A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

-1
votes
1answer
35 views

IPTables: Does blocking spoofing, affect any services? [closed]

Do these rules affect any services/applications? Will apt-get and others still work? - iptables -A INPUT -s 10.0.0.0/8 -j DROP - iptables -A INPUT -s 169.254.0.0/16 -j DROP - iptables -A INPUT -s ...
1
vote
4answers
3k views

Sonicwall NSA2400 - No internet access

We've got a SonicWall NSA2400 configured with a LAN (X0) and a WAN(X1) interface. It was setup and working fine until just recently when a temporary worker changed some settings most likely NAT. We ...
0
votes
0answers
21 views

Windows Firewall - Block IP address

The configuration is exactly as following: I am absolutely certain that 192.168.2.6 is the correct IP address, yet the according computer remains able to access shared files. Where could I go ...
0
votes
1answer
45 views

PsExec Slow to connect when Windows Firewall Enabled

situation: running PsExec takes 20 seconds with windows firewall and 1 second with it disabled. Exceptions added to firewall: opened ports 135 and 445 (both tcp) as per ...
0
votes
2answers
40 views

Azure VM instance IP firewall

I assigned an instance-level IP address to my Azure VM. I then configured the SSH "endpoint" from the Azure portal and defined a deny-all policy. However, this policy seems to only affect the cloud ...
2
votes
4answers
18k views

VPN is working, except for DNS lookups. Firewall (Cisco ASA 5505) issue?

I've got the following set up: LAN -> DHCP / DNS / VPN server (OSX 10.6) -> Cisco ASA 5505 -> WAN Connecting to the LAN via VPN works fine. I get all the details properly and I can ping ...
0
votes
1answer
1k views

ZenOSS webinterface connecting

I'm having a problem with ZenOss. I installed the centos stack installer on Centos 5.5 x64. De installation succeeded and no errors where displayed. But when I tried to surft to the ip address it ...
0
votes
1answer
1k views

How to unblock service discovery for IPv4 via Avahi?

On a Debian 6.0.6 system (squeeze) I am having trouble resolving a host using Avahi and IPv4. Here is a sample output: : nr@homedog 10102 ; avahi-browse -a + eth0 IPv6 yorkie [00:1f:3b:d8:67:1d] ...
14
votes
3answers
82k views

CentOS 7 Firewall Configuration

In CentOS 6 I could type setup from the command line and I would be presented with a set of tools, one of them being Firewall configuration. I can still do this in CentOS 7, except the list no longer ...
1
vote
0answers
17 views

Opensuse 13.2 firewall: allow openmpi

I am trying to run simple openmpi test on two servers. mpirun --report-bindings --host serv1.cell,serv2.cell -np 2 hostname Both servers runs OpenSuse 13.2 and have similar network inteface ...
0
votes
1answer
68 views

Telnet: Unable to connect to remote host

Related Threads: SMTP server works, but telnet to port 25 does not Can't connect to SMTP server The problem I have a server running Debian 3.2.65-1 and i am having some problems to connect other ...
0
votes
1answer
32 views

Can't manage / ping Sonicwall's LAN interface from across MPLS

We have two of our sites connected via an MPLS that bypasses our firewall. Traffic between the sites, when hitting our core switch is routed directly to a second interface on our ISP's router. The ...
-1
votes
1answer
177 views

port 80 is open by iptables but Connection timed out

I have nginx on my server, I run the script below to add rules to iptables: #!/bin/bash ip=/sbin/iptables services='22 25 53 80 443 5432 8000 8080' $ip -F; $ip -t nat -F; echo -e "Opening port 22 ...
1
vote
2answers
3k views

iptables block client ip internet access and keep LAN access

With the increase of appliances having network access and the potential for hacking, I want to block specific ip address from accessing the internet, but allow LAN access. For instance, I use a ...
0
votes
1answer
1k views

Juniper SSG5 suddenly slow throughput

I'm trying to find out where in my configuration the problem might be. About a month ago we were easily getting 100 up 50 down through our provider through the Juniper SSG5. Starting a few weeks ago ...
0
votes
1answer
34 views

Check if IP address is allowed through firewall

Our cloud service requires that the client's server allow specific IP addresses be whitelisted in their firewall. If the IPs aren't whitelisted, the end users will experience issues, but the end users ...
1
vote
1answer
47 views

Blocking suspicious IPs on firewalls - still relevant?

