A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

1
vote
0answers
2k views

Mikrotik router RDP brute force blocking with whitelist

Masters, We have a miktorik router, and we would like to block RDP brute force, but we need whitelist also to allow our collegaues to connect without blocking them. (they sometimes hitting wrong ...
1
vote
0answers
95 views

Firewall rules between windows cluster

I have been given the task to define firewall rules between 2 Windows clusters. The first cluster hosts a clustered middleware application and the second cluster hosts SQL Server. The 2 clusters are ...
1
vote
0answers
44 views

How can i manage bandwidht in linux router or firewall?

I have Linux server for internet sharing . i have 6 Mbps bandwidth, Now i want set 30Kbit to 40Kbit per user bandwidth. I want configure without proxy. It is possible that tc configration will ...
1
vote
0answers
205 views

Strange dropped packets coming from port 8888 and with ACK or ACK+PSH set

Background During an incident on a small privative network (1 router/FW + 1 server) my server got accidentally exposed to the internet. Fortunately it was protected by it's own UFW to allow only 1 ...
1
vote
0answers
160 views

CheckPoint Firewall R71: Is it possible to reserve an IP for a specific MAC address on a VPN session?

My Checkpoint firewall is configured to allow users to open the GUI (Smart Dashboard) only if their IP is on the allowed list. Whenever I work from home (I use the CheckPoint SNX client on an Ubuntu ...
1
vote
0answers
121 views

Wireless Bridging two Sonicwall Firewalls

We have two sites (essentially two small buildings side by side but we are unable to run CAT5 cable between them) which are currently linked via a wireless bridge. We will be splitting the sites so ...
1
vote
0answers
67 views

Windows 2k3 IPsec policy. Block all traffic prevents IPSec communication

I'm looking to harden down A Win2k3 server that talks to a branch over an IPsec tunnel based connection. Windows 2k3 firewall doesn't offer control of outbound communications, so I've turned to the ...
1
vote
0answers
80 views

Restrict “open” ethernet traffic to OpenVPN Traffic only when on a certain network

I would like to set up a pf or ipfw firewall rule on my Mac OS X 10.8 notebooks so that all Traffic on wireless and cabled networks is restricted to calling "home" through OpenVPN when I'm not in the ...
1
vote
0answers
879 views

Local transparent proxy with ipfw and squid

I want to use a local transparent proxy to have a single place to enter the password to an office proxy. Basically, all the TCP packets sent to port 80 except the ones sent to specific subnet should ...
1
vote
0answers
319 views

What is Bonjour Linux IPTables Firewall Ports?

I'm trying to configure my iptables in order to allow Pidgin to use Bonjour protocol, now according to: Bonjour for Windows doesn't work due to firewall settings, I have to allow Multicast DNS / ...
1
vote
0answers
218 views

Only ICMP traffic allowed inbound on ISA Server 2006

I have recently set up a connection to a remote site. The connection between the sites is done at the ISP level (ie, this is not a B2B tunnel on ISA). I'm fairly lightweight in the networking realm, ...
1
vote
0answers
590 views

Windows Filtering Platform blocking packets for legitimate traffic

I am running into an issue with traffic from a webapp server to a database server being blocked or filtered. I have allowed inbound and outbound traffic on the needed ip and port with a firewall rule, ...
1
vote
0answers
1k views

Puppet agent (v3.0.1) hangs connecting to master (v3.1.1) in VM behind firewall (with NAT based access)

I am using puppet agent v3.0.1 (On FreeBSD), trying to connect to a puppet master v3.1.1 (On Ubuntu) and the puppet agent hangs with the following debug output: puppet agent --debug --no-daemonize ...
1
vote
0answers
27 views

Can I run sharepoint 2007 native report viewer in synchonous mode?

We are hosting a SharePoint MOSS 2007 environment and installed and use the Native Report Viewer with SSRS 2005. All works fine from the LAN, but from internet, the report viewer displayes a page not ...
1
vote
0answers
2k views

Outlook client behind forefront TMG 2010 unable to connect to External Exchange server

Here is my situation. Our office just got sold and we are working on the migration to the new company's environment. Everything has worked fine until the Outlook client's migration. Our firewall is ...
1
vote
0answers
420 views

UDP Range Nat Translation port forwarding RPT Traffic to inside host PBX Cisco ASA 5505 8.2a

I have an Asterisk based PBX that I'm providing VoIP services with, My gateway is a Cisco ASA 5505 running 8.2 and I only have one public IP Available along with other services I provide with that IP. ...
1
vote
0answers
822 views

juniper ssg320 intrazone configration issues Close - AGE OUT

We have one main office and another small office that holds only 5 people. We have recently setup OpenVPN on our main office and created a bridged vpn between our main office LAN and a windows 2003 ...
1
vote
0answers
188 views

CSF: Changing portflood settings to deny IP longer than second interval?

