Tagged Questions

A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

0
votes
1answer
45 views

multi-wan problems with web services

I recently set up a multi-wan connection for a small company, because they are at the end of the line for any possible ISP, services do go down, and they really depend on their Internet connection. I ...
0
votes
2answers
76 views

IP rules misconfigured, lost access to server

I have to give my IP rule like, DROP if source is not from 127.0.0.1 AND destination is 9200 But unfortunately, I gave it like, DROP if source is not from 127.0.0.1 (missed the port) So I lost ...
0
votes
0answers
12 views

Sonicwall 250m bandwidth

We have an nsa 250m with the SonicOS Enhanced 5.9.0.2-107o version. Is there a way to manage bandwidth by group ? I'm already able to do this this by user with this method Firewalls => Access rules ...
0
votes
0answers
18 views

netsh advfirewall : how to force to prompt matched IP

I have a netsh script that inserts some IP's to block in the Microsoft firewall. All these rules are working perfectly. I would like to create an additional rule to have a popup / prompt from the ...
0
votes
1answer
80 views

ufw seems to block all incoming connections when defaulting to block outgoing

I am currently trying to configure ufw on Ubuntu 12.04 but to my understanding it behaves oddly. i tried allowing just some services on a remote machine, denying everything else. I thought - anyway, i ...
0
votes
1answer
58 views

Restrict access to some addresses for some OpenVPN clients

I have a VPN server on FreeBSD to access a LAN in which there are several machines. Some of the LAN machines offer un-autenthicated services. I want some VPN clients to access only one of the ...
0
votes
0answers
59 views

Is the IP based filtering in Amazon EC2 enough to ensure security?

I am hosting a webserver using Amazon EC2 and want it to be accessible only from a particular IP. I have set up my security groups to allow connections from only that IP. ...
1
vote
0answers
51 views

NoVNC being blocked behind firewall, how can I find the port being blocked?

We have an OpenStack cloud running internally and wanted to allow student's access to the NoVNC console from within Openstack's Horizon web panel. Everything work's internally however after adding ...
0
votes
0answers
65 views

Setting up a firewall to route between interfaces on a gateway

I've been trying to setup a firewall on my debian gateway with iptables. The gateway is connected to a a network 12.120.0.0/24 on eth0 behind a NAT and the subnetwork behind it is 12.120.4.0/24 eth1. ...
0
votes
2answers
70 views

sonicwall-multiple IP's for same interface

I am new to sonicwall.Is there any way to add multiple ip's to a sonicwall interface ?. In my lab there are two local networks connected to same switch (networks are overlapped). I need to communicate ...
1
vote
1answer
39 views

why i see two kind of IP at my ping?

i have a Windows Server 2008 R2 with external DNS Server on it. all domains works fine but when i ping one of theme i get this result and site is down . C:\Users\Administrator>ping xxx.com ...
0
votes
1answer
46 views

HAProxy fails to connect when Shorewall firewall is enabled on web servers

I have a fairly standard HAProxy / Web Cluster setup, which is running perfectly fine - as long as I don't enable the Shorewall firewall on the web cluster servers. As soon as I do, error messages ...
0
votes
1answer
32 views

Router/Firewall Hardware Failure Testing

My company has a Sonicwall Pro 3060 Enhanced that has been in service 24/7 for about 10 years since it was originally purchased. Lately the box has seemed to have hiccups in passing traffic (although ...
1
vote
1answer
95 views

Port open or not?

I am trying to access the Atlassian Crowd server to configure it, which is listening on port 8095. I can access it from localhost. If I disable the firewall (iptables stop), I can access from a remote ...
0
votes
0answers
65 views

Cisco ASA 5525 and multiple internet interfaces

I'm replacing a firewall this weekend with a pair of ASA 5525's. The network configuration is as follows :- Inside LAN - 192.168.1.x Internet 1 - 62.0.0.x Internet 2 - 52.0.0.x The currently ...
0
votes
1answer
39 views

Iptables working without configuration

I am currently going to port a Red Hat 6.4 machine and I need its firewall configuration, but something is going on. iptables -L shows a list of rules as expected, but at the same time I can't find ...
0
votes
1answer
42 views

Firewall Rule One way smb in two network

Im trying to make an one way smb firewall rule in a MikroTik firewall rule The thing is I have two network one on 192.168.1.0/24 and one 192.168.3.0/24 192.168.3.0 is the network that should be able ...
1
vote
1answer
60 views

iptables + postfix cant send email

Recently my host provider sent me a letter about some sort of attack from my server. I'm not into security so i found some tutorial and closed all unused ports with iptables. Here is my iptables ...
0
votes
0answers
43 views

Is it advisable to disable URL Path Length restrictions from firewall?

