A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

1
vote
0answers
72 views

Restrict “open” ethernet traffic to OpenVPN Traffic only when on a certain network

I would like to set up a pf or ipfw firewall rule on my Mac OS X 10.8 notebooks so that all Traffic on wireless and cabled networks is restricted to calling "home" through OpenVPN when I'm not in the ...
1
vote
0answers
775 views

Local transparent proxy with ipfw and squid

I want to use a local transparent proxy to have a single place to enter the password to an office proxy. Basically, all the TCP packets sent to port 80 except the ones sent to specific subnet should ...
1
vote
0answers
273 views

What is Bonjour Linux IPTables Firewall Ports?

I'm trying to configure my iptables in order to allow Pidgin to use Bonjour protocol, now according to: Bonjour for Windows doesn't work due to firewall settings, I have to allow Multicast DNS / ...
1
vote
0answers
184 views

Only ICMP traffic allowed inbound on ISA Server 2006

I have recently set up a connection to a remote site. The connection between the sites is done at the ISP level (ie, this is not a B2B tunnel on ISA). I'm fairly lightweight in the networking realm, ...
1
vote
0answers
517 views

Windows Filtering Platform blocking packets for legitimate traffic

I am running into an issue with traffic from a webapp server to a database server being blocked or filtered. I have allowed inbound and outbound traffic on the needed ip and port with a firewall rule, ...
1
vote
0answers
840 views

Puppet agent (v3.0.1) hangs connecting to master (v3.1.1) in VM behind firewall (with NAT based access)

I am using puppet agent v3.0.1 (On FreeBSD), trying to connect to a puppet master v3.1.1 (On Ubuntu) and the puppet agent hangs with the following debug output: puppet agent --debug --no-daemonize ...
1
vote
0answers
25 views

Can I run sharepoint 2007 native report viewer in synchonous mode?

We are hosting a SharePoint MOSS 2007 environment and installed and use the Native Report Viewer with SSRS 2005. All works fine from the LAN, but from internet, the report viewer displayes a page not ...
1
vote
0answers
2k views

Outlook client behind forefront TMG 2010 unable to connect to External Exchange server

Here is my situation. Our office just got sold and we are working on the migration to the new company's environment. Everything has worked fine until the Outlook client's migration. Our firewall is ...
1
vote
0answers
367 views

UDP Range Nat Translation port forwarding RPT Traffic to inside host PBX Cisco ASA 5505 8.2a

I have an Asterisk based PBX that I'm providing VoIP services with, My gateway is a Cisco ASA 5505 running 8.2 and I only have one public IP Available along with other services I provide with that IP. ...
1
vote
0answers
745 views

juniper ssg320 intrazone configration issues Close - AGE OUT

We have one main office and another small office that holds only 5 people. We have recently setup OpenVPN on our main office and created a bridged vpn between our main office LAN and a windows 2003 ...
1
vote
0answers
166 views

CSF: Changing portflood settings to deny IP longer than second interval?

I've recently been under attack and I'm configuring CSF firewall for my Ubuntu server (latest). I found out portflood settings only block the ip for the specified second count, but I would like ...
1
vote
0answers
391 views

Allowing connections initiated from outside

I've got an old Juniper SSG5 running ScreenOS 5.4.0r6.0. Once a day, more or less, it'll start randomly dropping packets at a rate of ~5-10%. We currently solve this issue by simply rebooting the ...
1
vote
0answers
544 views

Cannot open port 8080 on Amazon EC2

I am having difficulty getting my Varnish/Nginx Wordpress setup working. I had set up varnish to listen on poert 80, and nginx to listen on port 8080, with a rule on wp-admin URLs to pass through to ...
1
vote
0answers
306 views

Webservice randomly dropping connections - possibly due to firewall nonevent data?

I have a hosted webapp which requests data from a REST webservice in our office. Each page calls one (or several) webservices, which go from our host, via our firewall (a Watchguard Firebox) to a ...
1
vote
0answers
319 views

iptables dynamic NAT, SNAT: force overload on exhaustion

Is there a way to specify the use of iptables NAT'ing where you can use SNAT for a pool of outside addresses, but when the last IP is about to be used it is used as an overloaded outside IP? I ...
1
vote
0answers
531 views

IPcop Multiple WAN Subnets

We have an IPcop firewall and have had no issues with it. We've had a block of 10 IP addresses from our colocation provider and have been able port forward from those to internal servers as needed. ...
1
vote
0answers
332 views

