A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

1
vote
1answer
4k views

Handshake violation when trying to access one website

I have a TZ 190 Wireless Enhanced with SonicOS Enhanced 4.2.1.0-20e. Yesterday, people could access without any problems a bank website wich uses HTTPS. Today, it is imposible to access only that ...
0
votes
0answers
15 views

How can I add a new physical interface to an Endian Community Firewall?

I just installed the Community Endian Firewall on my system. But it's just recognizing the first 4 interfaces (after going into shell and doing a ifconfig shows br0, br1, br2 and br3). How can I add ...
1
vote
1answer
36 views

How can I make an Azure Web Role accessible only via Virtual Network

I have a web role that I have configured via the NetworkConfiguration section of the .cscfg to be part of a Virtual Network. I only want the web role to be accessed from other computers within the ...
0
votes
2answers
926 views

Configure multiple lan interfaces for same subnet on sonicwall

We have a sonicwall 2400, Is there any way to assign multiple interfaces to the same lan subnet? Basically, we would like to have X1 for the wan and X0, X2, X3 and X4 connected to 4 devices that would ...
1
vote
1answer
68 views

IIS 7.5 Windows authentication not working externally

I'm trying to connect to a asp.net website we have created. It uses Windows authentication and it denies access to non authenticated users web.config: <authentication mode="Windows" /> ...
0
votes
1answer
977 views

Windows firewall logging. Log file is always blank

I have read many similar articles and posts on how to enable windows firewall logging. I have Win2k8r2 server without any Active Directory, DC, domains and other complicated stuff. Almost all of this ...
2
votes
2answers
835 views

Real-time layer 7 (http.request.uri) filtration on freebsd

I have a freebsd 9.0 router with 250-300Mbit/s traffic, and need to filter small list of pages (http.request.uri). I do not care about tor, anonymizers, proxy etc. Just prevent direct access from my ...
9
votes
5answers
14k views

How to Unban an IP properly with Fail2Ban

I'm using Fail2Ban on a server and I'm wondering how to unban an IP properly. I know I can work with IPTables directly: iptables -D fail2ban-ssh <number> But is there not a way to do it with ...
1
vote
1answer
697 views

SNMP closed state in CentOS

I'm having a problem here, I've added to my IPtables rules this: -A INPUT -p tcp -m state --state NEW -m tcp --dport 161 -j ACCEPT -A INPUT -p udp -m state --state NEW -m udp --dport 161 -j ACCEPT ...
0
votes
0answers
26 views

TFS Check In Issue: The underlying connection was closed: A connection that was expected to be kept alive was closed by the server

I've recently started seeing the below error when attempting to check in code to TFS: The underlying connection was closed: A connection that was expected to be kept alive was closed by the server. ...
2
votes
2answers
2k views

Configuring Fortigate OS4 for FTPS

I configured iis7 ftp to allow ssl connections. I set the ssl firewall to use ports 50000-50050. If I set up a custom service on my fortigate firewall for ftps with source ports 990-50050 and ...
-2
votes
0answers
29 views

Cisco ASA 5505 ver 7.4 port forwarding

I need sone help over ASA 5505 ver 7.4. This scenario is working with two site to site vpn and working fine. All inside clients able access internet only issue is that they are not able to call means ...
0
votes
1answer
26 views

allow machine to access localhost website

I've got some IP rules on an Azure VM, the first blocks all traffic, the second allows my laptop to access the website. Both work fine, however when I try to access a website hosted on the VM locally ...
-2
votes
1answer
55 views

Email system architecture and implementation [closed]

It's been over a week already and I am unable to find satisfactory solutions to my problem on the Internet. I hope the experts here could lend a helping hand. I will just go straight on describing the ...
0
votes
1answer
38 views

Block Outgoing SMTP Except for Mail Server

Masters, Our ISP ask to solve a problem. They said we send many SPAM from our server. (they only give our router IP address, so we don"t know if we have SMTP flooders from infected cllient, our we ...
0
votes
0answers
13 views

Configure Firewall to allow incoming connections to Server Running in a VM

I have Lubuntu running in a VMware Virtual Machine (on a Windows 7 host). Within the VM, I am using the git daemon command to serve a git repository. When trying to connect to this server from another ...
0
votes
3answers
1k views

