A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

1
vote
0answers
1k views

ClearOS Proxy - Block all traffic but two sites and 3 DMZ ips

I've been trying to two days now to get ClearOS to do a proxy setup for my network. This is what I need to do: I need to block all outgoing traffic no matter what it is, all ports and HTTPS as well ...
1
vote
0answers
644 views

Shorewall redirect rule only working for some hosts in the same network

I'm trying to use Shorewall's REDIRECT action to intercept traffic destined for the firewall's port 514 (TCP and UDP) to port 5000 (also TCP and UDP), while also allowing direct traffic to the latter ...
1
vote
0answers
242 views

Firewall and NAT settings in GSM modem for one server

I have a GSM Modem (PSI-MODEM-GSM/ETH) in field with one device behind, acting as a server. The situation is as follows: "PC" | \_________Dynamic IP: 10.103.153.122 | ...
1
vote
0answers
340 views

SonicWall NSA2400 after firmware upgrade to 5.9 - not able to log some intrusion prevention/detection statements

After upgrading firmware to 5.9 version I'm not able to log intrusion prevention/detection for statements like PHP CGI Argument Injection, Remote Command Execution, Remote File Inclusion, WEB-ATTACKS, ...
1
vote
0answers
98 views

PF Firewall Rules Help - Block IP Hammering

I'm having an issue where someone is using a VPN / proxy to hammer my server. They will pick on random URL from my website and perform ~20 requests per second to it. Once I ban the IP address, a few ...
1
vote
0answers
2k views

Cisco ASA 5510 multiple vlans on same interface with different security levels and routing between

Looking to setup on my 0/3 interface multiple vlans and looking to get confirmation that this will work. Ethernet 0/3.1 security-level 20 nameif dev-dmz vlan 502 ip address 172.20.2.1 ...
1
vote
0answers
368 views

Exclude an IP address from an openwrt firewall rule

I am using a wrt54gl with openwrt to try and redirect all traffic on my LAN to a specific server, which will run scapy and other network analysis tools and act as a gateway/firewall to the Internet. ...
1
vote
0answers
158 views

Microsoft Forefront TMG, IIS and SQL server on one server

We have a Windows 2008 VPS with IIS and SQL Server, hosted by a provider. We use it for hosting web applications on the Internet. The only firewall we can use is Windows firewall. I would like to have ...
1
vote
0answers
100 views

LDAP Integration with the firewall

I am trying to integrate Sonicwall NSA2400 with AD so users can VPN with their domain credentials and able to change password if it expires. Do i need to install ADLS role and configure LDAP, or LDAP ...
1
vote
0answers
64 views

Can IPtables (possibly with libnetfilter_queue library) do everything that snort does?

I have just started getting into network security, firewall, etc. So, please excuse me for asking this basic question. I looked at IPtables and got a good hang of it (nowhere close to becoming an ...
1
vote
0answers
1k views

Firewall/iptables rules for GlusterFS

A great pleasure would be to know which exact iptables rules to use for securing GlusterFS 3.4.2 (with Debian Wheezy) in shared environment. I'm running some dedicated servers at ISP. There are two ...
1
vote
0answers
101 views

Mac OS 10.6.8 Firewall Blocking Wiki for ONE User

This is a very bizarre issue that I hope someone can help with. We're running 10.6.8 server to host our internal wiki. We had the firewall enabled on that machine without any issues. Last week one ...
1
vote
0answers
374 views

Vyatta Remote Access VPN firewall (PPTP)

I am using Vyatta Remote Access VPN (PPTP) and NAT for proxy. When pc-A and pc-B are connected to VPN, pc-A ipaddress is 192.168.10.10 and pc-B is 192.168.10.11. ...
1
vote
0answers
592 views

Blocking X-forwarded-For IP in fail2ban?

I am using a reverse proxy in front of my web-server. In the web server I installed fail2ban and want to use it to monitor logs and block bad ip. I am using nginx with the http realip module. But ...
1
vote
0answers
130 views

Manual firewall configuration with SuSEfirewall2

I have a Suse server and I want to configure its firewall settings by manually editing the SuSEfirewall2 file (located in /etc/sysconfig/SuSEfirewall2). My goal is to accept only specific services on ...
1
vote
0answers
56 views

Zyxell USG200 NAT for local computer using wan address

My WAN public address is linked to the server with NAT. How can I set up the firewall to let all local computer use the same NAT rules for www.mypublicaddress.com address from INSIDE the network? I ...
1
vote
0answers
135 views

Firewall rules between windows cluster

I have been given the task to define firewall rules between 2 Windows clusters. The first cluster hosts a clustered middleware application and the second cluster hosts SQL Server. The 2 clusters are ...
1
vote
0answers
46 views

How can i manage bandwidht in linux router or firewall?

