A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

-1
votes
3answers
161 views

How do I access port 10,000 on AWS?

How can I access port 10000 on Amazon Web Services? I added port 10,000 to a security group, but I still cannot access it. I can only access the service locally. [root@ip-172-31-15-65 ~]# curl -I ...
1
vote
1answer
72 views

What is proper host in PGAdmin for accessing postgresql through firewall

Here is my situation. I have Postgresql installed on a Windows Server on a LAN. I have an IIS web server set up outside the lan. I want to connect to the postgresql database from the webserver. ...
0
votes
1answer
230 views

FortiGate 80c port forward

I have a FortiGate 80c and I'm getting at a lost on how to port forward to get my OpenVPN service accessible externally. I did setup the VirtualIP assigning tcp 1194 on the internal IP to the ...
0
votes
1answer
83 views

XenServer virtual network firewall

We are setting up XenServer machine with several VMs for our ecommerce business. We are intending to distribute services across several VMs (1 for web, 1 billing, 1 email, etc.) The XenServer machine ...
0
votes
0answers
41 views

Xenserver firewall consideration

We are setting up Xenserver for a production environment with seperate VMs for a website, billing, control panel, mail. My question is, should we rely on each server's IPtables or is it necessary to ...
0
votes
1answer
31 views

iptables stopping access to websites

I have iptables set up on a server to only allow whitelisted ips to access it: :INPUT ACCEPT [1695:323274] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [987:756890] :xxx - [0:0] -A INPUT -s 12.34.56.78/32 ...
0
votes
1answer
102 views

Cannot add address object using CLI on Sonicwall NSA2400 (5.9 firmware)

Based on an example from "SonicOS 5.9 Enterprise Command Line Interface Reference Guide" I have tried to add an address object using command below (which is not changed compare to prior firmware): ...
0
votes
0answers
71 views

SonicWall NSA2400 after firmware upgrade to 5.9 - not able to log some intrusion prevention/detection statements

After upgrading firmware to 5.9 version I'm not able to log intrusion prevention/detection for statements like PHP CGI Argument Injection, Remote Command Execution, Remote File Inclusion, WEB-ATTACKS, ...
1
vote
0answers
43 views

PF Firewall Rules Help - Block IP Hammering

I'm having an issue where someone is using a VPN / proxy to hammer my server. They will pick on random URL from my website and perform ~20 requests per second to it. Once I ban the IP address, a few ...
-1
votes
1answer
60 views

SSH through another machine at work to an external server [duplicate]

I'm fairly sure this will have been asked before, I have found similar questions but I do not fully understand how to apply them to my situation. So, sorry for asking again. We have a number of ...
0
votes
0answers
37 views

customised client to client connection configuration inside OpenVPN server

I have two clients with common names [client_sina] and [client_extra] that are connecting to an OpenVPN server on remote place via (TUN21) running on Tomato Router The only physical port of the ...
-1
votes
3answers
219 views

Is blocking SMTP ports prevent server from sending emails?

I have a Centos server with cPanel on it. Yesterday, some hackers had successfully connected to my smpt server and sent thousand of emails from it. What I want to do is blocking every ports except ...
0
votes
0answers
53 views

Connecting internet uplink to switch or firewall

While I am using Cisco kit, this isn't really Cisco related, more general network design. In the past I have connected internet connections straight in to a layer 3 core switch, 3750X's, 6509's and ...
0
votes
2answers
90 views

Firewall high availability

Context: My company is on the verge of a major network improvement, we will expand our network to remote offices via radio bridges. The firewall will be handling: 3 mission critical networks 3 non ...
0
votes
1answer
51 views

Forward a port to another server using iptables

I have a server that is configured to block any port, and exceptions are configured like this (for mongo): iptables -A INPUT -p tcp --dport 27017 -s 10.20.1.0/8 -j ACCEPT ...
0
votes
1answer
172 views

How to make an existing caching Nginx proxy use another proxy to bypass a firewall?

