A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

1
vote
0answers
471 views

java.net.ConnectException: Connection timed out, Tomcat 7 and iptables

I am experiencing a weird problem.. Basically our Java developer said that in the java application the services that access the db to write on it get this error: java.net.ConnectException: ...
1
vote
0answers
2k views

How to open ports in Cisco ASA 5505 using ASDM?

am new to cisco and i badly need help in opening ports using ASDM. I already tried natting but it only allows 1 outside and 1 inside rule ex. Inside Static Rules 10.x.x.x outside 72.x.x.x Outside ...
1
vote
0answers
163 views

Folders 'locked' to FTP access on Win Server 2003 Standard - firewall issue but how to resolve

I have a weird issue which is just affecting one of many sites on my Windows 2003 Standard server (running IIS6). I'm not a server admin by the way, but the company who manage my server don't seem ...
1
vote
0answers
843 views

Redundant Firewalls And Switches HSRP and CARP

I currently have planned 2 x uplinks (HSRP Active/Standby) 2 x pfsense firewalls (Carp Enabled) 2 x layer2 switches Please criticize or offer help on the correct way to do this. I have a feeling im ...
1
vote
0answers
323 views

What steps can I follow to diagnose why PPTP VPN (rasClient) has suddenly stopped connecting?

I use my a Windows Server 2008 R2 workstation as a VPN client to a Windows 2003 RRAS VPN host. It has worked flawlessly for many months. All of sudden, rasClient stops connecting and throws: Error ...
1
vote
0answers
75 views

shorewall prevents routing from protected zone entities to other protected zone entities

I'm using shorewall as the firewall and gateway for a production site. The site also has a couple of VPNs running into it that are hosted on a different server on the same site (in the protected ...
1
vote
0answers
835 views

Cannot connect to MySQL on RDS (Amazon Web Services) from my laptop

I'm having some trouble connecting to a MySQL 5.1 server on an RDS instance on AWS from my laptop. The detailed description of the problem is here: ...
1
vote
0answers
145 views

Connect to Orange interface in IPCop

I am using IPCop with a red-green-orange configuration. I am trying to access my webserver on the orange interface, from a computer on the green interface, both of which are inside my firewall. When ...
1
vote
0answers
217 views

Virtual networks connected to a computer acting as firewall (KVM)

I have successfully created a schema like this with VirtualBox, but now I have to do a final project and I would like to do it with KVM and Virtual Machine Manager (virt-manager). I am having some ...
1
vote
0answers
497 views

Can't remote desktop into Windows 7 workstation in SBS 2003 network

We have a Windows Small Business Server 2003 network with Windows XP and 7 workstations. Some of the workstations have custom remote desktop ports and the modem/firewall (Netgear DG834) forwards these ...
1
vote
0answers
76 views

Configure firewall to allow an Interix (SUA) application

I have installed wget inside the Subsystem for UNIX-based Applications. I want to download something through wget inside SUA. My Windows Firewall is configured to block anything except allowed ...
1
vote
0answers
705 views

OpenWRT with VLANs: NAT not working with single Firewall Rule

I have a configuration on my OpenWrt Backfire 10.03 with different VLANs, k2 belonging to fwz2 is one of them. In this testing environment the WAN is DHCP with IP:192.168.1.1: config 'interface' ...
1
vote
0answers
217 views

Multi-ISP firewall setup

We have been trying to move away from a SonicWall firewall for quite some time now. Through much Googling and many hours of trial and error, we have met varying degrees of success through different ...
1
vote
0answers
77 views

Connection reset with duplicate query parameters

Is there anything that could cause a connection reset when duplicate query parameters are passed to a page? http://test/?test[]=1&test[]=2 Causes a connection reset http://test/?test[]=1 Works ...
1
vote
0answers
457 views

Only allowing certain Java apps through firewall

Using Windows Firewall and Advanced Security, I block everything outgoing by default and define outgoing rules to allow my approved apps through. For Java apps, I only allow java.exe through to ...
1
vote
0answers
311 views

After enbaling VPN/NAT on 2008 R2 direct access to server is blocked (RDP, FTP,…)

After setting up VPN with NAT over RRAS configuration menu in windows server 2008 R2, direct access to server is blocked. Does anybody know why is this happening? How to enable RDP, FTP, and other ...
1
vote
0answers
727 views

