A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

0
votes
2answers
9 views

How to restrict outbound EC2 to only access S3?

I want to restrict the outbound security group from an EC2 instance. The instance only needs to access an S3 bucket. I just learned that S3 uses port HTTPS (443). I could just put that rule in place ...
0
votes
0answers
14 views

Network configuration for Virtual machine based firewall

I have this physical configuration: And I'm planning to install IPFire (or similar firewall : pfSense or Sophos UTM) on a virtual machine on the Active Directory Server to control traffic between ...
-7
votes
0answers
24 views

How to Draw a Network Diagram of My Office Network [on hold]

Can you please help me out How to Draw a Network Diagram of My work network. We are using all Windows server and using Windows 8.1 Platform at workstaions too. Please help me. Thanks, PK
1
vote
1answer
5k views

Handshake violation when trying to access one website

I have a TZ 190 Wireless Enhanced with SonicOS Enhanced 4.2.1.0-20e. Yesterday, people could access without any problems a bank website wich uses HTTPS. Today, it is imposible to access only that ...
0
votes
0answers
12 views

How do I use CSF to redirect domain requests to a port?

I have a server setup that uses two different webservers with different subdomains. Right now the servers listen on different ports (80 & 4000) So users don't have to put in :4000 I'd like to ...
0
votes
0answers
23 views

Windows Advanced Firewall - Advanced Rules? [duplicate]

my game server is being DDoS attacked (Windows Server 2012). Probably you would say there is nothing I can do but I don't think so because I can use my dedicated server in a normal way, it's just that ...
0
votes
1answer
2k views

Iptable l7-filter installation guide and block p2p

I would install l7-filter to block P2P torrent, First of all , I have a linux debian. I installed by the below command apt-get install l7-filter-userspace And then run command iptables -I FORWARD ...
1
vote
2answers
1k views

Smoothwall Express interface issues

I have a SmoothWall Express box that is currently configured with a Green and Purple interface. Both interfaces are in the same /24 subnet (which seems odd to me). The green interface (address of ...
-4
votes
1answer
50 views

How to open Port 443 on External Firewall? [on hold]

I've been trying to configure SSL on my server for last 4 days now, with absolutely no success. I've generated a CSR file and uploaded the certificate and configured a Vhost, but nothing seems to ...
0
votes
2answers
12k views

Fortigate 200A firewall CPU high resource usage

This morning I'm receiving complaints from several end users that saying their whole department network are slow and have intermittent. Therefore I've checked our firewall to see whether if something ...
1
vote
2answers
21 views

Does Windows Network Load Balancing require any specific ports to be open?

I have two Windows 2012 servers, joined in a Windows Network Load Balancing cluster. I have been trying to find how the NLB heartbeat message is exchanged between those servers (to make sure it will ...
1
vote
1answer
15 views

Apache problems in performance test with mod_reqtimeout

We have 2 Apache webserver behind a load balancer wich are connected to 2 (JBoss) application servers via mod ajp. To those webservers, mobile devices connect via a REST API. In our performance ...
0
votes
1answer
15 views

Loading fail2ban rules to iptables using iptables-persistent

I am using iptables-persistent package to reload my iptables on boot. And I have been thinking should I add the fail2ban rules to the loaded config file? Now I am seeing they are duplicated. This is ...
1
vote
1answer
1k views

QoS settings for Wi-Fi calling on pfSense firewall/gateway?

The new version of iOS 8 as well as Android supports Wi-Fi Calling with multiple cellular providers including T-Mobile in the US. I am currently running pfSense as the primary Internet gateway for ...
0
votes
2answers
51 views

How to enable CentOS 7 to connect to an external SMTP? [on hold]

I have a web application deployed in a webserver, running on a CentOS 7. This web application sends e-mails through an external SMTP (in-v3.mailjet.com, port 587). How can I enable CentOS to connect ...
1
vote
1answer
858 views

Should I create a second WAN Interface for a new SSLVPN setup on my Sonicwall 2400?

Sonic Wall 2400 I'm setting up a new SSLVPN on our Sonicwall, very new to this. I currently have an exchange server as well, so mail.company.com is directed to our mail server. I'd like to setup a ...
0
votes
1answer
964 views

iptables denies internal access to port 17500

In the kernel log there are hundreds of these lines. The source is the external IP of the VPS (not localhost nor 127.0.0.1), other times an IP of the network of the VPS provider. The source port and ...
17
votes
1answer
14k views

What does “!Z” and “!X” mean in a traceroute?

