A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

1
vote
0answers
144 views

CSF: Changing portflood settings to deny IP longer than second interval?

I've recently been under attack and I'm configuring CSF firewall for my Ubuntu server (latest). I found out portflood settings only block the ip for the specified second count, but I would like ...
1
vote
0answers
335 views

Allowing connections initiated from outside

I've got an old Juniper SSG5 running ScreenOS 5.4.0r6.0. Once a day, more or less, it'll start randomly dropping packets at a rate of ~5-10%. We currently solve this issue by simply rebooting the ...
1
vote
0answers
500 views

Cannot open port 8080 on Amazon EC2

I am having difficulty getting my Varnish/Nginx Wordpress setup working. I had set up varnish to listen on poert 80, and nginx to listen on port 8080, with a rule on wp-admin URLs to pass through to ...
1
vote
0answers
264 views

Webservice randomly dropping connections - possibly due to firewall nonevent data?

I have a hosted webapp which requests data from a REST webservice in our office. Each page calls one (or several) webservices, which go from our host, via our firewall (a Watchguard Firebox) to a ...
1
vote
0answers
286 views

iptables dynamic NAT, SNAT: force overload on exhaustion

Is there a way to specify the use of iptables NAT'ing where you can use SNAT for a pool of outside addresses, but when the last IP is about to be used it is used as an overloaded outside IP? I ...
1
vote
0answers
482 views

IPcop Multiple WAN Subnets

We have an IPcop firewall and have had no issues with it. We've had a block of 10 IP addresses from our colocation provider and have been able port forward from those to internal servers as needed. ...
1
vote
0answers
282 views

Checkpoint NGX FW1 Routing Between Networks

We have an old Checkpoint NGX FW1 firewall which we have to maintain. For the most part we leave it alone and it just chuggs away and works. The person who originally set it up left years ago and ...
1
vote
0answers
130 views

Given IP address, but can only ping sometimes

I have a debian server that acts as a wifi router and DHCP and FTP server. I want to connect to this server using a Canon Wireless File Transmitter. I can connect and receive an IP address. I can ...
1
vote
0answers
643 views

linux firewall + load balance ISP connections

I'm trying to get a linux Mint computer with 4 NIC's to act as a load balance server. The idea is that we have three internet connections, and we want to use all of them so we can share usage of 50 ...
1
vote
0answers
167 views

SVN checkout returns 400 error

I'm trying to download the http://code.opencv.org/svn/opencv/trunk/ repository of all of the OpenCV source code - as specified in an OpenCV installation tutorial. In the tutorial, the repository ...
1
vote
0answers
548 views

java.net.ConnectException: Connection timed out, Tomcat 7 and iptables

I am experiencing a weird problem.. Basically our Java developer said that in the java application the services that access the db to write on it get this error: java.net.ConnectException: ...
1
vote
0answers
2k views

How to open ports in Cisco ASA 5505 using ASDM?

am new to cisco and i badly need help in opening ports using ASDM. I already tried natting but it only allows 1 outside and 1 inside rule ex. Inside Static Rules 10.x.x.x outside 72.x.x.x Outside ...
1
vote
0answers
171 views

Folders 'locked' to FTP access on Win Server 2003 Standard - firewall issue but how to resolve

I have a weird issue which is just affecting one of many sites on my Windows 2003 Standard server (running IIS6). I'm not a server admin by the way, but the company who manage my server don't seem ...
1
vote
0answers
1k views

Redundant Firewalls And Switches HSRP and CARP

I currently have planned 2 x uplinks (HSRP Active/Standby) 2 x pfsense firewalls (Carp Enabled) 2 x layer2 switches Please criticize or offer help on the correct way to do this. I have a feeling im ...
1
vote
0answers
386 views

What steps can I follow to diagnose why PPTP VPN (rasClient) has suddenly stopped connecting?

