A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

0
votes
2answers
82 views

Stop China from connecting to my Google Compute Engine server

My company has a Google Compute Engine server hosted in North America. We get so many Chinese IP addresses sending requests to port 11 that it is costing us money for the ingress. Our firewall blocks ...
0
votes
1answer
11 views

sbs 2008 firewall, allowing only 3 IP numbers to connect to port 25, block all others

I need to allow only 3 IP's to communicate inbound with port 25 on my SBS. I set up two rules (one for TCP and one for UDP) where the rule says "Allow the connection" and in Scope under "Remote IP ...
7
votes
4answers
14k views

Firewall blocking FTP server on Windows 2008 R2

I can access the FTP site without problems from the local machine, but it times out from the remote machine. If I turn the firewall off COMPLETELY, it works. Obviously, this isn't really a ...
0
votes
3answers
41 views

iptables actively refused everything despite exceptions

I was following the centos wiki page on iptables but no mater what I change only port 22 opens. Using various port scanning websites they all say the server is actively refusing connections on all ...
0
votes
1answer
19 views

Setup a very Basic DMZ for WordPress

We are thinking of switching our corporate website from externally hosted and designed, to an internal WordPress server. This is so we can maintain direct control, as well as run our own traffic ...
1
vote
1answer
1k views

QoS settings for Wi-Fi calling on pfSense firewall/gateway?

The new version of iOS 8 as well as Android supports Wi-Fi Calling with multiple cellular providers including T-Mobile in the US. I am currently running pfSense as the primary Internet gateway for ...
1
vote
2answers
1k views

Smoothwall Express interface issues

I have a SmoothWall Express box that is currently configured with a Green and Purple interface. Both interfaces are in the same /24 subnet (which seems odd to me). The green interface (address of ...
1
vote
1answer
14 views

CISCO SSL VPN (multiple Sites) [on hold]

I'm having a small issues and I'm sure it's NAT related. Our Users connect to SSL VPN in Ft. Worth. We also have a site up in Dallas. There is a current Site to Site connection there with full ...
1
vote
1answer
961 views

Should I create a second WAN Interface for a new SSLVPN setup on my Sonicwall 2400?

Sonic Wall 2400 I'm setting up a new SSLVPN on our Sonicwall, very new to this. I currently have an exchange server as well, so mail.company.com is directed to our mail server. I'd like to setup a ...
0
votes
0answers
96 views

Extracting Check Point firewall configuration to XML

I need to extract Check Point firewall configuration (roles, management definitions, logs policy and much more) into a readable .XML file. I know that Check Point has a visualization tool, but i ...
0
votes
1answer
44 views

WAN IP Ranges and NAT [on hold]

Let's say we have a router with a WAN IP assigned by DHCP: 1.1.1.1/255.255.255.255 The ISP subnet for it's lan interface is 82.5.167.161/255.255.255.248 My firewall behind this router is on WAN IP: ...
3
votes
2answers
5k views

Traffic shaping HTTP downloads with l7-filter

Given the following: A small, remote office has only a few users and a 1.5 Mbps DSL connection via a ZyXEL 660R. Users experience unacceptable latency and packet loss when even one large file is ...
1
vote
1answer
225 views

Blocking HTTPS content with a Watchguard (Websense) vs. SQUID and SQUIDGuard using Transparent Proxy mode

I'm trying to compare these 2 solutions when it comes to content blocking : 1 - A pFSense appliance with SQUID and SQUIDGUARD packages configured 2 - A Watchguard FW that uses Websense So, in order ...
0
votes
2answers
107 views

WatchGuard blocking internal UDP packets

I'm seeing lots of packets that our WatchGuard firewall is dropping. They're all hitting either 255.255.255.255. or 224.0.0.1 using UDP 8612 / 1947 / 17500. Since I've started seeing these messages ...
0
votes
0answers
26 views

Cannot trace bug in iptables firewalls config

I seem to have a bug in my iptables configuration - when I comment out hte final line (drop) it works fine - when I uncomment it, I cannot ssh into my server - can anyone spot what I'm doing wrong? ...
1
vote
0answers
27 views

How to combine multiple route hops using one (pfSense) router?

