A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

0
votes
1answer
41 views

View trace route through interface

I would like to know if is possible to view the packet hops after a firewall through interface. Lets suppose that I have a firewall that block UPD or ICMP, so when I traceroute something I get this: ...
0
votes
2answers
82 views

iptables REDIRECT works only for first packet

i need to redirect all UDP packets with destination port 15000 to port 15001 if the packet contains for example the string test. i have these two simple rules: iptables -t nat -A PREROUTING -i eth0 ...
0
votes
0answers
14 views

One-to-One NAT with Firehol

I use firehol to manage iptables on Ubuntu 12.04. I am trying to set up one-to-one NAT so requests from the internet and my LAN to one of my public IP addresses goes to a specific server. Here is what ...
0
votes
2answers
85 views

How to open the MySQL port only to Amazon RDS for replication?

I have a MySQL database on a dedicated server, that I want to replicate to Amazon RDS to always have an up-to-date backup. For this, Amazon RDS needs to be able to connect to my master MySQL server. ...
0
votes
0answers
15 views

Bandwith quota in private network

We have a private company network with Linux and Windows networks. All traffic to outside pass through a Debian firewall, managed by iptables. We need to set a bandwith quota for every device: we ...
-2
votes
2answers
46 views

Does /etc/host.deny blocks http requests?

If I put the entry into /etc/hosts.deny, would it block all requests from that IP address to my machine (like iptables do), or would it only block access for some applications like SSH?
1
vote
1answer
135 views

SELinux and iptables on a firewall / router

I've come to a point where I need to migrate to a new server. Though I'm aware of the SELinux advantages, is it necessary to keep SELinux enabled when the firewall / gateway is only meant to route ...
0
votes
1answer
109 views

Enable SNMP XenServer 6.5

I want to enable snmp on my servers running xenserver 6.5. I've found a few articles with instructions to do so and the whole process seems pretty straight forward but my question is this - is there ...
-3
votes
3answers
113 views

How to disable UFW ubuntu

I enabled the UFW firewall using SSH on my server at Digital Ocean running sudo ufw enable. and forgot to allow the ports for SSH, FTP, ... (but allowed port 80). How can I SSH into the server or ...
0
votes
0answers
231 views

(PCI-DSS, APF) Firewall UDP Packet Source Port 53 Ruleset Bypass?

I am handling vulnerabilities reported by a PCI-DSS scanner, and one of them is new to me: Title Firewall UDP Packet Source Port 53 Ruleset Bypass Synopsis: Firewall rulesets can be ...
2
votes
0answers
35 views

Windows Firewall Connection Security, require encryption with IPv6?

I've set up Windows Firewall on a Server 2012 R2 to always require IPSec Encryption for all Connection Security Rules. I've then specified Inbound Rules for specific ports and services, and ...
2
votes
1answer
59 views

How can I stop autoupdates for Lync basic 2013

I am currently working a school co-op placement at a company and the problem I have to solve is to stop autoupdates going through for lync 2013 basic. We do not have a lync server as it died recently ...
1
vote
1answer
32 views

Windows Domain Network, Cisco 1921 ISR, and NTP

In an effort to make sure all Windows application that rely on time work (such as RDP), and to make sure logging between computers and router are using the same times, I would like to use NTP ...
1
vote
1answer
58 views

Allow UFW access from IP wildcard

I would like to allow access from IP address based upon wildcards e.g. 64.201.52* How can this be done with UFW? Have tried sudo ufw allow from 64.201.52.*
0
votes
0answers
54 views

iptables requires POSTROUTING for port forwarding

I have a very basic router/firewall running Ubuntu. I want to forward tcp connections on a specific port (443) to one of the machines in the local network. It has one interface to the outside world ...
-1
votes
1answer
36 views

ip tables, block all traffic to a specific ip, unless it comes from a specific ip

Here's the situation. I have multiple Apache vhosts listening on port 443 on different IPs, on the same network interface. I would like to only allow a certain IP to access one of those vhosts. In ...
0
votes
2answers
34 views

Iptables NAT (PAT) A to B to C and back

I want to access via SSH a DB server from an outside network via a linux (CentOS) gateway with two interfaces in separate networks as it follow below: Admin PC IP: 10.21.1.8 Linux GW IP eth1 ...
-3
votes
1answer
53 views

Difference between iptables rules and firewall rules?

