A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

0
votes
0answers
160 views

pfSense: Captive Portal is extremely slow

I migrated my pfSense firewall (2.0.2) from an old computer to a more powerful server. I set up the newest pfSense version 2.1 and migrated via export and import my complete settings. Now I encounter ...
0
votes
0answers
42 views

Asterisk Firewall access Rules

I have a questions regarding the firewall rules for Asterisk VoIP server. I have a restricted access to UDP/TCP port 5060, which seems to be blocking calls. I want to make sure that my VoIP Server ...
0
votes
1answer
31 views

Redirect client cloud traffic [closed]

We recently moved our email to Office365 which has as expected put additional strain on our Internet connection. However, we are moving some services to the cloud which will stretch our Internet ...
0
votes
0answers
72 views

amazon ec2 instance going to a remote ip using openswan tunnel is up but no traffic being established on the remote ip

I having establishing a vpn tunnel to a remote peer/public ip using amazon ec2 openswan. The tunnel is up but no traffic has been seen on our side or the remote side? Is there I been missing? Please ...
0
votes
3answers
149 views

ping and traceroute does not work when UFW deny outgoing by default

How to make ping and traceroute work after setting UFW with deny outgoing by default? Here is my UFW configuration: sudo ufw status verbose Status: active Logging: on (low) Default: deny (incoming), ...
0
votes
0answers
82 views

Enabling the Internet Connection on an EC2 Windows Server 2012 Machine

I've disabled the firewall: netsh firewall set opmode disable I've made sure to accept all inbound and all outbound connections: Is there anything that I should be installing or adding on to the ...
0
votes
0answers
25 views

windows firewall , some ports not listening

I've added an inbound connection rule for my windows 8 firewall on windows server 2012: I've restarted the Windows Firewall. When I check that port using this program, it says that it is not ...
0
votes
1answer
265 views

Juniper SSG5 suddenly slow throughput

I'm trying to find out where in my configuration the problem might be. About a month ago we were easily getting 100 up 50 down through our provider through the Juniper SSG5. Starting a few weeks ago ...
0
votes
2answers
62 views

Is a sonicwall tz105 firewall necessary for my network? [closed]

I was not exactly sure how to best word my question above. I am trying not to ask a subjective question but I really want a little advice from someone who knows more about this, and have a few ...
0
votes
1answer
47 views

Is it possible to block HTTP traffic from specific machines?

I have some web crawlers, and a specific website seems to be blocking traffic temporarily after some time. The thing is, even though all clients have the same external IP address (they access the ...
0
votes
0answers
63 views

Remove mapping drives from RDP to user from exteral network

I would like to know if you guys have a solution to my problem. I have a terminal server 2012 that can be accessed remotely after a VPN connection and from the LAN. My question is how can I create a ...
0
votes
0answers
105 views

Dynamic IP Blocking on FORTIGATE 200A Firewall

I have FORTIGATE 200A firewall protecting a IIS Server running a ASP.NET website (windows server 2008 and IIS7) I'm not familiar with Fortigate configurations and options. I recently had "attacks" ...
0
votes
1answer
175 views

pfsense with three WAN IP and outgoing NAT

similar situation as this one: How to setup pfSense with multiple public IP's i have a pfsense with multiple wlan ip's. I'm using a Hetzner Server with vmware so i have a virtual machine with ...
-2
votes
1answer
44 views

FTP server | Filezilla | issues connecting

so I am trying to setup an FTP server (Filezilla) on my windows 2012 server. I have installed filzilla server and set the port to 14144 (not the default 14147) I have also ensured the the service is ...
0
votes
1answer
38 views

Why should I remove firewall rule after application exit?

I have a server which listens on port 80 for incoming requests - using HttpListener. I've found that to be able to do that, I need to open up the port (add a firewall rule which enables me to listen ...
1
vote
1answer
324 views

Why is fail2ban not banning this attack?

I have fail2ban installed to ban bruteforce attempts on the ssh password. There are business requirements for not disabling password authentication on this machine. fail2ban was installed using the ...
4
votes
3answers
256 views

Can't access Exchange OWA from Wireless Subnet - Firewall rule?

The Problem The issue is that I can't access port 80 (or 443) on the Exchange server, unless I add a blanket rule to allow all traffic from the client to the server's subnet. If I add a rule to ...
2
votes
1answer
62 views

DNS grey listing and long retry intervals - standard practices?

