A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

0
votes
0answers
15 views

How to allow DHCP between 2 networks using Shorewall?

I have a server with hyper-v and 3 networks: eth0 is virtual, eth1 is physical, eth2 is extranet from ISP. Virtual network has a DHCP running and all virtual machines can reach it fine. But not the ...
0
votes
0answers
26 views

Can Someone Explain Why this firewalld Command Does Not Work as Expected?

matiu asked the question of how they can do port forwarding for a single source IP address. You can read the original question here. I provided the following commands as an answer. I based my answer ...
0
votes
0answers
13 views

Static NAT Issue

I have a server inside my network that I want users to be able to access from the outside. To this end, I have setup a static nat between my internal address for this server (10.7.64.27) and one of ...
0
votes
0answers
15 views

Virtual Switch Stack connections to Edge Network

I have a pair of Cisco SG500 switches stacked together as a part of my collapsed core design. I would like to connect this stack to the edge network which is comprised of two Dell Firewall/SonicWall ...
0
votes
0answers
27 views

Cannot Upload Files Over A Specific Size to Wordpress

When uploading larger files to any WordPress site running on a local server it fails. If I try outside of the network it works fine, if I switch to the other LAN network running and connect to the ...
0
votes
0answers
83 views

Issue with Fail2ban and Mikrotik Firewall

OS: CentOS 7.1 At my organization we are currently assessing using Fail2ban with the firewall on our Mikrotik router. I want Fail2ban to communicate any IP flagged as banned to the Mikrotik ...
0
votes
0answers
56 views

pfSense Killing Uploads to Any Wordpress Site

I am running a pfSense firewall on version 2.2.6. As far as I remember I have had working rules and have not had any issues uploading to my wordpress sites until this last upgrade. If I try to upload ...
0
votes
0answers
37 views

Can't connect to VNC server via OpenVPN

I've got the problem with connecting via VNC to remote computer. Connection goes through OpenVPN and I'm routing 5900 port to localhost.. ssh -p(port) -L5900:vpn adress of machine:5900 ...
0
votes
0answers
27 views

Windows Firewall - Block IP address

The configuration is exactly as following: I am absolutely certain that 192.168.2.6 is the correct IP address, yet the according computer remains able to access shared files. Where could I go ...
0
votes
0answers
11 views

Comcast SBG and ZyWALL

Hello and thank you for reading. I will try and keep this short and sorry if the answer to this question is a 'Duh' moment. At my place of business we have Comcast internet, coming in on a cable ...
0
votes
0answers
18 views

Linking fail2ban with a RDBMS

I would like to maintain a highly dynamic RDBMS table that will be insert/update/deleted from from multiple hosts (a kind of global blacklist for all my servers). The table would have a couple basic ...
0
votes
0answers
37 views

Why my firewall rules aren't working in my NanoStation m2?

I have two NanoStation m2 as AP and Repeater for a wireless network (make them device1 and device2), both working in BRIDGE mode. Both devices are connected as WDS pairs to each other because they ...
0
votes
0answers
73 views

iptables user-defined chain not working

I am testing rate limiting to outbound IP's using iptables with user defined chains. So far I have only been able to get this to work with inbound traffic to my server. I cant seem to rate limit ...
0
votes
0answers
29 views

AWS: EC2 VPC blocks outbound requests

I have an EC2 instance in VPC and I managed to break the security group rules. I made a new security group that allows all protocols from anywhere and any port, thinking that it would open up ...
0
votes
0answers
25 views

Not able to block site on pfsense firewall with squid+squidgaurd

Currently running pfsense latest version and set the transparent proxy using squid with squidgaurd for filter but https is not enable because this feature not work well. So that I want to block sites ...
0
votes
0answers
10 views

SOCKS4 can't handle connections all going through the same (open) port

I live behind a firewall and I managed to proxy anything I do to the proxy behind the firewall. The Port 27032 is open and still, if there are too many connection requests at a time, the proxy can ...
0
votes
0answers
56 views

Connection timed out when using ssh to connect to a machine on a pfSense subnet (using port forwarding)

I get a connection time out when I try to ssh into a machine inside a pfSense firewall network. The computer I am connecting from is on the same subnet as the pfSense firewall. That is my computer's ...
0
votes
0answers
127 views

