A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

0
votes
0answers
29 views

AWS: EC2 VPC blocks outbound requests

I have an EC2 instance in VPC and I managed to break the security group rules. I made a new security group that allows all protocols from anywhere and any port, thinking that it would open up ...
3
votes
1answer
31 views

UFW - Rules by Service Versus Port and Protocol

What is the difference between creating allow/deny rules via a service versus a port and protocol? For example: ufw allow ssh versus ufw allow 22/tcp or even, ufw allow ssh/tcp. Which is the 1) ...
0
votes
0answers
25 views

Not able to block site on pfsense firewall with squid+squidgaurd

Currently running pfsense latest version and set the transparent proxy using squid with squidgaurd for filter but https is not enable because this feature not work well. So that I want to block sites ...
0
votes
0answers
10 views

SOCKS4 can't handle connections all going through the same (open) port

I live behind a firewall and I managed to proxy anything I do to the proxy behind the firewall. The Port 27032 is open and still, if there are too many connection requests at a time, the proxy can ...
3
votes
1answer
79 views

Route Between Two Virtual Interfaces on one NIC Linux

I have an Ubuntu machine that is my firewall The Machine has 2 NIC Cards. eth0 and eth1. eth1 is connected to a modem that gives it an IP of 10.10.1.X eth1 is required to provide DHCP on 192.168.2.X ...
5
votes
1answer
87 views

Do I need to open any port for NTP synchronization to work if both outgoing and incoming are blocked on ufw?

One of my production servers, UFW configuration is as follows: Status: active Logging: on (low) Default: deny (incoming), **deny (outgoing)**, disabled (routed) New profiles: skip To ...
5
votes
2answers
341 views

How to allow UDP broadcast between interfaces on a Cisco ASA 5506-X

I have a CISCO ASA 5506-X with 4 configured interfaces and a set of access-lists etc. It is configured via CLI and is running in routed mode, not transparent. Everything is running well, but now I ...
0
votes
0answers
56 views

Connection timed out when using ssh to connect to a machine on a pfSense subnet (using port forwarding)

I get a connection time out when I try to ssh into a machine inside a pfSense firewall network. The computer I am connecting from is on the same subnet as the pfSense firewall. That is my computer's ...
0
votes
0answers
127 views

HTTPS web filtering issue in endian

I am running endian firewall latest version and setup the web transparent proxy with enable the https filtering and installed the certificate in the client system. If i enable the https filtering then ...
3
votes
2answers
108 views

EC2 Security Group, restrict inbound access by hostname

I have written a web hook for PayPal IPN and I only want to allow access from PayPal servers on Port 80/443 to the EC2 instance hosting the end point. In the EC2 security group console I can only ...
-2
votes
1answer
101 views

Hide my Linux machine from traceroute but still allow ping [closed]

i have a linux server running RedHat and i want to make it pingable but invisible to traceroute/tracert. i set some iptables rules but whatever i try is either block or allow both ping and traceroute. ...
0
votes
0answers
19 views

Guardian not found in smoothwall express 3.1

I have download latest version of smoothwall express 3.1 iso and install on virtual box but it's do not have Guardian web filtering. Is it need to install additionally ?
0
votes
1answer
31 views

IPTABLES ban ip if more than X conn per second

I'm creating a small firewall with iptables that limits the max simultaneous connections per IP to 40. So this is my situation: iptables -A INPUT -p tcp --syn --dport 1234 -m connlimit ...
0
votes
1answer
74 views

How does CT_LIMIT (the csf firewall setting) work?

I've been wondering if the csf firewall counts the connections for the last CT_INTERVAL seconds and then compares them to the CT_LIMIT value, or it just counts the current (at the moment) connections ...
1
vote
3answers
40 views

How to deny all the communications between our server and particular domain and its subdomains?

Let's say we don't want our server (any program running on it) to talk to example.com (any IP address that this DNS name can happen to be resolved into) and anything like *.example.com etc. Both ...
1
vote
1answer
52 views

Apache log filled with Proxy errors from attacking ip's

I have these errors in Apache log... proxy:error] [pid 13317] (110)Connection timed out: AH00957: HTTP: attempt to connect to 210.86.231.64:80 (*) failed [proxy_http:error] [pid 13317] [client ...
2
votes
2answers
86 views

How to require all network activity to pass a KVM guest firewall before reaching the host?

