A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

4
votes
1answer
6k views

DMZ Setup with two firewalls - Traffic from DMZ to LAN and LAN to DMZ

I am setting up a network with machines that need to be accessible from the internet. I'm planning on putting these in a DMZ. Some of the machines in the DMZ need access to machines on the private ...
47
votes
8answers
4k views

Why would I need a firewall if my server is well configured?

I admin a handful of cloud-based (VPS) servers for the company I work for. The servers are minimal ubuntu installs that run bits of LAMP stacks / inbound data collection (rsync). The data is large ...
0
votes
0answers
4 views

local port forwarding with failover

There is a number of similar though not identical processes (worker processes) running on the localhost and listening each on its own TCP port, let's say process1 is listening on port 10001 process2 ...
0
votes
0answers
15 views

Port forward linux iptables

My current network setup consists of a physical nic eth1 receiving my public ip from the modem. Next I have kvm/qemu virtual machines running on a virtual network using the ip range 192.168.122.0 - ...
0
votes
0answers
5 views

use of secondary public IP subnet in Sonicwall NSA firewalls

I have a Sonicwall NSA 3500/4500 firewall. I have a primary block of public IP addresses that are working fine but I need to utilize a second block of IPs that are routing over the primary from the ...
1
vote
4answers
1k views

Securing a guest VM to give it internet access, but block access to host LAN

I have a Linux guest VM running under a Windows host. If I set the networking mode to NAT, the guest can get internet access (which I want), but can also access the hosts LAN (which I dont). For ...
2
votes
1answer
44 views

Securing Windows Server 2012 from the internet

I've placed my direct internet connection into the public profile for the firewall and started disabling every rule to block all but RDP. The only rules I am not sure about are these Core Networking ...
2
votes
3answers
4k views

WMI: How can I fix the port?

I need to use WMI for getting some information from my servers. But I have a server in DMZ, so I need to open a port in my firewall. I've searching and I found that WMI uses random port. How can this ...
0
votes
0answers
53 views

Sonicwall seems to be blocking port 3690 on random internal up address

We are trying to connect to a clients subversion server over the internet using port 3690 and random internal ip address are getting blocked and time out all of a sudden. My local ip of 192.168.0.150 ...
-1
votes
1answer
27 views

Centos 7 postfix send mail only — what firewall settings? [on hold]

I'm trying to set up a postfix mail server on a local machine behind a Sonicwall. I already have gmail account for normal use @domainname.com but this postfix server is mainly for sending mails from ...
0
votes
1answer
26 views

Saving SonicWALL NAT Policies settings

I have a SonicWALL TZ model that I manage. Now in the [Network] --> [NAT Policies] there are some policies added that have their own checkbox in the [Enabled] column (the other ones have a green ...
1
vote
0answers
18 views

Running a Windows Server connected to the internet [on hold]

I've been running Linux servers online for years so I know security very well for *NIX. However, I recently setup a Windows Server Network at home and decided I wanted to connect one of my Windows ...
0
votes
0answers
5 views

Route some rule on App Rules to second wan on Dell Sonicwall TZ215

Im using Dell sonicwall TZ215 with firmwire SonicOS Enhanced 5.9.0.4-127o and have 2 wan connection. The question is, is it possible to route some rule on App rules to second wan? I'm already try ...
0
votes
0answers
12 views

Opening up the firewall to Google Cloud Messaging

I'm trying analyse the firewall requirements for push notifications on iOS and Android devices. It's relatively simple for iOS: they need the entire 17.0.0.0/8 address block to ensure APNs runs ...
1
vote
3answers
4k views

Configure multiple lan interfaces for same subnet on sonicwall

We have a sonicwall 2400, Is there any way to assign multiple interfaces to the same lan subnet? Basically, we would like to have X1 for the wan and X0, X2, X3 and X4 connected to 4 devices that would ...
1
vote
1answer
990 views

Ubuntu 12.04 open port 80 inside VLAN

I have an nginx server running on ubuntu 12.04 that serves http through port 80 and https through port 443. Everything works fine if I access it from the same computer via localhost, 127.0.0.1 or the ...
1
vote
2answers
2k views

Juniper SSG5 DHCP IP Pool is full. Unable to offer IP address to client

hope we have some Juniper guys around, I have configured a Juniper SSG5 as our main firewall/router the DHCP server set on interface bgroup1 to have a rang from 10.10.10.76 to 10.10.10.210 All ...
0
votes
1answer
30 views

How to create advanced rules with firewall-cmd?

