A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

-1
votes
1answer
24 views

SSH port blocked EC2

I had installed Tomcat on my EC2 instance . However i was unable to access it using my public IP:8080 . So I followed the instructions mentioned in the post ...
0
votes
0answers
37 views

Ip6tables firewall make server unreachable on reboot

I am trying to set up a very basic firewall on my server with iptables and ip6tables. My rules get loaded on restart with systemD. The OS is ArchLinux. When I just setup iptables everything works. ...
2
votes
1answer
94 views

Need recommendations on Firewalled DMZ design for PHP web server on Linux

The 3 options we are considering are listed below. Which one is best or is there a better solution we didn't consider. All servers are linux with nginx. Do you see anything particularly wrong with ...
-1
votes
1answer
53 views

remote firewall configuration on centos7

I'm using Centos 7 and am trying to configure my firewall remotely. When I run firewall-config & a window comes up but remains blank. I cannot kill the window with the X close button so I need to ...
0
votes
2answers
82 views

2 lans on the same switch safe? [closed]

I have a modem with 5 ports. Each port gets a static IP address from the web. Basically if i ping one of those static IP addresses from home i am pinging directly one of those ports. On the first ...
1
vote
3answers
2k views

Automatically block IP who requests certain URL

One of our client's PHPBB (surprise, surprise) got hacked. I have taken it down by simply changing the directory name for now however the address example.com/forum/* is still getting hits from ...
0
votes
4answers
14k views

Global VPN Client Can't Acquire IP Address

We have a Sonicwall Pro 2040 and are having issues with our VPN clients. None are able to connect as they all stop at the point of acquiring an ip address. I have tried all the ideas that I have ...
1
vote
2answers
32 views

Is it possible to limit which hosts are accessible through SSH tunneling?

I have a box that runs both an ssh server and a webserver. I would like to prevent people with ssh accounts from using this box as an anonymous proxy to the rest of the Internet (e.g. by creating a ...
0
votes
2answers
4k views

Can not open port 3306 on Ubuntu using iptables

I am trying to open port 3306 (for remote mysql connections) on my ubuntu 12.04 server machine but for the life of me can't get the damned thing to work! Here is what I did: 1) list current firewall ...
1
vote
1answer
47 views

Benefits of separate firewall product over AWS Security Groups for spam requests

I have a question that is an extension of this one: Examples where an AWS Security Group is not sufficient as a firewall?. Initially, the answer in that question made sense to me and I was working ...
-1
votes
1answer
67 views

Find source(s) of dropped packages in Cisco ASA GUI

we are using pair of ASA 5520 Firewalls with ASDM 6.4. Can someone enlighten me, how to find out which is(are) the source or target ip(s) when we got a hugh bunch of dropped packages come in (by ASDM ...
-1
votes
1answer
59 views

Firewall throughput [closed]

I saw on multiple site vendor sites about firewall throughput in 1518/512/64 bytes UDP packet and each result from 1518/512/64 bytes UDP packet is 1xxx/smaler than 1xxx/significantly smaller than ...
0
votes
1answer
12 views

How to block or forward packets with custom and dynamic rules

I would like to block or forward TCP requests from clients to WAN according to source and destination ip addresses. The problem is that this ip couples are stored in a mysql database and they can ...
0
votes
1answer
50 views

How to disable network access for a user on Linux?

Trying to disable the network access for the user: [root@notebook ~]# iptables -I OUTPUT -m owner --uid-owner tempuser -j DROP [root@notebook ~]# ip6tables -I OUTPUT -m owner --uid-owner tempuser -j ...
0
votes
1answer
82 views

Large number of ssh login attempts [duplicate]

I logged into a CentOS box today to find the following" There were 11126 failed login attempts since the last successful login. Last login: Tue Mar 10 14:36:47 2015 from X.X.X.X Thats 11 THOUSAND ...
0
votes
0answers
38 views

Can't Remote Desktop on LAN, Firewall Rules in Place, Yet Packets Dropped

I've banged my head for a few hours on this. I'm beginning to move several computers to a new subnet, all Windows 7, all domain joined. On the original subnet (192.168.145.X) everything works as ...
-2
votes
1answer
34 views

DNS ATTACK \/ or some kind of an error, i don't know

I am getting those errors in my CSF firewall, I would like to know how can I stop it. is it type of an attack? also if it is, how can I stop it? Mar 11 22:48:57 root named[7598]: client ...
1
vote
4answers
5k views

How to add a firewall rule with PowerShell?