In interest of improving security, does it make sense to block suspicious IPs on internet facing firewalls? Does anyone know of any reliable block lists? Thanks, Mark
3
votes
2answers
4k views

Configuring Fortigate OS4 for FTPS

I configured iis7 ftp to allow ssl connections. I set the ssl firewall to use ports 50000-50050. If I set up a custom service on my fortigate firewall for ftps with source ports 990-50050 and ...
3
votes
2answers
6k views

Windows Server 2012 Port Forward for Specifc Host

I am trying to have a specific host be redirected to another port when trying to access a service on port 80. So, when the client (192.168.1.22) requests a connection to the server (192.168.1.10) on ...
0
votes
1answer
78 views

Watchguard, accessing server with public IP from internal network

I can't go trough it. I need access from my internal network to a server with public IP. I have private network with few VLANs, and then I'm using Watchguard m400 firewall. The server, that I want to ...
1
vote
1answer
1k views

Amazon EC2 Socket connection not being accepted

I am trying to run a java application on my EC2 instance. The application accepts socket connections on port 54321. If I try and connect to it, it times out. My Security Group is set as: TCP Port ...
0
votes
1answer
1k views

grep, count and sort iptables log to get IPs qty and DPT?

How can I grep count and sort iptables log to get IPs quantity and DPT? Like I used this oneliner to get top IP quantity. egrep -w "Invalid Packet" ipfirewall.log | grep -o ...
41
votes
7answers
89k views

How to Unban an IP properly with Fail2Ban

I'm using Fail2Ban on a server and I'm wondering how to unban an IP properly. I know I can work with IPTables directly: iptables -D fail2ban-ssh <number> But is there not a way to do it with ...
1
vote
1answer
3k views

Iptable l7-filter installation guide and block p2p

I would install l7-filter to block P2P torrent, First of all , I have a linux debian. I installed by the below command apt-get install l7-filter-userspace And then run command iptables -I FORWARD ...
0
votes
1answer
27 views

ASA 5505 blocks users

I have recently installed an ASA 5505. But now i have users that are being blocked/kicked from the internet. What can i do to prevent this? Here is the running config: Result of the command: "sh ...
2
votes
1answer
88 views

Logging NAT mappings on a Mikrotik router

I am looking for suggestions on how to configure a Mikrotik router to log NAT session setup and ideally teardown. However, setup only is sufficient for my immediate needs. I found a method to log ...
0
votes
0answers
6 views

Comcast SBG and ZyWALL

Hello and thank you for reading. I will try and keep this short and sorry if the answer to this question is a 'Duh' moment. At my place of business we have Comcast internet, coming in on a cable ...
0
votes
0answers
17 views

Why my firewall rules aren't working in my NanoStation m2?

I have two NanoStation m2 as AP and Repeater for a wireless network (make them device1 and device2), both working in BRIDGE mode. Both devices are connected as WDS pairs to each other because they ...
0
votes
0answers
17 views

Linking fail2ban with a RDBMS

I would like to maintain a highly dynamic RDBMS table that will be insert/update/deleted from from multiple hosts (a kind of global blacklist for all my servers). The table would have a couple basic ...
43
votes
5answers
32k views

REJECT vs DROP when using iptables

Is there any reason why I would want to have iptables -A INPUT -j REJECT instead of iptables -A INPUT -j DROP
1
vote
1answer
1k views

My iptable rules do not allow VPN connections

I have installed OpenVPN on my Archlinux server and modified my iptable rules to allow incoming traffic on port 1194 and forward it to the tun0 interface. When I disable/stop the iptables, the OpenVPN ...
5
votes
5answers
4k views

Blocking a country (mass iP Ranges), best practice for the actual block

This question has obviously been asked many times in many different forms, but I can't find an actual answer to the specific plan I've got. We run a popular European Commercial deals site, and are ...
0
votes
1answer
855 views

FreeBSD 10 IPFW IPv6

I'm struggling to allow IPv6 connections on my FreeBSD 10 server. I have a working IPv6 connection. But IPFW blocks all the IPv6 traffic. #!/bin/sh # # flush existing rules ipfw -q flush # allow ...
0
votes
1answer
2k views

Allow access to printer between interfaces on Cisco ASA5510

I have a Cisco ASA5510 where we have to separate networks on two separate interfaces. The networks should have nothing to do with each other except that network B needs to access a printer on network ...
3
votes
0answers
21 views

Do new Windows firewall rules affect currently open connections?