I want to create a rule using firewalld that uses criteria username or userID and maybe one other module criteria. In iptables, I think you can do things like iptables -A OUTPUT -m owner --uid-owner ...
2
votes
1answer
3k views

Watchguard config, drop-in or mixed-routing mode?

I have a Watchguard XTM 2 that is currently acting as a firewall and a router for my business network, I currently have the WG setup in mixed-routing mode and am happy with the current configuration. ...
-2
votes
0answers
14 views

Setting up access rules [closed]

I want to create LAN to WAN rules to allow and deny traffic on port 2525 to 74.22.22.22 A total of 4 rules to create specific to port 2255. A deny all from LAN to WAN, a deny all from WAN to LAN, ...
0
votes
0answers
106 views

Can't connect Windows Azure VM with MySQL On-premise

I have a VM on Windows Azure with Windows 2008 R2, and I'm trying to open a connection to an on-premise MySQL database hosted on another network. We cleared the VM's public IP (the one displayed on ...
1
vote
0answers
14 views

Dual WAN and NAT on ZyWall

I have Zyxell ZyWall USG-50 router firewall and I want to configure dual WAN navigation. On WAN1 I've 10Mbits connection and on WAN2 I've 100Mbits connection. I want my LAN to navigate with WAN2 and ...
0
votes
0answers
20 views

Windows server 2008 r2 firewall only affecting one interface

I am trying to secure this Windows 2008 R2 server for outside traffic (don't care about inside at the moment). I have two nic's, one for domain and one for outside (two different ip's). By default ...
0
votes
0answers
13 views

Enable IPSec on Firewall

I am using ProfitBrick for my Cloud infra. However, if I enable their firewall, IPsec does not pass through. The ports opened on firewall are: TCP 53 TCP 51 TCP 4500 TCP 500 UDP 4500 UDP 500 Does ...
4
votes
1answer
8k views

PPTP connection fails with errors 800/806

I've got a client (Server 2008 R2) that won't connect to our production environment PPTP VPN server (Server 2003, running RRAS). The server is behind a firewall that has TCP1723 open as well as GRE. ...
0
votes
0answers
6 views

openvpn ping: packet response is done on a different (?) port

I am having difficulty pin pointing the exact location of a problem with my openvpn which is running on a Linux server, which sits behind a modem that is in turn connected to the Internet through a ...
0
votes
4answers
1k views

Server not reachable on all TCP ports from all locations [closed]

I have a very strange situation on a Linux (CentOS) server. Firstly, from my Ubuntu desktop PC, I can successfully connect to all services that are running on it, on ports 22, 80, 8080 and others. ...
2
votes
1answer
55 views

How to find Check Point firewall version from command line

On Check Point firewall's command line, how can I find its version? Major version, minor version and optionally build number.
0
votes
1answer
24 views

Does ColdFusion use TCP Ports?

I am trying to access a link on our network. Whenever I try, the page times out. I have discovered that this link is a Adobe ColdFusion web page. Does ColdFusion use a TCP port other than port 80? I ...
0
votes
5answers
2k views

how to make standard ssh port a stealth port?

I'm running a personal ssh server on a nonstandard port. If someone tries to log into my ssh server thru the standard port 22, it seems that the server sends "Connection refused" message. $ ssh ...
0
votes
1answer
3k views

iptables forward rule not working in openwrt

I am trying to apply some iptables forwarding rules in openwrt. Here is my scenario - My server has two cards ath0 and br-lan. br-lan is connected to internet and ath0 to private network. The other ...
1
vote
3answers
2k views

Sonicwall NSA2400 - No internet access

We've got a SonicWall NSA2400 configured with a LAN (X0) and a WAN(X1) interface. It was setup and working fine until just recently when a temporary worker changed some settings most likely NAT. We ...
0
votes
0answers
22 views

Simple IPtables Script for Whitelisting (Amazon Endpoints)

I'm attempting to lockdown an Amazon EC2 instance which has a single open port for Amazon SNS. I can't use security groups to restrict the port as the IP is forever changing, so it must be open to all ...
1
vote
2answers
541 views

Sonicwall NSA 2400 Not switching back to Primary VPN after Failover

We are experiencing an issue with our SonicWall NSA 2400 Firewall. We have a secondary gateway over IPSec setup in the event of a failure of our main ISP (which is unfortunately common). The ...
0
votes
1answer
50 views

Re-routing packets back inside the network on a SonicWall firewall

I have two wireless networks, one guest network which uses a 10.0.0.0 network to assign IP address to guests and one internal one who gets the IP address from the internal DHCP (let's say ...
1
vote
2answers
105 views

Websever behind Sonicwall, Gateway Timeout

I am stuck here, I have a Cradlepoint CBA750B in IP-passthrough mode connected to x1 on my Sonicwall NSA220. Behind the Sonicwall I have a webserver on the LAN. I have X1 set to use DHCP to get the ...
2
votes
5answers
3k views

Isolate clients on same subnet?

