A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

0
votes
1answer
138 views

Correct OpenWRT configuration for iptables PREROUTING rule

I've recently switch my router firmware from Tomato to OpenWRT. I had the iptable commands below which would intercept http requests to an internal ip (192.168.1.254) on port 80 and redirect to a ...
1
vote
0answers
64 views

Cannot connect to remote MySQL server (RDS)

When I am trying to connect to RDS from my vps, it says connection refused. When I tried connecting it from local or other vps, it worked fine. I figured out that it must be a firewall issue on my ...
0
votes
1answer
104 views

Is there a local “firewall” to block by “X-Forwarded-For” IPs behind the reverse proxies?

The situation is quite typical. I'm using CentOS + Apache(s) behind a Load-balancer for the WebSites. At this point, let's assume i don't have any access to the Load-balancer (or) let's forget ...
28
votes
8answers
7k views

Block employee access to public cloud

First of all, let me state that this is not my idea and I don't want to discuss whether such an action is reasonable. However, for a company, is there a way to prevent employees to access public ...
1
vote
1answer
26 views

CentOS Firewall Contingency

What happens if the firewalld service fails to start on CentOS 7? Will the network still function? Will firewall rules still be partially enforced? If the firewall rules are not enforced, is there a ...
14
votes
3answers
30k views

Windows Advanced Firewall: What does “Edge Traversal” mean?

this should be a really simple one: In Advanced Windows Firewall on Windows Server 2008+, Properties > Advanced, what does "Edge Traversal" mean? I Googled it, of course, and was unable to come up ...
3
votes
2answers
6k views

User Friendly port knocker (port knocking client) for Windows? [closed]

It seems "It's me" is the most popular port knocking client for windows… Except… it sucks. It works for console-savvy users such as me, but, unsurprisingly, all my users (3 people) hate console ...
0
votes
7answers
5k views

Firewall rules to block MSN Messenger?

What firewall rules do I need to apply to block MSN Messenger? I've applied the following: msgr.hotmail.com messenger.hotmail.com gateway.messenger.hotmail.com login.live.com I've also blocked all ...
1
vote
1answer
97 views

iptables to allow only ssh and https

I'm trying to configure the iptables on my device in order to allow only SSH and HTTPS traffic. In particular, the HTTPS protocol is used to call some REST API toward a remote server from a java ...
0
votes
2answers
43 views

Making server accessible on local network without opening ports

I'm responsible for operating the server for a small startup game developer based at my university for my placement year - mostly because I'm the only one of us with any network knowledge to speak of. ...
0
votes
0answers
44 views

Block Windows Service Access to Remote SQL Server with Firewall

So I've got a fun firewall question. We have a windows service that we have running on a Windows Server 2012 instance. It is connecting to a remote SQL Server that we do not own, among other things. ...
0
votes
1answer
43 views

Watchguard blocking ports

I want to block the whole Internet for particular hosts. In this case I used policy 'Any" which basically blocks every single port (tcp+udp I believe). In FROM field I put particular IP address from ...
0
votes
0answers
32 views

Windows network share not acessible

This question might appear to be a duplicate but I've not found a solution and have tried a multitude of different "solutions" which have not worked. Quick description of the situation: I'm in need ...
1
vote
1answer
96 views

How to assign traffic priority with Sophos UTM 9?

I'm trying to assign traffic prioritization with a Linux machine (Debian) running Sophos UTM 9. I can see (and have read) that I can guarantee a service (in this case a specific TCP port) an amount ...
0
votes
1answer
4k views

Iptable l7-filter installation guide and block p2p

I would install l7-filter to block P2P torrent, First of all , I have a linux debian. I installed by the below command apt-get install l7-filter-userspace And then run command iptables -I FORWARD ...
1
vote
2answers
19 views

How to write IPTables policy to affect multiple ranges in a group?

