A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

1
vote
1answer
90 views

Does the TCP-UDP-Proxy policy in Watchguard open me to security problems?

I don't remember seeing this policy since it seems to me like an "all ports open" kind of thing. It is set default "tcp:0(any) - udp:0(any)" If I disable this, even web traffic wouldn't work although ...
1
vote
1answer
46 views

Is there any danger in disabling windows firewall on a azure worker role?

I'm trying to troubleshoot a bug on our Azure worker role where we occasionally get the error "Unable to read data from the transport connection: An established connection was aborted by the software ...
1
vote
1answer
78 views

What is the difference between a SPI Firewall and an Application Layer Firewall?

What is the difference between a SPI Firewall and an Application Layer Firewall? In what circumstances would I prefer one over the other?
0
votes
1answer
203 views

iptables to allow input and output traffic to and from web server only

I have an Elastic Search server which seems to have been exploited (it's being used for a DDoS attack having had NO firewall for about a month). As a temporary measure while I create a new one I was ...
0
votes
0answers
383 views

VPN pptp connection Unable to pass through linux iptables

I have set up a windows VPN server behind Linux - Ubuntu box that is working as firewall and proxy server. Now I want people from outside to be able to connect to the VPN server, but the connection is ...
0
votes
0answers
33 views

Reverse web proxy with time constraints

I have a web application which produces several unique URLs of the type http://service.company.com/service.html?type=aaaa&key=jfiZm6u6cW where the last part is a randomly generated key. Each such ...
4
votes
4answers
335 views

Why on linux machines, any packets do not pass except icmp, but correctly pass on windows

There is a cluster on proxmox. In a cluster have vm - configured router (pfsense). In the our net have Windows and Linux machines. There is the problem: Windows-machines have access to the internet, ...
7
votes
3answers
650 views

What is the ip range of EC2

I'd like to setup a rule to block ssh request from EC2 since I've been seeing a large amount of ssh based attack from there and was wondering if anyone knew what their IP ranges are. EDIT: Thank you ...
1
vote
2answers
380 views

Can't connect to Postgres in production

I'm trying to connect to my Postgres instance on a local IP, which I can connect to with no problem using the psql -h localhost command. However, which trying to run via rails, I get this: $ rails c ...
0
votes
0answers
198 views

Port Forwarding to a VPN Client

I'm looking for some help getting a port forward setup to a VM running Ubuntu 12.04 on my LAN. I can forward the port to the VM successfully and connect to the service over the Internet. But when I ...
0
votes
1answer
57 views

UFW blocking webrick on port 3000

On a ubuntu 10.0.4 server runs redmine. starting webrick with: ./server webrick -e production -b lvps46-173-79-113.dedicated.hosteurope.de -d makes redmine available in browser. as soon as we ...
0
votes
1answer
24 views

What is http+s (firewall settings)

I'm able to configure my firewall settings for http, https and http+s, but I'm not sure what http+s is or could be used for?
0
votes
0answers
87 views

Slow Website Access from China

I just made a wordpress based website for a client that operates in China. The website is being cached completely by W3 Total Cache and served very fast in Europe (where our main server is located). ...
2
votes
4answers
4k views

Can't disable firewall on CentOS 6.3

I'm trying to disable the firewall with no luck. I have tried: Going through System->Administration->Firewall and disabling it there. Running 'iptables -F' and then /etc/init.d/iptables save I've ...
7
votes
3answers
5k views

Disabling Windows Server 2008 firewall

I applied a Windows firewall rule that blocks all tcp connection and thus kicked myself out of remote desktop on a dedicated server. I managed to get into recovery via VNC, which is basically a ...
12
votes
10answers
126k views

How can I find out if a port is opened or not?