My question is about using Nginx as a proxy behind another proxy. (Somewhat confusing.) I want to set up Nginx so it acts as a caching proxy server to an npm mirror. Here is the link: ...
1
vote
0answers
116 views

Cisco ASA 5510 multiple vlans on same interface with different security levels and routing between

Looking to setup on my 0/3 interface multiple vlans and looking to get confirmation that this will work. Ethernet 0/3.1 security-level 20 nameif dev-dmz vlan 502 ip address 172.20.2.1 ...
1
vote
0answers
102 views

Exclude an IP address from an openwrt firewall rule

I am using a wrt54gl with openwrt to try and redirect all traffic on my LAN to a specific server, which will run scapy and other network analysis tools and act as a gateway/firewall to the Internet. ...
-1
votes
1answer
127 views

Connection timed out ftp cannot connect

I have a ubuntu server and am trying to connect using filezilla but keep getting connection timed out. I have done an nmap and the port that is opened for ftp is 21. I have gone onto the server and ...
0
votes
1answer
50 views

Cannot access Asterisk sip from remote location

I've used this tutorial to configure my iptables so I can access asterisk sip from outside of my server. My iptables -L looks like this Chain INPUT (policy ACCEPT) target prot opt source ...
2
votes
2answers
94 views

Can DNS RPZ firewalls protect against IP Access?

I am looking into DNS-RPZ firewalls. Can they protect against users browsing to http://{ip-address}? If so how does that work? Given no name resolution is required?
0
votes
2answers
35 views

ipf filter on solaris 11 crashes

First I run: sudo netservices limited then sudo ipf -D disable sudo ipf -E enable sudo ipf -f /home/aubrey/ipf.conf sudo ipfstat -io I also disabled ssh in system services After a few hours I ...
0
votes
1answer
32 views

change timeout for dropped ip traffic

I am behind a corporate firewall, which simply drops (swallows) all ip-traffic to unknown ip-addresses. It takes a lot of time for Linux (Ubuntu 13.10) to abort my erroneous connection-attempts, ...
-1
votes
2answers
90 views

tcp port 12202 not opening on ubuntu EC2 instance

I created an EC2 ubuntuu 12.04 instance. i have opened TCP 12202 port through security group console of AWS .But i am unable to open instance port . I tried below commands to open the port . sudo ...
1
vote
2answers
34 views

The output of ifconfig for a Internet USB dongle

This question has been asked on the net before but the answers are simply not convincing or even accurate. I get the following output for ifconfig for the ppp0 device (of course, x, y, a, b are ...
1
vote
1answer
18 views

Error in cross server sqlcmd execution due to firewall issue

I have an application server with an IP of 10.107.0.100 and one database server on which SQL Server 2012 is installed, with an IP of 10.107.0.101. Remote connections are made to this server, and the ...
-4
votes
1answer
48 views

Single machine server with many operating systems [closed]

Could possibly with single one high end Server with supported Virtualization We can have: - DHCP Server (Virtual Machine 1), - Firewall (Virtual Machine 2), - Squid proxy (Virtual Machine 3) - ...
1
vote
3answers
96 views

Despite of several attempts, unable to open port 25

This question may have been asked many times here but after several failed attempts, I repeat the history: How do I open port 25 port on my server running CentOS. Here is my iptables config: Chain ...
-1
votes
2answers
141 views

Amazon VPC: How to block inbound traffic on specific IP of an instance while allowing on other IPs of the same instance

Specifications I have an amazon VPC instance with the following specifications: Windows 2003 (32 bit). Two Network Interfaces each with 6 IPs. 6 instances of a software (called backweb) installed ...
1
vote
3answers
177 views

How to block ALL communications with an IP-address using iptables?

I have a FreeBSD system behind a Linux-based router (using DD-WRT firmware). The FreeBSD system is running sshd and is regularly probed by various script-kiddies. It currently runs a script, that, ...
1
vote
1answer
27 views

How can I remove the ACL of PIX firewall?

I'm just trying to how PIX works. Anyway how can I remove the ACL from my GNS3's PIX? PIX-SECU(config)# show access-list access-list cached ACL log flows: total 0, denied 0 (deny-flow-max 4096) ...
0
votes
1answer
25 views

Issue connection to SQL from PHP

I've got a Windows workstation which I am successfully able to connect to a SQL 2012 Server over ODBC using the servers IP address. When I start php 5.4 built in web server and try connect to the ...
0
votes
1answer
61 views

IPTables: Firewall with just one Eth device? [closed]

Admittedly I am a novice in the area of firewalls. But I have read on the IPtables and Firewall theory and command options. There is a general diagram by Rusty Russell, the creator of IPtables: ...
0
votes
1answer
38 views

cisco firewall access rules for intra-subnet traffic

I have a Cisco 5505 in our office, and everything is on the 10.0.1.0 network. We have a cheap wireless router that we would like to use. The router is sitting behind the inside interface, and is ...
1
vote
0answers
55 views

Microsoft Forefront TMG, IIS and SQL server on one server

We have a Windows 2008 VPS with IIS and SQL Server, hosted by a provider. We use it for hosting web applications on the Internet. The only firewall we can use is Windows firewall. I would like to have ...
-1
votes
1answer
115 views

blocking all countries except 4 at vlan level, will cisco asa 5505 hold?

