A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

-2
votes
1answer
113 views

Separate subnet with exceptions [closed]

I have a network with clients in the 192.168.30.x range and clients in the 192.168.40.x range. both are in a 255.255.0.0 subnet. All clients with .30.x are connected to one switch and all clients with ...
0
votes
2answers
108 views

How to open firewall to access azure file storage

We are going to use robocopy to keep a stack of encrypted files synced to an azure file share. But what do we need to open on the firewall to let the backup server get to an azure storage file share? ...
1
vote
1answer
11 views

Granular Windows firewall rule control

Is there a way using group policy (or some other built in mechanism) to apply firewall rules in such a way that a subset of the rules are locked and cannot be changed or overridden, but another subset ...
0
votes
1answer
32 views

ZyWall USG 50 locked out

A Friend of mine was testing something in our Server Room. He made a firewall Rule on the Zywalls' web-interface like this: Block All from All to Zywall So, now we cant access the Webpannel anymore (...
0
votes
0answers
93 views

FirewallD is not running in CentOS Linux 7.1.1503

I wanted to add a port 5004 for tcp connection. So I run the command: firewall-cmd --permanent --add-port=5004/tcp However I got an error: FirewallD is not running So by some research, I run the ...
0
votes
0answers
12 views

Set up trust on the external forest from the external forest

At one point in the document linked below it says "Set up trust on the external forest from the external forest" Inbound ports :N/A Outbound ports :LDAP (389 UDP and TCP)Microsoft SMB (445 TCP)...
0
votes
0answers
25 views

Restrict GitLab project deployment to IP above SSH key

I was thinking if I can restrict pulling, cloneing, eftching a repository by IP above the SSH key authentication. Imagine the worst situration: Somebody steals my SSH key and Passphrase Finds the ...
1
vote
1answer
40 views

Modifying libvirt firewall rules between virtual networks

On my my VM host, I have two libvirt virtual networks: virbr0: 192.168.122.1/255.255.255.0 virbr1: 192.168.130.1/255.255.255.0 I have a VM behind each of those virtual networks. Machines can see ...
0
votes
0answers
35 views

Shrewsoft VPN passthrough Cisco ASA 5505

I have a shrewsoft VPN connection setup that passes through a Cisco ASA 5505, it manages to connect okay and i am able to ping etc but if i try to load anything e.g. web interface nothing is returned. ...
0
votes
1answer
68 views

Can't ping server over VPN, from behind other VPN

My local server is set up as both an OpenVPN server and client. Its client connects to another remote OpenVPN server (which I also administer). Both servers run Ubuntu Linux. I then connect my laptop ...
1
vote
2answers
32 views

Cisco ASA 5505 - Help understand/update the config

Let me preface by saying I am not a network administrator by trade and this firewall was set up originally by a Cisco consultant who is no longer available. We have a small office with a Cisco ASA ...
0
votes
0answers
60 views

Firewalld blocking Squid

I have a serious problem here with Squid and Firewalld in Fedora 23. When I activate firewalld, I can not access the proxy I created, it returns a "Connection refused by the proxy server", but when I ...
0
votes
1answer
26 views

Windows Server 2008R2 / IIS 7.5 VM Open Ports

I have a Windows Server 2008 R2 / IIS 7.5 server Hyper-v VM which when I run NMAP shows a lot of open ports. This server acts as a web server running Wordpress sites so it also needs MySQL. I am ...
1
vote
1answer
61 views

Iptables: Difference between RELATED and ESTABLISHED state?

I've tried reading many articles on the internet but none of them are quite clear. I also know similar question has been posted here before but none of them explain my situation. Earlier I ended up ...
1
vote
1answer
105 views

Limit number of incoming packets per second for a INPUT UDP port [per IP only, not globally] [Ubuntu IPTables]

I searched and I can't find a rule to limit the count of the incoming packets for a INPUT UDP port per second and per IP. I need that per all IPs that connect to my socket, not for a specific one. I'...
0
votes
1answer
30 views

Strange activity on Wingate Proxy

I noticed some strange network activity on my network last night. I've never seen anything like it. It appeared as though public ip addresses were connnecting outward from my private network. It only ...
0
votes
1answer
68 views

Can't open port

I can't open port 25 and 587. Background information: I am running CentOS 7 with firewalld and httpd. Now I want to run a mailserver. I started with installing postfix. Then I added firewall rules for ...
-1
votes
2answers
46 views

Do I need a firewall or am I ok with a router?