I have Linux server for internet sharing . i have 6 Mbps bandwidth, Now i want set 30Kbit to 40Kbit per user bandwidth. I want configure without proxy. It is possible that tc configration will ...
1
vote
0answers
229 views

Strange dropped packets coming from port 8888 and with ACK or ACK+PSH set

Background During an incident on a small privative network (1 router/FW + 1 server) my server got accidentally exposed to the internet. Fortunately it was protected by it's own UFW to allow only 1 ...
1
vote
0answers
191 views

CheckPoint Firewall R71: Is it possible to reserve an IP for a specific MAC address on a VPN session?

My Checkpoint firewall is configured to allow users to open the GUI (Smart Dashboard) only if their IP is on the allowed list. Whenever I work from home (I use the CheckPoint SNX client on an Ubuntu ...
1
vote
0answers
128 views

Wireless Bridging two Sonicwall Firewalls

We have two sites (essentially two small buildings side by side but we are unable to run CAT5 cable between them) which are currently linked via a wireless bridge. We will be splitting the sites so ...
1
vote
0answers
70 views

Windows 2k3 IPsec policy. Block all traffic prevents IPSec communication

I'm looking to harden down A Win2k3 server that talks to a branch over an IPsec tunnel based connection. Windows 2k3 firewall doesn't offer control of outbound communications, so I've turned to the ...
1
vote
0answers
81 views

Restrict “open” ethernet traffic to OpenVPN Traffic only when on a certain network

I would like to set up a pf or ipfw firewall rule on my Mac OS X 10.8 notebooks so that all Traffic on wireless and cabled networks is restricted to calling "home" through OpenVPN when I'm not in the ...
1
vote
0answers
985 views

Local transparent proxy with ipfw and squid

I want to use a local transparent proxy to have a single place to enter the password to an office proxy. Basically, all the TCP packets sent to port 80 except the ones sent to specific subnet should ...
1
vote
0answers
434 views

What is Bonjour Linux IPTables Firewall Ports?

I'm trying to configure my iptables in order to allow Pidgin to use Bonjour protocol, now according to: Bonjour for Windows doesn't work due to firewall settings, I have to allow Multicast DNS / ...
1
vote
0answers
391 views

Client can not access some HTTPS through Squeeze gateway

I have a gateway (+firewall +proxy) set up on a Squeeze box with 2 NICs. The problem is the client cannot see some of the HTTPS (for example they can go https://mail.google.com but not ...
1
vote
0answers
241 views

Only ICMP traffic allowed inbound on ISA Server 2006

I have recently set up a connection to a remote site. The connection between the sites is done at the ISP level (ie, this is not a B2B tunnel on ISA). I'm fairly lightweight in the networking realm, ...
1
vote
0answers
667 views

Windows Filtering Platform blocking packets for legitimate traffic

I am running into an issue with traffic from a webapp server to a database server being blocked or filtered. I have allowed inbound and outbound traffic on the needed ip and port with a firewall rule, ...
1
vote
0answers
1k views

Puppet agent (v3.0.1) hangs connecting to master (v3.1.1) in VM behind firewall (with NAT based access)

I am using puppet agent v3.0.1 (On FreeBSD), trying to connect to a puppet master v3.1.1 (On Ubuntu) and the puppet agent hangs with the following debug output: puppet agent --debug --no-daemonize ...
1
vote
0answers
30 views

Can I run sharepoint 2007 native report viewer in synchonous mode?

We are hosting a SharePoint MOSS 2007 environment and installed and use the Native Report Viewer with SSRS 2005. All works fine from the LAN, but from internet, the report viewer displayes a page not ...
1
vote
0answers
3k views

Outlook client behind forefront TMG 2010 unable to connect to External Exchange server

Here is my situation. Our office just got sold and we are working on the migration to the new company's environment. Everything has worked fine until the Outlook client's migration. Our firewall is ...
1
vote
0answers
454 views

UDP Range Nat Translation port forwarding RPT Traffic to inside host PBX Cisco ASA 5505 8.2a

I have an Asterisk based PBX that I'm providing VoIP services with, My gateway is a Cisco ASA 5505 running 8.2 and I only have one public IP Available along with other services I provide with that IP. ...
1
vote
0answers
924 views

juniper ssg320 intrazone configration issues Close - AGE OUT

We have one main office and another small office that holds only 5 people. We have recently setup OpenVPN on our main office and created a bridged vpn between our main office LAN and a windows 2003 ...
1
vote
0answers
195 views

CSF: Changing portflood settings to deny IP longer than second interval?