I noticed in early August that I was unable to get to SharePoint Online sites, most Microsoft Update pages, Microsoft Support pages, Microsoft.com, etc. as they all appeared to be returning a blank ...
4
votes
5answers
223 views

Requests take a really long time from certain ISP

We have an Apache server with PHP running on a virtual machine. Document roots are inside the users' home folders (/home/users/{first letter}/{username}/), and /home/users/ is mounted over NFS. It ...
1
vote
1answer
104 views

Trouble with Fail2Ban UFW Portscan Filter

I'm trying to create a filter for fail2ban that recognises port scans in the UFW logs. I've confirmed my ban action is working correctly on other filters and am having trouble creating the correct ...
0
votes
2answers
230 views

How to change the webgui password in pfsense from a console?

is there any way to change the password of the webgui administrator user in pfsense from my console? Just to mention i didn't locked my self out from the webgui. Regards, ankso
0
votes
2answers
91 views

My ubuntu server won't allow loopback wget

I have the following rules on my Ubuntu Server 14.04: #!/bin/sh # Flushing all rules iptables -F iptables -X # Setting default filter policy iptables -P INPUT DROP iptables -P OUTPUT DROP iptables ...
0
votes
2answers
248 views

Nginx, ModSecurity, IP Tables blocking WordPress dos/ddos attack

For the past 14 days I have had my website being hit by millions of WordPress installs over the world which .htaccess is kind of coping with but I am trying to get something to kick them before ...
0
votes
1answer
372 views

Cannot open samba ports on Ubuntu 14.04

I'm newbie to linux firewalls root@Ubntu:~# ufw status verbose state: active logging: on (low) Default: deny (incoming), allow (outgoing), disabled (routed) new profiles: skip 137,138/udp (Samba) ...
1
vote
1answer
293 views

QoS settings for Wi-Fi calling on pfSense firewall/gateway?

The new version of iOS 8 as well as Android supports Wi-Fi Calling with multiple cellular providers including T-Mobile in the US. I am currently running pfSense as the primary Internet gateway for ...
0
votes
1answer
150 views

Do ephemeral ports need to be open on the network firewall in order for nginx and sshd to work properly?

Preamble: So, before I actually ask the question, I'd like to point out that I'm somewhat apprehensive about posting this because even as I'm typing this out it it feels like I'm asking someone to ...
1
vote
3answers
46 views

Azure VM: netsh advfirewall firewall

Being the idiot that I am, I ran netsh advfirewall firewall on our VM and managed to block all the ports. Naturally, I am no longer able to access the VM through RDP. Apart from getting the support ...
0
votes
1answer
43 views

Is netbios required with samba -> win7 and what ports are needed for view/read/write functionality?

Basically I do an IT course at my college (United Kingdom) and obviously with it being a college, they have web filters and a restrictive firewall. To bypass the web blocks and to access my rented ...
0
votes
1answer
60 views

UFW: can't connect to SSH with “to 127.0.0.1” option

i tried to restrict the SSH connectivity to a subnet and wanted to set the "to" part to localhost. (Server will be routing over bridge device to virtual servers, and i wanted do drop ssh connections ...
0
votes
0answers
37 views

Filtered port 22 with no firewall settings

I'm trying to connect to an sftp server from a CentOS 5.5 server. The connection is never established. When I run the command: nmap -p 22 -P0 <sftp server address> PORT STATE SERVICE ...
0
votes
1answer
53 views

Port forwarding with 2 interfaces not working

I'm running debian and I've got the following network configuration: eth0 Link encap:Ethernet inet addr:192.168.16.6 Bcast:192.168.16.255 Mask:255.255.255.0 inet6 addr: ...
1
vote
1answer
199 views

Avoiding split brain DNS for a Fortigate Web Proxy

How can I avoid needing a split brain DNS setup with the setup outlined below? Background I have what "should" be a pretty basic setup using a Fortigate 200D. 'Third leg' setup using a DMZ ...
-2
votes
1answer
156 views

Prevent/Stop Namespace Mining [duplicate]

Enviroment: Plesk v12, latest Windows Server 2012 SmarterMail My web hosting provider told me that someone hacked into my server a couple of weeks ago and was hitting various mail servers (Gmail, ...
1
vote
1answer
273 views

Troubleshooting blocked/dropped ports on Sonicwall firewalls

Short of enabling packet capture/monitor on specific rules/policies, is there an easier way to see or to setup a Sonicwall to show blocked ports/services (realtime or as a report)? I think packet ...
3
votes
2answers
321 views

Windows Firewall - blocking IP address ranges en masse - performance considerations?