I use my a Windows Server 2008 R2 workstation as a VPN client to a Windows 2003 RRAS VPN host. It has worked flawlessly for many months. All of sudden, rasClient stops connecting and throws: Error ...
1
vote
0answers
80 views

shorewall prevents routing from protected zone entities to other protected zone entities

I'm using shorewall as the firewall and gateway for a production site. The site also has a couple of VPNs running into it that are hosted on a different server on the same site (in the protected ...
1
vote
0answers
905 views

Cannot connect to MySQL on RDS (Amazon Web Services) from my laptop

I'm having some trouble connecting to a MySQL 5.1 server on an RDS instance on AWS from my laptop. The detailed description of the problem is here: ...
1
vote
0answers
184 views

Connect to Orange interface in IPCop

I am using IPCop with a red-green-orange configuration. I am trying to access my webserver on the orange interface, from a computer on the green interface, both of which are inside my firewall. When ...
1
vote
0answers
268 views

Virtual networks connected to a computer acting as firewall (KVM)

I have successfully created a schema like this with VirtualBox, but now I have to do a final project and I would like to do it with KVM and Virtual Machine Manager (virt-manager). I am having some ...
1
vote
0answers
540 views

Can't remote desktop into Windows 7 workstation in SBS 2003 network

We have a Windows Small Business Server 2003 network with Windows XP and 7 workstations. Some of the workstations have custom remote desktop ports and the modem/firewall (Netgear DG834) forwards these ...
1
vote
0answers
84 views

Configure firewall to allow an Interix (SUA) application

I have installed wget inside the Subsystem for UNIX-based Applications. I want to download something through wget inside SUA. My Windows Firewall is configured to block anything except allowed ...
1
vote
0answers
811 views

OpenWRT with VLANs: NAT not working with single Firewall Rule

I have a configuration on my OpenWrt Backfire 10.03 with different VLANs, k2 belonging to fwz2 is one of them. In this testing environment the WAN is DHCP with IP:192.168.1.1: config 'interface' ...
1
vote
0answers
240 views

Multi-ISP firewall setup

We have been trying to move away from a SonicWall firewall for quite some time now. Through much Googling and many hours of trial and error, we have met varying degrees of success through different ...
1
vote
0answers
526 views

Only allowing certain Java apps through firewall

Using Windows Firewall and Advanced Security, I block everything outgoing by default and define outgoing rules to allow my approved apps through. For Java apps, I only allow java.exe through to ...
1
vote
0answers
320 views

After enbaling VPN/NAT on 2008 R2 direct access to server is blocked (RDP, FTP,…)

After setting up VPN with NAT over RRAS configuration menu in windows server 2008 R2, direct access to server is blocked. Does anybody know why is this happening? How to enable RDP, FTP, and other ...
1
vote
0answers
808 views

Draytek Vigor 2820 Firewall prevent web access from IP

I have a few Draytek Vigor 2820 routers and have recently set one up using settings from another. I have it set up on the firewall filter to block torrents which it does very well. The issue I am ...
1
vote
0answers
173 views

methods for preventing large scale data scraping from REST api

I know the immediate answer to this is going to be there is no 100% reliable method of doing this. But I'd like to create a question that details the different possibilities, the difficulty of ...
1
vote
0answers
274 views

Windows Server 2008 SOMETIMES blocks connection to an FTP Site

Recently, our company has been having issue connecting to a special FTP server that we use offsite to upload small files. We can connect to the test server perfectly fine, but when we use the ...
0
votes
0answers
24 views

Set up pfSense on AWS VPC?

I am attempting to setup pfSense as a nat box for internal servers on a VPC. I have followed the guides posted for configuring access and have followed the AWS instructions for setting up and ...
0
votes
0answers
12 views

Fortinet as intermediate router

I have the next scenario: FG1(LAN A) <--IPSEC--> FG2(LAN B) <--IPSEC--> FG3(LAN C) Basically I need that "LAN A" reach "LAN C" through FG2, I've tried with "router policy" and "router ...
0
votes
0answers
38 views

FreeNAS jail port forwarding without DHCP

I'm trying to get port forwarding working correctly with jails, and having trouble (I don't have any experience with ipfw or FreeBSD jails. is ipfw even running by default on FreeNAS? I notice pf is ...
0
votes
0answers
14 views

GCE firewall with Source Tags

Created an instance in GCE, tagged 'tagA' Created firewall rule: tcp:12345, source tag tagA, target tag tagA On the instance executed: nc -l 0.0.0.0 -p 12345 netstat -an | grep 12345 tcp ...
0
votes
0answers
28 views

pfSense: Captive Portal is extremely slow

I migrated my pfSense firewall (2.0.2) from an old computer to a more powerful server. I set up the newest pfSense version 2.1 and migrated via export and import my complete settings. Now I encounter ...
0
votes
0answers
21 views

Asterisk Firewall access Rules

I have a questions regarding the firewall rules for Asterisk VoIP server. I have a restricted access to UDP/TCP port 5060, which seems to be blocking calls. I want to make sure that my VoIP Server ...
0
votes
0answers
20 views

amazon ec2 instance going to a remote ip using openswan tunnel is up but no traffic being established on the remote ip