I have installed Apache server on my Windows 7 computer. I was able to display the default index.php by typing http://localhost/ in the address line of my browser. However, I am still unable to see ...
1
vote
0answers
174 views

ClearOS Proxy - Block all traffic but two sites and 3 DMZ ips

I've been trying to two days now to get ClearOS to do a proxy setup for my network. This is what I need to do: I need to block all outgoing traffic no matter what it is, all ports and HTTPS as well ...
0
votes
1answer
106 views

correctly setup PF with loopback interfaces for nginx proxy

I am trying to run couple of freebsd jails for my web server and application server, which is running node.js I have one network card (igb0) with a custom loopback interface (lo666) for which i have ...
0
votes
1answer
1k views

Connecting To FMS Server Issues

I am trying to get my computer to connect to an Adobe Connect server but I have had no luck. The error that Adobe is telling me is "ERROR: FMS Server did not return correctly!" and have done some ...
1
vote
1answer
617 views

Assign static IPs to tap clients in pfSense's OpenVPN server

I am trying to set up a pfSense server with OpenVPN. The OpenVPN will use the tap interface, tun clients are no option for us. The LAN network is 10.0.0.0/24, the pfSense machine is 10.0.0.10 and ...
0
votes
1answer
65 views

iptables blocks ip address even though it is specified to allow it. Why? [closed]

I'm at a loss to explain why these rules don't have the same effect as whitelisting ip addresses. Can anyone tell me why? # /etc/hosts.deny ...
1
vote
1answer
2k views

How can I debug Cisco Firewall ASA “Dispatch Unit” very high CPU utilisation from ASDM?

I have recently had my first firewall installed so I am very new to this whole situation. I am finding that Dispatch unit is becoming overloaded and it would appear to be the reason I get serious ...
-5
votes
1answer
109 views

Blocking facebook and other social networking sites from corporate LAN whilst maintaining an audit trail of all sites visited [closed]

I am setting up an office LAN, and I want to give it internet access but i want to be able to do the following: Maintain a black list of sites not to visit (e.g. facebook and other social sites), so ...
0
votes
1answer
73 views

Correct way to open ports for fastcgi using iptables

I'm running a server with nginx and fastcgi. I'm using TCP sockets for fastcgi rather than Unix sockets as I've read that this scales better. The fastcgi server is running on fastcgi://127.0.0.1:9000. ...
21
votes
3answers
15k views

iptables port redirect not working for localhost

I want to redirect all traffic from port 443 to the internal port 8080. I'm using this config for iptables: iptables -t nat -I PREROUTING --source 0/0 --destination 0/0 -p tcp ...
4
votes
7answers
17k views

How can I block Spotify on our company network?

How can I block Spotify on our company network? Unfortunately it's killing our bandwidth and the effect is really serious.
1
vote
2answers
482 views

How do I allow (remote) IISReset through the firewall on Win Server 2008

I'm trying to run the following, to reset IIS on a remote machine. IISReset <remoteMachine> If I disable the domain firewall, everything works fine. With the firewall enabled, I get ...
0
votes
2answers
386 views

Windows 8 - Firewall Issues from Command Line

I created the following script basically to block absolutely everything and only allow through what I want, however it's not allowing through what I like in regards to the internet. Can anyone see an ...
1
vote
2answers
1k views

opening port 80 on Ubuntu AWS

I'm running a tomcat server on an ubuntu machine hosted in an AWS instance. I can reach the server via public_ip:8080 but when i change the listening port on server.xml from 8080 to 80 connection is ...
0
votes
1answer
182 views

Deploy Advanced Firewall Rules via GPO - How to avoid merging?

I am trying to deploy a set of advanced windows firewall ACLs to several 2008 R2 servers. I would like to (i have to) ensure that no local or old rules are getting applied. So I set "Apply local ...
0
votes
2answers
92 views

Hardware firewall for Linux web (and mail) server allows UDP connections to any local port from remote ports 53 and 123 — is this safe?

I'm trying to tighten security on a linux web server. It has a hardware firewall with a default rule set and I noticed two rules that concern me: remote port: 123; local port: ANY; protocol: UDP; ...
0
votes
1answer
82 views

Can't connect to remote server. Socket error = #2000

I don't know what went wrong, but I get a Timeout after logging in to the proftpd server. STATUS:> [12.05.2014 16:30:24] Getting listing ""... STATUS:> [12.05.2014 16:30:24] Resolving ...
3
votes
2answers
4k views

Can I use pfsense as a DNS server?