I am trying to block the entire Internet on all ports, but allow a multiple ranges to connect on specific ports. I want this ruleset to apply to outbound connections as well (using REJECT instead of ...
1
vote
2answers
38 views

Increasing firewall throughput but constant traffic

I can't understand, why the firewall throughput of my server is significant increasing during the last few days while everything else, including traffic, remains on it's normal level. What scenario ...
0
votes
1answer
134 views

nginx naxsi $URL_X doesn't work

Recently recompiled my NGINX with a NAXSI module. Now setting up the white lists but the $URL_X functionality doesn't seem to work at all. Generating Incorrect line BasicRule wl:1312 in NGINX ...
0
votes
0answers
36 views

Remote Desktop Connection fails after logging on and off sucessfully

this one has me scratching my head. I've been RDP'ing into a remote server running Windows Server 2008 R2 successfully for a long time. Recently I tried to add a VPN role to the server but when I ...
0
votes
0answers
15 views

How to allow DHCP between 2 networks using Shorewall?

I have a server with hyper-v and 3 networks: eth0 is virtual, eth1 is physical, eth2 is extranet from ISP. Virtual network has a DHCP running and all virtual machines can reach it fine. But not the ...
0
votes
0answers
26 views

Can Someone Explain Why this firewalld Command Does Not Work as Expected?

matiu asked the question of how they can do port forwarding for a single source IP address. You can read the original question here. I provided the following commands as an answer. I based my answer ...
2
votes
0answers
39 views

Can't firewalld replace iptables?

I used Iptables on Centos 6.5 and tried to translate iptables rules into firewalld rules on centos 7. However, with firewalld, i have discovered i am unable to drop packets in invalid states create ...
-2
votes
2answers
81 views

When should a port 9040 used for? [closed]

A firewall rule for my web app ( python) is created with allowed protocol tcp:9040. I added my domain and created DNS zones, however I still don't get to see my app when I type my domain in the ...
1
vote
2answers
90 views

Port forwarding in pfSense not working

I recently set up a pfSense router and can't get any port forwarding to work from outside my own LAN. I have the following forwarding rule to a local server located at 10.0.1.2: Note that if I ...
0
votes
0answers
13 views

Static NAT Issue

I have a server inside my network that I want users to be able to access from the outside. To this end, I have setup a static nat between my internal address for this server (10.7.64.27) and one of ...
1
vote
2answers
77 views

Server IP is showing Firewall IP

From server 2008 r2, I check "what is my IP address", instead of showing my server IP, it showed my Firewall IP. How to rectify this.
-1
votes
1answer
1k views

Configure clients to navigate through specific wan. Pfsense

I have a machine with a pfsense running. It is configured with three ethernet cards. LAN 192.168.2.1/21 WAN1 200.41.X.2/24 WAN2 200.41.X.3/24 ISP Gateway 200.41.X.1 This is a connection with 5 ...
0
votes
0answers
15 views

Virtual Switch Stack connections to Edge Network

I have a pair of Cisco SG500 switches stacked together as a part of my collapsed core design. I would like to connect this stack to the edge network which is comprised of two Dell Firewall/SonicWall ...
1
vote
0answers
33 views

UFW blocks permitted ports

I use ufw utility to manage my firewall for the system which runs web and mail services. The rules are follow: Status: active To Action From -- ...
1
vote
2answers
43 views

Route traffic in a public network

I have 3 stand alone CentOS servers on same hosting provider. The hosting company can't offer me a firewall for this devices, only iptables. So I want to buy another server and make this server a ...
1
vote
1answer
28 views

Scalable remote access gateway for 20K+ servers

Consider a worldwide distribution of thousands of embedded servers, and clusters of servers behind firewalls that sysadmin wants to access remotely. With a focus on a remote access for login and ...
0
votes
0answers
27 views

Cannot Upload Files Over A Specific Size to Wordpress

When uploading larger files to any WordPress site running on a local server it fails. If I try outside of the network it works fine, if I switch to the other LAN network running and connect to the ...
0
votes
0answers
84 views

Issue with Fail2ban and Mikrotik Firewall

OS: CentOS 7.1 At my organization we are currently assessing using Fail2ban with the firewall on our Mikrotik router. I want Fail2ban to communicate any IP flagged as banned to the Mikrotik ...
0
votes
2answers
28 views

Accessing an FTP share via UNC path?