Checkpoint NGX FW1 Routing Between Networks

We have an old Checkpoint NGX FW1 firewall which we have to maintain. For the most part we leave it alone and it just chuggs away and works. The person who originally set it up left years ago and ...
1
vote
0answers
132 views

Given IP address, but can only ping sometimes

I have a debian server that acts as a wifi router and DHCP and FTP server. I want to connect to this server using a Canon Wireless File Transmitter. I can connect and receive an IP address. I can ...
1
vote
0answers
673 views

linux firewall + load balance ISP connections

I'm trying to get a linux Mint computer with 4 NIC's to act as a load balance server. The idea is that we have three internet connections, and we want to use all of them so we can share usage of 50 ...
1
vote
0answers
186 views

SVN checkout returns 400 error

I'm trying to download the http://code.opencv.org/svn/opencv/trunk/ repository of all of the OpenCV source code - as specified in an OpenCV installation tutorial. In the tutorial, the repository ...
1
vote
0answers
616 views

java.net.ConnectException: Connection timed out, Tomcat 7 and iptables

I am experiencing a weird problem.. Basically our Java developer said that in the java application the services that access the db to write on it get this error: java.net.ConnectException: ...
1
vote
0answers
3k views

How to open ports in Cisco ASA 5505 using ASDM?

am new to cisco and i badly need help in opening ports using ASDM. I already tried natting but it only allows 1 outside and 1 inside rule ex. Inside Static Rules 10.x.x.x outside 72.x.x.x Outside ...
1
vote
0answers
172 views

Folders 'locked' to FTP access on Win Server 2003 Standard - firewall issue but how to resolve

I have a weird issue which is just affecting one of many sites on my Windows 2003 Standard server (running IIS6). I'm not a server admin by the way, but the company who manage my server don't seem ...
1
vote
0answers
1k views

Redundant Firewalls And Switches HSRP and CARP

I currently have planned 2 x uplinks (HSRP Active/Standby) 2 x pfsense firewalls (Carp Enabled) 2 x layer2 switches Please criticize or offer help on the correct way to do this. I have a feeling im ...
1
vote
0answers
433 views

What steps can I follow to diagnose why PPTP VPN (rasClient) has suddenly stopped connecting?

I use my a Windows Server 2008 R2 workstation as a VPN client to a Windows 2003 RRAS VPN host. It has worked flawlessly for many months. All of sudden, rasClient stops connecting and throws: Error ...
1
vote
0answers
81 views

shorewall prevents routing from protected zone entities to other protected zone entities

I'm using shorewall as the firewall and gateway for a production site. The site also has a couple of VPNs running into it that are hosted on a different server on the same site (in the protected ...
1
vote
0answers
951 views

Cannot connect to MySQL on RDS (Amazon Web Services) from my laptop

I'm having some trouble connecting to a MySQL 5.1 server on an RDS instance on AWS from my laptop. The detailed description of the problem is here: ...
1
vote
0answers
202 views

Connect to Orange interface in IPCop

I am using IPCop with a red-green-orange configuration. I am trying to access my webserver on the orange interface, from a computer on the green interface, both of which are inside my firewall. When ...
1
vote
0answers
293 views

Virtual networks connected to a computer acting as firewall (KVM)

I have successfully created a schema like this with VirtualBox, but now I have to do a final project and I would like to do it with KVM and Virtual Machine Manager (virt-manager). I am having some ...
1
vote
0answers
583 views

Can't remote desktop into Windows 7 workstation in SBS 2003 network

We have a Windows Small Business Server 2003 network with Windows XP and 7 workstations. Some of the workstations have custom remote desktop ports and the modem/firewall (Netgear DG834) forwards these ...
1
vote
0answers
92 views

Configure firewall to allow an Interix (SUA) application

I have installed wget inside the Subsystem for UNIX-based Applications. I want to download something through wget inside SUA. My Windows Firewall is configured to block anything except allowed ...
1
vote
0answers
871 views

OpenWRT with VLANs: NAT not working with single Firewall Rule

I have a configuration on my OpenWrt Backfire 10.03 with different VLANs, k2 belonging to fwz2 is one of them. In this testing environment the WAN is DHCP with IP:192.168.1.1: config 'interface' ...
1
vote
0answers
244 views

Multi-ISP firewall setup

We have been trying to move away from a SonicWall firewall for quite some time now. Through much Googling and many hours of trial and error, we have met varying degrees of success through different ...
1
vote
0answers
575 views

