A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

0
votes
0answers
89 views

pfsense routing with dmz wan and sonic wall

Pfsense setup: 2 physical NIC's (1 input from modem/ISP, 1 LAN with a lot of vlans and DMZ) Network setup: WAN block from ISP xxx.xxx.xxx.225/28 Modem -> pfsense -> vlan 40 (192.168.40.0/24) ...
0
votes
1answer
148 views

No response from a remote linux server on specified ports

I have a remote CentOS 6.5 server that is running a tomcat 8 web server (AKA servlet) on port 54321 and I can't access it from my computer, although I'm establishing a successful SSH connection ...
0
votes
2answers
152 views

Ubuntu Iptables Dual Wan - Forward wan 1 & 2 to an internal server

I'm having problems configuring iptables rules on a double wan setup. The OS is Ubuntu 12.04 LTS. I have 2 Wan connections, both with static IP. Wan-1 is on eth2, Wan-2 is on eth4. I want both of ...
3
votes
1answer
85 views

With SonicWall, cannot access URL inside network

We have a website running on port 80 on our network. Port 80 is forwarded outside of the network, and it is accessible through a URL that points to the IP or the IP itself. However, inside the ...
0
votes
0answers
99 views

ubuntu firewall blocking smtp tasks, port 465 is open

I have been trying to get my Wordpress site able to send emails, and it DOES WORK but only work if I turn off the firewall. I am using UFW. However, I do have port 465 (connecting to gmail) open while ...
-1
votes
2answers
60 views

IPTables not blocking IPStresser [closed]

I have been trying four days to block DDoS attacks with no success. I want to block anything that isn't whitelisted. This is my idea on OS Centos 7: //Delete All Existing Rules iptables --flush ...
1
vote
4answers
321 views

Cisco ASA Implicit rule dropping traffic

The network is as follows: Two Default Gateways exist on the network - one which provides connectivity to the an MPLS with several subnets. Let's say 10.0.0.2 Another which is a Cisco Firewall, on ...
-1
votes
1answer
50 views

Multiple Gateways on LAN

This is more a theoretical question. Let's assume we have a Firewall/DG (with a connected WAN) on LAN IP 192.168.1.1. All external DNS records for incoming services like OWA, FTP etc. point to this ...
0
votes
1answer
27 views

Web app architecture - firewall blocking

I'm currently working on a web app and seem to be having a few problems with the app being blocked by office firewalls of our test groups. My background is in design / front end so my knowledge of ...
0
votes
0answers
40 views

Sonicwall seems to be blocking port 3690 on random internal up address

We are trying to connect to a clients subversion server over the internet using port 3690 and random internal ip address are getting blocked and time out all of a sudden. My local ip of 192.168.0.150 ...
0
votes
2answers
137 views

How to restrict outbound EC2 to only access S3?

I want to restrict the outbound security group from an EC2 instance. The instance only needs to access an S3 bucket. I just learned that S3 uses port HTTPS (443). I could just put that rule in place ...
0
votes
0answers
56 views

Network configuration for Virtual machine based firewall

I have this physical configuration: And I'm planning to install IPFire (or similar firewall : pfSense or Sophos UTM) on a virtual machine on the Active Directory Server to control traffic between ...
0
votes
0answers
24 views

Windows Advanced Firewall - Advanced Rules? [duplicate]

my game server is being DDoS attacked (Windows Server 2012). Probably you would say there is nothing I can do but I don't think so because I can use my dedicated server in a normal way, it's just that ...
0
votes
1answer
55 views

How do I use CSF to redirect domain requests to a port?

I have a server setup that uses two different webservers with different subdomains. Right now the servers listen on different ports (80 & 4000) So users don't have to put in :4000 I'd like to ...
-4
votes
1answer
121 views

How to open Port 443 on External Firewall? [closed]

I've been trying to configure SSL on my server for last 4 days now, with absolutely no success. I've generated a CSR file and uploaded the certificate and configured a Vhost, but nothing seems to ...
1
vote
2answers
71 views

Does Windows Network Load Balancing require any specific ports to be open?

