A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

0
votes
0answers
27 views

Windows Firewall - Block IP address

The configuration is exactly as following: I am absolutely certain that 192.168.2.6 is the correct IP address, yet the according computer remains able to access shared files. Where could I go ...
0
votes
0answers
10 views

Comcast SBG and ZyWALL

Hello and thank you for reading. I will try and keep this short and sorry if the answer to this question is a 'Duh' moment. At my place of business we have Comcast internet, coming in on a cable ...
0
votes
0answers
18 views

Linking fail2ban with a RDBMS

I would like to maintain a highly dynamic RDBMS table that will be insert/update/deleted from from multiple hosts (a kind of global blacklist for all my servers). The table would have a couple basic ...
0
votes
0answers
32 views

Why my firewall rules aren't working in my NanoStation m2?

I have two NanoStation m2 as AP and Repeater for a wireless network (make them device1 and device2), both working in BRIDGE mode. Both devices are connected as WDS pairs to each other because they ...
0
votes
0answers
69 views

iptables user-defined chain not working

I am testing rate limiting to outbound IP's using iptables with user defined chains. So far I have only been able to get this to work with inbound traffic to my server. I cant seem to rate limit ...
0
votes
0answers
28 views

AWS: EC2 VPC blocks outbound requests

I have an EC2 instance in VPC and I managed to break the security group rules. I made a new security group that allows all protocols from anywhere and any port, thinking that it would open up ...
0
votes
0answers
19 views

Not able to block site on pfsense firewall with squid+squidgaurd

Currently running pfsense latest version and set the transparent proxy using squid with squidgaurd for filter but https is not enable because this feature not work well. So that I want to block sites ...
0
votes
0answers
10 views

SOCKS4 can't handle connections all going through the same (open) port

I live behind a firewall and I managed to proxy anything I do to the proxy behind the firewall. The Port 27032 is open and still, if there are too many connection requests at a time, the proxy can ...
0
votes
0answers
46 views

Connection timed out when using ssh to connect to a machine on a pfSense subnet (using port forwarding)

I get a connection time out when I try to ssh into a machine inside a pfSense firewall network. The computer I am connecting from is on the same subnet as the pfSense firewall. That is my computer's ...
0
votes
0answers
109 views

HTTPS web filtering issue in endian

I am running endian firewall latest version and setup the web transparent proxy with enable the https filtering and installed the certificate in the client system. If i enable the https filtering then ...
0
votes
0answers
18 views

Guardian not found in smoothwall express 3.1

I have download latest version of smoothwall express 3.1 iso and install on virtual box but it's do not have Guardian web filtering. Is it need to install additionally ?
0
votes
0answers
14 views

One-to-One NAT with Firehol

I use firehol to manage iptables on Ubuntu 12.04. I am trying to set up one-to-one NAT so requests from the internet and my LAN to one of my public IP addresses goes to a specific server. Here is what ...
0
votes
0answers
15 views

Bandwith quota in private network

We have a private company network with Linux and Windows networks. All traffic to outside pass through a Debian firewall, managed by iptables. We need to set a bandwith quota for every device: we ...
0
votes
0answers
230 views

(PCI-DSS, APF) Firewall UDP Packet Source Port 53 Ruleset Bypass?

I am handling vulnerabilities reported by a PCI-DSS scanner, and one of them is new to me: Title Firewall UDP Packet Source Port 53 Ruleset Bypass Synopsis: Firewall rulesets can be ...
0
votes
0answers
54 views

iptables requires POSTROUTING for port forwarding

I have a very basic router/firewall running Ubuntu. I want to forward tcp connections on a specific port (443) to one of the machines in the local network. It has one interface to the outside world ...
0
votes
0answers
29 views

Translating DNS Server Replys because of multiple NAT Networks

I am planning and building a large infrastructure wich different natted networks. Lets say I have a datacenter network 10.0.0.0/24 and I have many different customer networks that could be anything ...
0
votes
0answers
34 views

CheckPoint UTM-1 Edge does not relay ping reply out of vpn

I have Palo Alto firewall and Checkpoint UTM-1 Edge with established vpn. On Checkpoint UTM-1 device Firewall is off, AntiVirus is off, Security level (low), vpn excluded from firewall. Vpn is ...
0
votes
0answers
14 views

