A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

3
votes
0answers
886 views

Disabling HSTS for managed browsers

What are my options for disabling HSTS both for new sites and for those sites baked into the browser? The use of HTTPS inspection inherently changes the thumbprint of a site by acting as a man in ...
3
votes
0answers
5k views

TCP Keepalive and firewall killing idle sessions

In a customer site, the network team added a firewall between the client and the server. This is causing idle connections to get disconnected after about 40 minutes of idle time. The network people ...
3
votes
0answers
360 views

Firewall “Connection Security” when there is no trust and NATing between the two computers

First a little explanation of my network topology. I have a internal domain, and edge network domain. There is no trust between the two domains (and IT will not allow a one way trust to be set up ...
3
votes
0answers
958 views

cisco asa reloading

After having both memory and code upgrades, we have a significant number of our asa 5520's (in active/standby pairs) develop problems. The problem manifests itself as losing connectivity to the other ...
2
votes
0answers
69 views

Iptables content blocking firewall

I have setup a firewall with iptables to ratelimit connections based on content. The following is an example of one of my rules that stops wordpress bruteforce attacks. `iptables -A INPUT -p tcp -m ...
2
votes
0answers
47 views

Solving an asymetric HA Firewall/router

I have an old Linux HA firewall/router setup that never quite worked. As it was never quite put into true production (just testing and demo's), I always had to have one firewall shutdown to make it ...
2
votes
0answers
103 views

firewall-cmd forward rules for interface with multiple ips

I'm looking for a way with firewall-cmd or another command to do the following. An incoming public interface has multiple ip addresses bound to it. How can I forward ports only for one of the ip ...
2
votes
0answers
13k views

Openvpn routing for lan to lan through tun

I am trying to setup an OpenVPN tun to connect two lan's The open vpn connection is up and working but there is a problem with my routing or nat or something. What I need is an example of what a ...
2
votes
0answers
561 views

sophos access https site when user portal is activated

I use a SOPHOS on UTM 9. I have a website behind it on Win Server 2012 R2 / IIS 8 created with a subdomain (e.g. myaccess.mydomain.com). On UTM9 i had do what Stephane say on "serverfault -> sophos ...
2
votes
0answers
529 views

How can configure Cisco ASA 5510 to allow access to Web server in DMZ from LAN with port translation?

I am trying to configure Cisco ASA 5510 firewall to allow access from LAN to DMZ web server. Web server is located in the DMZ and is using port 8080. I don't want users to type port number every time ...
2
votes
0answers
619 views

Clickonce applications being allowed through firewall

The company I work for uses an application that is deployed through clickonce. This means that everytime they update said program the program regenerates in a new location ie: ...
2
votes
0answers
5k views

cisco asa NAT to site-to-site VPN

I'm trying to NAT an external address to an internal address which is not local, but on a remote end of a site-to-site VPN connection. Is this possible? Log says Routing failed to locate next hop for ...
2
votes
0answers
94 views

Connection reset with duplicate query parameters

Is there anything that could cause a connection reset when duplicate query parameters are passed to a page? http://test/?test[]=1&test[]=2 Causes a connection reset http://test/?test[]=1 Works ...
1
vote
0answers
12 views

External Access to Internal Network and Websites — Microsoft Networks

I need to be able to expose a set of "internal" web sites to Internet users somehow. Please bear with me as network engineering isn't my forte. I'd appreciate any insight or suggestions to this task. ...
1
vote
0answers
46 views

How to combine multiple route hops using one (pfSense) router?

I am trying to come up with a way to consolidate two routers into one. I have the following network configuration: LAN <-- a/24 --> NAT Firewall <-- x/29 --> Router <-- y/30 --> ...
1
vote
0answers
24 views

Remote WOL over CISCO/FW not Forwarding

I'm trying to accomplish a Wake-on-LAN by triggering the two servers' public IP addresses. Internally, the WOL works like a charm (by either the internal or external IP), externally however, it does ...
1
vote
0answers
27 views

UFW Firewall on Ubuntu

I have installed UFW on Ubuntu 14.04. I used following commands to enable a port: sudo ufw allow 9384/tcp When I used the status command (sudo ufw status) it shows me that port is open for both IP4 ...
1
vote
0answers
38 views

Cisco 5512-x TCP request discarded

We have a fairly basic ACL and NAT rule allowing RDP inbound and NAT'd to a LAN IP (all IPs replaced with IP) object network STATIC-PAT-RDP host IP access-list outside_access_in extended permit ...
1
vote
0answers
56 views