I have an FTP share configured on a server that I can access successfully using ftp://xx.xx.xx.xx/. One of my tools (Release Management) requires a UNC path for access: (it won't let me post ...
1
vote
0answers
414 views

Client can not access some HTTPS through Squeeze gateway

I have a gateway (+firewall +proxy) set up on a Squeeze box with 2 NICs. The problem is the client cannot see some of the HTTPS (for example they can go https://mail.google.com but not ...
0
votes
2answers
41 views

How safe is IPtables whitelisting?

I am deploying some VPS and of course, security is a big concern. I read that IPtables whitelisting is the best way to safeguard your machine. So I set up the follwing : echo "Flushing rules" ...
2
votes
8answers
40k views

Active FTP client blocked by Windows Firewall on Windows 7

I have an application that runs as a service and contains an FTP client. It needs to connect to an FTP server that only supports Active FTP. When I attempt to get a list of files or download a file, ...
0
votes
0answers
57 views

pfSense Killing Uploads to Any Wordpress Site

I am running a pfSense firewall on version 2.2.6. As far as I remember I have had working rules and have not had any issues uploading to my wordpress sites until this last upgrade. If I try to upload ...
0
votes
2answers
101 views

IPTables: How to log and set a specific log file

Is it possible log all dropped connections by IPTables and set a iptables.log file for logging in /var/log/?
0
votes
2answers
62 views

IPTables: apt-get and wget not working

When resetting IPTables, the apt-get and wget command functions correctly and also downloads what I want. But once I activate this firewall, it isn't functional. Pings still work. I want to allow all ...
0
votes
0answers
38 views

Can't connect to VNC server via OpenVPN

I've got the problem with connecting via VNC to remote computer. Connection goes through OpenVPN and I'm routing 5900 port to localhost.. ssh -p(port) -L5900:vpn adress of machine:5900 ...
16
votes
1answer
20k views

Can I use ufw to setup a port forward?

Im currently using ufw to enforce some basic firewall rules. Is it possible to also use ufw to do port forwarding? Specifically im wanting to forward incoming traffic to my server (same machine ...
1
vote
1answer
31 views

app runs much slower on VPN [closed]

I have an app that accesses the internal network at work. I can run it from home via VPN but when I do, it runs much slower. I suspect that it is getting timeouts caused by the firewall and somehow ...
1
vote
0answers
61 views

Correct Azure VM firewall settings for Azure SQL Database v12

One of the recommendations when a client runs on an Azure VM and needs to connect with your Azure SQL Database v12 is to: Ensure that the port ranges of 11000-11999 and 14000-14999 on your Azure ...
0
votes
1answer
40 views

How to connect to ftp server from within LAN when the router port-forwards external connection away from it

Sorry for the long question. What it means is this: I am managing a small LAN that is protected by a router. router 192.168.1.1 server 192.168.1.9 client 192.168.1.2 client ...
5
votes
2answers
3k views

Secure NAT setup with iptables

I have a Debian running device that needs to act as an internet-gateway. On top of that I want to provide a firewall that not only blocks inbound traffic, but also outbound traffic. And I figured ...
1
vote
2answers
369 views

How can Rackspace cloud servers be set up with an EC2 type approach to firewalls?

I'm looking at using Rackspace cloud servers for some Windows based web hosting, and having used Amazon EC2 for similar projects before, I was disappointed to find Rackspace don't employ the EC2 ...
-2
votes
2answers
124 views

How can I find out if a port on a remote server is open as well service listening status on it?

I want to check if a set of ports are opened or closed on some remote servers. I went through various discussions on the subject and most of the people suggested to use nmap, nc and telnet ...
-1
votes
1answer
37 views

IPTables: Does blocking spoofing, affect any services? [closed]

Do these rules affect any services/applications? Will apt-get and others still work? - iptables -A INPUT -s 10.0.0.0/8 -j DROP - iptables -A INPUT -s 169.254.0.0/16 -j DROP - iptables -A INPUT -s ...
0
votes
0answers
27 views

Windows Firewall - Block IP address

The configuration is exactly as following: I am absolutely certain that 192.168.2.6 is the correct IP address, yet the according computer remains able to access shared files. Where could I go ...