I've recently been under attack and I'm configuring CSF firewall for my Ubuntu server (latest). I found out portflood settings only block the ip for the specified second count, but I would like ...
1
vote
0answers
423 views

Allowing connections initiated from outside

I've got an old Juniper SSG5 running ScreenOS 5.4.0r6.0. Once a day, more or less, it'll start randomly dropping packets at a rate of ~5-10%. We currently solve this issue by simply rebooting the ...
1
vote
0answers
620 views

Cannot open port 8080 on Amazon EC2

I am having difficulty getting my Varnish/Nginx Wordpress setup working. I had set up varnish to listen on poert 80, and nginx to listen on port 8080, with a rule on wp-admin URLs to pass through to ...
1
vote
0answers
338 views

Webservice randomly dropping connections - possibly due to firewall nonevent data?

I have a hosted webapp which requests data from a REST webservice in our office. Each page calls one (or several) webservices, which go from our host, via our firewall (a Watchguard Firebox) to a ...
1
vote
0answers
385 views

iptables dynamic NAT, SNAT: force overload on exhaustion

Is there a way to specify the use of iptables NAT'ing where you can use SNAT for a pool of outside addresses, but when the last IP is about to be used it is used as an overloaded outside IP? I ...
1
vote
0answers
578 views

IPcop Multiple WAN Subnets

We have an IPcop firewall and have had no issues with it. We've had a block of 10 IP addresses from our colocation provider and have been able port forward from those to internal servers as needed. ...
1
vote
0answers
388 views

Checkpoint NGX FW1 Routing Between Networks

We have an old Checkpoint NGX FW1 firewall which we have to maintain. For the most part we leave it alone and it just chuggs away and works. The person who originally set it up left years ago and ...
1
vote
0answers
135 views

Given IP address, but can only ping sometimes

I have a debian server that acts as a wifi router and DHCP and FTP server. I want to connect to this server using a Canon Wireless File Transmitter. I can connect and receive an IP address. I can ...
1
vote
0answers
707 views

linux firewall + load balance ISP connections

I'm trying to get a linux Mint computer with 4 NIC's to act as a load balance server. The idea is that we have three internet connections, and we want to use all of them so we can share usage of 50 ...
1
vote
0answers
211 views

SVN checkout returns 400 error

I'm trying to download the http://code.opencv.org/svn/opencv/trunk/ repository of all of the OpenCV source code - as specified in an OpenCV installation tutorial. In the tutorial, the repository ...
1
vote
0answers
665 views

java.net.ConnectException: Connection timed out, Tomcat 7 and iptables

I am experiencing a weird problem.. Basically our Java developer said that in the java application the services that access the db to write on it get this error: java.net.ConnectException: ...
1
vote
0answers
3k views

How to open ports in Cisco ASA 5505 using ASDM?

am new to cisco and i badly need help in opening ports using ASDM. I already tried natting but it only allows 1 outside and 1 inside rule ex. Inside Static Rules 10.x.x.x outside 72.x.x.x Outside ...
1
vote
0answers
178 views

Folders 'locked' to FTP access on Win Server 2003 Standard - firewall issue but how to resolve

I have a weird issue which is just affecting one of many sites on my Windows 2003 Standard server (running IIS6). I'm not a server admin by the way, but the company who manage my server don't seem ...
1
vote
0answers
1k views

Redundant Firewalls And Switches HSRP and CARP

I currently have planned 2 x uplinks (HSRP Active/Standby) 2 x pfsense firewalls (Carp Enabled) 2 x layer2 switches Please criticize or offer help on the correct way to do this. I have a feeling im ...
1
vote
0answers
456 views

What steps can I follow to diagnose why PPTP VPN (rasClient) has suddenly stopped connecting?