I am renting a vps and the company I rent from has firewall settings where I am allowed 20 rules. Then I have the iptables on my server. I have just setup some rules on the iptables that I found from ...
0
votes
1answer
50 views

Is there a benefit from using an IPS for outgoing traffic?

It's probably a stupid question, but still may be it will be useful not only for me. I have an Juniper SRX firewall in a branch office. All ports are blocked from Internet to Internal network. All ...
3
votes
2answers
122 views

Why should we purchase a dedicated load balancer when the firewall can do it?

I've got 2 servers, let's call them 'node1' and 'node2' installed at a data centre. They run our application software. They are interchangeable, and each have a full copy of all customers' databases. ...
1
vote
1answer
58 views

Configure STP in WAN Bridge

Hardware: 2 pFsense Box 1 Switch Dlink DGS-3324SR I need to configure a STP into my network because i'm trying to set a wan redundant bridge for a web server. (Take a look to my Network Diagram) So ...
1
vote
1answer
166 views

Why is iptables not blocking any ports?

I have iptables running and the most recent rules applied (i.e. I restarted the service and it says everything is "OK"). I have only used system-config-firewall to edit/define any rules, so I ...
0
votes
1answer
56 views

Do Firewall and Domain Controller need to in same network for authentication?

My company has a firewall. My company don't have any Domain Controller nor Windows Server device. My boss plans to configure the firewall to let users authenticate with their corporate credential ...
0
votes
0answers
29 views

Translating DNS Server Replys because of multiple NAT Networks

I am planning and building a large infrastructure wich different natted networks. Lets say I have a datacenter network 10.0.0.0/24 and I have many different customer networks that could be anything ...
3
votes
0answers
174 views

pfSense Internal Traffic Policy Based Routing

What is the current and correct way to apply policy based routing to pfSense internal traffic (originating from the firewall itself)? Creating a floating rule with the WAN interfaces selected, ...
0
votes
1answer
17 views

how can I identify network traffic that is blocked?

I have an app that is waiting for a reply from a website but never continues. A browser page connects to the site fine so I think traffic is being blocked by something but I get no indications. I set ...
1
vote
1answer
54 views

Best practice for managing a whitelist of ips across multiple servers with iptables?

I was wondering what the best practice for managing a whitelist of ip address across multiple servers? We want to allow our user base to add an ip address they want to whitelist through a web ...
1
vote
0answers
43 views

TCP and UDP ports usually blocked [closed]

Which are TCP and UDP ports most likely to be blocked? I refer especially to the client edge of the network. To start I guess SMTP (25), SIP (5060) for TCP, Traceroute (33434) for UDP.
0
votes
0answers
34 views

CheckPoint UTM-1 Edge does not relay ping reply out of vpn

I have Palo Alto firewall and Checkpoint UTM-1 Edge with established vpn. On Checkpoint UTM-1 device Firewall is off, AntiVirus is off, Security level (low), vpn excluded from firewall. Vpn is ...
0
votes
0answers
14 views

Allow tcp traffic on certain ports from certain IP addresses with Cisco router

I have a Cisco 887 router where I want to allow tcp traffic from a set of external IP addresses to one of the servers on the inside. Further more I only want to allow traffic to certain ports. E.g. ...
1
vote
1answer
91 views

allow only one ip and block others by using cmd in windows firewall

I want to allow one IP address that can connect to internet (whitelist) and block others' connections through internet using Windows Firewall on Server 2008 using command prompt. Is it possible to ...
1
vote
3answers
74 views

Unable to rdp after fw change

VM Windows Server 2012 r2 I was able to rdp to this VM without issues until today. While logged in via rdp I was in control panel > firewall and I noticed that there was a message saying 'use ...
2
votes
0answers
76 views

Multi vlan internet access via Watchguard

i'm pretty new to network and routing so i would appreciate some tips on this. I have a firewall(watchguard x1250e), connecting to a switch(Nortel Baystack 5510) with multiple vlans for internet ...
2
votes
1answer
20 views

Problems Configuring IPTABLE for Samba Share

I am trying to configure Samba on my CentOS 6 server such that only 3 IP addresses have access to the Samba Share. For some reason my iptable configuration is wrong. I have checked lines 11-15 and ...
2
votes
2answers
56 views

wget only works when tcpdump is listening

I am running two Virtual Machines over the XEN hypervisor both with Ubuntu trusty (Linaro-Developer version) with the following simple bridge networking setup: Backend domain (dom0): br0 ...
1
vote
1answer
19 views

How can I protect Sophos OpenSSL settings from being overwritten?