First our server hold an application that only serve 4 countries. We had a repeated ddos from bonnet so would like to block all traffic except for the 4 countries that the application serve. the idea ...
0
votes
2answers
54 views

Open HTTP Protocol Cisco ASA

I would like to know if it's possible to open HTTP protocol (whatever the port) for one of my subnet to the outside on Cisco ASA 5510 v9.1(4) (ASDM v7.1(5)? I guess I will have to play with service ...
-1
votes
1answer
53 views

Back-to-back router configuration [closed]

I have inherited a network where there are 2 routers supposedly configured back-to-back. They are both on the same subnet and only one serves DHCP. There is the possibility that they are not ...
1
vote
2answers
167 views

KVM: All network traffic to one guest (firewall)

I am currently using a VMWare ESXi 5.5 server for my virtualisation. The network setup is like this: PFSense firewall is the center of it all and connected to: LAN Network (physical NIC 1 assigned by ...
1
vote
2answers
829 views

Linux iptables drop traffic based on mac address

I'm doing some testing on my linux VM with one nic, I want to use it as some kind of a firewall which can block traffic of some clients based on a mac address. The client itself is having the VM as a ...
-1
votes
1answer
34 views

Can't connect to identically configured remote MySQL server

Where I work, we have a single development server, and a single production server that we manage on-site. When I try to connect remotely to the MySQL on the development server, I get this error: ...
1
vote
0answers
89 views

Ssh issues on Google Compute Engine

I've just updated a few servers to the newer version of the gce stack, and I've started having some ssh issues that I'm not quite sure how to fix. I've already looked into issues with the firewall, ...
0
votes
0answers
22 views

VPN User ACL not working

i´m currently testing a Cisco 886VA router for VPN usage. First off here is my client config group: crypto isakmp client configuration group VPN_PRIV key xxxxxx dns 192.168.111.100 pool VPN_POOL acl ...
1
vote
0answers
157 views

sophos access https site when user portal is activated

I use a SOPHOS on UTM 9. I have a website behind it on Win Server 2012 R2 / IIS 8 created with a subdomain (e.g. myaccess.mydomain.com). On UTM9 i had do what Stephane say on "serverfault -> sophos ...
1
vote
0answers
39 views

LDAP Integration with the firewall

I am trying to integrate Sonicwall NSA2400 with AD so users can VPN with their domain credentials and able to change password if it expires. Do i need to install ADLS role and configure LDAP, or LDAP ...
0
votes
1answer
55 views

Turn IPTables Flush off CentOS

I made some changes to my iptables in a centOS machine. I noticed once I shut the server off it flushes all my iptables and goes back to the default. Is there a way to turn that off?
1
vote
1answer
119 views

Many 'Deny IPv6-ICMP reverse path check' alerts from multicast addresses on Cisco ASA

In an effort to prevent IP Source Address Spoofing (RFC 2827) I've enabled reverse path filtering (RPF) on my Cisco ASA 5505. The topology is aprox. like this. Each segment has its own IPv4 subnet ...
1
vote
1answer
108 views

Iptables configure gateway virtual machine with 2 interfaces

I have a virtual machine that works like a gateway from other virtual machines. The configuration of the interfaces is the following UBUNTU: eth0: ip: 10.0.2.2 netmask 255.255.255.255 ...
1
vote
3answers
87 views

Cannot connect to port 3306

I'm running CentOS on my VPS and are trying to get remote access to my MySQL database. So I added a line to my iptables using this command: /sbin/iptables -A INPUT -i eth0 -p tcp --destination-port ...
1
vote
1answer
79 views

In what case would IIS initiate a connection outbound with source port 80?

We have an eight node IIS web server farm protected by a hardware firewall. The firewall is configured to allow port 80 traffic inbound, but is set to block outbound traffic. In our firewall logs, I ...