Only allowing certain Java apps through firewall

Using Windows Firewall and Advanced Security, I block everything outgoing by default and define outgoing rules to allow my approved apps through. For Java apps, I only allow java.exe through to ...
1
vote
0answers
328 views

After enbaling VPN/NAT on 2008 R2 direct access to server is blocked (RDP, FTP,…)

After setting up VPN with NAT over RRAS configuration menu in windows server 2008 R2, direct access to server is blocked. Does anybody know why is this happening? How to enable RDP, FTP, and other ...
1
vote
0answers
861 views

Draytek Vigor 2820 Firewall prevent web access from IP

I have a few Draytek Vigor 2820 routers and have recently set one up using settings from another. I have it set up on the firewall filter to block torrents which it does very well. The issue I am ...
1
vote
0answers
184 views

methods for preventing large scale data scraping from REST api

I know the immediate answer to this is going to be there is no 100% reliable method of doing this. But I'd like to create a question that details the different possibilities, the difficulty of ...
1
vote
0answers
278 views

Windows Server 2008 SOMETIMES blocks connection to an FTP Site

Recently, our company has been having issue connecting to a special FTP server that we use offsite to upload small files. We can connect to the test server perfectly fine, but when we use the ...
0
votes
0answers
6 views

A service like a router between 2 WAFs. This exists?

A service like a router between 2 WAFs. This exists? I have the following situation: 2 different WAFs (CloudFlare and Incapsula) and would like to have a service above the two that I can define ...
0
votes
0answers
27 views

IPTABLES and GEOIP: Show Custom Webpage to Blocked Visitors

Because of legal protection, as a first stage of launching my project I will focus on couple of countries only. The number of supported countries will grow. I know, it is possible to block or allow ...
0
votes
0answers
20 views

Remote packet capturing using fifo and dumpcap

I'm currently working on two linux servers where one server is running in 2.6.18-274.el5(Server A) and the second one in CentOS 7 (Server B). My requirement is to capture the packets of the network ...
0
votes
0answers
17 views

iptables, after specifying an interface to drop traffic it drops all traffic of all interfaces

We have currently the situation that one interface (eth0) is linked to the internet. and we 2 other devices (eth1/eth2) for management purposes. Now the idea is to block off eth0 completely from the ...
0
votes
0answers
7 views

Open ports in firewall on Cisco SRP500 Series?

I have a Cisco SRP527W. I cannot work out how to open ports in the firewall for all machines. In the past, I port forwarded to the server, but now I just want a port open to all users of the network. ...
0
votes
0answers
25 views

pfsense routing with dmz wan and sonic wall

Pfsense setup: 2 physical NIC's (1 input from modem/ISP, 1 LAN with a lot of vlans and DMZ) Network setup: WAN block from ISP xxx.xxx.xxx.225/28 Modem -> pfsense -> vlan 40 (192.168.40.0/24) ...
0
votes
0answers
47 views

ubuntu firewall blocking smtp tasks, port 465 is open

I have been trying to get my Wordpress site able to send emails, and it DOES WORK but only work if I turn off the firewall. I am using UFW. However, I do have port 465 (connecting to gmail) open while ...
0
votes
0answers
14 views

Sonicwall seems to be blocking port 3690 on random internal up address

We are trying to connect to a clients subversion server over the internet using port 3690 and random internal ip address are getting blocked and time out all of a sudden. My local ip of 192.168.0.150 ...
0
votes
0answers
31 views

Network configuration for Virtual machine based firewall

I have this physical configuration: And I'm planning to install IPFire (or similar firewall : pfSense or Sophos UTM) on a virtual machine on the Active Directory Server to control traffic between ...
0
votes
0answers
28 views

pfSense WAN load balancing across two IPs (has single gateway)

My virtual setup has two IPs, but they rely on the same gateway. I had this configured: interface - type - IP address - Gateway em0 - WAN1 - 172.16.155.131 - 172.16.155.2 em1 - LAN ...
0
votes
0answers
31 views

Ip6tables firewall make server unreachable on reboot

I am trying to set up a very basic firewall on my server with iptables and ip6tables. My rules get loaded on restart with systemD. The OS is ArchLinux. When I just setup iptables everything works. ...
0
votes
0answers
27 views

Allow URL:Port in Forefront TMG

I have Forefront TMG 2010 installed as a Proxy server to limit internet access to users. I usually have the following issues: 1- I can't configure Email clients (Outlook) with URLs of POP/IMAP and ...