A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

0
votes
0answers
132 views

Can't reach a Kubernetes service on a guest node

I have tried to run the guestbook example in Kubernetes Github repository but I can't reach this service from my local host. My test enviroment consists of two virtual machines (with CentOS7) ...
0
votes
0answers
32 views

iptables, ufw, and psad - scanned UDP port alerts from router and devices on home network

I have a fresh install of Ubuntu 16.04. I configured iptables, ufw (with gufw), and psad using instructions from https://www.thefanclub.co.za/how-to/how-secure-ubuntu-1604-lts-server-part-1-basics and ...
0
votes
0answers
36 views

Transferring data to Active FTP server fails from DMZ but works fine from LAN

I know there are a ton of similar questions already, but I've read through just about everything I could find and am still having trouble resolving my specific issue. Problem: I am having difficulty ...
0
votes
0answers
23 views

Does IKEv2 (Windows Client) require the client firewall to perform NAT-T?

I am kind of new to IPSec VPNs. I am trying to set up an IPSec implementation using libreswan with IKEv2 for road warriors. Being road warriors these clients will likely be behind their home ...
0
votes
0answers
77 views

FTP protocol Extremely slow on Windows 10. What could be causing this?

I am running 2 different devices (A pc and a laptop) both on the same network, both Windows 10. The laptop has standard transfering speeds on the FTP protocol. The PC has extremely slow transfer speed ...
0
votes
0answers
30 views

netfilter, block port range [31000-32000] on public interface eth2

I need to block the port range [31000-32000] on my public interface eth2. Services can be accessed using private network interface eth3 I have tried : root@master-sbg-01:~/# iptables -A INPUT -i ...
0
votes
0answers
32 views

How to isolate two containers connected to the same bridge?

I have several LXD containers which are bound to a single bridge (the default lxdbr0 or another one, it does not matter). The host itself has another two interfaces, one ultimately connecting it to ...
0
votes
0answers
19 views

Iptables linux routing with 2 chain proxies

Im trying to setup a connection between a PCs in my local network, to foreign resource XYZ in a specific way. My network is currently configured like this: I have a pc behind the proxies -> Then I ...
0
votes
0answers
16 views

CSF Firewall unblock countries

I've a VPS Server running CENTOS 6.7 x86_64 with CSF Firewall activated. Sometimes I see in "Firewall Deny IPs" that blocks suddenly connections from my country (Spain) to some of my clients. Not ...
0
votes
0answers
77 views

ssh login timed out after enabling the ufw firewall ubuntu server

I followed digital ocean tutorial to enable the firewall in my ubuntu server. The steps I performed is: 1> change the port no to some other no. (8338) 2> enable firewall using sudo ufw allow ...
0
votes
0answers
23 views

Self signed Cisco VPN Certificate

So I just rented some servers protected with a Cisco Firewall from a data center provider. I plan on accessing these servers through VPN. The instructions from the data center provider was to ...
0
votes
0answers
106 views

ASA INSIDE to INSIDE traffic being dropped

An ASA 5505 is being used to route between two networks as it contains routes to everything. The following depicts the network topology. I have tried various combinations of access lists such as: ...
0
votes
0answers
66 views

Traffic on eth0 despite denying it with iptables

Despite having an iptables ruleset which should not allow it - DHCP is working on eth0. Given the below information can anyone give me an idea of why? tap0 is not up (not that it should make any ...
0
votes
0answers
59 views

PFsense 2.2.6 static dhcp hostname blank

We are on pfsense 2.2.6 and we enable static dhcp for each mac address on each VLAN where dhcp is enable. DHCP is working good but when I enable static dhcp and leave the hostname empty and when I ...
0
votes
0answers
29 views

firewalld multiple public ips to multiple private ips routing

I'm trying to use CentOS 7 server as a firewall/nat for some sensitive servers on the LAN. The CentOS server has multiple public IPs (one per box on the LAN) and I'm trying to associate each external ...
0
votes
0answers
21 views

WCCP to Remote Cache Engine - Any limitations?

