A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

3
votes
1answer
158 views

Need help understanding capturing from Wireshark?

I am having issues with my FTP servers. Connecting, sending and receiving fail sometimes, and it is not consistent. I manage to capture and filter by IP the packets, I just need pointers on what can ...
3
votes
1answer
87 views

Smart solution for XenServer firewall?

I've been searching for a smart solution for a XenServer firewall for about a month now. The documentation for the new default networking backend "openvswitch" is not that detailed and I can barely ...
3
votes
1answer
4k views

PPTP connection fails with errors 800/806

I've got a client (Server 2008 R2) that won't connect to our production environment PPTP VPN server (Server 2003, running RRAS). The server is behind a firewall that has TCP1723 open as well as GRE. ...
3
votes
1answer
635 views

cisco asa reloading

After having both memory and code upgrades, we have a significant number of our asa 5520's (in active/standby pairs) develop problems. The problem manifests itself as losing connectivity to the other ...
2
votes
1answer
65 views

Allow only one ipaddress through a cisco firewall without pcs knowing there is a proxy server

We have a PC behind a firewall. (ASA 5505) [PC] => [ASA Firewall] => [Corporate Proxy/Firewall/Anything] => [Internet] :- where the PC and ASA Firewall are under our control... and the rest are ...
2
votes
1answer
67 views

How to provide access to lan mysql DB from a remote server?

Consider the below network configuration: A client connects with its workstation to the application server on the Web. The application is full HTML, so only browsing through HTTPS is enough to ...
2
votes
1answer
100 views

Domain based firewall outbound rules

We have a webserver (IIS) hosting some e-commerce websites. Our firewall in front of the server has a restriction on inbound and outbound traffic. The webserver makes outbound calls to payment ...
2
votes
1answer
137 views

Cannot directly reject traffic on port 25

My server is running Ubuntu 10.04.4 LTS and I want to reject traffic to port 25. The goal is this: $ telnet {ip} 25 Trying {ip}... telnet: connect to address {ip}: Connection refused telnet: Unable ...
2
votes
1answer
77 views

postfix stops accepting connections from certain IPs

I had postfix up and running, and I think it was complete, although there was still a little testing to do. But at some point, it stopped accepting connections from my home computer. I tried to telnet ...
2
votes
1answer
437 views

Packets marked INVALID in FORWARD rule

I have a firewall that has 3 IP aliases on 1 physical interface. Packets get dropped between these 3 interfaces (either ICMP, HTTP, or anything else). We tracked it down to these packets being marked ...
2
votes
1answer
46 views

Assign VPN users to Domain Network

How can I assign VPN users (provided using NPS) to the Domain Network in firewall/network center settings? Currently connection occurs only when I assign a particular rule to the Public network ...
2
votes
1answer
299 views

IPTables unable to nat trough VPN

I have a VPN connection to a server on a remote location. I want other pc's to be able to reach the webserver on the remote location trough the VPN connector. But i can't get where i want. This is ...
2
votes
1answer
275 views

Rackspace Firewall/Gateway Setup

I have rackspace account and wish to have this sort of setup: Firewall/Gateway eth0 - Public IP (56.X.X.X) eth1 - Private IP (10.X.X.X) Ubuntu 10.10. Accepts connections from the internet and ...
2
votes
1answer
2k views

Watchguard config, drop-in or mixed-routing mode?

I have a Watchguard XTM 2 that is currently acting as a firewall and a router for my business network, I currently have the WG setup in mixed-routing mode and am happy with the current configuration. ...
1
vote
1answer
48 views

Is there any danger in disabling windows firewall on a azure worker role?

I'm trying to troubleshoot a bug on our Azure worker role where we occasionally get the error "Unable to read data from the transport connection: An established connection was aborted by the software ...
1
vote
1answer
54 views

Websever behind Sonicwall, Gateway Timeout

I am stuck here, I have a Cradlepoint CBA750B in IP-passthrough mode connected to x1 on my Sonicwall NSA220. Behind the Sonicwall I have a webserver on the LAN. I have X1 set to use DHCP to get the ...
1
vote
1answer
138 views

Iptables configure gateway virtual machine with 2 interfaces

I have a virtual machine that works like a gateway from other virtual machines. The configuration of the interfaces is the following UBUNTU: eth0: ip: 10.0.2.2 netmask 255.255.255.255 ...
1
vote
1answer
93 views

Automatically ask router for port redirection on ubuntu

Is there a way to use uPnp or something to automatically ask a router/firewall to redirect data coming from outside to a machine running ubuntu? Here's the deal, I'm supposed to prepare a certain ...
1
vote
1answer
252 views

Is IGMP multicast traffic to a Xen VM host legitimate?