I've recently been under attack and I'm configuring CSF firewall for my Ubuntu server (latest). I found out portflood settings only block the ip for the specified second count, but I would like ...
1
vote
0answers
464 views

Allowing connections initiated from outside

I've got an old Juniper SSG5 running ScreenOS 5.4.0r6.0. Once a day, more or less, it'll start randomly dropping packets at a rate of ~5-10%. We currently solve this issue by simply rebooting the ...
1
vote
0answers
709 views

Cannot open port 8080 on Amazon EC2

I am having difficulty getting my Varnish/Nginx Wordpress setup working. I had set up varnish to listen on poert 80, and nginx to listen on port 8080, with a rule on wp-admin URLs to pass through to ...
1
vote
0answers
383 views

Webservice randomly dropping connections - possibly due to firewall nonevent data?

I have a hosted webapp which requests data from a REST webservice in our office. Each page calls one (or several) webservices, which go from our host, via our firewall (a Watchguard Firebox) to a ...
1
vote
0answers
451 views

iptables dynamic NAT, SNAT: force overload on exhaustion

Is there a way to specify the use of iptables NAT'ing where you can use SNAT for a pool of outside addresses, but when the last IP is about to be used it is used as an overloaded outside IP? I ...
1
vote
0answers
614 views

IPcop Multiple WAN Subnets

We have an IPcop firewall and have had no issues with it. We've had a block of 10 IP addresses from our colocation provider and have been able port forward from those to internal servers as needed. ...
1
vote
0answers
438 views

Checkpoint NGX FW1 Routing Between Networks

We have an old Checkpoint NGX FW1 firewall which we have to maintain. For the most part we leave it alone and it just chuggs away and works. The person who originally set it up left years ago and ...
1
vote
0answers
141 views

Given IP address, but can only ping sometimes

I have a debian server that acts as a wifi router and DHCP and FTP server. I want to connect to this server using a Canon Wireless File Transmitter. I can connect and receive an IP address. I can ...
1
vote
0answers
753 views

linux firewall + load balance ISP connections

I'm trying to get a linux Mint computer with 4 NIC's to act as a load balance server. The idea is that we have three internet connections, and we want to use all of them so we can share usage of 50 ...
1
vote
0answers
225 views

SVN checkout returns 400 error

I'm trying to download the http://code.opencv.org/svn/opencv/trunk/ repository of all of the OpenCV source code - as specified in an OpenCV installation tutorial. In the tutorial, the repository ...
1
vote
0answers
751 views

java.net.ConnectException: Connection timed out, Tomcat 7 and iptables

I am experiencing a weird problem.. Basically our Java developer said that in the java application the services that access the db to write on it get this error: java.net.ConnectException: ...
1
vote
0answers
3k views

How to open ports in Cisco ASA 5505 using ASDM?

am new to cisco and i badly need help in opening ports using ASDM. I already tried natting but it only allows 1 outside and 1 inside rule ex. Inside Static Rules 10.x.x.x outside 72.x.x.x Outside ...
1
vote
0answers
182 views

Folders 'locked' to FTP access on Win Server 2003 Standard - firewall issue but how to resolve

I have a weird issue which is just affecting one of many sites on my Windows 2003 Standard server (running IIS6). I'm not a server admin by the way, but the company who manage my server don't seem ...
1
vote
0answers
2k views

Redundant Firewalls And Switches HSRP and CARP

I currently have planned 2 x uplinks (HSRP Active/Standby) 2 x pfsense firewalls (Carp Enabled) 2 x layer2 switches Please criticize or offer help on the correct way to do this. I have a feeling im ...
1
vote
0answers
480 views

What steps can I follow to diagnose why PPTP VPN (rasClient) has suddenly stopped connecting?

I use my a Windows Server 2008 R2 workstation as a VPN client to a Windows 2003 RRAS VPN host. It has worked flawlessly for many months. All of sudden, rasClient stops connecting and throws: Error ...
1
vote
0answers
86 views

shorewall prevents routing from protected zone entities to other protected zone entities

I'm using shorewall as the firewall and gateway for a production site. The site also has a couple of VPNs running into it that are hosted on a different server on the same site (in the protected ...
1
vote
0answers
1k views

Cannot connect to MySQL on RDS (Amazon Web Services) from my laptop

I'm having some trouble connecting to a MySQL 5.1 server on an RDS instance on AWS from my laptop. The detailed description of the problem is here: ...