A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

3
votes
1answer
55 views

Searching Objects on SonicWALL (NSA 2600, SonicOS 6.1)

Ok, this may sound like a dumb question, but does the SonicOS web interface not have a search option for object definitions? One of my clients recently decided to replace their Astaro Security ...
0
votes
2answers
43 views

Assign IPs to programs/processes

I need to assign different IP addresses to different processes (mostly PHP & Ruby programs) running on my Linux server. They will be making queries to various servers, including the situation ...
-2
votes
1answer
78 views

iptables prerouting with match-set

I'm trying to create a iptables entry to redirect a list of ip's to another port. Using ipset I can setup and add lists of ip's and reject them with this command iptables -t nat -A INPUT -p tcp -m ...
0
votes
2answers
39 views

Access to multiple FTP servers through a firewall

I have 4 web servers for different tasks, behind a firewall. I have a single public IP and I want to connect to my servers with FTP with this IP. I tried to use a different port but no results. So my ...
0
votes
0answers
33 views

2 Vlans on a Cisco PIX 515 with DMZ

I have to install an application server on a networks dmz. The application will sit on a network but has no interaction with the other devices on that network. I was thinking that the firewall(Cisco ...
0
votes
0answers
19 views

how to use --rdest flag in recent table

Here is why I try to accomplish: When receiving a UDP packet, put IP address of the source address in recent table. sudo iptables -A INPUT -p udp --dport xxxxx -m recent --set -j ACCEPT When send ...
-1
votes
1answer
119 views

How should I properly block outgoing http traffic with iptables

I'm experimenting with iptables, and I'm trying to allow all outgoing requests for HTTPS, but to block HTTP. I have the code below; Chain INPUT (policy ACCEPT) target prot opt source ...
3
votes
1answer
245 views

Linux NFLOG - documentation, configuration from C

Several different places (e.g. http://wiki.wireshark.org/CaptureSetup/NFLOG) recommend using Linux's "NFLOG" firewall module to capture packets generated by a particular UID, like this: # iptables -A ...
-3
votes
2answers
47 views

Login before using the internet

How do you setup a user login page in order to connect to the internet just like the one at McDonalds and Radisson Blu? What kind of setup is that? We are in school and would like to have that kind ...
0
votes
1answer
550 views

UFW — How To Open Port 8080

I thought I had allowed connections to http-alt (8080) using ufw. My reasoning for thinking this is because: gerrit2@localhost:~$ sudo ufw status Status: active To Action ...
0
votes
3answers
184 views

Expose a mongodb streaming data server that's behind a firewall, to the internet

I have streaming data on a Windows platform that I capture into Mongodb at fairly high rate of about 800 data points per second. I wish to have access to this data from outside the company, but the ...
0
votes
0answers
15 views

Something in the network is causing my REST interface to respond to requests with an empty body

We import orders from online through a REST interface over HTTP, which sends back JSON responses. I've confirmed that the code itself works, and it works on the test server. For some odd reason, ...
1
vote
1answer
206 views

Use pfSense for outgoing mail?

How/Can/Should I use my pfSense router as an outgoing mail server? I have several webservers and devices on my internal network that need to send mail out to the Internet. However, I don't need a ...
1
vote
1answer
105 views

pfsense: Prohibit all outbound connectivity from inside going out, except for one system's traffic

I've got a lab environment here for some testing of software which should only run on this "lab environment" network. To that end, the "lab environment" has a pfsense firewall sitting on the ...
4
votes
3answers
248 views

ESXi hosted on public IP without firewall

So I've got an interesting problem. I currently rent a couple of servers from Hetzner (a German hosting provider). Each server has a soft firewall and does something like web hosting / database. I ...
0
votes
1answer
79 views

Using nginx to access internet through intranet

I don't know if I am going about this in the right way, but here's what I need to do. I have a website that's available on the internet. But I have some users who only have access to the intranet. I ...
3
votes
1answer
144 views

What are the repercussions of using an EOL Cisco firewall?

