A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

1
vote
0answers
20 views

Cisco 5512-x TCP request discarded

We have a fairly basic ACL and NAT rule allowing RDP inbound and NAT'd to a LAN IP (all IPs replaced with IP) object network STATIC-PAT-RDP host IP access-list outside_access_in extended permit ...
3
votes
3answers
163 views

Iptables rules with ! character

I have entered iptables rules to log a specific connection on our server, but it doesn't seem to be working as I want it to. Here are the rules: 1 LOG tcp -- !10.51.0.0/16 ...
1
vote
1answer
38 views

FreeBSD pf with NFS

I'm having trouble establishing new NFS connections when my pf is turned on. When I turn off pf on the server and client I'm able to mount with no trouble. I tried keep state and flags S/SA on the ...
0
votes
1answer
80 views

Allow only SSH, FTP and Cloudflare Servers via IPTables

I want to allow only SSH access, FTP access and all communications between my Dedicated Server and all Cloudflare Servers using IPTables. I tried the commands beneath but it seems like I kicked out ...
0
votes
1answer
867 views

Virtualized endian firewall on VMWare ESXi - VPN Malfunction

we got a physical machine with VMWare ESXi 5.1.0 U1 hosting a virtual Endian Firewall 2.5.2 all is running properly. The NICs are configured as shown in this image: http://imgur.com/o4IXn2D We have ...
1
vote
1answer
937 views

Amazon EC2 Socket connection not being accepted

I am trying to run a java application on my EC2 instance. The application accepts socket connections on port 54321. If I try and connect to it, it times out. My Security Group is set as: TCP Port ...
0
votes
1answer
60 views

Allow URL:Port in Forefront TMG

I have Forefront TMG 2010 installed as a Proxy server to limit internet access to users. I usually have the following issues: 1- I can't configure Email clients (Outlook) with URLs of POP/IMAP and ...
0
votes
1answer
1k views

Allow access to printer between interfaces on Cisco ASA5510

I have a Cisco ASA5510 where we have to separate networks on two separate interfaces. The networks should have nothing to do with each other except that network B needs to access a printer on network ...
2
votes
2answers
3k views

Configuring Fortigate OS4 for FTPS

I configured iis7 ftp to allow ssl connections. I set the ssl firewall to use ports 50000-50050. If I set up a custom service on my fortigate firewall for ftps with source ports 990-50050 and ...
0
votes
1answer
2k views

Iptable l7-filter installation guide and block p2p

I would install l7-filter to block P2P torrent, First of all , I have a linux debian. I installed by the below command apt-get install l7-filter-userspace And then run command iptables -I FORWARD ...
1
vote
1answer
50 views

iptables block net range

I'm trying to REJECT network via iptables(8) and for whatever reason it is not doing so: # cat /etc/redhat-release Red Hat Enterprise Linux Server release 6.6 (Santiago) # uname -a Linux X ...
1
vote
0answers
10 views

What would cause pysmb to fail when OSX Finder “Connect to Server…” succeeds? [migrated]

(originally asked on StackOverflow, but I think there are more appropriate experts here): I'm trying to transfer a file from a remote samba share (on a windows server) in a python script (running on ...
1
vote
1answer
5k views

Handshake violation when trying to access one website

I have a TZ 190 Wireless Enhanced with SonicOS Enhanced 4.2.1.0-20e. Yesterday, people could access without any problems a bank website wich uses HTTPS. Today, it is imposible to access only that ...
3
votes
1answer
1k views

Windows Server 2012 Port Forward for Specifc Host

I am trying to have a specific host be redirected to another port when trying to access a service on port 80. So, when the client (192.168.1.22) requests a connection to the server (192.168.1.10) on ...
0
votes
2answers
1k views

Access print server through firewall?