My company's ISP has implemented what I'll term DNS "grey listing" (or they have a configuration problem) - they are blocking inbound DNS queries between [resolver IP, server IP] pairs that haven't ...
0
votes
1answer
130 views

Configure firewall and proxy server or just firewall for outbound connections

I'm actually a software developer and I am working on a web application which uses Recaptcha. I am using Asp.Net C# in a web form application. I am having an issue with the server trying to verify ...
1
vote
1answer
84 views

Cannot Ping Devices Across Interfaces for Shorewall Single IP Three-interface Firewall on Debian Wheezy

Summary I am currently working on a three interface software firewall using Shorewall 4.5.5.3 on Debian Wheezy, and I'm having some difficulty with the loc (eth2) and dmz (eth1) interfaces. The fw ...
0
votes
1answer
37 views

How can I adapt this technique of using a proxy (in firefox) to wget and yum ? [closed]

I work in a large organization where some people have extremely restricted internet access and some are given a fairly large amount of freedom. The way my organization manages this is by running a ...
1
vote
1answer
257 views

My iptable rules do not allow VPN connections

I have installed OpenVPN on my Archlinux server and modified my iptable rules to allow incoming traffic on port 1194 and forward it to the tun0 interface. When I disable/stop the iptables, the OpenVPN ...
0
votes
1answer
50 views

iptables setting output default to DROP

I have two servers: one web, one database. The db server is on a private network. I thought I needed to restrict the default OUTPUT on the web server to DROP and created OUTPUT rules to to ACCEPT ...
0
votes
0answers
195 views

Blocking HTTPS content with a Watchguard (Websense) vs. SQUID and SQUIDGuard using Transparent Proxy mode

I'm trying to compare these 2 solutions when it comes to content blocking : 1 - A pFSense appliance with SQUID and SQUIDGUARD packages configured 2 - A Watchguard FW that uses Websense So, in order ...
1
vote
1answer
88 views

Linux VPS settings to allow $_SERVER['REMOTE_ADDR'] to get client ip [closed]

I have unmanaged VPS server. I am trying to get client IP form PHP $_SERVER['REMOTE_ADDR'] but it's always gives me same for all users that is server internal IP. I have done some R & D and got ...
0
votes
1answer
93 views

Skype Group Chat in a secured location?

When working in a secured location - some place that uses HTTPS inspection for the firewall, possibly application level filtering, etc - how do you get Group Chat to work correctly in Skype? Adding ...
0
votes
0answers
42 views

Trace IP traffic to physical machine under Linux

In my firewall logs I recently see frequent connection attempts from a 10.0.0.0/8 network. This network is used by VirtualBox, but I can exclude that these packets come from those. No physical machine ...
0
votes
1answer
46 views

Limiting number of simultaneous connections to certain host on windows

I have an application which doing TCP connections to some host, accidentally it could be configured to make a lot of connections to that host and overload it. Is there Windows firewall application ...
0
votes
2answers
24 views

Rsync through secure head-node on storage cluster

I wish to use a specific head-node as contact address for my rsync backups, I do no wish to have the backend accessed directly, as it is not as hardened, nor as compatible with the rest of my ...
0
votes
0answers
89 views

Cisco 877 configuration with multiple firewalls behind in parallel using public IP's

I would like to ask how I can configure my cisco 877 adsl router to have multiple firewalls installed in parallel behind the cisco 877 router. I have enclosed a diagram of what I am trying to achieve. ...
-1
votes
2answers
112 views

How to allow all clients access to remote MySQL server? [closed]

So I followed this guide to gain remote access to a MySQL server for my laptop. However, my IP changes and I want to be able to access the server outside my network. How can I allow any client IP ...
0
votes
1answer
31 views

Ubuntu UFW setup on database server for connections to a varying array of clustered applications

I'm a little confused and could use some clarification. Let's say I want to deny all connections to a mongodb server, except for to SSH from my IP and from my IP to port 27017. The way I understand ...
0
votes
1answer
53 views

How to close specific port with SuSEfirewall2?

I'm opening specific ports in a SuSE 11 server to do ssh forwarding. After I finish, how do I close only the ports that I opened? I tried SuSEfirewall2 close EXT TCP 4050 but it seems to close ...
0
votes
1answer
45 views

CentOS - how to tell what conf file CSF (firewall) is using? csf.conf then restart not updating

in /etc/csf/csf.conf the following is setup LF_CPANEL = "5" LF_CPANEL_PERM = "3600" restarting csf by doing the following csf -r does not seem to have an impact on the above attributes. ...
0
votes
0answers
111 views

Why need DHCP Relay (Watchguard) inside the Trusted network?