One of our services is an extranet for the exclusive use of our 200 employees across the UK. We're seeing a huge number of login attempts from China, Russia, Ukraine and Nigeria. I have large lists of ...
1
vote
1answer
176 views

Can firewall block packets visible in Wireshark?

Wireshark shows that an RTP package is received on a PC. Is it possible that despite detection by Wireshark, something (firewall?) is still prevent the application listening to the required port on ...
0
votes
0answers
51 views

Overactive SQL Injection Attack Firewall Rules

We have a web app that our client's employees use to submit signatures from customers using HTML5 canvas to create PNG images. The signature pad is converted to base64 encoded HTTP POST data. Our ...
0
votes
0answers
31 views

dynamic IP firewall configuration for public-yum.oracle.com and clam AV

I currently have Clam AV installed as the AV solution for an Oracle Linux environment. The firewall that I use allow filtering only through specific IPs and thus currently, I am not able to configure ...
-3
votes
1answer
64 views

juniper srx-100 firewall configuration [closed]

I am configuring proxy-arp and after commit the following error occurs. Proxy ARP IP address range [203.215.166.85 203.215.166.86] overlaps with interface IP address range [203.215.166.86 ...
0
votes
1answer
89 views

NSClient++ traffic dropped only for external IP traffic

I am trying to use NSClient++/Icinga to monitor our Windows server boxes at remote locations. I have tested the NSClient on our internal network (192.168.1.*) and it works as expected with the server ...
1
vote
2answers
214 views

Linux/Bash: Test if my server is opened to the Internet programmatically/via CLI [closed]

RHEL 6 and Bash. It would be easy if I had a remote server to just run nmap from, or even curl/wget, but I only have access to servers on our side of the firewall. I know I can manually check ...
0
votes
0answers
88 views

How can I allow NAT from inside to outside and vise-versa when each of my clients will have only one static public IP using an ASA5525-X?

My network topology is pretty basic. My data center provides a router and added a switch just before my cage to provide connectivity to all of the racks. My rack takes the copper drop they provide and ...
0
votes
2answers
31 views

Connection failed between Windows Servers

I'm setting up an infrastructure based on Windows Server 2012. The firewall is turned off and I can't access the Domain controller to check for the group policy. I'm experiencing some connection ...
0
votes
1answer
49 views

What do I need to consider when setting TCP idle timeouts?

What's purpose of having a [low] TCP idle timeouts? E.g., why have a 60 second timeout on a firewall or load-balancer? Is it a memory management or /performance optimization thing? Is there a security ...
0
votes
0answers
31 views

Watchguard XTM 23 blocking company website

The company that I'm working at runs a website and 1 week ago the site started returning 404's whenever anyone tried to access it from our protected network. We immediately checked on the status with ...
-1
votes
1answer
54 views

What is it that makes BSD a popular choice for firewalls? [closed]

What is it that makes BSD a popular choice for firewalls? Is the kernel generally more secure?
0
votes
1answer
71 views

Configure clients to navigate through specific wan. Pfsense

I have a machine with a pfsense running. It is configured with three ethernet cards. LAN 192.168.2.1/21 WAN1 200.41.X.2/24 WAN2 200.41.X.3/24 ISP Gateway 200.41.X.1 This is a connection with 5 ...
-1
votes
2answers
143 views

Block incoming traffic from unresolved IP address

How can I block all the incoming traffic from unresolved IP addresses? I am using CentOS with WHM/cPanel installed. I am getting huge junk traffic and 95% is from unresolved IP addresses and only 5% ...
1
vote
2answers
548 views

Configure firewalld for OpenVPN (server-bridge) in Fedora 20

I've installed an OpenVPN server (server-bridge) on Fedora 20, but I cannot get it to work. I'm almost sure that It's a firewall issue. I'm trying to connect from an OSX client, but I can connect ...