Our company network uses a Sophos firewall with an Apache reverse-proxy, which is configured to allow HTTPS connections. After we realized that some of our clients can not connect over HTTPS, our ...
0
votes
1answer
49 views

Connecting with SQL Server Management Studio (Remote)

All right, here's my problem: I have set up a sql server 2014 on a windows server 2012 R2. If I'm connecting through the local network just with the ip, everything works fine. Now we need to access ...
0
votes
0answers
14 views

My client can't reach my service

At the moment there is a wcf client running on a remote machine and a service running on mine. It's working without issues. If I reverse things and host the service on IIS at the remote machine my ...
-1
votes
2answers
51 views

ESXi 5.5 Isolate Network [closed]

I have recently acquired a poweredge running esxi 5.5, and am creating a network for pentesting purposes. Currently my main network and the pentesting network are entirely seperate entities, having no ...
3
votes
0answers
43 views

What's the recommended way to restrict Internet access per process using SELinux?

Before I have tried to do this using a phony user and iptables to execute commands that needs to be restricted. However now the commands need to read configuration set by each user's environment vars ...
0
votes
0answers
349 views

Nginx proxy_pass reverse proxying behind corporate firewall

Has anyone any idea of how to setup nginx behind a corporate firewall, to reverse proxy requests to servers outside the firewall? The reason I want to do this is I am trying to use an application ...
2
votes
1answer
51 views

Configuring firewall rules

I am trying to configure firewall rules for my windows PC i would like to achieve this scenario All packets from PC A will use this proxy server x.x.x.x at port AA However, these are my rules ...
0
votes
2answers
346 views

How to block internet access when the VPN stops on a DD-WRT router and separate VPN/direct clients?

I am using a DD-WRT 3.0 router to connect via openVPN. In the LAN, 192.168.1.50 is a device which should not go thru the VPN. (How do I set the firewall to have 192.168.1.50 not go thru VPN and How ...
1
vote
0answers
94 views

Drop first packet for every IP with iptables

My servers are getting UDP-flooded with spoofed source IP addresses. They flood with real user packets so I cannot rate limit or block these packets. Is there a way to drop the first packet received ...
1
vote
2answers
94 views

allowing ping packets from specific ip in windows firewall

How do i allow ping packets from a specific ip from my internal network in windows firewall. Whenever, i tried to set custom inbound rules in windows. There does not seem to have a way to achieve ...
1
vote
1answer
58 views

iptables - Filter by MAC on FORWARD chain

I need to setup a firewall between a server, and the clients on the intranet that filters access by MAC on the FORWARD chain. The server has one NIC (on subnet 10.0.0.0/29), the firewall two NICs ...
0
votes
0answers
21 views

Why iptables is not logging

I have the iptables configuration below. I want to block all input but accept some rules. But I want to be able to log the droped connections. But it's not logging. I have this: iptables -N ...
-1
votes
1answer
146 views

Restrict access to Google App Engine app using firewall rules

I'm looking to apply the firewall rules set under "Networking" section of the Google Cloud Platform Developers Console to my App Engine instance(s) set up under "Compute -> App Engine" section. ...
0
votes
1answer
80 views

Where are iptables rules stored on Digital Ocean Ubuntu 14.04

I have a basic standard Ubuntu 14.04 droplet on digital ocean. I used ufw to set some firewall rules but forgot to open port 22 for SSH. I rebooted my server and could no longer log in so DO support ...
0
votes
1answer
67 views

Firewalld Centos 7 creating rule

I created a custom zone inside my firewalld on my Centos 7. This custom zone has no rules yet. I want to do this: first add a rule that allows all the outbound traffic and drops all inbound traffic. ...