A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

0
votes
1answer
162 views

Configuring firewall centOS

Hi I am trying to configure my ip tables...but I can't seem to make this work... I'm not sure why (this is my first dedicated server) -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp ...
0
votes
0answers
53 views

Enabling the Internet Connection on an EC2 Windows Server 2012 Machine

I've disabled the firewall: netsh firewall set opmode disable I've made sure to accept all inbound and all outbound connections: Is there anything that I should be installing or adding on to the ...
16
votes
4answers
17k views

What firewall ports need to be open to allow access to external git repositories?

What firewall port(s) need to be open to allow access to external git repositories?
1
vote
3answers
924 views

How to block ALL communications with an IP-address using iptables?

I have a FreeBSD system behind a Linux-based router (using DD-WRT firmware). The FreeBSD system is running sshd and is regularly probed by various script-kiddies. It currently runs a script, that, ...
0
votes
1answer
60 views

Juniper SSG5 suddenly slow throughput

I'm trying to find out where in my configuration the problem might be. About a month ago we were easily getting 100 up 50 down through our provider through the Juniper SSG5. Starting a few weeks ago ...
0
votes
0answers
15 views

windows firewall , some ports not listening

I've added an inbound connection rule for my windows 8 firewall on windows server 2012: I've restarted the Windows Firewall. When I check that port using this program, it says that it is not ...
2
votes
4answers
13k views

VPN is working, except for DNS lookups. Firewall (Cisco ASA 5505) issue?

I've got the following set up: LAN -> DHCP / DNS / VPN server (OSX 10.6) -> Cisco ASA 5505 -> WAN Connecting to the LAN via VPN works fine. I get all the details properly and I can ping ...
0
votes
2answers
39 views

Is a sonicwall tz105 firewall necessary for my network? [closed]

I was not exactly sure how to best word my question above. I am trying not to ask a subjective question but I really want a little advice from someone who knows more about this, and have a few ...
0
votes
1answer
35 views

Is it possible to block HTTP traffic from specific machines?

I have some web crawlers, and a specific website seems to be blocking traffic temporarily after some time. The thing is, even though all clients have the same external IP address (they access the ...
0
votes
0answers
27 views

Remove mapping drives from RDP to user from exteral network

I would like to know if you guys have a solution to my problem. I have a terminal server 2012 that can be accessed remotely after a VPN connection and from the LAN. My question is how can I create a ...
0
votes
0answers
39 views

Dynamic IP Blocking on FORTIGATE 200A Firewall

I have FORTIGATE 200A firewall protecting a IIS Server running a ASP.NET website (windows server 2008 and IIS7) I'm not familiar with Fortigate configurations and options. I recently had "attacks" ...
15
votes
6answers
25k views

How to Unban an IP properly with Fail2Ban

I'm using Fail2Ban on a server and I'm wondering how to unban an IP properly. I know I can work with IPTables directly: iptables -D fail2ban-ssh <number> But is there not a way to do it with ...
1
vote
2answers
2k views

Configure multiple lan interfaces for same subnet on sonicwall

We have a sonicwall 2400, Is there any way to assign multiple interfaces to the same lan subnet? Basically, we would like to have X1 for the wan and X0, X2, X3 and X4 connected to 4 devices that would ...
2
votes
2answers
3k views

Configuring Fortigate OS4 for FTPS

I configured iis7 ftp to allow ssl connections. I set the ssl firewall to use ports 50000-50050. If I set up a custom service on my fortigate firewall for ftps with source ports 990-50050 and ...
0
votes
2answers
45 views

pfsense with three WAN IP and outgoing NAT

similar situation as this one: How to setup pfSense with multiple public IP's i have a pfsense with multiple wlan ip's. I'm using a Hetzner Server with vmware so i have a virtual machine with ...
26
votes
3answers
35k views

Windows equivalent of iptables?