Most of the information I've come across tends to set up a KVM firewall using a bridge connection. From my understanding it is a security risk if network traffic can reach the host without having to ...
0
votes
1answer
41 views

View trace route through interface

I would like to know if is possible to view the packet hops after a firewall through interface. Lets suppose that I have a firewall that block UPD or ICMP, so when I traceroute something I get this: ...
0
votes
2answers
99 views

iptables REDIRECT works only for first packet

i need to redirect all UDP packets with destination port 15000 to port 15001 if the packet contains for example the string test. i have these two simple rules: iptables -t nat -A PREROUTING -i eth0 ...
0
votes
0answers
16 views

One-to-One NAT with Firehol

I use firehol to manage iptables on Ubuntu 12.04. I am trying to set up one-to-one NAT so requests from the internet and my LAN to one of my public IP addresses goes to a specific server. Here is what ...
0
votes
2answers
95 views

How to open the MySQL port only to Amazon RDS for replication?

I have a MySQL database on a dedicated server, that I want to replicate to Amazon RDS to always have an up-to-date backup. For this, Amazon RDS needs to be able to connect to my master MySQL server. ...
0
votes
0answers
16 views

Bandwith quota in private network

We have a private company network with Linux and Windows networks. All traffic to outside pass through a Debian firewall, managed by iptables. We need to set a bandwith quota for every device: we ...
-2
votes
2answers
57 views

Does /etc/host.deny blocks http requests?

If I put the entry into /etc/hosts.deny, would it block all requests from that IP address to my machine (like iptables do), or would it only block access for some applications like SSH?
1
vote
1answer
174 views

SELinux and iptables on a firewall / router

I've come to a point where I need to migrate to a new server. Though I'm aware of the SELinux advantages, is it necessary to keep SELinux enabled when the firewall / gateway is only meant to route ...
0
votes
1answer
129 views

Enable SNMP XenServer 6.5

I want to enable snmp on my servers running xenserver 6.5. I've found a few articles with instructions to do so and the whole process seems pretty straight forward but my question is this - is there ...
-3
votes
3answers
114 views

How to disable UFW ubuntu

I enabled the UFW firewall using SSH on my server at Digital Ocean running sudo ufw enable. and forgot to allow the ports for SSH, FTP, ... (but allowed port 80). How can I SSH into the server or ...
0
votes
0answers
267 views

(PCI-DSS, APF) Firewall UDP Packet Source Port 53 Ruleset Bypass?

I am handling vulnerabilities reported by a PCI-DSS scanner, and one of them is new to me: Title Firewall UDP Packet Source Port 53 Ruleset Bypass Synopsis: Firewall rulesets can be ...
2
votes
0answers
41 views

Windows Firewall Connection Security, require encryption with IPv6?

I've set up Windows Firewall on a Server 2012 R2 to always require IPSec Encryption for all Connection Security Rules. I've then specified Inbound Rules for specific ports and services, and ...
2
votes
1answer
61 views

How can I stop autoupdates for Lync basic 2013

I am currently working a school co-op placement at a company and the problem I have to solve is to stop autoupdates going through for lync 2013 basic. We do not have a lync server as it died recently ...
1
vote
1answer
33 views

Windows Domain Network, Cisco 1921 ISR, and NTP

In an effort to make sure all Windows application that rely on time work (such as RDP), and to make sure logging between computers and router are using the same times, I would like to use NTP ...
1
vote
1answer
78 views

Allow UFW access from IP wildcard

I would like to allow access from IP address based upon wildcards e.g. 64.201.52* How can this be done with UFW? Have tried sudo ufw allow from 64.201.52.*
0
votes
0answers
55 views

iptables requires POSTROUTING for port forwarding

I have a very basic router/firewall running Ubuntu. I want to forward tcp connections on a specific port (443) to one of the machines in the local network. It has one interface to the outside world ...
-1
votes
1answer
38 views

ip tables, block all traffic to a specific ip, unless it comes from a specific ip

Here's the situation. I have multiple Apache vhosts listening on port 443 on different IPs, on the same network interface. I would like to only allow a certain IP to access one of those vhosts. In ...
0
votes
2answers
35 views

Iptables NAT (PAT) A to B to C and back

I want to access via SSH a DB server from an outside network via a linux (CentOS) gateway with two interfaces in separate networks as it follow below: Admin PC IP: 10.21.1.8 Linux GW IP eth1 ...
-3
votes
1answer
57 views

Difference between iptables rules and firewall rules?