I am trying to come up with a way to consolidate two routers into one. I have the following network configuration: LAN <-- a/24 --> NAT Firewall <-- x/29 --> Router <-- y/30 --> ...
1
vote
0answers
13 views

Remote WOL over CISCO/FW not Forwarding

I'm trying to accomplish a Wake-on-LAN by triggering the two servers' public IP addresses. Internally, the WOL works like a charm (by either the internal or external IP), externally however, it does ...
-1
votes
1answer
36 views

How to schedule firewall to block wan connection on Windows 7 [closed]

I have a camera on my pc. There are 3 NVR (network recorder ) on different network connected to my cam throug WAN connection. I need to block any NVR from accessing my camera in different hour, and ...
-1
votes
1answer
19 views

error 500 web page share point [closed]

In my environment we are having 3 branches eg:A B C all the branches are protected with cyberoam firewall also ..and IP to IP trafiic is Allowed to all three branches. Recently A branch is able to ...
0
votes
1answer
27 views

How to route VPN traffic through a separate internet connection with a SonicWALL firewall?

We have a depot quite some distance from the exchange, the expensive internet connection is only getting 2/1Mb. This causes constant drops as soon as someone downloads anything. We have now got a 4G ...
0
votes
1answer
45 views

why my nat iptables rules dont work with marked packets?

System: debian squeeze, Linux server 2.6.32-5-amd64 #1 SMP Tue May 13 16:34:35 UTC 2014 x86_64 GNU/Linux, iptables v1.4.8 lsmod | grep iptable iptable_security 2176 0 iptable_mangle ...
0
votes
1answer
31 views

rDNS and forward DNS for mail server behind firewall, different IPs

All, Here is my setup : Firewall(x.x.x.114) <--> mail.mailserver.com (FQDN) (x.x.x.118) When sending mail, header has following IP ...."Receivedfrom mail.mailserver.com ([x.x.x.114])", my ...
0
votes
1answer
35 views

Cannot find error in iptables firewall configuration

I'm struggling with a firewall problem on my Centos server. I have the following configuration which when I use it with a service iptables restart and I try to ssh to the server with putty, I cannot ...
0
votes
1answer
25 views

Configuring iptables for Haproxy

Ubuntu machine running haproxy with 2 network cards, 1 connected to WAN (called wan0) and another connected to LAN (called lan0). All chains set to DROP traffic. # Masquerade traffic from LAN to WAN ...
0
votes
1answer
14 views

Adding VPN/Firewall to my network

Right my setup is as follows TP-LINK AC1750 Wireless router WAN (Comcast) connects here 1 port connects to TP-LINK 16 port managed switch 16 port switch has static IP, 192.168.0.99 (I've reserved ...
0
votes
1answer
197 views

Secondary DPM server and access to protection agents at primary server

Disclaimer: This is not an ideal setup. In a perfect world we would have a direct two-way VPN between our site and the remote site. My task is to enlighten the consequences of running a System Center ...
-1
votes
0answers
16 views

Can't connect to SAMBA - ISP is blocking it [migrated]

Security issues aside, I'd like to connect to a SAMBA share from home to a server (dedicated or vps, doesn't matter). The server works perfectly. The issue is on the client side. Let me more clear: ...
2
votes
3answers
4k views

WMI: How can I fix the port?

I need to use WMI for getting some information from my servers. But I have a server in DMZ, so I need to open a port in my firewall. I've searching and I found that WMI uses random port. How can this ...
1
vote
3answers
3k views

Configure multiple lan interfaces for same subnet on sonicwall

We have a sonicwall 2400, Is there any way to assign multiple interfaces to the same lan subnet? Basically, we would like to have X1 for the wan and X0, X2, X3 and X4 connected to 4 devices that would ...
2
votes
1answer
3k views

Watchguard config, drop-in or mixed-routing mode?

I have a Watchguard XTM 2 that is currently acting as a firewall and a router for my business network, I currently have the WG setup in mixed-routing mode and am happy with the current configuration. ...
0
votes
0answers
34 views

ZyWall USG-100 Firewall block access to internal subnet beyond another router

I'm experiencing a strange problem with a ZyWall USG 100 Firewall, that I can't solve with leaving the firewall enabled on the ZyWall. I have the main network subnet that is 192.40.192.0/24(LAN1 on ...
1
vote
1answer
959 views

Ubuntu 12.04 open port 80 inside VLAN

I have an nginx server running on ubuntu 12.04 that serves http through port 80 and https through port 443. Everything works fine if I access it from the same computer via localhost, 127.0.0.1 or the ...
1
vote
2answers
1k views

Routing between multiple Mikrotik Firewalls

I have 2 Miktorik RouterBoards, an RB1100 and a RB951G. The 951G is acting as my Wireless box, and has Guest, Internal and Internet Only Wireless networks. The RB1100 has 3 WAN connections (2x150/10Mb ...
0
votes
4answers
1k views

