A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

1
vote
1answer
79 views

In what case would IIS initiate a connection outbound with source port 80?

We have an eight node IIS web server farm protected by a hardware firewall. The firewall is configured to allow port 80 traffic inbound, but is set to block outbound traffic. In our firewall logs, I ...
0
votes
1answer
118 views

Deploy Advanced Firewall Rules via GPO - How to avoid merging?

I am trying to deploy a set of advanced windows firewall ACLs to several 2008 R2 servers. I would like to (i have to) ensure that no local or old rules are getting applied. So I set "Apply local ...
6
votes
1answer
133 views

Techniques to implement iptables rules

Usually a limited amount of services are configured on a server and most of the not needed ones are shut down, I was wondering what would be the best approach to firewalling with iptables. Is it ...
0
votes
2answers
84 views

limit outbound access for an EC2 instance

Our company is in the process to become PCI compliant and one of the requirement is to limit the outbound access of our servers. We have only 1 EC2 instance that falls in the PCI scope and I would ...
0
votes
1answer
38 views

bind did not responde out of server

I have problem with bind server configuration. ​Result for lookup on 8.8.4.4: root@server1:~# dig @8.8.4.4 webexamplesite.com ; <<>> DiG 9.8.4-rpz2+rl005.12-P1 <<>> @8.8.4.4 ...
2
votes
1answer
43 views

Allow only one ipaddress through a cisco firewall without pcs knowing there is a proxy server

We have a PC behind a firewall. (ASA 5505) [PC] => [ASA Firewall] => [Corporate Proxy/Firewall/Anything] => [Internet] :- where the PC and ASA Firewall are under our control... and the rest are ...
2
votes
1answer
122 views

connected to Centos openvpn but no outside internet access

I am using Windows 7 to connect to a VPS server running CentOS 6.4 First off, I have read every single post and just cant find the solution to my problem I configured my VPN server with openvpn, and ...
0
votes
0answers
35 views

Unable to connect to SQL Server over SSL

I am unable to connect to a SQL Server over SSL. This is the current setup: A server at my location sends data to an external service (SQL Server 2008) using SSL. We are using Websense and an ASA for ...
0
votes
0answers
21 views

Advanced Windows Firewall - Strange logging behavior

I have created a GPO that set's several firewall rules to Windows Server 2008 R2 machines within a specific OU. The default behavior is set to block on inbound and outbound on all profiles. Also I did ...
0
votes
1answer
82 views

Ubuntu 10.04LTS Server under attack, random reboots UNTIL I blocked China

What could have been sent to my server to cause it to reboot? Details: I have a for-internal-use LAMP server running Ubuntu 10.04LTS (upgrade is scheduled for that nebulous "when I have time"). It ...
-1
votes
1answer
67 views

How do I know that my TCP connection is safe from the Firewalls/NAT?

Being on the Azure cloud, I found that the firewalls there drop connections between the Web server and the database quite often. Mostly when there was some inactivity, I think something between 5 and ...
0
votes
2answers
862 views

opening port 80 on Ubuntu AWS

I'm running a tomcat server on an ubuntu machine hosted in an AWS instance. I can reach the server via public_ip:8080 but when i change the listening port on server.xml from 8080 to 80 connection is ...
25
votes
8answers
5k views

Block employee access to public cloud

First of all, let me state that this is not my idea and I don't want to discuss whether such an action is reasonable. However, for a company, is there a way to prevent employees to access public ...
1
vote
3answers
218 views

Locking down my Ubuntu server with UFW [duplicate]

I'm using Ubuntu 12.04 on an Amazon EC2 instance and new to the sysadmin side of things. I'm working on a little project of my own and I'm already starting to get targeted by bots (at least I hope ...
0
votes
0answers
37 views

Can IPtables (possibly with libnetfilter_queue library) do everything that snort does?

I have just started getting into network security, firewall, etc. So, please excuse me for asking this basic question. I looked at IPtables and got a good hang of it (nowhere close to becoming an ...
0
votes
1answer
339 views

CentOS postfix smtp server connection refused from outside

I am quite stuck with my postfix/smtp configuration on my CentOS machine. I setup a mail dns mail.domain.tld, configured in the postfix main.conf file and tested locally on the server by connecting ...
0
votes
1answer
94 views

Configure atftp server to reply on port 69

Problem : I'm facing to a problem with TFTP server and Cisco 79XX IP phones. When on a local network, everything is working fine, but when the TFTP server is on a public server (and phones inside a ...
2
votes
2answers
103 views

What are the security issues in creating a firewall between two subnets?