Can't RDP out behind SonicWall Firewall

I am trying to connect to a remote computer. but on m side i believe that my SonicWall Firewall is blocking me from sending a request out. I do not know how to configure the firewall to allow access ...
1
vote
2answers
3k views

Iptables not persisting after reboot on CentOS 6.2

I've tried adding a few rules to my iptables but they don't seem to be saving. In order to save them, I've tried running iptables-save and service iptables save. Each time I have run either of those ...
1
vote
1answer
26 views

NIDS on bridged firewall

I have a firewall (Debian Stable 7.5) which works in bridged mode. The interfaces eth0 (WAN) and eth1 (LAN) are linked with the bridge interface br0. Can I deploy a NIDS (eg. Snort) on this server? ...
1
vote
1answer
692 views

Amazon EC2 Socket connection not being accepted

I am trying to run a java application on my EC2 instance. The application accepts socket connections on port 54321. If I try and connect to it, it times out. My Security Group is set as: TCP Port ...
0
votes
2answers
7k views

Fortigate 200A firewall CPU high resource usage

This morning I'm receiving complaints from several end users that saying their whole department network are slow and have intermittent. Therefore I've checked our firewall to see whether if something ...
1
vote
0answers
33 views

Server attack trying to view through WHM [closed]

I have a VPS account with Bluehost and I have been experiencing some server loads that are high. I had a chat with support which of course ended with no help and support stated (0:16) [Useless ...
1
vote
1answer
156 views

How to see the list of ip addresses in 'recent' module?

How to see the full list of ip addresses in 'recent' module? I want to see current hitcounts to adjust my values accordingly so no valid users gets accidentally blocked
1
vote
1answer
48 views

Is there a logical reason why Amazon EC2 won't allow me to specify a port when using GRE?

I want to set up PPTP in EC2 and am configuring a security group. I've already selected the "custom protocol" and am using protocol 47 / GRE. When I select this, the port section is read only. Is ...
2
votes
1answer
148 views

How do I set up an IPv6 DMZ with iptables without a static allocation?

I have several networks which are on Comcast's residential network. I need to access those networks from a variety of environments, via an SSH proxy on one of the hosts. (As it happens I'm using ...
1
vote
2answers
1k views

Smoothwall Express interface issues

I have a SmoothWall Express box that is currently configured with a Green and Purple interface. Both interfaces are in the same /24 subnet (which seems odd to me). The green interface (address of ...
1
vote
2answers
873 views

Sonicwall App Control Advanced

I have a custom application that accesses a remote range of IP addresses, lets say for example 206.0.0.0 - 206.255.255.255, this is UDP based traffic. The issue is, Sonicwall NSA has been configured ...
0
votes
0answers
52 views

FreeBSD 10 IPFW IPv6

I'm struggling to allow IPv6 connections on my FreeBSD 10 server. I have a working IPv6 connection. But IPFW blocks all the IPv6 traffic. #!/bin/sh # # flush existing rules ipfw -q flush # allow ...
-1
votes
0answers
12 views

Specifying routes among 3 subnets using iptables at firewall server

I have 3 subnets each connected to the same router (cisco router with 3 interfaces). One of these subnets (LAN3) has got an Ubuntu server (named atlas) running iptables to filter traffic and to make ...
10
votes
5answers
12k views

A secure, standard iptables rule-set for a basic HTTP(s) webserver

I have been trying to put together a basic server iptables script that will work for most sites just running a basic webserver using HTTP(S) and SSH (ports 80, 443, & 22). After all, most VPS only ...
0
votes
1answer
974 views

Allow access to printer between interfaces on Cisco ASA5510

I have a Cisco ASA5510 where we have to separate networks on two separate interfaces. The networks should have nothing to do with each other except that network B needs to access a printer on network ...
0
votes
3answers
7k views

WatchGuard 'Internal Policy' intermittently blocking outbound web traffic

I have a lot of legitimate outbound traffic intermittently being denied by WatchGuard's "Internal Policy." Today I tried to go to Splunk's homepage and my traffic was denied by my watchguard XTM 22 ...
0
votes
1answer
56 views

Could not connect to bridged VM with Win2012 host

I have the following setup. A physical PC with Windows Server 2012 (host OS) with VMware Workstation 9.02 with: Windows Server 2012 (guest OS) Ubuntu 12.04 (guest OS) The guest OS's both run as ...
0
votes
0answers
31 views