Draytek Vigor 2820 Firewall prevent web access from IP

I have a few Draytek Vigor 2820 routers and have recently set one up using settings from another. I have it set up on the firewall filter to block torrents which it does very well. The issue I am ...
1
vote
0answers
158 views

methods for preventing large scale data scraping from REST api

I know the immediate answer to this is going to be there is no 100% reliable method of doing this. But I'd like to create a question that details the different possibilities, the difficulty of ...
1
vote
0answers
266 views

Windows Server 2008 SOMETIMES blocks connection to an FTP Site

Recently, our company has been having issue connecting to a special FTP server that we use offsite to upload small files. We can connect to the test server perfectly fine, but when we use the ...
0
votes
0answers
15 views

2 Vlans on a Cisco PIX 515 with DMZ

I have to install an application server on a networks dmz. The application will sit on a network but has no interaction with the other devices on that network. I was thinking that the firewall(Cisco ...
0
votes
0answers
15 views

how to use --rdest flag in recent table

Here is why I try to accomplish: When receiving a UDP packet, put IP address of the source address in recent table. sudo iptables -A INPUT -p udp --dport xxxxx -m recent --set -j ACCEPT When send ...
0
votes
0answers
12 views

Something in the network is causing my REST interface to respond to requests with an empty body

We import orders from online through a REST interface over HTTP, which sends back JSON responses. I've confirmed that the code itself works, and it works on the test server. For some odd reason, ...
0
votes
0answers
15 views

How can I add a new physical interface to an Endian Community Firewall?

I just installed the Community Endian Firewall on my system. But it's just recognizing the first 4 interfaces (after going into shell and doing a ifconfig shows br0, br1, br2 and br3). How can I add ...
0
votes
0answers
26 views

TFS Check In Issue: The underlying connection was closed: A connection that was expected to be kept alive was closed by the server

I've recently started seeing the below error when attempting to check in code to TFS: The underlying connection was closed: A connection that was expected to be kept alive was closed by the server. ...
0
votes
0answers
13 views

Configure Firewall to allow incoming connections to Server Running in a VM

I have Lubuntu running in a VMware Virtual Machine (on a Windows 7 host). Within the VM, I am using the git daemon command to serve a git repository. When trying to connect to this server from another ...
0
votes
0answers
52 views

FreeBSD 10 IPFW IPv6

I'm struggling to allow IPv6 connections on my FreeBSD 10 server. I have a working IPv6 connection. But IPFW blocks all the IPv6 traffic. #!/bin/sh # # flush existing rules ipfw -q flush # allow ...
0
votes
0answers
31 views

Mac OS X Firewall isn't firewalling

Rather confused by the results I'm getting on a Mac OS X Server running 10.8. I have an app that is running a web server on port 8000, which I want to be visible only to localhost. This seems ...
0
votes
0answers
23 views

Traffic forwarding by domain on ZyWall USG 200?

I know this question is very specific, but I have not found any help yet. At our office, we run a small server room with a few servers behind a ZyWall. Unfortunately, we only have one external IP at ...
0
votes
0answers
137 views

VPN pptp connection Unable to pass through linux iptables

I have set up a windows VPN server behind Linux - Ubuntu box that is working as firewall and proxy server. Now I want people from outside to be able to connect to the VPN server, but the connection is ...
0
votes
0answers
33 views

Reverse web proxy with time constraints

I have a web application which produces several unique URLs of the type http://service.company.com/service.html?type=aaaa&key=jfiZm6u6cW where the last part is a randomly generated key. Each such ...
0
votes
0answers
54 views

Port Forwarding to a VPN Client

I'm looking for some help getting a port forward setup to a VM running Ubuntu 12.04 on my LAN. I can forward the port to the VM successfully and connect to the service over the Internet. But when I ...
0
votes
0answers
44 views

Slow Website Access from China

I just made a wordpress based website for a client that operates in China. The website is being cached completely by W3 Total Cache and served very fast in Europe (where our main server is located). ...
0
votes
0answers
23 views

Windows server 2003 SP2 firewall - limit inbound connections

I am trying to make the server running Windows 2003 Server SP2 to allow connections only from the local network or and couple of specific remote IP. I have experience using Linux only and therefore I ...
0
votes
0answers
153 views