As I understand it, the hosts on different subnets cannot communicate with each other unless there is a router somewhere on both subnets that forwards traffic between them. I have have two subnets ...
0
votes
0answers
122 views

The Windows Filtering Platform has blocked a connection - Query User

I'm having a problem with a program trying to access port 135. The Windows filtering platform is blocking the communication. In the windows security logs, the following is displayed: The Windows ...
0
votes
0answers
30 views

Prompt User for decision corresponding Firewall Inbound Traffic NOT APPEARING

Normally when an Incoming Traffic comes, there will be "Prompt the User for a decision corresponding this Inbound Traffic" popup. For some weird reason this popup is not coming out and I'm finding ...
1
vote
1answer
72 views

How many IP addresses can I expect to block on a Cisco 5500-X Series firewall?

Considering a Cisco ASA (5500-X) firewall for our internet edge in front of our web cluster. At the moment, we use a Linux box with iptables. A log analysis system detects brute-force attacks on ...
0
votes
1answer
492 views

HTTP 502 Bad Gateway error response

I'm debugging an issue and running out of ideas. I have a server with SharePoint code hosted at port 8080 and a WCF REST service at port 8801. From another machine on the domain, I can connect to the ...
6
votes
3answers
582 views

What's wrong with using windows firewall?

I was developing a system which requires connection between two computers. I decided to connect the two machines together via direct ethernet cable. My boss didn't like it as there is no firewall in ...
1
vote
0answers
207 views

Firewall/iptables rules for GlusterFS

A great pleasure would be to know which exact iptables rules to use for securing GlusterFS 3.4.2 (with Debian Wheezy) in shared environment. I'm running some dedicated servers at ISP. There are two ...
0
votes
0answers
42 views

Securing and loadbalancing front-end back-end with sql inspection proxy

I am working on designing a secure way for our network to allow front-end application servers in our DMZ to communicate securely with our databases, and I can see quite clearly that normal firewalling ...
0
votes
1answer
208 views

Cant open port on Windows 2012R2

I really never had problem with Windows Firewall, however today on new installation i`m trying to open port 110 but i cant. My firewall rule is: printscreen telnet myip 110 Connecting To ...
1
vote
1answer
69 views

Automatically ask router for port redirection on ubuntu

Is there a way to use uPnp or something to automatically ask a router/firewall to redirect data coming from outside to a machine running ubuntu? Here's the deal, I'm supposed to prepare a certain ...
1
vote
1answer
53 views

Defending PCs against APTs

We are evaluating the security of the PCs used by people with access to high-value company documents. At the moment they are kept patched and run a virus checker, but we are concerned about zero-day ...
2
votes
2answers
151 views

With Azure, can I create a VLAN and put all my worker roles and VM's in there?

Is it possible to create a sort of VLAN or private azure LAN thingy .. where I can put any new Workers or VM's in that VLAN? one of the reasons is because I was hoping to create a SQL server on a VM ...
1
vote
1answer
68 views

How to convert proxy ARP setup to IPv6?

My company has a router/firewall deployed with the "common" Proxy ARP setup: it sits between some servers and the ISP gateway, and intercepts all the packets with proxy arp, so that it can apply both ...
1
vote
1answer
457 views

Dropped ACK FIN, ACK RST, RST packets on webserver with iptables

I run a webserver (Apache) on a Debian 7 machine, with iptables on the same machine. iptables rules are generated by the ConfigServer Firewall (CSF) script. The websites hosted there are fine on my ...
0
votes
3answers
54 views

Limiting the connection source in firewall

I'm new at server management, and wrote an IPTables script for firewall. I'm very concerned about the security of my server, and thus I'm wondering about something that I read often from people using ...
0
votes
1answer
199 views

GMail App (Android) not showing notifications behind corporate firewall

User has a Nexus 4 (running Android 4.4.2 KitKat). When an email arrives in their GMail account inbox the phone does not notify the user of the email. The user has to open the GMail app on the phone ...
0
votes
0answers
70 views

how to whitelist ip, port, protocol and app on a router?