I'm looking at using an ASA 5520 for the database of an ecommerce site. According to End-of-Sale and End-of-Life Announcement for the Cisco ASA 5520 Adaptive Security Appliance, this product is ...
0
votes
1answer
101 views

Cisco ASA 5510 Inter-interface routing

I'm trying to setup a Cisco 5510 to route traffic between the outside and inside interfaces where both belong to public IP subnets. Our ISP assigned us a single point-to-point IP (207.107.110.150/30) ...
1
vote
2answers
484 views

PowerShell Firewall Management

I have a bunch of machines that I need to enable Remote Scheduled Tasks Management (RPC), Remote Scheduled Tasks Management (RPC-EPMAP), and Windows Management Instrumentation (WMI-in) on for GPO ...
0
votes
1answer
170 views

server at port 80 seems up, but I can't access it.

I can't access my server remotely at port 80. First of all, I did not set it up. Someone else did. I am not a sysadmin. But communication between both parts (me and sysadmin) takes time and deadlines ...
1
vote
0answers
37 views

Windows Server 2003 Outbound ftp Very Slow with Windows Firewall enabled

From Windows Server 2003, I'm uploading a file (~50MB) every day at 4:00am to my hosting space in the cloud. I'm doing it by calling "ftp -s:" in a batch file that a Scheduled Task runs. I did what ...
0
votes
2answers
141 views

Forward SSH request to an External Server to an Internal Server

I have a VM config currently where I have 1 external IP pointing to a VM with an Nginx HTTP Reverse proxy serving HTTP Web Pages from several internal VMs without external IPs. I need a similar setup ...
-1
votes
1answer
343 views

Configure Windows Firewall Server 2008 to allow access by only selected IP addresses

I have a server running Windows Server 2008 and I need to configure the firewall if possible to only allow access from a few specified IP addresses, any other IP addresses will get rejected unless ...
0
votes
1answer
640 views

Can't establish a reliable VPN tunnel (ShrewSoft client / ZyWALL USG-50 firewall)

I try to setup an IPSec VPN tunnel through my firewall (ZyWall USG-50), but it doesn't work like it should. quick scheme of my installation: ME [A.B.C.D] --- **INTERNET** | ...
3
votes
1answer
402 views

What IP range do I ask the system administrator to open in order for S3 to work?

I've written some programs for Raspberry Pi, which some small companies have shown interest in. I sold pre-configured Raspberry Pi:s to them, with my program on them, and it works for everybody except ...
-1
votes
4answers
424 views

iptables not installed on centos

If a machine does not have iptables installed, is there still a firewall running? If yes, how to I disable / change rules? if I enter the command iptables I receive the response: iptables v1.4.7: ...
0
votes
1answer
980 views

No route to host centos

I am trying to allow a port through a firewall on centos 6. The error I am receiving is telnet: connect to address 80.xx.xx.xx: No route to host The port I am trying to allow is 5666. If I disable ...
0
votes
1answer
175 views

Can't connect VPN tunnel when other on same NAT-router is connected

We have recently changed our FW to a ZyWall 310 with drastically improved throughput over the old one. However there is a new problem that occurred, we have several L2TP/IPSec clients that connect to ...
0
votes
0answers
72 views

How can I add a new physical interface to an Endian Community Firewall?

I just installed the Community Endian Firewall on my system. But it's just recognizing the first 4 interfaces (after going into shell and doing a ifconfig shows br0, br1, br2 and br3). How can I add ...
0
votes
0answers
184 views

TFS Check In Issue: The underlying connection was closed: A connection that was expected to be kept alive was closed by the server

I've recently started seeing the below error when attempting to check in code to TFS: The underlying connection was closed: A connection that was expected to be kept alive was closed by the server. ...
1
vote
1answer
548 views

IIS 7.5 Windows authentication not working externally

I'm trying to connect to a asp.net website we have created. It uses Windows authentication and it denies access to non authenticated users web.config: <authentication mode="Windows" /> ...
1
vote
1answer
132 views

How can I make an Azure Web Role accessible only via Virtual Network

I have a web role that I have configured via the NetworkConfiguration section of the .cscfg to be part of a Virtual Network. I only want the web role to be accessed from other computers within the ...
-2
votes
1answer
86 views

Email system architecture and implementation [closed]

It's been over a week already and I am unable to find satisfactory solutions to my problem on the Internet. I hope the experts here could lend a helping hand. I will just go straight on describing the ...
0
votes
0answers
56 views