I am attempting to WCCP to a remote (cloud hosted) cache engine from an ASR 1900 series router that is performing NAT. According to my reading (which was mostly done on ASAs) the WCCP cache engine ...
0
votes
0answers
114 views

FirewallD is not running in CentOS Linux 7.1.1503

I wanted to add a port 5004 for tcp connection. So I run the command: firewall-cmd --permanent --add-port=5004/tcp However I got an error: FirewallD is not running So by some research, I run the ...
0
votes
0answers
12 views

Set up trust on the external forest from the external forest

At one point in the document linked below it says "Set up trust on the external forest from the external forest" Inbound ports :N/A Outbound ports :LDAP (389 UDP and TCP)Microsoft SMB (445 TCP)...
0
votes
0answers
28 views

Restrict GitLab project deployment to IP above SSH key

I was thinking if I can restrict pulling, cloneing, eftching a repository by IP above the SSH key authentication. Imagine the worst situration: Somebody steals my SSH key and Passphrase Finds the ...
0
votes
0answers
36 views

Shrewsoft VPN passthrough Cisco ASA 5505

I have a shrewsoft VPN connection setup that passes through a Cisco ASA 5505, it manages to connect okay and i am able to ping etc but if i try to load anything e.g. web interface nothing is returned. ...
0
votes
0answers
70 views

Firewalld blocking Squid

I have a serious problem here with Squid and Firewalld in Fedora 23. When I activate firewalld, I can not access the proxy I created, it returns a "Connection refused by the proxy server", but when I ...
0
votes
0answers
63 views

Block Windows Service Access to Remote SQL Server with Firewall

So I've got a fun firewall question. We have a windows service that we have running on a Windows Server 2012 instance. It is connecting to a remote SQL Server that we do not own, among other things. ...
0
votes
0answers
35 views

Windows network share not acessible

This question might appear to be a duplicate but I've not found a solution and have tried a multitude of different "solutions" which have not worked. Quick description of the situation: I'm in need ...
0
votes
0answers
44 views

Remote Desktop Connection fails after logging on and off sucessfully

this one has me scratching my head. I've been RDP'ing into a remote server running Windows Server 2008 R2 successfully for a long time. Recently I tried to add a VPN role to the server but when I ...
0
votes
0answers
18 views

How to allow DHCP between 2 networks using Shorewall?

I have a server with hyper-v and 3 networks: eth0 is virtual, eth1 is physical, eth2 is extranet from ISP. Virtual network has a DHCP running and all virtual machines can reach it fine. But not the ...
0
votes
0answers
34 views

Can Someone Explain Why this firewalld Command Does Not Work as Expected?

matiu asked the question of how they can do port forwarding for a single source IP address. You can read the original question here. I provided the following commands as an answer. I based my answer ...
0
votes
0answers
14 views

Static NAT Issue

I have a server inside my network that I want users to be able to access from the outside. To this end, I have setup a static nat between my internal address for this server (10.7.64.27) and one of ...
0
votes
0answers
17 views

Virtual Switch Stack connections to Edge Network

I have a pair of Cisco SG500 switches stacked together as a part of my collapsed core design. I would like to connect this stack to the edge network which is comprised of two Dell Firewall/SonicWall ...
0
votes
0answers
28 views

Cannot Upload Files Over A Specific Size to Wordpress

When uploading larger files to any WordPress site running on a local server it fails. If I try outside of the network it works fine, if I switch to the other LAN network running and connect to the ...
0
votes
0answers
101 views

Issue with Fail2ban and Mikrotik Firewall

OS: CentOS 7.1 At my organization we are currently assessing using Fail2ban with the firewall on our Mikrotik router. I want Fail2ban to communicate any IP flagged as banned to the Mikrotik firewall,...
0
votes
0answers
69 views

pfSense Killing Uploads to Any Wordpress Site

I am running a pfSense firewall on version 2.2.6. As far as I remember I have had working rules and have not had any issues uploading to my wordpress sites until this last upgrade. If I try to upload ...
0
votes
0answers
28 views

Windows Firewall - Block IP address

The configuration is exactly as following: I am absolutely certain that 192.168.2.6 is the correct IP address, yet the according computer remains able to access shared files. Where could I go wrong?...
0
votes
0answers
12 views

Comcast SBG and ZyWALL

Hello and thank you for reading. I will try and keep this short and sorry if the answer to this question is a 'Duh' moment. At my place of business we have Comcast internet, coming in on a cable ...
0
votes
0answers
19 views

Linking fail2ban with a RDBMS

I would like to maintain a highly dynamic RDBMS table that will be insert/update/deleted from from multiple hosts (a kind of global blacklist for all my servers). The table would have a couple basic ...
0
votes
0answers
53 views

Why my firewall rules aren't working in my NanoStation m2?