I run a small network that looks like this: { Win 2008 server , desktops , Wifi AP} -> Switch -> Watchguard XTM21 firewall (the Switch is connected to the XTM's Trusted interface ; the XTM ...
0
votes
0answers
42 views

UDP multicast stream on win server 2k8 R2

so i have 3 mega PCs with win 2k8 installed on them having: 1st) 1 internal NIC and 1 external 2nd) 2 internal NIC and 2 external 3rd) 2 internal NIC and 4 external same stream put on any NIC on 1st ...
1
vote
0answers
54 views

Dovecot/Postfix mail server replies to [SYN] with [RST, ACK] when user attempts to connect (POP3). Likely iptables?

Currently I am trying to trouble shoot an e-mail server that will allow users to send e-mail, but not log in to the server (POP3) or receive e-mail using their Outlook clients. Previously this was ...
0
votes
0answers
22 views

Fail over in Lokiwall Firewall

I have configured lokiwall firewall on my linux machine having multiple interfaces. Dual Routing works fine. However, I wanted to know how does the fail over happen in case a link goes down. Do the ...
0
votes
0answers
167 views

Force all traffic from one user through an OpenVPN tunnel on Debian 6 with iptables and ip route

I’m trying to force all traffic of one user through an OpenVPN tunnel. It is giving me grey hairs. The current situation is that I can either allow all traffic for this particular user, and it will go ...
0
votes
0answers
153 views

Secondary DPM server and access to protection agents at primary server

Disclaimer: This is not an ideal setup. In a perfect world we would have a direct two-way VPN between our site and the remote site. My task is to enlighten the consequences of running a System Center ...
1
vote
1answer
587 views

How to ban Syn Flood Attacks using Fail2Ban?

In my log, I am frequently seeing dropped ips like this: > Oct 30 17:32:24 IPTables Dropped: IN=eth0 OUT= > MAC=04:01:2b:bd:b0:01:4c:96:14:ff:df:f0:08:00 SRC=62.210.94.116 > ...
0
votes
1answer
60 views

Do blocking input ports increases security?

1-Do blocking unused input ports in firewall increases system security? How? (as there is no daemon listening on those ports anyway) 2-Do dropping those unused ports will positively or negatively ...
0
votes
0answers
58 views

Intermittent SSH problems with a specific server from a specific Wifi router

I've been ssh'ing into a specific server from my home office via Wifi and Time Warner Cable internet for years with no problem. In recent months, I started having problems, where I'd be unable to ...
0
votes
0answers
28 views

Using a Barracuda F400 Firewall Router Without a Modem

I'm looking into a problem where VoIP phones don't ring for some of the incoming calls that I believe might be due to the network configuration. Do you need a modem if you are using a Barracuda F400 ...
1
vote
1answer
377 views

Fail2ban jail.local vs jail.conf

Does jail.local file act as an override to jail.conf or as a replacement to jail.conf? When I was learning about Fail2Ban from tutorials, most of them usually say either to copy jail.conf to ...
1
vote
1answer
94 views

MySQL on LAN not working when IPTables enabled

I have two Centos VM. The IP Addresses are as follows : VM_1 => 10.99.0.10 VM_2 => 10.99.0.12 Apache and PHP are in VM_1 and MySQL is in VM_2. Both are having iptables rules. VM_2 is working ...
1
vote
0answers
40 views

PF rule for Continuity

So it looks like the Continuity on OS X 10.10 creates network interface on the fly (utun2 here) and my PF blocks it, so that I can't make/answer calls. I'm not an admin, just use the IceFloor for PF ...
0
votes
1answer
99 views

Can I block inbound traffic from a certain ISP

The problem My server keeps getting DDoS attacks from IP's belonging to Ecatel in The Netherlands. I wrote them a month ago and still haven't heard anything, and keep blocking individual IP addresses ...
0
votes
0answers
28 views

Publishing Multiple SSL Connections via TMG

I am using a Microsoft TMG 2010 as my Firewall. It is configured in a Three-legged approach, with public facing servers in DMZ. There are two public servers. Once is a Citrix Access Gateway which ...
1
vote
2answers
245 views

Test port reachability from a remote host even though the port is not bound to a service?

I need to check whether a remote host is able to reach a specific port. At the time of test the service bound to that port will be down. The possible issues that the test would address would be : ...