I have two Windows 2012 servers, joined in a Windows Network Load Balancing cluster. I have been trying to find how the NLB heartbeat message is exchanged between those servers (to make sure it will ...
0
votes
1answer
147 views

Loading fail2ban rules to iptables using iptables-persistent

I am using iptables-persistent package to reload my iptables on boot. And I have been thinking should I add the fail2ban rules to the loaded config file? Now I am seeing they are duplicated. This is ...
2
votes
1answer
226 views

Apache problems in performance test with mod_reqtimeout

We have 2 Apache webserver behind a load balancer wich are connected to 2 (JBoss) application servers via mod ajp. To those webservers, mobile devices connect via a REST API. In our performance ...
0
votes
2answers
204 views

How to enable CentOS 7 to connect to an external SMTP? [closed]

I have a web application deployed in a webserver, running on a CentOS 7. This web application sends e-mails through an external SMTP (in-v3.mailjet.com, port 587). How can I enable CentOS to connect ...
-1
votes
1answer
66 views

Open source firewall as a virtual appliance? [closed]

Is it possible to have an open source firewall which can run as a virtual appliance into a guest VM where all traffic from the other VMs should go through this firewall VM? And it supports also ...
-1
votes
1answer
66 views

Block everything except some ports and specific IP Addresses, server can't do HTTP GET

I can't get this firewall.sh script to work. It currently doesn't allow me to get a file at 'https://index.docker.io/v1/repositories/library/ubuntu/images' so either my DNS is flawed or I am blocking ...
1
vote
1answer
57 views

Hadoop namenode port getting blocked

I have installed 7 VM instances of Ubuntu 14.04 LTS servers. First instance runs the namenode service and all other 6 nodes run datanode service.I think my NameNode is getting crashed or blocked due ...
-1
votes
2answers
44 views

Is there a way to block ALL inbound/outbound traffic going outside of a LAN with iptables?

As the title says, I'm just looking for a way to disallow any traffic on ANY port unless it's going to a local IP address (192.168.1.*).
-1
votes
1answer
130 views

How to allow google-analytics via iptables when internet is blocked for other traffic [duplicate]

I am running the following script on a wifi gateway. The WAN side of the gateway has ppp0 interface while LAN side is on wlan0. No LAN user should be allowed to browser internet Some services on ...
0
votes
0answers
61 views

pfSense WAN load balancing across two IPs (has single gateway)

My virtual setup has two IPs, but they rely on the same gateway. I had this configured: interface - type - IP address - Gateway em0 - WAN1 - 172.16.155.131 - 172.16.155.2 em1 - LAN ...
-1
votes
1answer
30 views

SSH port blocked EC2

I had installed Tomcat on my EC2 instance . However i was unable to access it using my public IP:8080 . So I followed the instructions mentioned in the post ...
0
votes
1answer
1k views

MikroTik - can't access webfig from external / can't SSH into router from external ip

Ok, here's the deal. Let's say that my public facing IP is 10.0.01. I can't webfig into 10.0.01 from external and can't SSH into mikrotik router from external IP. I can do it if I am physically ...
0
votes
0answers
47 views

Ip6tables firewall make server unreachable on reboot

I am trying to set up a very basic firewall on my server with iptables and ip6tables. My rules get loaded on restart with systemD. The OS is ArchLinux. When I just setup iptables everything works. ...
2
votes
1answer
138 views

Need recommendations on Firewalled DMZ design for PHP web server on Linux

The 3 options we are considering are listed below. Which one is best or is there a better solution we didn't consider. All servers are linux with nginx. Do you see anything particularly wrong with ...
0
votes
1answer
120 views

Allow URL:Port in Forefront TMG

I have Forefront TMG 2010 installed as a Proxy server to limit internet access to users. I usually have the following issues: 1- I can't configure Email clients (Outlook) with URLs of POP/IMAP and ...
1
vote
2answers
37 views

Is it possible to limit which hosts are accessible through SSH tunneling?

I have a box that runs both an ssh server and a webserver. I would like to prevent people with ssh accounts from using this box as an anonymous proxy to the rest of the Internet (e.g. by creating a ...
1
vote
1answer
60 views

Benefits of separate firewall product over AWS Security Groups for spam requests

I have a question that is an extension of this one: Examples where an AWS Security Group is not sufficient as a firewall?. Initially, the answer in that question made sense to me and I was working ...
-1
votes
1answer
111 views

Firewall throughput [closed]

I saw on multiple site vendor sites about firewall throughput in 1518/512/64 bytes UDP packet and each result from 1518/512/64 bytes UDP packet is 1xxx/smaler than 1xxx/significantly smaller than ...
0
votes
1answer
14 views

How to block or forward packets with custom and dynamic rules

I would like to block or forward TCP requests from clients to WAN according to source and destination ip addresses. The problem is that this ip couples are stored in a mysql database and they can ...
-1
votes
1answer
81 views

Find source(s) of dropped packages in Cisco ASA GUI

we are using pair of ASA 5520 Firewalls with ASDM 6.4. Can someone enlighten me, how to find out which is(are) the source or target ip(s) when we got a hugh bunch of dropped packages come in (by ASDM ...
0
votes
1answer
61 views

How to disable network access for a user on Linux?