I use my a Windows Server 2008 R2 workstation as a VPN client to a Windows 2003 RRAS VPN host. It has worked flawlessly for many months. All of sudden, rasClient stops connecting and throws: Error ...
1
vote
0answers
84 views

shorewall prevents routing from protected zone entities to other protected zone entities

I'm using shorewall as the firewall and gateway for a production site. The site also has a couple of VPNs running into it that are hosted on a different server on the same site (in the protected ...
1
vote
0answers
1k views

Cannot connect to MySQL on RDS (Amazon Web Services) from my laptop

I'm having some trouble connecting to a MySQL 5.1 server on an RDS instance on AWS from my laptop. The detailed description of the problem is here: ...
1
vote
0answers
225 views

Connect to Orange interface in IPCop

I am using IPCop with a red-green-orange configuration. I am trying to access my webserver on the orange interface, from a computer on the green interface, both of which are inside my firewall. When ...
1
vote
0answers
307 views

Virtual networks connected to a computer acting as firewall (KVM)

I have successfully created a schema like this with VirtualBox, but now I have to do a final project and I would like to do it with KVM and Virtual Machine Manager (virt-manager). I am having some ...
1
vote
0answers
604 views

Can't remote desktop into Windows 7 workstation in SBS 2003 network

We have a Windows Small Business Server 2003 network with Windows XP and 7 workstations. Some of the workstations have custom remote desktop ports and the modem/firewall (Netgear DG834) forwards these ...
1
vote
0answers
95 views

Configure firewall to allow an Interix (SUA) application

I have installed wget inside the Subsystem for UNIX-based Applications. I want to download something through wget inside SUA. My Windows Firewall is configured to block anything except allowed ...
1
vote
0answers
905 views

OpenWRT with VLANs: NAT not working with single Firewall Rule

I have a configuration on my OpenWrt Backfire 10.03 with different VLANs, k2 belonging to fwz2 is one of them. In this testing environment the WAN is DHCP with IP:192.168.1.1: config 'interface' ...
1
vote
0answers
263 views

Multi-ISP firewall setup

We have been trying to move away from a SonicWall firewall for quite some time now. Through much Googling and many hours of trial and error, we have met varying degrees of success through different ...
1
vote
0answers
623 views

Only allowing certain Java apps through firewall

Using Windows Firewall and Advanced Security, I block everything outgoing by default and define outgoing rules to allow my approved apps through. For Java apps, I only allow java.exe through to ...
1
vote
0answers
335 views

After enbaling VPN/NAT on 2008 R2 direct access to server is blocked (RDP, FTP,…)

After setting up VPN with NAT over RRAS configuration menu in windows server 2008 R2, direct access to server is blocked. Does anybody know why is this happening? How to enable RDP, FTP, and other ...
1
vote
0answers
907 views

Draytek Vigor 2820 Firewall prevent web access from IP

I have a few Draytek Vigor 2820 routers and have recently set one up using settings from another. I have it set up on the firewall filter to block torrents which it does very well. The issue I am ...
1
vote
0answers
189 views

methods for preventing large scale data scraping from REST api

I know the immediate answer to this is going to be there is no 100% reliable method of doing this. But I'd like to create a question that details the different possibilities, the difficulty of ...
1
vote
0answers
281 views

Windows Server 2008 SOMETIMES blocks connection to an FTP Site

Recently, our company has been having issue connecting to a special FTP server that we use offsite to upload small files. We can connect to the test server perfectly fine, but when we use the ...
0
votes
0answers
11 views

Layer 2 OpenVPN Bridge Headaches

I have a "working" layer 2 home->cloud (Vultr) bridge over OpenVPN. On both ends is an OPNSense firewall (since pfSense doesn't plan to switch to libreSSL due to "rude forking" by the libreSSL devs). ...
0
votes
0answers
7 views

nginx naxsi $URL_X doesn't work

Recently recompiled my NGINX with a NAXSI module. Now setting up the white lists but the $URL_X functionality doesn't seem to work at all. Generating Incorrect line BasicRule wl:1312 in NGINX ...
0
votes
0answers
13 views

UFW - Set correct kernel params

As every system administrator does, one of the first things i did right after booting up my web server was install ufw and tune/set kernel parameters in /etc/sysctl.conf. By the way, this is my ...
0
votes
0answers
19 views

General matter of stateful iptables

I made a set of stateful iptables rules which only handle accepted traffic (More or less). The workflow can be seen in the image below. My questions are: Is it a good idea to drop INVALID state or ...
0
votes
0answers
18 views

iptables hex string match rule migrate to Vyatta (BROCADE)

I have a string match, drop rule working in iptables firewall that I would like to migrate to a Vyatta firewall. Is string matching even possible in Vyatta? If so how can I replicate the following ...