Dumb question: Is there an equivalent of iptables on Windows? Could I install one via cygwin? The real question: how can I accomplish on Windows what I can accomplish via iptables? Just looking for ...
-2
votes
1answer
21 views

FTP server | Filezilla | issues connecting

so I am trying to setup an FTP server (Filezilla) on my windows 2012 server. I have installed filzilla server and set the port to 14144 (not the default 14147) I have also ensured the the service is ...
0
votes
2answers
1k views

Windows firewall logging. Log file is always blank

I have read many similar articles and posts on how to enable windows firewall logging. I have Win2k8r2 server without any Active Directory, DC, domains and other complicated stuff. Almost all of this ...
0
votes
1answer
1k views

Configure IPTables on KVM host to block guest bridge traffic

I am working on a thesis research project, and I am having some difficulty figuring out how to get iptables (running on the KVM host) to block traffic (or rather, manipulate traffic) destined for a ...
1
vote
1answer
114 views

Why is fail2ban not banning this attack?

I have fail2ban installed to ban bruteforce attempts on the ssh password. There are business requirements for not disabling password authentication on this machine. fail2ban was installed using the ...
1
vote
1answer
5k views

Handshake violation when trying to access one website

I have a TZ 190 Wireless Enhanced with SonicOS Enhanced 4.2.1.0-20e. Yesterday, people could access without any problems a bank website wich uses HTTPS. Today, it is imposible to access only that ...
1
vote
1answer
831 views

Amazon EC2 Socket connection not being accepted

I am trying to run a java application on my EC2 instance. The application accepts socket connections on port 54321. If I try and connect to it, it times out. My Security Group is set as: TCP Port ...
4
votes
3answers
126 views

Can't access Exchange OWA from Wireless Subnet - Firewall rule?

The Problem The issue is that I can't access port 80 (or 443) on the Exchange server, unless I add a blanket rule to allow all traffic from the client to the server's subnet. If I add a rule to ...
0
votes
1answer
36 views

Why should I remove firewall rule after application exit?

I have a server which listens on port 80 for incoming requests - using HttpListener. I've found that to be able to do that, I need to open up the port (add a firewall rule which enables me to listen ...
0
votes
1answer
889 views

ZenOSS webinterface connecting

I'm having a problem with ZenOss. I installed the centos stack installer on Centos 5.5 x64. De installation succeeded and no errors where displayed. But when I tried to surft to the ip address it ...
0
votes
0answers
4 views

linux: how to troubleshoot forwarded port? [migrated]

My home internet connection has a static IP address (eg: 123.123.123.123) I have configured my router to forward port 9000 to an internal host (192.168.1.101). That host is running Ubuntu 14-04. ...
0
votes
3answers
2k views

Can't RDP out behind SonicWall Firewall

I am trying to connect to a remote computer. but on m side i believe that my SonicWall Firewall is blocking me from sending a request out. I do not know how to configure the firewall to allow access ...
1
vote
1answer
33 views

Cannot Ping Devices Across Interfaces for Shorewall Single IP Three-interface Firewall on Debian Wheezy

Summary I am currently working on a three interface software firewall using Shorewall 4.5.5.3 on Debian Wheezy, and I'm having some difficulty with the loc (eth2) and dmz (eth1) interfaces. The fw ...
-1
votes
0answers
12 views

Route Windows application to specific network interface [migrated]

I have two connections (one wired, one wireless, if relevant). One connection passes thru a proxy (which is not under my control) and is domain controlled. The other is a simple wireless connection ...
2
votes
1answer
45 views

DNS grey listing and long retry intervals - standard practices?

My company's ISP has implemented what I'll term DNS "grey listing" (or they have a configuration problem) - they are blocking inbound DNS queries between [resolver IP, server IP] pairs that haven't ...
0
votes
1answer
51 views

Configure firewall and proxy server or just firewall for outbound connections

I'm actually a software developer and I am working on a web application which uses Recaptcha. I am using Asp.Net C# in a web form application. I am having an issue with the server trying to verify ...
1
vote
1answer
116 views

My iptable rules do not allow VPN connections

I have installed OpenVPN on my Archlinux server and modified my iptable rules to allow incoming traffic on port 1194 and forward it to the tun0 interface. When I disable/stop the iptables, the OpenVPN ...
0
votes
1answer
27 views

How can I adapt this technique of using a proxy (in firefox) to wget and yum ? [closed]

I work in a large organization where some people have extremely restricted internet access and some are given a fairly large amount of freedom. The way my organization manages this is by running a ...
2
votes
2answers
2k views