Mac OS X Firewall isn't firewalling

Rather confused by the results I'm getting on a Mac OS X Server running 10.8. I have an app that is running a web server on port 8000, which I want to be visible only to localhost. This seems ...
0
votes
2answers
625 views

iptables configuration for docker containers

I am using Docker 0.7.0 to create containers on RedHat Enterprise Linux 6.5. When firewall is turned off containers can talk to outside world, but when firewall is on, container cannot be accessed ...
0
votes
1answer
18 views

Block an outbound destination IP to prevent connections waiting timeout duration [duplicate]

It seems like with the basic "DROP" iptables rule, an outbound attempt will still wait the duration of its timeout. For instance, if I block an IP address outbound, then attempt to connect to it via ...
0
votes
0answers
23 views

Traffic forwarding by domain on ZyWall USG 200?

I know this question is very specific, but I have not found any help yet. At our office, we run a small server room with a few servers behind a ZyWall. Unfortunately, we only have one external IP at ...
0
votes
2answers
68 views

Websocket & HTTP proxy with server between two firewalls

I have a server ("A") running behind a firewall, which serves HTTP and websockets. I have no control over the firewall, but do have an external server ("B") to which the internal server can connect ...
0
votes
1answer
635 views

Cisco Catalyst 3750 connected to Cisco ASA 5505 and dropping packets

(Cross posted from Super User per suggestion there) At the office, I have inherited a network that I am still trying to fully comprehend. I have a problem today with a new connection between: A ...
0
votes
1answer
35 views

Cloud services can't be reached from complex customer infrastructure

We have several services running on a cloud, they all are hosted on Windows Server 2012 R2, have public IP address and specific port. Some of our customers can't reach them because for "some reason" ...
-2
votes
1answer
25 views

Allow outgoing connections for DNS [closed]

I'm new to IPtables, but I am trying to setup a secure server to host a website and allow SSH. This is what I have so far: #!/bin/sh i=/sbin/iptables # Flush all rules $i -F $i -X # Setup default ...
1
vote
1answer
52 views

Does the TCP-UDP-Proxy policy in Watchguard open me to security problems?

I don't remember seeing this policy since it seems to me like an "all ports open" kind of thing. It is set default "tcp:0(any) - udp:0(any)" If I disable this, even web traffic wouldn't work although ...
1
vote
1answer
38 views

Is there any danger in disabling windows firewall on a azure worker role?

I'm trying to troubleshoot a bug on our Azure worker role where we occasionally get the error "Unable to read data from the transport connection: An established connection was aborted by the software ...
1
vote
1answer
63 views

What is the difference between a SPI Firewall and an Application Layer Firewall?

What is the difference between a SPI Firewall and an Application Layer Firewall? In what circumstances would I prefer one over the other?
0
votes
1answer
141 views

iptables to allow input and output traffic to and from web server only

I have an Elastic Search server which seems to have been exploited (it's being used for a DDoS attack having had NO firewall for about a month). As a temporary measure while I create a new one I was ...
0
votes
0answers
137 views

VPN pptp connection Unable to pass through linux iptables

I have set up a windows VPN server behind Linux - Ubuntu box that is working as firewall and proxy server. Now I want people from outside to be able to connect to the VPN server, but the connection is ...
0
votes
0answers
33 views

Reverse web proxy with time constraints

I have a web application which produces several unique URLs of the type http://service.company.com/service.html?type=aaaa&key=jfiZm6u6cW where the last part is a randomly generated key. Each such ...
4
votes
4answers
272 views

Why on linux machines, any packets do not pass except icmp, but correctly pass on windows

There is a cluster on proxmox. In a cluster have vm - configured router (pfsense). In the our net have Windows and Linux machines. There is the problem: Windows-machines have access to the internet, ...
7
votes
3answers
648 views

What is the ip range of EC2

I'd like to setup a rule to block ssh request from EC2 since I've been seeing a large amount of ssh based attack from there and was wondering if anyone knew what their IP ranges are. EDIT: Thank you ...
1
vote
2answers
322 views

Can't connect to Postgres in production

I'm trying to connect to my Postgres instance on a local IP, which I can connect to with no problem using the psql -h localhost command. However, which trying to run via rails, I get this: $ rails c ...