When you see "!Z" or "!X" in a traceroute, what does that mean? Where is it coming from, and how do I fix it?
-1
votes
1answer
27 views

Open source firewall as a virtual appliance? [closed]

Is it possible to have an open source firewall which can run as a virtual appliance into a guest VM where all traffic from the other VMs should go through this firewall VM? And it supports also ...
-1
votes
1answer
30 views

Block everything except some ports and specific IP Addresses, server can't do HTTP GET

I can't get this firewall.sh script to work. It currently doesn't allow me to get a file at 'https://index.docker.io/v1/repositories/library/ubuntu/images' so either my DNS is flawed or I am blocking ...
0
votes
2answers
448 views

Nginx, ModSecurity, IP Tables blocking WordPress dos/ddos attack

For the past 14 days I have had my website being hit by millions of WordPress installs over the world which .htaccess is kind of coping with but I am trying to get something to kick them before ...
1
vote
3answers
1k views

Configuring Iptables On CentOS 6 Locks Me Out

I'm running the following bash script as root to configure iptables (I'm logged in via SSH): #!/bin/bash # Delete all existing rules iptables --flush # Set default chain policies iptables -P INPUT ...
1
vote
0answers
14 views

Hadoop namenode port getting blocked

I have installed 7 VM instances of Ubuntu 14.04 LTS servers. First instance runs the namenode service and all other 6 nodes run datanode service.I think my NameNode is getting crashed or blocked due ...
-1
votes
2answers
33 views

Is there a way to block ALL inbound/outbound traffic going outside of a LAN with iptables?

As the title says, I'm just looking for a way to disallow any traffic on ANY port unless it's going to a local IP address (192.168.1.*).
0
votes
1answer
40 views

How can I adapt this technique of using a proxy (in firefox) to wget and yum ? [closed]

I work in a large organization where some people have extremely restricted internet access and some are given a fairly large amount of freedom. The way my organization manages this is by running a ...
19
votes
7answers
99k views

What firewall ports do I need to open when using FTPS?

I need to access an ftps server (vsftpd) on a vendor's site. The vendor has a firewall in front of the ftps server and I have a firewall in front of my ftps client. I understand that ports 990, 991 ...
40
votes
15answers
16k views

iptables Tips & Tricks

I'm sure Linux sysadmins are quite familiar with iptables, the userland interface to the netfilter packet-filtering framework. Now, this "Question" is meant to be a Community Wiki for collecting ...
-1
votes
1answer
48 views

How to allow google-analytics via iptables when internet is blocked for other traffic [duplicate]

I am running the following script on a wifi gateway. The WAN side of the gateway has ppp0 interface while LAN side is on wlan0. No LAN user should be allowed to browser internet Some services on ...
8
votes
3answers
36k views

CentOS 7 Firewall Configuration

In CentOS 6 I could type setup from the command line and I would be presented with a set of tools, one of them being Firewall configuration. I can still do this in CentOS 7, except the list no longer ...
1
vote
3answers
2k views

Configure multiple lan interfaces for same subnet on sonicwall

We have a sonicwall 2400, Is there any way to assign multiple interfaces to the same lan subnet? Basically, we would like to have X1 for the wan and X0, X2, X3 and X4 connected to 4 devices that would ...
0
votes
0answers
13 views

pfSense WAN load balancing across two IPs (has single gateway)

My virtual setup has two IPs, but they rely on the same gateway. I had this configured: interface - type - IP address - Gateway em0 - WAN1 - 172.16.155.131 - 172.16.155.2 em1 - LAN ...
0
votes
1answer
77 views

MikroTik - can't access webfig from external / can't SSH into router from external ip

Ok, here's the deal. Let's say that my public facing IP is 10.0.01. I can't webfig into 10.0.01 from external and can't SSH into mikrotik router from external IP. I can do it if I am physically ...
-1
votes
1answer
17 views

SSH port blocked EC2

I had installed Tomcat on my EC2 instance . However i was unable to access it using my public IP:8080 . So I followed the instructions mentioned in the post ...
0
votes
0answers
27 views