I'm working in a small company (7 employees) and we need a new router or firewall for both our office and our servers in a datacenter. We have a 1 Gbit/s synchronous internet connection on both sites. ...
0
votes
1answer
65 views

Traceroute / Routing of a IP

so i just wondered, how i can route the whole traffic from server A through server B, so the traceroute looks like this: Server A IP is 33.33.33.33 and Server B IP is 55.55.55.55 1: 1.1.1.1 2: 2.2.2....
0
votes
1answer
88 views

How to setup a whitelist using iptables and ipset

I'm trying to only accept connections from my whitelist on ports 53, 80 and 443. Here is my iptables file # Generated by iptables-save v1.4.21 on Thu Feb 25 18:28:29 2016 *filter :INPUT ACCEPT [0:0] ...
0
votes
1answer
187 views

Correct OpenWRT configuration for iptables PREROUTING rule

I've recently switch my router firmware from Tomato to OpenWRT. I had the iptable commands below which would intercept http requests to an internal ip (192.168.1.254) on port 80 and redirect to a ...
1
vote
1answer
27 views

CentOS Firewall Contingency

What happens if the firewalld service fails to start on CentOS 7? Will the network still function? Will firewall rules still be partially enforced? If the firewall rules are not enforced, is there a ...
0
votes
1answer
137 views

Is there a local “firewall” to block by “X-Forwarded-For” IPs behind the reverse proxies?

The situation is quite typical. I'm using CentOS + Apache(s) behind a Load-balancer for the WebSites. At this point, let's assume i don't have any access to the Load-balancer (or) let's forget ...
1
vote
1answer
109 views

iptables to allow only ssh and https

I'm trying to configure the iptables on my device in order to allow only SSH and HTTPS traffic. In particular, the HTTPS protocol is used to call some REST API toward a remote server from a java ...
0
votes
2answers
44 views

Making server accessible on local network without opening ports

I'm responsible for operating the server for a small startup game developer based at my university for my placement year - mostly because I'm the only one of us with any network knowledge to speak of. ...
0
votes
0answers
62 views

Block Windows Service Access to Remote SQL Server with Firewall

So I've got a fun firewall question. We have a windows service that we have running on a Windows Server 2012 instance. It is connecting to a remote SQL Server that we do not own, among other things. ...
1
vote
0answers
65 views

Cannot connect to remote MySQL server (RDS)

When I am trying to connect to RDS from my vps, it says connection refused. When I tried connecting it from local or other vps, it worked fine. I figured out that it must be a firewall issue on my ...
0
votes
0answers
34 views

Windows network share not acessible

This question might appear to be a duplicate but I've not found a solution and have tried a multitude of different "solutions" which have not worked. Quick description of the situation: I'm in need ...
0
votes
1answer
51 views

Watchguard blocking ports

I want to block the whole Internet for particular hosts. In this case I used policy 'Any" which basically blocks every single port (tcp+udp I believe). In FROM field I put particular IP address from ...
1
vote
1answer
145 views

How to assign traffic priority with Sophos UTM 9?

I'm trying to assign traffic prioritization with a Linux machine (Debian) running Sophos UTM 9. I can see (and have read) that I can guarantee a service (in this case a specific TCP port) an amount ...
1
vote
2answers
19 views

How to write IPTables policy to affect multiple ranges in a group?

I am trying to block the entire Internet on all ports, but allow a multiple ranges to connect on specific ports. I want this ruleset to apply to outbound connections as well (using REJECT instead of ...
0
votes
0answers
42 views

Remote Desktop Connection fails after logging on and off sucessfully

this one has me scratching my head. I've been RDP'ing into a remote server running Windows Server 2008 R2 successfully for a long time. Recently I tried to add a VPN role to the server but when I ...
0
votes
0answers
18 views

How to allow DHCP between 2 networks using Shorewall?