I am looking for the simplest but robust solution to allow user accounts under Windows Server 2012 to use GitHub.com with the GitHub app, but otherwise not a peep is allowed from the server to reach ...
0
votes
1answer
107 views

Can I use iptables, Shorewall and ipset on the same time?

I'm using iptables for years, because it is a straightforward solution without any magic. But now I'm building a router for myself, I found there are many useful features provided by Shorewall. Is it ...
-2
votes
2answers
34 views

Changing firewall setting [closed]

What is the difference between allowing an IP that ends with 32 after / For e.g. what is the difference between these 2 IP addresses? 282.72.129.206/31 282.72.129.206/32 I will like to confirm that ...
2
votes
1answer
41 views

How to provide access to lan mysql DB from a remote server?

Consider the below network configuration: A client connects with its workstation to the application server on the Web. The application is full HTML, so only browsing through HTTPS is enough to ...
0
votes
2answers
97 views

Stunnel multiple ports through the same Port

I'm looking for some help regarding an stunnel configuration I'm working on. Basically I want to have a DMZ machine accept inbound connections to port 80 and 110, and then forward them through my ...
2
votes
1answer
878 views

fail2ban for windows 2008 RDP [duplicate]

I'm looking for a solution to make remote desktop more secure. I'm looking for a fail2ban like for windows and specially for RDP which will block IP in firewall after N failed retries Any help?
0
votes
1answer
29 views

Can't see Webserver from LAN - NAT Issue?

I just got a ZyXEL USG50 and it's more complex than I'm used to. Traffic from WAN is going to my websever as desired thanks to a firewall and NAT rule. The problem is, when trying to request a ...
-1
votes
1answer
251 views

Installing pfSense on amazon ec2 instance [closed]

I was searching for AMI's with pfsense but seems like they are all vanished somehow :S How cuold I install pfsense on a FreeBSD ec2 instance besides creating a local image -> converting into raw than ...
-1
votes
1answer
39 views

Firewall Connections fail to open under load

Problem : During High load , our applications are encountering errors : java.net.connection Time out. After some investigation , we found out that it was Firewall the root cause, but still don't know ...
0
votes
2answers
92 views

UFW - deny outbound except for apt-get updates?

What combination of UFW rules would deny all outbound connections except for those which are required to install Ubuntu security updates?
0
votes
1answer
69 views

How can I get a Django Gunicorn project served up?

I have a Django project that was working on a development server and I am trying to move it to an Ubuntu production server. I've started, with apparent success, a "python manage.py run_gunicorn ...
1
vote
0answers
42 views

Mac OS 10.6.8 Firewall Blocking Wiki for ONE User

This is a very bizarre issue that I hope someone can help with. We're running 10.6.8 server to host our internal wiki. We had the firewall enabled on that machine without any issues. Last week one ...
0
votes
1answer
197 views

Apache2 server (behind Zyxel USG 100 NAT/Firewall) with vhost does not log real clients ip addresses

SOLVED To allow the Zyxel USG 100's NAT to forward untouched packets to my web server i edited the policy route of the Zyxel. Zyxel -> Configuration -> Network ->Routing -> Policy Route ...
1
vote
0answers
86 views

OpenStack FWaaS extension

According to the OpenStack API documentation, OpenStack now provides APIs to manage and deploy firewalls to protect the networks. The information available for the firewalls via the APIs seems very ...
2
votes
1answer
752 views

PF Firewall on OSX with IceFloor

I have set up pf using IceFloor on my OSX 10.9 system running Server 3.0.2. Everything seems to be fine except that I can not connect to the system using the DNS name or the public IP from localhost. ...
4
votes
4answers
270 views

Why on linux machines, any packets do not pass except icmp, but correctly pass on windows

There is a cluster on proxmox. In a cluster have vm - configured router (pfsense). In the our net have Windows and Linux machines. There is the problem: Windows-machines have access to the internet, ...
2
votes
1answer
62 views

Why is a remote IP redirecting to a local server?

I've got a rack full of Linux servers that host OpenVZ containers and for some reason when I attempt to connect to a certain remote IP from inside a few of the OpenVZ containers (using telnet, for ...