If I added a rule to windows firewall that blocked an ip or port currently used by an open connection, does that rule take effect immediately or only after the connection were closed? I.e, If I have ...
0
votes
1answer
38 views

Open port 1194 for openvpn service

I am looking to open the openvpn service on my CentOS VM. When I run nmap -sU localhost -p 1194, the following is output: Starting Nmap 6.40 ( http://nmap.org ) at 2016-01-08 13:23 GMT Nmap scan ...
1
vote
1answer
24 views

Windows Domain Network, Cisco 1921 ISR, and NTP

In an effort to make sure all Windows application that rely on time work (such as RDP), and to make sure logging between computers and router are using the same times, I would like to use NTP ...
0
votes
1answer
362 views

access linksys router admin module remotely if linksys is behind a linux router

My linksys wireless router is behind a Linux router and I would like to access the linksys router's admin module remotely. How do I configure iptables so I can open the admin module? iptables -t nat ...
7
votes
1answer
198 views

Iptables with -m and -p parameter

I have this rule in my iptables: iptables -A INPUT -p tcp -m tcp --dport 9191 -j DROP Do I really need "-m tcp"? I already am using "-p tcp", so should I use "-m tcp" to be more secure?
3
votes
1answer
81 views

iis server whitelisting inbound traffic to a limited set of IP addresses

We want to whitelist a list of IP addresses for a website running on a IIS in windows 2008 server. Since this list of IP addresses would be dynamic we would like to store that in a text file which ...
3
votes
1answer
19 views

enabling ufw disables some of the settings in sysctl.conf

When I add rules to ufw and then enable it, some of my settings in sysctl.conf become void so I have to do sysctl -p after doing ufw enable. So for example one of my settings in sysctl.conf is to not ...
-1
votes
1answer
47 views

SSH connection refused, probably server firewall, how to solve? [duplicate]

I'm trying to connect to my server via SSH. I get the (well-known) error: ssh: connect to host 12.345.678.910 port 2222: Connection refused So I first thought the problem was with my modem, but ...
3
votes
1answer
3k views

QoS settings for Wi-Fi calling on pfSense firewall/gateway?

The new version of iOS 8 as well as Android supports Wi-Fi Calling with multiple cellular providers including T-Mobile in the US. I am currently running pfSense as the primary Internet gateway for ...
1
vote
1answer
1k views

Should I create a second WAN Interface for a new SSLVPN setup on my Sonicwall 2400?

Sonic Wall 2400 I'm setting up a new SSLVPN on our Sonicwall, very new to this. I currently have an exchange server as well, so mail.company.com is directed to our mail server. I'd like to setup a ...
2
votes
1answer
1k views

Does hole punching require a UDP rendezvous server Or could it be a TCP one?

I'm trying to get my head wrap around this issue... I would like to connect two users... Those users are already connected to a TCP server, which is aware of both public ip and connection TCP port. ...
-1
votes
1answer
47 views

I've installed and enabled ufw firewall, and I cannot connect to my server [closed]

I've installed ufw firewall on my little server, with ssh and web services. But, when enabled, the ssh connection lost, and I could neither connect to the hosted web via web browser. What has ...
2
votes
2answers
73 views

IP Tables, is it possible to limit requests per minute and timeout IP?

I am trying to setup a firewall that limits to 3 connections per IP and also ban the IP for an hour if > 30 connection attempts in one minute. This is for port 80 only. Is this all possible with ...
2
votes
1answer
2k views

Fortinet: Is there any equivalent of the ASA's packet-tracer command?

I would like to know if there is not Fortigates an equivalent of the packet-tracer command that we can find on the ASA. Here is an example of execution for those who don't know it: NAT and pass : ...
0
votes
1answer
34 views

How does CT_LIMIT (the csf firewall setting) work?

I've been wondering if the csf firewall counts the connections for the last CT_INTERVAL seconds and then compares them to the CT_LIMIT value, or it just counts the current (at the moment) connections ...
-5
votes
1answer
23 views

Mirotik : Client from interface 1 cant access client from interface 2

I have a mikrotik here. Both interface 1 and 2 have same network (10.10.30.0) and dhcp pool. I can ping any client on interface 1 from mikrotik and also any client on interface 2. But I cant use to ...