I have a server with hyper-v and 3 networks: eth0 is virtual, eth1 is physical, eth2 is extranet from ISP. Virtual network has a DHCP running and all virtual machines can reach it fine. But not the ...
0
votes
0answers
32 views

Can Someone Explain Why this firewalld Command Does Not Work as Expected?

matiu asked the question of how they can do port forwarding for a single source IP address. You can read the original question here. I provided the following commands as an answer. I based my answer ...
2
votes
0answers
47 views

Can't firewalld replace iptables?

I used Iptables on Centos 6.5 and tried to translate iptables rules into firewalld rules on centos 7. However, with firewalld, i have discovered i am unable to drop packets in invalid states create ...
-2
votes
2answers
91 views

When should a port 9040 used for? [closed]

A firewall rule for my web app ( python) is created with allowed protocol tcp:9040. I added my domain and created DNS zones, however I still don't get to see my app when I type my domain in the ...
0
votes
0answers
14 views

Static NAT Issue

I have a server inside my network that I want users to be able to access from the outside. To this end, I have setup a static nat between my internal address for this server (10.7.64.27) and one of ...
1
vote
2answers
43 views

Increasing firewall throughput but constant traffic

I can't understand, why the firewall throughput of my server is significant increasing during the last few days while everything else, including traffic, remains on it's normal level. What scenario ...
1
vote
2answers
81 views

Server IP is showing Firewall IP

From server 2008 r2, I check "what is my IP address", instead of showing my server IP, it showed my Firewall IP. How to rectify this.
0
votes
0answers
17 views

Virtual Switch Stack connections to Edge Network

I have a pair of Cisco SG500 switches stacked together as a part of my collapsed core design. I would like to connect this stack to the edge network which is comprised of two Dell Firewall/SonicWall ...
1
vote
0answers
42 views

UFW blocks permitted ports

I use ufw utility to manage my firewall for the system which runs web and mail services. The rules are follow: Status: active To Action From -- -...
1
vote
2answers
43 views

Route traffic in a public network

I have 3 stand alone CentOS servers on same hosting provider. The hosting company can't offer me a firewall for this devices, only iptables. So I want to buy another server and make this server a ...
1
vote
1answer
30 views

Scalable remote access gateway for 20K+ servers

Consider a worldwide distribution of thousands of embedded servers, and clusters of servers behind firewalls that sysadmin wants to access remotely. With a focus on a remote access for login and ...
2
votes
3answers
124 views

Port forwarding in pfSense not working

I recently set up a pfSense router and can't get any port forwarding to work from outside my own LAN. I have the following forwarding rule to a local server located at 10.0.1.2: Note that if I ...
0
votes
0answers
28 views

Cannot Upload Files Over A Specific Size to Wordpress

When uploading larger files to any WordPress site running on a local server it fails. If I try outside of the network it works fine, if I switch to the other LAN network running and connect to the ...
-1
votes
1answer
268 views

Need Required Active Directory Ports for Isolated Environment

We have a 100% isolated environment that needs to communicate with our AD infrastructure outside the isolated environment. I need to know all the ports and whether they're incoming or outgoing. These ...
0
votes
0answers
97 views

Issue with Fail2ban and Mikrotik Firewall

OS: CentOS 7.1 At my organization we are currently assessing using Fail2ban with the firewall on our Mikrotik router. I want Fail2ban to communicate any IP flagged as banned to the Mikrotik firewall,...
0
votes
2answers
44 views

How safe is IPtables whitelisting?

I am deploying some VPS and of course, security is a big concern. I read that IPtables whitelisting is the best way to safeguard your machine. So I set up the follwing : echo "Flushing rules" ...
0
votes
0answers
62 views

pfSense Killing Uploads to Any Wordpress Site

I am running a pfSense firewall on version 2.2.6. As far as I remember I have had working rules and have not had any issues uploading to my wordpress sites until this last upgrade. If I try to upload ...
0
votes
2answers
129 views

IPTables: How to log and set a specific log file

Is it possible log all dropped connections by IPTables and set a iptables.log file for logging in /var/log/?