cannot get firewall to work

I have 2 machines A and B with 2 ethernet interfaces eth0 (internet) and eth1 (local) a) I want A to act as a FW and would like to install Shorewall on it and have in & outbound traffic go thru A ...
0
votes
0answers
16 views

Deploying builds from Jenkins Slave

we are trying to get set up to use group instance of Jenkins. Both Jenkins Master and Slaves are cloud hosted. Once the build is completed on the slave we need to deploy it to a development server in ...
-1
votes
1answer
47 views

Overwriting Cisco ASA config using only console access

I'd like to be able to apply a pre-written config to a Cisco ASA 5505, but presently I only have access to it via the serial console and not over the network. Various sources suggest pasting the ...
3
votes
1answer
8k views

Handshake violation when trying to access one website

I have a TZ 190 Wireless Enhanced with SonicOS Enhanced 4.2.1.0-20e. Yesterday, people could access without any problems a bank website wich uses HTTPS. Today, it is imposible to access only that ...
0
votes
1answer
16 views

Logstash Grok Filter

I'm sure there is a simple solution to this but I'm new to working Logstash. The filter I'm trying to apply is for some firewall logs and I have a field that will either have a single or two values ...
0
votes
0answers
19 views

unable to connect to webserver from LAN (access from outside is fine)

We would like to give both our customers and coworkers a single link (subdomain.ourdomain.com) to access a common web application. I set up a web server on a machine connected to LAN, it's accessible ...
14
votes
5answers
4k views

iptables management tools for large scale environment

The environment I'm operating in is a large-scale web hosting operation (several hundred servers under management, almost-all-public addressing, etc -- so anything that talks about managing ADSL links ...
0
votes
1answer
1k views

Juniper ScreenOS Windows 7 Vpn client

I'd like to configure my Juniper firewall so users can VPN from the windows built in client. Can anyone provide me with that information on how to go about configuring this? (I'm somewhat new to ...
0
votes
0answers
23 views

DMZ with 2 firewall - How to allow access to DMZ from LAN

i following tutorial to setup DMZ with 2 filewall. Diagram Network can be found here --[Modem]------eth0-[External FW]-eth1------eth1-[Internal FW]-eth2-------[Intranet] External FW: eth0: 192.168....
2
votes
2answers
3k views

How to make Firefox trust system CA certificates?

Our network admin recently enabled HTTPS inspection on our firewall/router. For IE users this is fine because the certs have all been distributed via Active Directory for domain-joined machines. ...
1
vote
1answer
106 views

UDP hole punching still required in IPv6, even without NAT?

Background (skip ahead for question) IPv4 needed NAT for address conservation. The firewalling properties of NAT were also beneficial for security. IPv4 NAT firewall rules are "block incoming packet ...
1
vote
2answers
2k views

Smoothwall Express interface issues

I have a SmoothWall Express box that is currently configured with a Green and Purple interface. Both interfaces are in the same /24 subnet (which seems odd to me). The green interface (address of ....
0
votes
1answer
4k views

iptables forward rule not working in openwrt

I am trying to apply some iptables forwarding rules in openwrt. Here is my scenario - My server has two cards ath0 and br-lan. br-lan is connected to internet and ath0 to private network. The other ...
2
votes
2answers
1k views

How to establish firewall rules that accepting 11211 port in intranet for memcached ( Fedora)?

I am new for fedora and backend. And i have a job recently, to build a game server via linode. The current setup is 2 linode + 1 nodebalancer, I have a memcached server on each linode and I have setup ...
0
votes
1answer
1k views

Can't connect VPN tunnel when other on same NAT-router is connected

We have recently changed our FW to a ZyWall 310 with drastically improved throughput over the old one. However there is a new problem that occurred, we have several L2TP/IPSec clients that connect to ...
0
votes
1answer
39 views

Can I retrieve email marked as rejected in the SMTP log?

I am using a Sophos UTM 9 SG210 firewall and noticed in the SMTP log that a formerly trusted sender has had 50 legitimate emails rejected. I've since added them to an exemption list, but was ...