Firebox x700 Reset to Default Not Working

I found a site that explains how to reset a Firebox 700 series back to default as you can see from this link: https://www.hashdoc.com/documents/7502/how-to-default-a-watchguard-firebox-700-or-x700 ...
1
vote
0answers
36 views

Stop Outbound SYN Scan

Hello I run a VPN company, and recently my host has been sending me these complaints that are likely coming from a user. I am not sure how to identify the user, if I could just do that I wouldn't ...
1
vote
0answers
49 views

Windows Server spamming devices on other subnets on port 445

I have a Windows Server 2012 that every few seconds sends packets destined for port 445 on local IPs on other subnets. The IPs on other subnets it is trying to reach are devices such as VoIP phones, ...
1
vote
0answers
145 views

Fortigate 60D - Empty log and report

Environment: Fortigate 60D Forti OS 5.0 I can not see any log or report in the firewall. I have already activated forticloud and I recieve empty reports. Is there something that we have to ...
1
vote
0answers
14 views

Can a firewall handle packets being sent to it by a network TAP?

We have the intention of examining incoming mails for security purposes. In order to do so we figured out the solution will include: Network TAP - To copy all SMTP traffic to the firewall Firewall - ...
1
vote
0answers
136 views

Apache blocking based on combination of ip, request and useragent - Can fail2ban do that?

3 times over the past 48 hours, we had about a 6X spike in traffic lasting a few hours. The server handled it each time, but just barely. This was almost all bad-bot traffic (or maybe failed DOS ...
1
vote
0answers
29 views

Why did BFD add euid=0 to APF IP deny_host.rules?

Trimming down some old deny_hosts today and I noticed this one: # added euid=0 on 11/03/14 11:00:04 with comment: {bfd.sshd} euid=0 Anyone know why the BFD would have added euid=0 root/permissions ...
1
vote
0answers
104 views

Windows firewall blocking network shares through VPN server

I have a VPN server in front of a 172.16.0.0/24 network. On my client side is a 192.168.1.0/24 network. I am able to successfully VPN in to the server network from the client, and I am trying to ...
1
vote
0answers
151 views

amazon ec2 instance going to a remote ip using openswan tunnel is up but no traffic being established on the remote ip

I having establishing a vpn tunnel to a remote peer/public ip using amazon ec2 openswan. The tunnel is up but no traffic has been seen on our side or the remote side? Is there I been missing? Please ...
1
vote
0answers
95 views

Dovecot/Postfix mail server replies to [SYN] with [RST, ACK] when user attempts to connect (POP3). Likely iptables?

Currently I am trying to trouble shoot an e-mail server that will allow users to send e-mail, but not log in to the server (POP3) or receive e-mail using their Outlook clients. Previously this was ...
1
vote
0answers
48 views

PF rule for Continuity

So it looks like the Continuity on OS X 10.10 creates network interface on the fly (utun2 here) and my PF blocks it, so that I can't make/answer calls. I'm not an admin, just use the IceFloor for PF ...
1
vote
0answers
188 views

NoVNC being blocked behind firewall, how can I find the port being blocked?

We have an OpenStack cloud running internally and wanted to allow student's access to the NoVNC console from within Openstack's Horizon web panel. Everything work's internally however after adding ...
1
vote
0answers
152 views

Is it advisable to disable URL Path Length restrictions from firewall?

I noticed in early August that I was unable to get to SharePoint Online sites, most Microsoft Update pages, Microsoft Support pages, Microsoft.com, etc. as they all appeared to be returning a blank ...
1
vote
0answers
101 views

`ufw insert 1 deny to any` not working

ufw insert 1 deny to any ufw enable ufw status Status output: Status: active Logging: on (high) Default: deny (incoming), allow (outgoing), disabled (routed) New profiles: skip To ...
1
vote
0answers
91 views

Windows Server 2003 Outbound ftp Very Slow with Windows Firewall enabled

From Windows Server 2003, I'm uploading a file (~50MB) every day at 4:00am to my hosting space in the cloud. I'm doing it by calling "ftp -s:" in a batch file that a Scheduled Task runs. I did what ...
1
vote
0answers
313 views

TFS Check In Issue: The underlying connection was closed: A connection that was expected to be kept alive was closed by the server

I've recently started seeing the below error when attempting to check in code to TFS: The underlying connection was closed: A connection that was expected to be kept alive was closed by the server. ...
1
vote
0answers
761 views