If I have a pfsense based firewall in front of my servers, can I use this also for DNS? Thanks
0
votes
0answers
29 views

Windows server 2003 SP2 firewall - limit inbound connections

I am trying to make the server running Windows 2003 Server SP2 to allow connections only from the local network or and couple of specific remote IP. I have experience using Linux only and therefore I ...
1
vote
1answer
699 views

Permission denied accessing windows firewall

It doesn't matter who I am logged in as I am getting the following error in the mmc console when I launch the firewall advanced settings There was an error opening the Windows Firewall with Advanced ...
2
votes
1answer
94 views

Whitelist outbound traffic in VPC to changing IPs

I'm working with EC2 servers in a VPC where we'd like as little outbound traffic as possible, and for all outbound traffic to be explicitly whitelisted. However, based on EC2 security groups or ...
4
votes
6answers
806 views

Skype in a business - what's your view?

We currently don't allow Skype usage on the LAN. The reasons ultimately come down to that great cover-all of "security", though I have to admit that these days I'm not sure if Skype has turned into a ...
4
votes
1answer
89 views

Ban an IP when the server received an amount of data from it

What I need : There are many result for adding a drop rules by an amount of request per laps of time, but I need to drop by received byte count from a particular address over a period of time. ...
1
vote
1answer
93 views

How do you prevent an Active Directory 2012 R2 Domain Controller from advertising the domain on a specific interface?

Short version: How do you prevent an Active Directory 2012 R2 Domain Controller from advertising the domain on a specific interface? I want that network to not be flagged as a domain network, and no ...
-1
votes
2answers
145 views

block all packets in windows 7 (so nothing appears in wireshark)? Can anything locally installed do it?

is it possible to block all packets in windows 7, so that nothing appears in wireshark? I have tried choosing Block all for incoming. for outgoing, I see it has no block all option, just a block ...
2
votes
1answer
59 views

iptables traversal and the chain policies, manual editing

I like editing the iptables file manually, but there's something that confuses me a bit. From how I have understood iptables from the manual, it traverses the rules from top to bottom, and if no ...
0
votes
0answers
487 views

[SOLVED ]Openvpn routing for lan to lan through tun

I am trying to setup an OpenVPN tun to connect two lan's The open vpn connection is up and working but there is a problem with my routing or nat or something. What I need is an example of what a ...
-1
votes
1answer
43 views

Firewall Based on NIC

I have an IIS 8.5 Server running on Windows Server 2012 r2. The server itself has 2 network cards. Rewrite: Can you block ports based on a network adapter? IE: I have two network adapters, both ...
1
vote
2answers
83 views

Give internal access to external client

I am newbie in the networking issues. I got a question for which I don’t know how to solve. I have my internal network that has a fixed IP (only accessed by VPN) and I have a server where I put some ...
0
votes
1answer
109 views

Block ip forwarding for specific remote ip address

I use ubuntu as gateway for several hosts. I need advise how to block ip forwarding for specific ip address or specific ip range? I tried to block ip via ufw deny rules, but it looks like ip ...
2
votes
3answers
2k views

Proper network configuration for a KVM guest to be on the same networks at the host

I am running a Debian Linux server on Lenny. Within it, I am running another Lenny instance using KVM. Both servers are externally available, with public IPs, as well as a second interface with ...
1
vote
1answer
1k views

Why won't vyatta allow SMTP through my firewall?

I am setting up a vyatta router on VMware ESXi, But I see to have hit a major snag, I could not get my firewall and NAT to work correctly. I am not sure what was wrong with NAT but it "seems" to be ...
-1
votes
1answer
1k views

Remote Desktop working in LAN, but not over WAN

We have a server with Remote Desktop enabled, but we can only access the server from inside the LAN. Port forwarding on port 3389 is set up on the gateway/modem (Comcast SMCD3G) and canyouseeme.org ...
1
vote
1answer
53 views

Websever behind Sonicwall, Gateway Timeout

I am stuck here, I have a Cradlepoint CBA750B in IP-passthrough mode connected to x1 on my Sonicwall NSA220. Behind the Sonicwall I have a webserver on the LAN. I have X1 set to use DHCP to get the ...
3
votes
7answers
2k views

Good linux firewall? [closed]

I am looking for a good firewall for debian 5 which is a web server. Are there any good options apart from iptables? Thanks