[SOLVED ]Openvpn routing for lan to lan through tun

I am trying to setup an OpenVPN tun to connect two lan's The open vpn connection is up and working but there is a problem with my routing or nat or something. What I need is an example of what a ...
0
votes
0answers
37 views

OpenVPN Server & Two Gateways

I have a network setup as follows: Internet <---> Firewall <---> VPN (1) VPN <---> NAT (2) Internet <---> Firewall <---> NAT (3) (I don't have the reputation to post the picture :/) ...
0
votes
0answers
33 views

OpenVPN advanced privileged client access customization

I have implemented an OpenVPN server running on Tomato router (Let's call the router TR) the OpenVPN server is using TUN interface which means connections between clients and servers are based on ...
0
votes
0answers
35 views

Cisco 881W Zone Base Firewall

I cannot ping an Internal system to a DMZ system. I have checked the policy map session and everything time I do a ping the match shows the first ping was matched but none of the other pings were ...
0
votes
0answers
53 views

Multiple gateways with linux on same subnet using single NIC

I have the following configuration; Firewall 1 (site 1); x.x.x.x/26 subnet on external 10.0.0.0/8 on internal (internal IP 10.0.0.10) Firewall 2 (site 2); x.x.x.y/26 subnet on external 10.0.0.0/8 ...
0
votes
0answers
67 views

Force all traffic through VPN

I am using PfSense as a firewall, with its VPN functionality. The client I use is Shrew Soft VPN client. As it is a split tunnel, is there a way I can force all traffic through the VPN connection, ...
0
votes
0answers
41 views

Xenserver firewall consideration

We are setting up Xenserver for a production environment with seperate VMs for a website, billing, control panel, mail. My question is, should we rely on each server's IPtables or is it necessary to ...
0
votes
0answers
71 views

SonicWall NSA2400 after firmware upgrade to 5.9 - not able to log some intrusion prevention/detection statements

After upgrading firmware to 5.9 version I'm not able to log intrusion prevention/detection for statements like PHP CGI Argument Injection, Remote Command Execution, Remote File Inclusion, WEB-ATTACKS, ...
0
votes
0answers
40 views

customised client to client connection configuration inside OpenVPN server

I have two clients with common names [client_sina] and [client_extra] that are connecting to an OpenVPN server on remote place via (TUN21) running on Tomato Router The only physical port of the ...
0
votes
0answers
53 views

Connecting internet uplink to switch or firewall

While I am using Cisco kit, this isn't really Cisco related, more general network design. In the past I have connected internet connections straight in to a layer 3 core switch, 3750X's, 6509's and ...
0
votes
0answers
22 views

VPN User ACL not working

i´m currently testing a Cisco 886VA router for VPN usage. First off here is my client config group: crypto isakmp client configuration group VPN_PRIV key xxxxxx dns 192.168.111.100 pool VPN_POOL acl ...
0
votes
0answers
35 views

Unable to connect to SQL Server over SSL

I am unable to connect to a SQL Server over SSL. This is the current setup: A server at my location sends data to an external service (SQL Server 2008) using SSL. We are using Websense and an ASA for ...
0
votes
0answers
21 views

Advanced Windows Firewall - Strange logging behavior

I have created a GPO that set's several firewall rules to Windows Server 2008 R2 machines within a specific OU. The default behavior is set to block on inbound and outbound on all profiles. Also I did ...
0
votes
0answers
37 views

Can IPtables (possibly with libnetfilter_queue library) do everything that snort does?

I have just started getting into network security, firewall, etc. So, please excuse me for asking this basic question. I looked at IPtables and got a good hang of it (nowhere close to becoming an ...
0
votes
0answers
122 views

The Windows Filtering Platform has blocked a connection - Query User

I'm having a problem with a program trying to access port 135. The Windows filtering platform is blocking the communication. In the windows security logs, the following is displayed: The Windows ...
0
votes
0answers
30 views

Prompt User for decision corresponding Firewall Inbound Traffic NOT APPEARING

Normally when an Incoming Traffic comes, there will be "Prompt the User for a decision corresponding this Inbound Traffic" popup. For some weird reason this popup is not coming out and I'm finding ...
0
votes
0answers
42 views

Securing and loadbalancing front-end back-end with sql inspection proxy

I am working on designing a secure way for our network to allow front-end application servers in our DMZ to communicate securely with our databases, and I can see quite clearly that normal firewalling ...