ClearOS Proxy - Block all traffic but two sites and 3 DMZ ips

I've been trying to two days now to get ClearOS to do a proxy setup for my network. This is what I need to do: I need to block all outgoing traffic no matter what it is, all ports and HTTPS as well ...
1
vote
0answers
411 views

Shorewall redirect rule only working for some hosts in the same network

I'm trying to use Shorewall's REDIRECT action to intercept traffic destined for the firewall's port 514 (TCP and UDP) to port 5000 (also TCP and UDP), while also allowing direct traffic to the latter ...
1
vote
0answers
176 views

Firewall and NAT settings in GSM modem for one server

I have a GSM Modem (PSI-MODEM-GSM/ETH) in field with one device behind, acting as a server. The situation is as follows: "PC" | \_________Dynamic IP: 10.103.153.122 | ...
1
vote
0answers
85 views

PF Firewall Rules Help - Block IP Hammering

I'm having an issue where someone is using a VPN / proxy to hammer my server. They will pick on random URL from my website and perform ~20 requests per second to it. Once I ban the IP address, a few ...
1
vote
0answers
1k views

Cisco ASA 5510 multiple vlans on same interface with different security levels and routing between

Looking to setup on my 0/3 interface multiple vlans and looking to get confirmation that this will work. Ethernet 0/3.1 security-level 20 nameif dev-dmz vlan 502 ip address 172.20.2.1 ...
1
vote
0answers
276 views

Exclude an IP address from an openwrt firewall rule

I am using a wrt54gl with openwrt to try and redirect all traffic on my LAN to a specific server, which will run scapy and other network analysis tools and act as a gateway/firewall to the Internet. ...
1
vote
0answers
114 views

Microsoft Forefront TMG, IIS and SQL server on one server

We have a Windows 2008 VPS with IIS and SQL Server, hosted by a provider. We use it for hosting web applications on the Internet. The only firewall we can use is Windows firewall. I would like to have ...
1
vote
0answers
85 views

LDAP Integration with the firewall

I am trying to integrate Sonicwall NSA2400 with AD so users can VPN with their domain credentials and able to change password if it expires. Do i need to install ADLS role and configure LDAP, or LDAP ...
1
vote
0answers
63 views

Can IPtables (possibly with libnetfilter_queue library) do everything that snort does?

I have just started getting into network security, firewall, etc. So, please excuse me for asking this basic question. I looked at IPtables and got a good hang of it (nowhere close to becoming an ...
1
vote
0answers
898 views

Firewall/iptables rules for GlusterFS

A great pleasure would be to know which exact iptables rules to use for securing GlusterFS 3.4.2 (with Debian Wheezy) in shared environment. I'm running some dedicated servers at ISP. There are two ...
1
vote
0answers
85 views

Mac OS 10.6.8 Firewall Blocking Wiki for ONE User

This is a very bizarre issue that I hope someone can help with. We're running 10.6.8 server to host our internal wiki. We had the firewall enabled on that machine without any issues. Last week one ...
1
vote
0answers
310 views

Vyatta Remote Access VPN firewall (PPTP)

I am using Vyatta Remote Access VPN (PPTP) and NAT for proxy. When pc-A and pc-B are connected to VPN, pc-A ipaddress is 192.168.10.10 and pc-B is 192.168.10.11. ...
1
vote
0answers
90 views

Manual firewall configuration with SuSEfirewall2

I have a Suse server and I want to configure its firewall settings by manually editing the SuSEfirewall2 file (located in /etc/sysconfig/SuSEfirewall2). My goal is to accept only specific services on ...
1
vote
0answers
524 views

Sonicwall NSA 2400 Not switching back to Primary VPN after Failover

We are experiencing an issue with our SonicWall NSA 2400 Firewall. We have a secondary gateway over IPSec setup in the event of a failure of our main ISP (which is unfortunately common). The ...
1
vote
0answers
50 views

Zyxell USG200 NAT for local computer using wan address

My WAN public address is linked to the server with NAT. How can I set up the firewall to let all local computer use the same NAT rules for www.mypublicaddress.com address from INSIDE the network? I ...
1
vote
0answers
2k views

Mikrotik router RDP brute force blocking with whitelist

Masters, We have a miktorik router, and we would like to block RDP brute force, but we need whitelist also to allow our collegaues to connect without blocking them. (they sometimes hitting wrong ...