HTTPS web filtering issue in endian

I am running endian firewall latest version and setup the web transparent proxy with enable the https filtering and installed the certificate in the client system. If i enable the https filtering then ...
0
votes
0answers
19 views

Guardian not found in smoothwall express 3.1

I have download latest version of smoothwall express 3.1 iso and install on virtual box but it's do not have Guardian web filtering. Is it need to install additionally ?
0
votes
0answers
16 views

One-to-One NAT with Firehol

I use firehol to manage iptables on Ubuntu 12.04. I am trying to set up one-to-one NAT so requests from the internet and my LAN to one of my public IP addresses goes to a specific server. Here is what ...
0
votes
0answers
16 views

Bandwith quota in private network

We have a private company network with Linux and Windows networks. All traffic to outside pass through a Debian firewall, managed by iptables. We need to set a bandwith quota for every device: we ...
0
votes
0answers
267 views

(PCI-DSS, APF) Firewall UDP Packet Source Port 53 Ruleset Bypass?

I am handling vulnerabilities reported by a PCI-DSS scanner, and one of them is new to me: Title Firewall UDP Packet Source Port 53 Ruleset Bypass Synopsis: Firewall rulesets can be ...
0
votes
0answers
55 views

iptables requires POSTROUTING for port forwarding

I have a very basic router/firewall running Ubuntu. I want to forward tcp connections on a specific port (443) to one of the machines in the local network. It has one interface to the outside world ...
0
votes
0answers
30 views

Translating DNS Server Replys because of multiple NAT Networks

I am planning and building a large infrastructure wich different natted networks. Lets say I have a datacenter network 10.0.0.0/24 and I have many different customer networks that could be anything ...
0
votes
0answers
35 views

CheckPoint UTM-1 Edge does not relay ping reply out of vpn

I have Palo Alto firewall and Checkpoint UTM-1 Edge with established vpn. On Checkpoint UTM-1 device Firewall is off, AntiVirus is off, Security level (low), vpn excluded from firewall. Vpn is ...
0
votes
0answers
17 views

Allow tcp traffic on certain ports from certain IP addresses with Cisco router

I have a Cisco 887 router where I want to allow tcp traffic from a set of external IP addresses to one of the servers on the inside. Further more I only want to allow traffic to certain ports. E.g. ...
0
votes
0answers
14 views

My client can't reach my service

At the moment there is a wcf client running on a remote machine and a service running on mine. It's working without issues. If I reverse things and host the service on IIS at the remote machine my ...
0
votes
0answers
415 views

Nginx proxy_pass reverse proxying behind corporate firewall

Has anyone any idea of how to setup nginx behind a corporate firewall, to reverse proxy requests to servers outside the firewall? The reason I want to do this is I am trying to use an application ...
0
votes
0answers
21 views

Why iptables is not logging

I have the iptables configuration below. I want to block all input but accept some rules. But I want to be able to log the droped connections. But it's not logging. I have this: iptables -N ...
0
votes
0answers
288 views

Configure Openvpn and tinyproxy both at the same time In openwrt

I'm building VPN router using Raspberry_pi and openwrt chaos calmer on top of it. I have successfully configured the pi and achieve the Openvpn functionalities without any issues. Pi connect Openvpn ...
0
votes
0answers
15 views

Why would you allow traffic in through a firewall if you aren't NAT'ting it?

Why would you allow traffic from Outside to Inside - i.e. from 9.9.9.9 to WAN_IP of your Firewall Interface, if you then aren't going to do anything with the traffic i.e. NAT it to a given device. ...
0
votes
0answers
208 views

Juniper SRX 240 dynamic VPN soft timeout

I have been struggling with this for over 2 weeks now and tried everything i possibly can. The Dyanmic vpn connection works fine, but the pulse client randomly pop's up with a password promt and ...
0
votes
0answers
38 views

VoIP phones not registering on second zone - SonicWALL TZ210

Environment: Hosted VoIP SonicWALL TZ210 running SonicOS Enhanced 5.9.1.1-39o (latest) ADSL WAN connection The SonicWALL has two zones (subnets), X0 and X2, LAN and Voice respectively. Both are ...
0
votes
0answers
90 views

CentOs 6 as Firewall, forward traffic from eth1 to eth0 -> destination host prohibited