I am renting a vps and the company I rent from has firewall settings where I am allowed 20 rules. Then I have the iptables on my server. I have just setup some rules on the iptables that I found from ...
0
votes
1answer
56 views

Is there a benefit from using an IPS for outgoing traffic?

It's probably a stupid question, but still may be it will be useful not only for me. I have an Juniper SRX firewall in a branch office. All ports are blocked from Internet to Internal network. All ...
3
votes
2answers
122 views

Why should we purchase a dedicated load balancer when the firewall can do it?

I've got 2 servers, let's call them 'node1' and 'node2' installed at a data centre. They run our application software. They are interchangeable, and each have a full copy of all customers' databases. ...
1
vote
1answer
66 views

Configure STP in WAN Bridge

Hardware: 2 pFsense Box 1 Switch Dlink DGS-3324SR I need to configure a STP into my network because i'm trying to set a wan redundant bridge for a web server. (Take a look to my Network Diagram) So ...
1
vote
1answer
170 views

Why is iptables not blocking any ports?

I have iptables running and the most recent rules applied (i.e. I restarted the service and it says everything is "OK"). I have only used system-config-firewall to edit/define any rules, so I ...
0
votes
1answer
57 views

Do Firewall and Domain Controller need to in same network for authentication?

My company has a firewall. My company don't have any Domain Controller nor Windows Server device. My boss plans to configure the firewall to let users authenticate with their corporate credential ...
0
votes
0answers
30 views

Translating DNS Server Replys because of multiple NAT Networks

I am planning and building a large infrastructure wich different natted networks. Lets say I have a datacenter network 10.0.0.0/24 and I have many different customer networks that could be anything ...
3
votes
0answers
180 views

pfSense Internal Traffic Policy Based Routing

What is the current and correct way to apply policy based routing to pfSense internal traffic (originating from the firewall itself)? Creating a floating rule with the WAN interfaces selected, ...
0
votes
1answer
17 views

how can I identify network traffic that is blocked?

I have an app that is waiting for a reply from a website but never continues. A browser page connects to the site fine so I think traffic is being blocked by something but I get no indications. I set ...
1
vote
1answer
59 views

Best practice for managing a whitelist of ips across multiple servers with iptables?

I was wondering what the best practice for managing a whitelist of ip address across multiple servers? We want to allow our user base to add an ip address they want to whitelist through a web ...
1
vote
0answers
44 views

TCP and UDP ports usually blocked [closed]

Which are TCP and UDP ports most likely to be blocked? I refer especially to the client edge of the network. To start I guess SMTP (25), SIP (5060) for TCP, Traceroute (33434) for UDP.
0
votes
0answers
35 views

CheckPoint UTM-1 Edge does not relay ping reply out of vpn

I have Palo Alto firewall and Checkpoint UTM-1 Edge with established vpn. On Checkpoint UTM-1 device Firewall is off, AntiVirus is off, Security level (low), vpn excluded from firewall. Vpn is ...
0
votes
0answers
17 views

Allow tcp traffic on certain ports from certain IP addresses with Cisco router

I have a Cisco 887 router where I want to allow tcp traffic from a set of external IP addresses to one of the servers on the inside. Further more I only want to allow traffic to certain ports. E.g. ...
1
vote
1answer
108 views

allow only one ip and block others by using cmd in windows firewall

I want to allow one IP address that can connect to internet (whitelist) and block others' connections through internet using Windows Firewall on Server 2008 using command prompt. Is it possible to ...
1
vote
3answers
81 views

Unable to rdp after fw change

VM Windows Server 2012 r2 I was able to rdp to this VM without issues until today. While logged in via rdp I was in control panel > firewall and I noticed that there was a message saying 'use ...
2
votes
0answers
88 views

Multi vlan internet access via Watchguard

i'm pretty new to network and routing so i would appreciate some tips on this. I have a firewall(watchguard x1250e), connecting to a switch(Nortel Baystack 5510) with multiple vlans for internet ...