I run two Xen/CentOS 6.5 based VMs, both hosted by the same company, but connected to different networks (basic /24s w/ a single gateway at .1) in different physical locations. I developed an iptables ...
1
vote
1answer
130 views

Limit ftp connections with pf firewall at FreeBSD

I want to limit simultaneous FTP connections to my FreeBSD server with the pf firewall. For example that only 10 simultaneous connection are possible to the port 20 or 21 from one source IP. I use ...
1
vote
1answer
433 views

Should I create a second WAN Interface for a new SSLVPN setup on my Sonicwall 2400?

Sonic Wall 2400 I'm setting up a new SSLVPN on our Sonicwall, very new to this. I currently have an exchange server as well, so mail.company.com is directed to our mail server. I'd like to setup a ...
1
vote
1answer
52 views

Outbound ports for a firewall for webserver and db server

I have an environment where there is one firewall, and there is a secure segment and a DMZ segment behind it. There is a bunch of servers in the secure segment - DB server, the QA server, etc and ...
1
vote
1answer
1k views

Juniper SSG5 DHCP IP Pool is full. Unable to offer IP address to client

hope we have some Juniper guys around, I have configured a Juniper SSG5 as our main firewall/router the DHCP server set on interface bgroup1 to have a rang from 10.10.10.76 to 10.10.10.210 All ...
1
vote
1answer
115 views

How to filter TCP packets based on flags using Packet Filter

Well, I didn't know exactly how to ask this question, but I know that you can use the keyword flags to especify which flags you want to filter. According to the documentation of the Packet filter: ...
1
vote
1answer
322 views

How to find which local process is sending spam on a Windows Server 2008 server

I am managing a Win Server 2008 system with a number of hosted web sites. Recently I found that something was sending spam through our SMTP server. The logs indicate that the connections were being ...
0
votes
0answers
35 views

Loading wordpress admin page prevents and blocks further requests

I've installed a Wordpress site on a host (actually I moved it from localhost). The site loads and works perfectly, however if I log in with Admin, the admin page doesn't completely load and all ...
0
votes
0answers
79 views

Remote Destkop into Server 2008R2 with Firewall On

I've got a fresh install of Remove Server 2008 R2, 64 bit. The problem is I can't Remote Destkop into it. I clicked 'Enable Remote Desktop' inside 'Initial Configuration Tasks', and set it to: ...
0
votes
0answers
488 views

Setup Single NIC DC RRAS with Firewall

I have a single NIC DC server set up for a few local client machines to mainly serve Files and provide a consistent computing environment across local client workstations thru Folder Redirection. ...
0
votes
0answers
224 views

Ubuntu and uwf - ERROR: '/lib/ufw/user.rules' is not writable

Every time I try and update a rule I get this error. # sudo ufw allow from 111.111.111.111 sudo: unable to resolve host myserver ERROR: '/lib/ufw/user.rules' is not writable How do I resolve?
0
votes
0answers
866 views

MIKROTIK: Open port 110

I have a mikrotik web proxy with firewall and hotspot. I'm able to open major part of TCP (e.g. 25) port but not the port 110 for TCP. What is the difference? How can I open the port on firewall ...
0
votes
0answers
48 views

Regression testing for firewall changes

We have a number of firewalls in place around our organisation and in some cases packets can pass through four levels of firewall limiting the flow TCP traffic. A concept that I'm used to from ...
0
votes
0answers
587 views

Best way to bridge two networks protected by Endian firewalls

We are being forced to move our servers from one rack in the data center to another - and will have access to our Internet IP block live in both racks. I want to be able to power down a server, move ...
0
votes
0answers
708 views

Internet Download Speed Slow behind Cisco ASA Firewall

It used to work fine until my ISP increased the bandwidth from 10/10 to 15/15, I am only getting 5/10. Isolating the connection directly to a laptop gave the correct speed. ISP says it is a firewall ...
0
votes
0answers
883 views