At my workplace, we have two fiber networks setup, one for the business network and the other for process control (industrial manufacturing). On the business network, there is a standard print server ...
0
votes
2answers
13k views

Fortigate 200A firewall CPU high resource usage

This morning I'm receiving complaints from several end users that saying their whole department network are slow and have intermittent. Therefore I've checked our firewall to see whether if something ...
2
votes
1answer
29 views

Identify individuals behind SLAAC addresses

We're operating an IPv4 network (on ethernet & Wifi) in a student dorm with ~200 users and want to deploy IPv6 in the long term, with stateless autoconfiguration on a single /64 prefix. ...
2
votes
1answer
54 views

With SonicWall, cannot access URL inside network

We have a website running on port 80 on our network. Port 80 is forwarded outside of the network, and it is accessible through a URL that points to the IP or the IP itself. However, inside the ...
2
votes
1answer
52 views

How to test iptables settings by port scanning?

I want to test my iptables and prove that it only allows traffic for given Protocol / Port - combinations. How I can use as a target for a port scan?
-2
votes
0answers
17 views

A service like a router between 2 WAFs. This exists?

A service like a router between 2 WAFs. This exists? I have the following situation: 2 different WAFs (CloudFlare and Incapsula) and would like to have a service above the two that I can define ...
1
vote
2answers
1k views

Smoothwall Express interface issues

I have a SmoothWall Express box that is currently configured with a Green and Purple interface. Both interfaces are in the same /24 subnet (which seems odd to me). The green interface (address of ...
0
votes
0answers
5 views

firewalld allow connections to a port for only a subnet of IPs [duplicate]

I am on Fedora 21 Workstation on my PC. By default, all ports through firewalld are open on Fedora 21. When I open a service accessible through a port (such as a CouchDB or a SQL server or a simple ...
1
vote
1answer
98 views

Chinese Firewall DDoS and IPtables not working

Recently my server has been hit with DDoS's coming from the Great Chinese Firewall. As per the advice in one of the replies in mod_security block requests by http-host header, and the advice in ...
2
votes
1answer
62 views

Port 8080 remains closed even when opened with iptable and nodejs is listening on it [duplicate]

I am trying to install a nodejs server listening to port 8080 that I opened with iptable but when I run nmap or a web tools I always get the message that the port is closed. I'm on a Ubuntu vps. ...
1
vote
1answer
1k views

QoS settings for Wi-Fi calling on pfSense firewall/gateway?

The new version of iOS 8 as well as Android supports Wi-Fi Calling with multiple cellular providers including T-Mobile in the US. I am currently running pfSense as the primary Internet gateway for ...
0
votes
3answers
58 views

Assign IPs to programs/processes

I need to assign different IP addresses to different processes (mostly PHP & Ruby programs) running on my Linux server. They will be making queries to various servers, including the situation ...
0
votes
0answers
44 views

IPTABLES and GEOIP: Show Custom Webpage to Blocked Visitors

Because of legal protection, as a first stage of launching my project I will focus on couple of countries only. The number of supported countries will grow. I know, it is possible to block or allow ...
1
vote
1answer
954 views

Should I create a second WAN Interface for a new SSLVPN setup on my Sonicwall 2400?

Sonic Wall 2400 I'm setting up a new SSLVPN on our Sonicwall, very new to this. I currently have an exchange server as well, so mail.company.com is directed to our mail server. I'd like to setup a ...
0
votes
1answer
1k views

iptables denies internal access to port 17500

In the kernel log there are hundreds of these lines. The source is the external IP of the VPS (not localhost nor 127.0.0.1), other times an IP of the network of the VPS provider. The source port and ...
0
votes
1answer
24 views

Do I need to set rules for source and destination ports for outgoing rules on iptables?

I'm using puppetlabs firewall module and I'm having troubles setting up iptables for a simple web host. I'm following this guide and want to set up additional rules. ...
0
votes
4answers
1k views

apply back firewall after iptables flush

yesterday i got my self locked from my own server. and than i try to flush iptables from another server to get it unlocked as this question response 3 times fail then lock After that, i cannot login ...
53
votes
5answers
7k views

I accidentaly forbid SSH connection to a remote server… What's next?

Let's say it again, we all make mistakes, and I have just made one. A brief history: I was doing some stuff on a VPS (Debian) I'm renting, when I noticed some strange behaviour. Using the netstat ...
0
votes
1answer
12 views

Concurrent connections per IP

I need to make a few changes to a firewall configuration, but before I do I'd like to see the number of concurrent Apache connections per IP. This command produces a nice list: #netstat -ntu | awk ...
-5
votes
3answers
85 views

How I can Block all China to entry to my server [closed]

How I can Block China to entry to my server ? All China country ? By ipset and iptables I want by this to avoid DDOS attacks OS: CentOS 6.6 Thanks.
2
votes
1answer
317 views

Cisco ASA 5500 — List of outbound connections?