Configure Firewall to allow incoming connections to Server Running in a VM

I have Lubuntu running in a VMware Virtual Machine (on a Windows 7 host). Within the VM, I am using the git daemon command to serve a git repository. When trying to connect to this server from another ...
0
votes
1answer
72 views

allow machine to access localhost website

I've got some IP rules on an Azure VM, the first blocks all traffic, the second allows my laptop to access the website. Both work fine, however when I try to access a website hosted on the VM locally ...
0
votes
1answer
323 views

Block Outgoing SMTP Except for Mail Server

Masters, Our ISP ask to solve a problem. They said we send many SPAM from our server. (they only give our router IP address, so we don"t know if we have SMTP flooders from infected cllient, our we ...
1
vote
1answer
30 views

NIDS on bridged firewall

I have a firewall (Debian Stable 7.5) which works in bridged mode. The interfaces eth0 (WAN) and eth1 (LAN) are linked with the bridge interface br0. Can I deploy a NIDS (eg. Snort) on this server? ...
1
vote
1answer
80 views

Is there a logical reason why Amazon EC2 won't allow me to specify a port when using GRE?

I want to set up PPTP in EC2 and am configuring a security group. I've already selected the "custom protocol" and am using protocol 47 / GRE. When I select this, the port section is read only. Is ...
2
votes
1answer
233 views

How do I set up an IPv6 DMZ with iptables without a static allocation?

I have several networks which are on Comcast's residential network. I need to access those networks from a variety of environments, via an SSH proxy on one of the hosts. (As it happens I'm using ...
0
votes
0answers
293 views

FreeBSD 10 IPFW IPv6

I'm struggling to allow IPv6 connections on my FreeBSD 10 server. I have a working IPv6 connection. But IPFW blocks all the IPv6 traffic. #!/bin/sh # # flush existing rules ipfw -q flush # allow ...
0
votes
0answers
50 views

Mac OS X Firewall isn't firewalling

Rather confused by the results I'm getting on a Mac OS X Server running 10.8. I have an app that is running a web server on port 8000, which I want to be visible only to localhost. This seems ...
0
votes
1answer
32 views

Block an outbound destination IP to prevent connections waiting timeout duration [duplicate]

It seems like with the basic "DROP" iptables rule, an outbound attempt will still wait the duration of its timeout. For instance, if I block an IP address outbound, then attempt to connect to it via ...
0
votes
0answers
102 views

Traffic forwarding by domain on ZyWall USG 200?

I know this question is very specific, but I have not found any help yet. At our office, we run a small server room with a few servers behind a ZyWall. Unfortunately, we only have one external IP at ...
0
votes
2answers
432 views

Websocket & HTTP proxy with server between two firewalls

I have a server ("A") running behind a firewall, which serves HTTP and websockets. I have no control over the firewall, but do have an external server ("B") to which the internal server can connect ...
0
votes
1answer
39 views

Cloud services can't be reached from complex customer infrastructure

We have several services running on a cloud, they all are hosted on Windows Server 2012 R2, have public IP address and specific port. Some of our customers can't reach them because for "some reason" ...
-2
votes
1answer
34 views

Allow outgoing connections for DNS [closed]

I'm new to IPtables, but I am trying to setup a secure server to host a website and allow SSH. This is what I have so far: #!/bin/sh i=/sbin/iptables # Flush all rules $i -F $i -X # Setup default ...
1
vote
1answer
148 views

Does the TCP-UDP-Proxy policy in Watchguard open me to security problems?

I don't remember seeing this policy since it seems to me like an "all ports open" kind of thing. It is set default "tcp:0(any) - udp:0(any)" If I disable this, even web traffic wouldn't work although ...
1
vote
1answer
116 views

What is the difference between a SPI Firewall and an Application Layer Firewall?

What is the difference between a SPI Firewall and an Application Layer Firewall? In what circumstances would I prefer one over the other?
0
votes
2answers
113 views

pfsense CARP - wan failure on firewall

I have recently configured 2 firewall (on 2 DELL PowerEdge R210II with ESXI 5.1) with pfsense. We have several LANs and 2 WANs. Everything is running fine but i have a strange behavior: i can access ...
0
votes
0answers
880 views

VPN pptp connection Unable to pass through linux iptables

I have set up a windows VPN server behind Linux - Ubuntu box that is working as firewall and proxy server. Now I want people from outside to be able to connect to the VPN server, but the connection is ...