Sonicwall App Control Advanced

I have a custom application that accesses a remote range of IP addresses, lets say for example 206.0.0.0 - 206.255.255.255, this is UDP based traffic. The issue is, Sonicwall NSA has been configured ...
3
votes
3answers
2k views

Disable connection tracking with UFW for port 80

During load testing my server is dropping packets due to "connection tracking" way before it's running out of resources. I'm using Ubuntu Jaunty with ufw. In my syslog I get: ip_conntrack: table ...
0
votes
1answer
40 views

iptables setting output default to DROP

I have two servers: one web, one database. The db server is on a private network. I thought I needed to restrict the default OUTPUT on the web server to DROP and created OUTPUT rules to to ACCEPT ...
6
votes
5answers
3k views

Making iptables easier to maintain

My network is completely locked down except for a few sites which are whitelisted. This is all done through iptables, which looks something like this: # Allow traffic to google.com iptables -A ...
2
votes
3answers
2k views

Iptables rule to block all web requests to domain.com

I know this is not the best solution, and it's not a production server, however, I'm still trying to drop requests to a domain if it doesn't match the domain string. So far it works if I apply the ...
0
votes
0answers
128 views

Blocking HTTPS content with a Watchguard (Websense) vs. SQUID and SQUIDGuard using Transparent Proxy mode

I'm trying to compare these 2 solutions when it comes to content blocking : 1 - A pFSense appliance with SQUID and SQUIDGUARD packages configured 2 - A Watchguard FW that uses Websense So, in order ...
1
vote
1answer
58 views

Linux VPS settings to allow $_SERVER['REMOTE_ADDR'] to get client ip [closed]

I have unmanaged VPS server. I am trying to get client IP form PHP $_SERVER['REMOTE_ADDR'] but it's always gives me same for all users that is server internal IP. I have done some R & D and got ...
0
votes
1answer
30 views

Skype Group Chat in a secured location?

When working in a secured location - some place that uses HTTPS inspection for the firewall, possibly application level filtering, etc - how do you get Group Chat to work correctly in Skype? Adding ...
24
votes
6answers
24k views

How can I prevent a DDOS attack on Amazon EC2?

One of the servers I use is hosted on the Amazon EC2 cloud. Every few months we appear to have a DDOS attack on this sever. This slows the server down incredibly. After around 30 minutes, and ...
0
votes
0answers
55 views

Cannot block team viewer through TMG Server 2010

I am just re configuring the firewall in our computer lab and I have created a block URL list. In it are the URL's to the team viewer: http://dyngate.com/ http://teamviewer.com/ This is set ...
2
votes
4answers
1k views

ip6tables blocking output traffic

My OpenVZ VPS is blocking outbound IPv6 traffic, but correctly filtering inbound IPv6 traffic. Below is my ip6tables-restore script. *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT ...
0
votes
0answers
31 views

Trace IP traffic to physical machine under Linux

In my firewall logs I recently see frequent connection attempts from a 10.0.0.0/8 network. This network is used by VirtualBox, but I can exclude that these packets come from those. No physical machine ...
0
votes
1answer
34 views

How to close specific port with SuSEfirewall2?

I'm opening specific ports in a SuSE 11 server to do ssh forwarding. After I finish, how do I close only the ports that I opened? I tried SuSEfirewall2 close EXT TCP 4050 but it seems to close ...
0
votes
1answer
35 views

Limiting number of simultaneous connections to certain host on windows

I have an application which doing TCP connections to some host, accidentally it could be configured to make a lot of connections to that host and overload it. Is there Windows firewall application ...
1
vote
2answers
697 views

How do I allow (remote) IISReset through the firewall on Win Server 2008

I'm trying to run the following, to reset IIS on a remote machine. IISReset <remoteMachine> If I disable the domain firewall, everything works fine. With the firewall enabled, I get ...
0
votes
2answers
21 views

Rsync through secure head-node on storage cluster

I wish to use a specific head-node as contact address for my rsync backups, I do no wish to have the backend accessed directly, as it is not as hardened, nor as compatible with the rest of my ...
0
votes
0answers
50 views

Cisco 877 configuration with multiple firewalls behind in parallel using public IP's

I would like to ask how I can configure my cisco 877 adsl router to have multiple firewalls installed in parallel behind the cisco 877 router. I have enclosed a diagram of what I am trying to achieve. ...