Trying to disable the network access for the user: [root@notebook ~]# iptables -I OUTPUT -m owner --uid-owner tempuser -j DROP [root@notebook ~]# ip6tables -I OUTPUT -m owner --uid-owner tempuser -j ...
0
votes
0answers
65 views

Can't Remote Desktop on LAN, Firewall Rules in Place, Yet Packets Dropped

I've banged my head for a few hours on this. I'm beginning to move several computers to a new subnet, all Windows 7, all domain joined. On the original subnet (192.168.145.X) everything works as ...
0
votes
1answer
143 views

Large number of ssh login attempts [duplicate]

I logged into a CentOS box today to find the following" There were 11126 failed login attempts since the last successful login. Last login: Tue Mar 10 14:36:47 2015 from X.X.X.X Thats 11 THOUSAND ...
-2
votes
1answer
35 views

DNS ATTACK \/ or some kind of an error, i don't know

I am getting those errors in my CSF firewall, I would like to know how can I stop it. is it type of an attack? also if it is, how can I stop it? Mar 11 22:48:57 root named[7598]: client ...
1
vote
0answers
36 views

Stop Outbound SYN Scan

Hello I run a VPN company, and recently my host has been sending me these complaints that are likely coming from a user. I am not sure how to identify the user, if I could just do that I wouldn't ...
0
votes
1answer
31 views

ssh port is different from what is connected

Ok, so here's the deal. I setup an Iptables rule as follows: IPTABLES -A INPUT -p tcp --dport 51722 -j ACCEPT and if I do systemctl status sshd.service, I get the following: Server listening on ...
0
votes
0answers
89 views

Can't connect Windows Azure VM with MySQL On-premise

I have a VM on Windows Azure with Windows 2008 R2, and I'm trying to open a connection to an on-premise MySQL database hosted on another network. We cleared the VM's public IP (the one displayed on ...
0
votes
1answer
33 views

Connecting SMTP externally

I have got a local smtp server to relay to Google smtp so as to increase the limit of email recipient from 2,000 a day to 10,000 a day for specific users. I can send through this local smtp ...
0
votes
0answers
15 views

What is “application-aware” in the context of vShield?

Reading vShield's overview, it is defined as "a hypervisor-based application-aware firewall solution for virtual datacenters". In my limited exposure to the world of firewalls, an "application-aware" ...
0
votes
1answer
277 views

I cannot connect to OpenSSH server running on Ubuntu server from Git bash running Windows, through Cyberoam firewall in network

Situation: I am trying to connect from OpenSSH client inbuilt with Git Bash running on Windows 7 professional x64 to OpenSSH server that runs on Ubuntu Server LTS 14 x64. Both of which are over the ...
0
votes
0answers
27 views

outlook doing remote portscanning

A while ago I switched my mailbox on another domain and configured outlook with an exchange server on that domain. Recently for some strange reason my hosting provider has been complaining that ...
0
votes
1answer
43 views

PSAD IPTables logging error

I installed PSAD on my Ubuntu server and then set the IPTables accordingly. But I still get this error by email: You may just need to add a default logging rule to the /sbin/iptables 'filter' ...
-1
votes
1answer
56 views

remote firewall configuration on centos7

I'm using Centos 7 and am trying to configure my firewall remotely. When I run firewall-config & a window comes up but remains blank. I cannot kill the window with the X close button so I need to ...
-4
votes
2answers
457 views

iptables: open port 25 CentOS 7 [closed]

I have problems opening port 25 for sendmail on my CentOS 7 machine. Here's my iptables configuration: *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] -A INPUT -m state ...
-3
votes
1answer
23 views

Simple to use VPN Firewall [closed]

In my company we use a Cisco ASA 5505 Router with the VPN, Firewall setup, and we route IP and VOIP traffic through it. I can only log into the router from a single computer due to the quirkiness of ...