Allow tcp traffic on certain ports from certain IP addresses with Cisco router

I have a Cisco 887 router where I want to allow tcp traffic from a set of external IP addresses to one of the servers on the inside. Further more I only want to allow traffic to certain ports. E.g. ...
0
votes
0answers
14 views

My client can't reach my service

At the moment there is a wcf client running on a remote machine and a service running on mine. It's working without issues. If I reverse things and host the service on IIS at the remote machine my ...
0
votes
0answers
340 views

Nginx proxy_pass reverse proxying behind corporate firewall

Has anyone any idea of how to setup nginx behind a corporate firewall, to reverse proxy requests to servers outside the firewall? The reason I want to do this is I am trying to use an application ...
0
votes
0answers
21 views

Why iptables is not logging

I have the iptables configuration below. I want to block all input but accept some rules. But I want to be able to log the droped connections. But it's not logging. I have this: iptables -N ...
0
votes
0answers
264 views

Configure Openvpn and tinyproxy both at the same time In openwrt

I'm building VPN router using Raspberry_pi and openwrt chaos calmer on top of it. I have successfully configured the pi and achieve the Openvpn functionalities without any issues. Pi connect Openvpn ...
0
votes
0answers
15 views

Why would you allow traffic in through a firewall if you aren't NAT'ting it?

Why would you allow traffic from Outside to Inside - i.e. from 9.9.9.9 to WAN_IP of your Firewall Interface, if you then aren't going to do anything with the traffic i.e. NAT it to a given device. ...
0
votes
0answers
176 views

Juniper SRX 240 dynamic VPN soft timeout

I have been struggling with this for over 2 weeks now and tried everything i possibly can. The Dyanmic vpn connection works fine, but the pulse client randomly pop's up with a password promt and ...
0
votes
0answers
33 views

VoIP phones not registering on second zone - SonicWALL TZ210

Environment: Hosted VoIP SonicWALL TZ210 running SonicOS Enhanced 5.9.1.1-39o (latest) ADSL WAN connection The SonicWALL has two zones (subnets), X0 and X2, LAN and Voice respectively. Both are ...
0
votes
0answers
77 views

CentOs 6 as Firewall, forward traffic from eth1 to eth0 -> destination host prohibited

I'm setting up Firewall with a CentOs 6.0 for testing. I'm doing this on two virtualmachines. First VM (Firewall) has 2 interface: eth0 - connected to NAT with 10.0.2.10, access to internet eth1 - ...
0
votes
0answers
308 views

Can't connect to the data port with FTP server running in Vagrant (passive mode)

I want to connect to Vagrant via FTP and the data connection is failing. I can actually connect and login, but when trying to enter passive mode and list the remote directory, the DATA connection ...
0
votes
0answers
70 views

iptables - forward traffic to VPN client

Following Scenario: Router forwarding traffic on port 80 to Machine A Machine A 192.168.0.254 Running Owncloud on port 80 Connected to VPN Provider Machine B 192.168.0.123 can connect to ...
0
votes
0answers
47 views

Can not block countries in CSF firewall

I have CSF firewall installed + LFD. I have blocked several countries in csf.conf file. Restarted CSF/LFD. CC_DENY = "CN,BR,CA,HK,TW,RO,RU,UA,MD,KZ,TH" I just checked Nginx logfile and found the ...
0
votes
0answers
40 views

A firewall is blocking incoming connections.

To begin with, I am using clients (console applications) on remote computers that send me some data to my IIS server. The server is a regular computer running windows 7 with the default firewall ...
0
votes
0answers
55 views

Block ipv6 range in UFW

I have a Ubuntu server running UFW as a firewall. Since a couple of days a Chinese ipv6 address keeps scanning my server over and over again. My visitor analytics software shows anonymized ip ...
0
votes
0answers
94 views

How to get FTP server working on Windows 2012?

I have a working IIS and I have added FTP Server using Server Roles. When I disable 'Public network settings' in the Firewall, I can connect to my FTP server and everything works fine. However, when ...
0
votes
0answers
512 views

Cisco ASA 5505 cannot ping from inside to outside

Hi everyone and thanks in advance for all the help. I'm having some issue getting my cisco firewall (asa 5505) to ping between zones. The inside zone won't ping with the outside zone and vice versa. ...
0
votes
0answers
32 views

Reverse port forward with tsocks IP-CAM client

I have an IP-CAM (Axis P1204) installed behind a strict firewall preventing any remote access. Axis P1204 supports no VPN and the only tunneling option left is using SOCKS5 proxy. Axis 1204 uses ...
0
votes
0answers
122 views

Why does Pfsense not allow me to see clients connected to local network or other VPN clients?