Is there a command or GUI option to get a list of outbound connections. Ideally, I'd like to know the internal IP address, the external IP address, and the remote port used. I don't need a lot of ...
1
vote
1answer
669 views

How can I protect my website with cisco ASA Firewall 5520 and do url and web filtering?

I've got a cisco ASA firewall 5520 on my small organization's network, and i'm quite new to ASAs as i have just finished my SNAF course and need time and experience. My question is how can i protect ...
-1
votes
1answer
26 views

Does Sophos firewall support outgoing FTPS connections?

Is it possible to connect through a Sophos firewall to an external FTPS server? With FileZilla and connection mode "Require explicit FTP over TLS", the log shows: Status: Connecting to x.x.x.x:21... ...
2
votes
0answers
49 views

Iptables content blocking firewall

I have setup a firewall with iptables to ratelimit connections based on content. The following is an example of one of my rules that stops wordpress bruteforce attacks. `iptables -A INPUT -p tcp -m ...
2
votes
2answers
230 views

How to open port for a specific IP address with firewall-cmd on CentOS?

I would like to open port 4567 for the IP address 1.2.3.4 with the firewall-cmd command on a CentOS 7.1 server. How can I achieve this, as the documentation I could find was too specific on this?
2
votes
1answer
31 views

Load average increasing along with firewall throughput

I've just pushed a large change to my backend code and I've noticed a massive increase in the load average in the few hours since the push. I looked at Munin for what the problem might be and I ...
0
votes
2answers
173 views

iptables block client ip internet access and keep LAN access

With the increase of appliances having network access and the potential for hacking, I want to block specific ip address from accessing the internet, but allow LAN access. For instance, I use a ...
1
vote
1answer
77 views

Linux - show dropped packets form firewall

I am trying to set up a sip trunk and so far everything has gone well. The only issue I face is that the call does is not received when the iptables service is running. By stopping the service ...
-1
votes
3answers
85 views

Why can i not ping my host behind the firewall. Cisco asa 5505 [closed]

Can anyone please help me to figure out what in my configuration of the Cisco asa 5505 is wrong or missing. I have multiple host behind my firewall these hosts run different websites on port 80. I am ...
3
votes
1answer
27 views

Is the use of the RELATED state in iptables used properly?

I have been seeing many people using the ESTABLISHED and RELATED flags together to ACCEPT traffic through once a connection was previously accepted (see Allowing Established Sessions). Say I setup my ...
2
votes
2answers
659 views

How to make an existing caching Nginx proxy use another proxy to bypass a firewall?

My question is about using Nginx as a proxy behind another proxy. (Somewhat confusing.) I want to set up Nginx so it acts as a caching proxy server to an npm mirror. Here is the link: ...
1
vote
1answer
23 views

Using two openvpn clients to expose services of a server

I am currently attempting to use two openvpn clients to expose services of a server, as is already said in the title. I may be playing with powers far beyond my current comprehension, but please bear ...
0
votes
1answer
92 views

How to enable firewall on Centos 7?

My firewall is currently inactive. systemctl status firewalld firewalld.service Loaded: masked (/dev/null) Active: inactive (dead) I used the following command to enable the firewall # systemctl ...
3
votes
1answer
83 views

Nmap external scan shows port open, ASA says port is not open, but do get an socket

Folks, have a weird one, need your expert help. For one of our heavily used external facing server which came up in an audit, nmap -Pn scan shows the following: Starting Nmap 5.51 ... Host ...
3
votes
0answers
902 views

cisco asa reloading

After having both memory and code upgrades, we have a significant number of our asa 5520's (in active/standby pairs) develop problems. The problem manifests itself as losing connectivity to the other ...
0
votes
1answer
39 views

How to setup monitoring of nodes behind firewall

As lame as it may sound: I am trying to configure monitoring for our production system which consists of 2 hardware boxes with ESXi on both and multiple VMs. All of this is hidden behind a firewall ...