I having establishing a vpn tunnel to a remote peer/public ip using amazon ec2 openswan. The tunnel is up but no traffic has been seen on our side or the remote side? Is there I been missing? Please ...
0
votes
0answers
53 views

Enabling the Internet Connection on an EC2 Windows Server 2012 Machine

I've disabled the firewall: netsh firewall set opmode disable I've made sure to accept all inbound and all outbound connections: Is there anything that I should be installing or adding on to the ...
0
votes
0answers
15 views

windows firewall , some ports not listening

I've added an inbound connection rule for my windows 8 firewall on windows server 2012: I've restarted the Windows Firewall. When I check that port using this program, it says that it is not ...
0
votes
0answers
27 views

Remove mapping drives from RDP to user from exteral network

I would like to know if you guys have a solution to my problem. I have a terminal server 2012 that can be accessed remotely after a VPN connection and from the LAN. My question is how can I create a ...
0
votes
0answers
40 views

Dynamic IP Blocking on FORTIGATE 200A Firewall

I have FORTIGATE 200A firewall protecting a IIS Server running a ASP.NET website (windows server 2008 and IIS7) I'm not familiar with Fortigate configurations and options. I recently had "attacks" ...
0
votes
0answers
129 views

Blocking HTTPS content with a Watchguard (Websense) vs. SQUID and SQUIDGuard using Transparent Proxy mode

I'm trying to compare these 2 solutions when it comes to content blocking : 1 - A pFSense appliance with SQUID and SQUIDGUARD packages configured 2 - A Watchguard FW that uses Websense So, in order ...
0
votes
0answers
56 views

Cannot block team viewer through TMG Server 2010

I am just re configuring the firewall in our computer lab and I have created a block URL list. In it are the URL's to the team viewer: http://dyngate.com/ http://teamviewer.com/ This is set ...
0
votes
0answers
31 views

Trace IP traffic to physical machine under Linux

In my firewall logs I recently see frequent connection attempts from a 10.0.0.0/8 network. This network is used by VirtualBox, but I can exclude that these packets come from those. No physical machine ...
0
votes
0answers
50 views

Cisco 877 configuration with multiple firewalls behind in parallel using public IP's

I would like to ask how I can configure my cisco 877 adsl router to have multiple firewalls installed in parallel behind the cisco 877 router. I have enclosed a diagram of what I am trying to achieve. ...
0
votes
0answers
43 views

Why need DHCP Relay (Watchguard) inside the Trusted network?

I run a small network that looks like this: { Win 2008 server , desktops , Wifi AP} -> Switch -> Watchguard XTM21 firewall (the Switch is connected to the XTM's Trusted interface ; the XTM ...
0
votes
0answers
30 views

UDP multicast stream on win server 2k8 R2

so i have 3 mega PCs with win 2k8 installed on them having: 1st) 1 internal NIC and 1 external 2nd) 2 internal NIC and 2 external 3rd) 2 internal NIC and 4 external same stream put on any NIC on 1st ...
0
votes
0answers
19 views

Fail over in Lokiwall Firewall

I have configured lokiwall firewall on my linux machine having multiple interfaces. Dual Routing works fine. However, I wanted to know how does the fail over happen in case a link goes down. Do the ...
0
votes
0answers
102 views

Force all traffic from one user through an OpenVPN tunnel on Debian 6 with iptables and ip route

I’m trying to force all traffic of one user through an OpenVPN tunnel. It is giving me grey hairs. The current situation is that I can either allow all traffic for this particular user, and it will go ...
0
votes
0answers
95 views

Secondary DPM server and access to protection agents at primary server

Disclaimer: This is not an ideal setup. In a perfect world we would have a direct two-way VPN between our site and the remote site. My task is to enlighten the consequences of running a System Center ...
0
votes
0answers
39 views

Intermittent SSH problems with a specific server from a specific Wifi router

I've been ssh'ing into a specific server from my home office via Wifi and Time Warner Cable internet for years with no problem. In recent months, I started having problems, where I'd be unable to ...
0
votes
0answers
17 views

Using a Barracuda F400 Firewall Router Without a Modem

I'm looking into a problem where VoIP phones don't ring for some of the incoming calls that I believe might be due to the network configuration. Do you need a modem if you are using a Barracuda F400 ...