Hi so essentially I want to be able to remote desktop into a client on another network via the web through OpenVPN. However I can not see any of the client that are on the local LAN network. even ...
0
votes
0answers
23 views

Cyberoam UTM console accessible from outside network Is it secure?

A organisation is running Cyberoam UTM for securing their network from malicious activity from outside network and inside network also. Now, company has given a feasibility to his administrator to ...
0
votes
0answers
121 views

NAT problems with OpenVPN + PF OpenBSD

I rented a server to use as a VPN for educational purposes , ok so set up openvpn server and its all working. I can connect to it with my Windows 7 laptop but i won't be able to browse any website ...
0
votes
0answers
55 views

cannot start iptables on opensuse linux

i am trying to run the iptables service on opensuse linux , but unforunately its failing to activate and systemctl status message shows that its failing to find the /etc/iptables.rules file , i also ...
0
votes
0answers
128 views

UFW - Set correct kernel params

As every system administrator does, one of the first things i did right after booting up my web server was install ufw and tune/set kernel parameters in /etc/sysctl.conf. By the way, this is my ...
0
votes
0answers
22 views

General matter of stateful iptables

I made a set of stateful iptables rules which only handle accepted traffic (More or less). The workflow can be seen in the image below. My questions are: Is it a good idea to drop INVALID state or ...
0
votes
0answers
61 views

iptables hex string match rule migrate to Vyatta (BROCADE)

I have a string match, drop rule working in iptables firewall that I would like to migrate to a Vyatta firewall. Is string matching even possible in Vyatta? If so how can I replicate the following ...
0
votes
0answers
50 views

Use extra firewall to filter WAN traffic before reaching UTM?

I am running a simple web server behind UTM, only port 80,443 is open. However almost 80% of the traffic coming through WAN is trouble. Mostly are port scanners / sniffers or systematically querying ...
0
votes
0answers
44 views

ASA 9.1 NAT Rule issues

I added this NAT rule on my 5510 ASA object network SHF-NY-DC01 host 192.168.1.50 nat (Inside,Outside) static interface service tcp ldap 6699 access-list inbound extended permit tcp any object ...
0
votes
0answers
317 views

Want to Ping/access my Public Ip from Private IP, NAT firewall

One of my server is having private IP x.x.x.x and the Public IP for that server is 1.1.1.1 now when i try to Ping my Public IP from same server its not working, Firewall is NAT enabled. I want to ...
0
votes
0answers
129 views

Cisco ASA 5505 Split Tunnel Multiple Networks Not Working

I have an ASA 5505 and cannot get Internet access for VPN users. Config Layout is specified below. ASA (10.15.0.1)-->(10.15.0.2) Core Switch (10.5.1.0) Below is my config. ...
0
votes
0answers
29 views

MSSQL Server 2008 - Allow One Outside IP with Windows Firewall

We have a MSSQL Server that has localhost connections, but need to have one connection to another machine. The other machine needs to login to MSSQL server. We added an Inbound Windows Firewall rule ...
0
votes
0answers
69 views

ICMP packets in firewalld zones

How are the zones in firewalld configured w.r.t ICMP packets? and do they act differently for interfaces and sources? 1. How firewalld route ICMP packets? I would assume the main zones act as they ...
0
votes
0answers
30 views

Windows firewall profile for USB Ethernet

I am using Windows 7 and on my notebook I have an ethernet port which is connected to the companys network. I connected a USB Ethernet to connect other devices through a static IP. I wanted to block ...
0
votes
0answers
42 views

local port forwarding with failover

There is a number of similar though not identical processes (worker processes) running on the localhost and listening each on its own TCP port, let's say process1 is listening on port 10001 process2 ...
0
votes
0answers
70 views

use of secondary public IP subnet in Sonicwall NSA firewalls

I have a Sonicwall NSA 3500/4500 firewall. I have a primary block of public IP addresses that are working fine but I need to utilize a second block of IPs that are routing over the primary from the ...