I made a very simple script to enable Remote Desktop connections on a computer: # Allow Remote Desktop connections (Get-WmiObject -Class "Win32_TerminalServiceSetting" -Namespace ...
1
vote
0answers
122 views

Is it advisable to disable URL Path Length restrictions from firewall?

I noticed in early August that I was unable to get to SharePoint Online sites, most Microsoft Update pages, Microsoft Support pages, Microsoft.com, etc. as they all appeared to be returning a blank ...
0
votes
1answer
31 views

Connecting SMTP externally

I have got a local smtp server to relay to Google smtp so as to increase the limit of email recipient from 2,000 a day to 10,000 a day for specific users. I can send through this local smtp ...
1
vote
0answers
29 views

Stop Outbound SYN Scan

Hello I run a VPN company, and recently my host has been sending me these complaints that are likely coming from a user. I am not sure how to identify the user, if I could just do that I wouldn't ...
0
votes
1answer
109 views

Asterisk Firewall access Rules

I have a questions regarding the firewall rules for Asterisk VoIP server. I have a restricted access to UDP/TCP port 5060, which seems to be blocking calls. I want to make sure that my VoIP Server ...
0
votes
1answer
29 views

ssh port is different from what is connected

Ok, so here's the deal. I setup an Iptables rule as follows: IPTABLES -A INPUT -p tcp --dport 51722 -j ACCEPT and if I do systemctl status sshd.service, I get the following: Server listening on ...
0
votes
0answers
68 views

Can't connect Windows Azure VM with MySQL On-premise

I have a VM on Windows Azure with Windows 2008 R2, and I'm trying to open a connection to an on-premise MySQL database hosted on another network. We cleared the VM's public IP (the one displayed on ...
0
votes
0answers
14 views

What is “application-aware” in the context of vShield?

Reading vShield's overview, it is defined as "a hypervisor-based application-aware firewall solution for virtual datacenters". In my limited exposure to the world of firewalls, an "application-aware" ...
0
votes
0answers
155 views

SonicWall Routing Between VLANS

We have a sonicwall NSA 3500, x4 has 2 vlan interfaces so x4:v300 and x4:v301. Each vlan has an IP v300 is 192.168.100.1 and v301 is 192.168.101.1. I then have x4 connected to a layer 2 only switch ...
-1
votes
2answers
48 views

How can I enable protocol traffic with firewalld?

I need to allow Protocol 50 (esp) traffic for ipsec. I can do: iptables -A INPUT -p esp iptables -A OUTPUT -p esp How could I do this with firewalld instead? Same question closed on StackOverflow ...
0
votes
1answer
196 views

I cannot connect to OpenSSH server running on Ubuntu server from Git bash running Windows, through Cyberoam firewall in network

Situation: I am trying to connect from OpenSSH client inbuilt with Git Bash running on Windows 7 professional x64 to OpenSSH server that runs on Ubuntu Server LTS 14 x64. Both of which are over the ...
0
votes
0answers
24 views

outlook doing remote portscanning

A while ago I switched my mailbox on another domain and configured outlook with an exchange server on that domain. Recently for some strange reason my hosting provider has been complaining that ...
0
votes
1answer
35 views

PSAD IPTables logging error

I installed PSAD on my Ubuntu server and then set the IPTables accordingly. But I still get this error by email: You may just need to add a default logging rule to the /sbin/iptables 'filter' ...
-4
votes
2answers
246 views

iptables: open port 25 CentOS 7 [closed]

I have problems opening port 25 for sendmail on my CentOS 7 machine. Here's my iptables configuration: *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] -A INPUT -m state ...
4
votes
4answers
2k views

Is there a way to see what is actually filtering TCP port communication?

nmap -p 7000-7020 10.1.1.1 Will output all the filtered ports Starting Nmap 6.40 ( http://nmap.org ) at 2015-03-04 12:18 EET Nmap scan report for 10.1.1.1 Host is up (0.00091s latency). PORT ...
1
vote
4answers
215 views