I'm setting up Firewall with a CentOs 6.0 for testing. I'm doing this on two virtualmachines. First VM (Firewall) has 2 interface: eth0 - connected to NAT with 10.0.2.10, access to internet eth1 - ...
0
votes
0answers
343 views

Can't connect to the data port with FTP server running in Vagrant (passive mode)

I want to connect to Vagrant via FTP and the data connection is failing. I can actually connect and login, but when trying to enter passive mode and list the remote directory, the DATA connection ...
0
votes
0answers
75 views

iptables - forward traffic to VPN client

Following Scenario: Router forwarding traffic on port 80 to Machine A Machine A 192.168.0.254 Running Owncloud on port 80 Connected to VPN Provider Machine B 192.168.0.123 can connect to ...
0
votes
0answers
48 views

Can not block countries in CSF firewall

I have CSF firewall installed + LFD. I have blocked several countries in csf.conf file. Restarted CSF/LFD. CC_DENY = "CN,BR,CA,HK,TW,RO,RU,UA,MD,KZ,TH" I just checked Nginx logfile and found the ...
0
votes
0answers
44 views

A firewall is blocking incoming connections.

To begin with, I am using clients (console applications) on remote computers that send me some data to my IIS server. The server is a regular computer running windows 7 with the default firewall ...
0
votes
0answers
60 views

Block ipv6 range in UFW

I have a Ubuntu server running UFW as a firewall. Since a couple of days a Chinese ipv6 address keeps scanning my server over and over again. My visitor analytics software shows anonymized ip ...
0
votes
0answers
103 views

How to get FTP server working on Windows 2012?

I have a working IIS and I have added FTP Server using Server Roles. When I disable 'Public network settings' in the Firewall, I can connect to my FTP server and everything works fine. However, when ...
0
votes
0answers
563 views

Cisco ASA 5505 cannot ping from inside to outside

Hi everyone and thanks in advance for all the help. I'm having some issue getting my cisco firewall (asa 5505) to ping between zones. The inside zone won't ping with the outside zone and vice versa. ...
0
votes
0answers
33 views

Reverse port forward with tsocks IP-CAM client

I have an IP-CAM (Axis P1204) installed behind a strict firewall preventing any remote access. Axis P1204 supports no VPN and the only tunneling option left is using SOCKS5 proxy. Axis 1204 uses ...
0
votes
0answers
130 views

Why does Pfsense not allow me to see clients connected to local network or other VPN clients?

Hi so essentially I want to be able to remote desktop into a client on another network via the web through OpenVPN. However I can not see any of the client that are on the local LAN network. even ...
0
votes
0answers
27 views

Cyberoam UTM console accessible from outside network Is it secure?

A organisation is running Cyberoam UTM for securing their network from malicious activity from outside network and inside network also. Now, company has given a feasibility to his administrator to ...
0
votes
0answers
130 views

NAT problems with OpenVPN + PF OpenBSD

I rented a server to use as a VPN for educational purposes , ok so set up openvpn server and its all working. I can connect to it with my Windows 7 laptop but i won't be able to browse any website ...
0
votes
0answers
55 views

cannot start iptables on opensuse linux

i am trying to run the iptables service on opensuse linux , but unforunately its failing to activate and systemctl status message shows that its failing to find the /etc/iptables.rules file , i also ...
0
votes
0answers
142 views

UFW - Set correct kernel params

As every system administrator does, one of the first things i did right after booting up my web server was install ufw and tune/set kernel parameters in /etc/sysctl.conf. By the way, this is my ...
0
votes
0answers
22 views

General matter of stateful iptables

I made a set of stateful iptables rules which only handle accepted traffic (More or less). The workflow can be seen in the image below. My questions are: Is it a good idea to drop INVALID state or ...
0
votes
0answers
69 views

iptables hex string match rule migrate to Vyatta (BROCADE)

I have a string match, drop rule working in iptables firewall that I would like to migrate to a Vyatta firewall. Is string matching even possible in Vyatta? If so how can I replicate the following ...
0
votes
0answers
52 views

Use extra firewall to filter WAN traffic before reaching UTM?

I am running a simple web server behind UTM, only port 80,443 is open. However almost 80% of the traffic coming through WAN is trouble. Mostly are port scanners / sniffers or systematically querying ...