Given n (e.g. 200) clients in a /24 subnet and the following network structure: client 1 \ . \ . switch -- firewall . / client n / (in words: all clients connected to one ...
0
votes
0answers
185 views

SonicWall Routing Between VLANS

We have a sonicwall NSA 3500, x4 has 2 vlan interfaces so x4:v300 and x4:v301. Each vlan has an IP v300 is 192.168.100.1 and v301 is 192.168.101.1. I then have x4 connected to a layer 2 only switch ...
1
vote
3answers
35 views

Connect from one LAN to another LAN through SonicWALL

I have a LAN (LAN 1) on the 192.168.1.1 subnet, and another LAN (LAN 2) on the 192.168.2.1 subnet. LAN 1 is on the X0 interface, LAN 2 is on the X4 interface. I want to be able to access a device ...
0
votes
1answer
3k views

Open port 8009/tcp on Fortigate necessary?

A nmap scan of a Fortigate Firewall showed that TCP port 8009 open is. According to knowledge base articles this is only to download the client for ssl vpn. Is this port used for anything else, and if ...
1
vote
0answers
27 views

TLS Error: Handshake failed. Openvpn Server is behind NAT on dynamic ip

this is a common problem that appears easily in searches and seems to be related to the firewall , yet I can't seem to figure out how to fix it. I have actually asked before, but this time I come back ...
0
votes
1answer
970 views

How to unblock service discovery for IPv4 via Avahi?

On a Debian 6.0.6 system (squeeze) I am having trouble resolving a host using Avahi and IPv4. Here is a sample output: : nr@homedog 10102 ; avahi-browse -a + eth0 IPv6 yorkie [00:1f:3b:d8:67:1d] ...
1
vote
0answers
16 views

Exchange 2010 sp3 RPC connectivity between separate physical sites

Good evening! I have installed Exchange 2010 a few times in my life but never in an environment like this. Please don't judge me for this architecture, it wasn't my idea! ;) I have two physical sites ...
4
votes
0answers
93 views

What's the best way to simulate being behind China's Great Firewall? [closed]

We're having issues with an iOS app of ours that uses in-app purchase to unlock downloadable content - but it seems only from China. We see many negative reviews from China for this reason. Our in ...
0
votes
1answer
29 views

Unable to connect to AWS RDS instance

I have set up a AWS RDS instance. I am using "end point" as hostname to establish the connection via MySQL workbench. But the connection is failing. I am sitting behind a company firewall and as per ...
0
votes
1answer
1k views

Forwarding Ports on Centos 7

I'm working on a CentOS 7 server and I'm trying to get JBoss to work the way I want it too. I'm running Java 8 and JBoss(wildly) 8. I have gotten those installed and working on the default ports, ...
0
votes
1answer
1k views

ZenOSS webinterface connecting

I'm having a problem with ZenOss. I installed the centos stack installer on Centos 5.5 x64. De installation succeeded and no errors where displayed. But when I tried to surft to the ip address it ...
0
votes
1answer
18 views

External IP becomes unreachable sporadically

I have a very strange problem - We have a lease line with 50 odd external IP addresses on it. We do a 1:1 assignment and Outgoing IP assignment to interfaces on a pfsense proxy server. For each ...
1
vote
1answer
36 views

Issue with local php fopen scripts returning 404 on CentOS

I'm having some trouble today with php scripts running on our server which use file_get_contents or similar fopen functions. I think this is an openssl or firewall error but I'm quite new to server ...
2
votes
4answers
16k views

VPN is working, except for DNS lookups. Firewall (Cisco ASA 5505) issue?

I've got the following set up: LAN -> DHCP / DNS / VPN server (OSX 10.6) -> Cisco ASA 5505 -> WAN Connecting to the LAN via VPN works fine. I get all the details properly and I can ping ...