AD Domain Controllers being Slammed

My Windows Server 2008 Domain Controllers are getting hundreds of log in attempts per minute. For the most part the IP addresses are not in the Event Log however the ones that do occasionally show up ...
-1
votes
1answer
29 views

web application audit task require my remote IP to be allowed on application network firewall [closed]

I want to audit a web application which is hosted on a web server sitting behind a cyberoam firewall. My task is to run a scan from my remote machine which has ISP MTNL broadband. My machine gets a ...
0
votes
1answer
53 views

What firewall configuration do I need for SFTP to be able to put files on a remote server

I have a situation in production where SFTP (using Putty PSFTP) is working when I connect and list files on a remote server but put and get fail with error permission denied. In my dev environment I ...
2
votes
2answers
707 views

Why is fail2ban not banning this attack?

I have fail2ban installed to ban bruteforce attempts on the ssh password. There are business requirements for not disabling password authentication on this machine. fail2ban was installed using the ...
-3
votes
1answer
21 views

Simple to use VPN Firewall [closed]

In my company we use a Cisco ASA 5505 Router with the VPN, Firewall setup, and we route IP and VOIP traffic through it. I can only log into the router from a single computer due to the quirkiness of ...
15
votes
11answers
160k views

How can I find out if a port is opened or not?

I have installed Apache server on my Windows 7 computer. I was able to display the default index.php by typing http://localhost/ in the address line of my browser. However, I am still unable to see ...
0
votes
2answers
2k views

How do I block IP addresses in SuSEFirewall?

Does SuSEfirewall in OpenSuSE 11 provide an easy way to block all traffic from a list of IP addresses? Ideally just a textfile into which I can put all IP addresses I want blocked, otherwise some ...
-3
votes
1answer
75 views

iptables rules for blocking specific packets [closed]

Im using the following iptables rule: iptables -A INPUT -p tcp -m tcp --tcp-flags PSH,ACK PSH,ACK -m length --length 52 -m state --state ESTABLISHED -j DROP It does it's job for blocking the ...
1
vote
0answers
32 views

Windows Server spamming devices on other subnets on port 445

I have a Windows Server 2012 that every few seconds sends packets destined for port 445 on local IPs on other subnets. The IPs on other subnets it is trying to reach are devices such as VoIP phones, ...
1
vote
0answers
93 views

Fortigate 60D - Empty log and report

Environment: Fortigate 60D Forti OS 5.0 I can not see any log or report in the firewall. I have already activated forticloud and I recieve empty reports. Is there something that we have to ...
0
votes
1answer
68 views

Setup fail2ban with apf

Along with BFD we have recently installed fail2ban on our server, it is CentOS and it uses APF to block IPs. I have hunted online on how to get the two to work however when an IP is blocked by ...
0
votes
1answer
92 views

How do I open specific ports on Linux (an AWS instance of RHEL v. 7)?

I'm using RedHat version 7. My AWS instances are in a security group with ample permissions for inbound connectivity. I can do Yum updates. The servers can ping each other. I can transfer files ...
1
vote
3answers
563 views

Server Firewall preventing sending of email [closed]

The firewall on my VPS appears to be preventing my site from sending email. It was working fine until the end of last month. My hosting provider (Webfusion) has been next to useless. I am able to ...
4
votes
2answers
240 views

Standard Firewall and Network Change Testing Procedure

I am looking for a standard that advises on the best practice for testing of the following situations: Network Changes Firewall Changes Does any standard exist? If so, please note where I can find ...
0
votes
1answer
44 views

Why the firewall seems to work intermittently?

I've this iptables rules on first server which has the role of a client connecting to a second mysql server through LAN adapter. *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT ...
1
vote
1answer
53 views

Any idea why SFTP works differently based on the client machine/network

I have an odd situation. From Computer A with PSFTP.EXE (putty sftp client) I can connect to a remote sftp server and use dir and chdir to browse around. If I try to get or put files I get a ...
0
votes
0answers
37 views

Re-routing packets back inside the network on a SonicWall firewall

I have two wireless networks, one guest network which uses a 10.0.0.0 network to assign IP address to guests and one internal one who gets the IP address from the internal DHCP (let's say ...
0
votes
1answer
3k views

Plesk 11 Set firewall rules manually [closed]

I have a big spamming problem on my site from ip addresses coming from Asia. My website is designed for people in France and Canada, so I want to block all ip addresses from Asia to avoid spam. I ...