Ip6tables firewall make server unreachable on reboot

I am trying to set up a very basic firewall on my server with iptables and ip6tables. My rules get loaded on restart with systemD. The OS is ArchLinux. When I just setup iptables everything works. ...
1
vote
1answer
47 views

Need recommendations on Firewalled DMZ design for PHP web server on Linux

The 3 options we are considering are listed below. Which one is best or is there a better solution we didn't consider. All servers are linux with nginx. Do you see anything particularly wrong with ...
0
votes
2answers
972 views

Routing between multiple Mikrotik Firewalls

I have 2 Miktorik RouterBoards, an RB1100 and a RB951G. The 951G is acting as my Wireless box, and has Guest, Internal and Internet Only Wireless networks. The RB1100 has 3 WAN connections (2x150/10Mb ...
1
vote
3answers
2k views

Sonicwall NSA2400 - No internet access

We've got a SonicWall NSA2400 configured with a LAN (X0) and a WAN(X1) interface. It was setup and working fine until just recently when a temporary worker changed some settings most likely NAT. We ...
-1
votes
1answer
48 views

remote firewall configuration on centos7

I'm using Centos 7 and am trying to configure my firewall remotely. When I run firewall-config & a window comes up but remains blank. I cannot kill the window with the X close button so I need to ...
0
votes
2answers
80 views

2 lans on the same switch safe? [closed]

I have a modem with 5 ports. Each port gets a static IP address from the web. Basically if i ping one of those static IP addresses from home i am pinging directly one of those ports. On the first ...
1
vote
2answers
1k views

KVM: All network traffic to one guest (firewall)

I am currently using a VMWare ESXi 5.5 server for my virtualisation. The network setup is like this: PFSense firewall is the center of it all and connected to: LAN Network (physical NIC 1 assigned by ...
1
vote
3answers
1k views

Automatically block IP who requests certain URL

One of our client's PHPBB (surprise, surprise) got hacked. I have taken it down by simply changing the directory name for now however the address example.com/forum/* is still getting hits from ...
3
votes
1answer
6k views

PPTP connection fails with errors 800/806

I've got a client (Server 2008 R2) that won't connect to our production environment PPTP VPN server (Server 2003, running RRAS). The server is behind a firewall that has TCP1723 open as well as GRE. ...
0
votes
4answers
12k views

Global VPN Client Can't Acquire IP Address

We have a Sonicwall Pro 2040 and are having issues with our VPN clients. None are able to connect as they all stop at the point of acquiring an ip address. I have tried all the ideas that I have ...
0
votes
0answers
14 views

Allow URL:Port in Forefront TMG

I have Forefront TMG 2010 installed as a Proxy server to limit internet access to users. I usually have the following issues: 1- I can't configure Email clients (Outlook) with URLs of POP/IMAP and ...
0
votes
2answers
25 views

Is it possible to limit which hosts are accessible through SSH tunneling?

I have a box that runs both an ssh server and a webserver. I would like to prevent people with ssh accounts from using this box as an anonymous proxy to the rest of the Internet (e.g. by creating a ...
1
vote
4answers
1k views

How to block ALL communications with an IP-address using iptables?

I have a FreeBSD system behind a Linux-based router (using DD-WRT firmware). The FreeBSD system is running sshd and is regularly probed by various script-kiddies. It currently runs a script, that, ...
1
vote
3answers
3k views

WMI: How can I fix the port?

I need to use WMI for getting some information from my servers. But I have a server in DMZ, so I need to open a port in my firewall. I've searching and I found that WMI uses random port. How can this ...
1
vote
2answers
2k views

Juniper SSG5 DHCP IP Pool is full. Unable to offer IP address to client

hope we have some Juniper guys around, I have configured a Juniper SSG5 as our main firewall/router the DHCP server set on interface bgroup1 to have a rang from 10.10.10.76 to 10.10.10.210 All ...
2
votes
1answer
3k views

Watchguard config, drop-in or mixed-routing mode?

I have a Watchguard XTM 2 that is currently acting as a firewall and a router for my business network, I currently have the WG setup in mixed-routing mode and am happy with the current configuration. ...
1
vote
1answer
924 views

Ubuntu 12.04 open port 80 inside VLAN

I have an nginx server running on ubuntu 12.04 that serves http through port 80 and https through port 443. Everything works fine if I access it from the same computer via localhost, 127.0.0.1 or the ...