Endian Destination NAT

I have installed Endian Community Firewall 2.3 and am clearly misunderstanding/doing something wrong with it. I'm trying to create some destination NAT rules to allow incoming connections to various ...
0
votes
0answers
227 views

Firewall Issue on Mysql running on Ubuntu 10:10 server

Hi I have a Mysql db running on a ubunutu 10 server (hosted on Rackspace). I'm trying to connect to this from a windows server that hosts my ASP.net website. I've set up a Mysql User for the IP of ...
0
votes
0answers
974 views

Juniper SSG5 Dropping packets

We have a Juniper SSG 5 running Screen OS 6.2.0r9.0 at appears to be dropping packets. When downloading files (in a browser or FTP client like filezilla) sometimes they will just “hang” half way ...
0
votes
0answers
567 views

sftp poor performance through checkpoint firewall, ftp ok

We got a strange problem bugging me for over a week now and i'm running out of ideas. The network setup is like the following: Windows XP PC 1GBit --> GBit Switch --> 100Mbit cisco Router (2 ...
0
votes
0answers
115 views

Blocking Port By Firewall

I want to block port by APF Firewall and i set it in conf.apf : ** Common inbound (ingress) TCP ports IG_TCP_CPORTS="22,80"** in this conf.apf just this port allow to connect : 22 , 80 but when ...
0
votes
0answers
840 views

Juniper ssg 5 web UI not working

I am facing issue with my Juniper SSG 5. I tried to configure & enable web filtering in my office following various ways to do it on the web. Even with various permutations it is still not ...
0
votes
0answers
485 views

Why can't I create new signed certificates on a Smoothwall CF2008?

I am trying to create new signed certificates on a Corporate Firewall 2008 Smoothwall machine and I am getting an error that says Error - Unable to create certificate, possibly due to a duplicate ...
0
votes
0answers
3k views

pfSense - simple DHCP relay configuration - how?

I am trying to figure out how I can have a machine on the "LAN" nic of pfSense get a DHCP address from a DHCP server on the "WAN" nic of pfSense (happens to be a Windows Server 2003 machine if that ...
0
votes
0answers
258 views

IPv6 and Windows Group Policy-based Firewall

So at work we're playing with using freenet6 to get an IPv6 tunnel up and running. That's working great and all, and I've got it set to advertise the route, and all of the test boxes now have ...
0
votes
0answers
2k views

Configuring a Cisco ASA 5520 V7

I need to replace a 1700 Cisco router with a Cisco Asa 5520 firewall version 7. Before I make the switch, I want to be sure everything is working properly. I'm open to all suggestions. What i need ...
0
votes
0answers
123 views

Restrictive network firewalls, proxies, and SSL

Our app interfaces with our web server using the HTTP components of WinINet, and in the past, we've had issues with this on certain corporate networks. For example, I couldn't append additional HTTP ...
0
votes
0answers
196 views

I cant configure my ASA 5520 and Router 2800 on my Site B Lan

I have a two Site Network Lan, I mean Site A and Site B On site A, I have configured a cisco ASA 5520 and before that I had a cisco 2800 router. This configuration has been done by a hired company. ...
0
votes
0answers
264 views

Routed IPs not detected by rules in TMG 2010

I have a primary static IP and 2 routed IPs coming into my TMG 2010 server. Listeners have been created to handle incoming connections to Exchange 2010 in the internal network. Rules using the ...
0
votes
0answers
97 views

Windows 7 PCs connection through a locked down firewall

It turns out this has been going on for awhile now and I just now found out. There are a dozen or two PCs behind a Cisco RV 120W. They are connected wirelessly. The 120W only allows access to the ...
0
votes
0answers
558 views

Trouble using remote desktop when connected via Cisco VPN

I just setup my Cisco VPN and everything appears to be working fine. I opened the 'remote desktop' application and am unable to connect to my work desktop machine. When I disable Windows Firewall, ...
0
votes
0answers
131 views

logging in from Linux to a Vmware host on SSh did not happen but reverse was working

Ok it might sound silly but since I do not have used Windows so I have not much idea of what is that.Some one created some virtual machines using vmware on a Windows 7 machine.I was able to do an ...
-1
votes
0answers
42 views

iptables service won't start error line 1 fail - centOS 6.5

I can't seem to get my iptables to setup quite right. It seems to keep erroring out at line 1 on the service start. service iptables start iptables: Applying firewall rules: iptables-restore: line 1 ...