Server not reachable on all TCP ports from all locations

I have a very strange situation on a Linux (CentOS) server. Firstly, from my Ubuntu desktop PC, I can successfully connect to all services that are running on it, on ports 22, 80, 8080 and others. ...
1
vote
4answers
153 views

Azure VM: netsh advfirewall firewall

Being the idiot that I am, I ran netsh advfirewall firewall on our VM and managed to block all the ports. Naturally, I am no longer able to access the VM through RDP. Apart from getting the support ...
-1
votes
0answers
28 views

Gmail is responding very slow in Google chrome.whereas fast in firefox

gmail works very slow in google Chrome it means when i try to login on gmail it takes too much time to get logged in. whereas it works fine in mozilla firefox. we are using cyberoam as firewall,my pc ...
4
votes
1answer
7k views

PPTP connection fails with errors 800/806

I've got a client (Server 2008 R2) that won't connect to our production environment PPTP VPN server (Server 2003, running RRAS). The server is behind a firewall that has TCP1723 open as well as GRE. ...
2
votes
1answer
56 views

Block smtp service to a IP centos 7 Firewall

I would like to know how to block an IP to use smtp service on a server with centos 7 firewall . I try to use something like this : firewall-cmd --permanent --zone="public" --add-rich-rule='rule ...
1
vote
2answers
1k views

KVM: All network traffic to one guest (firewall)

I am currently using a VMWare ESXi 5.5 server for my virtualisation. The network setup is like this: PFSense firewall is the center of it all and connected to: LAN Network (physical NIC 1 assigned by ...
1
vote
3answers
2k views

Sonicwall NSA2400 - No internet access

We've got a SonicWall NSA2400 configured with a LAN (X0) and a WAN(X1) interface. It was setup and working fine until just recently when a temporary worker changed some settings most likely NAT. We ...
1
vote
4answers
2k views

How to block ALL communications with an IP-address using iptables?

I have a FreeBSD system behind a Linux-based router (using DD-WRT firmware). The FreeBSD system is running sshd and is regularly probed by various script-kiddies. It currently runs a script, that, ...
0
votes
1answer
2k views

iptables forward rule not working in openwrt

I am trying to apply some iptables forwarding rules in openwrt. Here is my scenario - My server has two cards ath0 and br-lan. br-lan is connected to internet and ath0 to private network. The other ...
1
vote
2answers
2k views

Juniper SSG5 DHCP IP Pool is full. Unable to offer IP address to client

hope we have some Juniper guys around, I have configured a Juniper SSG5 as our main firewall/router the DHCP server set on interface bgroup1 to have a rang from 10.10.10.76 to 10.10.10.210 All ...
-2
votes
0answers
23 views

Ports and firewall Rules for Cafe PDQ, CCTV and Customer web browsing

Edit: Question is probably a bit stupid, but now I have written the below, I am getting second thoughts about posting this. But having spent about an 2 hours reading other posts and typing this and ...
0
votes
1answer
41 views

How will the LAN to LAN firewall rule affect the traffic in the rest of the network

I have a following network setup (of course a bit modified from the real situation) I would like to setup a LAN to LAN rule on the ZyWALL firewall so that only certain ports/ip adresses are allowed ...
0
votes
0answers
25 views

rsyslog not discarding despite rule to the contrary

I am running rsyslogd on a new CentOS 6.6 box. I have put in a custom rule to log my firewall messages (via firehol) to a separate file, as per instructions here: ...
0
votes
3answers
36 views

Can the firewall prevent the DHCP to give an address, how to fix this?

I am not getting an IP in the subnet 10.0.0.0/24 where the DHCP is working and should serve an IP, I am getting instead only an IP in the subnet 169.254.0.0/16(link local address) that is probably ...
1
vote
0answers
18 views

UFW Firewall on Ubuntu

I have installed UFW on Ubuntu 14.04. I used following commands to enable a port: sudo ufw allow 9384/tcp When I used the status command (sudo ufw status) it shows me that port is open for both IP4 ...
0
votes
0answers
34 views

How to block ip/ports using iptables with specific date and time?

Normally to block in command-line I used iptables. iptables -I INTPUT -s xxx.xxx.xxx.xxx -m time --utc --datestart 2013-09-09T15:00 --datestop 2013-09-09T15:30 -j DROP But the problem is, this ...
0
votes
0answers
23 views

How to forward traffic from ipsec host to local network?

Could anybody explain how to implement forward traffic from host in IPsec to local network. On my server I have 3 network cards: red0 - extern orange0 - dmz green0 - local IPsec builds through ...