I have two NanoStation m2 as AP and Repeater for a wireless network (make them device1 and device2), both working in BRIDGE mode. Both devices are connected as WDS pairs to each other because they ...
0
votes
0answers
96 views

iptables user-defined chain not working

I am testing rate limiting to outbound IP's using iptables with user defined chains. So far I have only been able to get this to work with inbound traffic to my server. I cant seem to rate limit ...
0
votes
0answers
31 views

AWS: EC2 VPC blocks outbound requests

I have an EC2 instance in VPC and I managed to break the security group rules. I made a new security group that allows all protocols from anywhere and any port, thinking that it would open up ...
0
votes
0answers
31 views

Not able to block site on pfsense firewall with squid+squidgaurd

Currently running pfsense latest version and set the transparent proxy using squid with squidgaurd for filter but https is not enable because this feature not work well. So that I want to block sites ...
0
votes
0answers
11 views

SOCKS4 can't handle connections all going through the same (open) port

I live behind a firewall and I managed to proxy anything I do to the proxy behind the firewall. The Port 27032 is open and still, if there are too many connection requests at a time, the proxy can ...
0
votes
0answers
68 views

Connection timed out when using ssh to connect to a machine on a pfSense subnet (using port forwarding)

I get a connection time out when I try to ssh into a machine inside a pfSense firewall network. The computer I am connecting from is on the same subnet as the pfSense firewall. That is my computer's ...
0
votes
0answers
168 views

HTTPS web filtering issue in endian

I am running endian firewall latest version and setup the web transparent proxy with enable the https filtering and installed the certificate in the client system. If i enable the https filtering then ...
0
votes
0answers
21 views

Guardian not found in smoothwall express 3.1

I have download latest version of smoothwall express 3.1 iso and install on virtual box but it's do not have Guardian web filtering. Is it need to install additionally ?
0
votes
0answers
17 views

One-to-One NAT with Firehol

I use firehol to manage iptables on Ubuntu 12.04. I am trying to set up one-to-one NAT so requests from the internet and my LAN to one of my public IP addresses goes to a specific server. Here is what ...
0
votes
0answers
16 views

Bandwith quota in private network

We have a private company network with Linux and Windows networks. All traffic to outside pass through a Debian firewall, managed by iptables. We need to set a bandwith quota for every device: we ...
0
votes
0answers
343 views

(PCI-DSS, APF) Firewall UDP Packet Source Port 53 Ruleset Bypass?

I am handling vulnerabilities reported by a PCI-DSS scanner, and one of them is new to me: Title Firewall UDP Packet Source Port 53 Ruleset Bypass Synopsis: Firewall rulesets can be bypassed....
0
votes
0answers
59 views

iptables requires POSTROUTING for port forwarding

I have a very basic router/firewall running Ubuntu. I want to forward tcp connections on a specific port (443) to one of the machines in the local network. It has one interface to the outside world (...
0
votes
0answers
31 views

Translating DNS Server Replys because of multiple NAT Networks

I am planning and building a large infrastructure wich different natted networks. Lets say I have a datacenter network 10.0.0.0/24 and I have many different customer networks that could be anything (...
0
votes
0answers
41 views

CheckPoint UTM-1 Edge does not relay ping reply out of vpn

I have Palo Alto firewall and Checkpoint UTM-1 Edge with established vpn. On Checkpoint UTM-1 device Firewall is off, AntiVirus is off, Security level (low), vpn excluded from firewall. Vpn is ...
0
votes
0answers
17 views

Allow tcp traffic on certain ports from certain IP addresses with Cisco router

I have a Cisco 887 router where I want to allow tcp traffic from a set of external IP addresses to one of the servers on the inside. Further more I only want to allow traffic to certain ports. E.g. ...
0
votes
0answers
15 views

My client can't reach my service

At the moment there is a wcf client running on a remote machine and a service running on mine. It's working without issues. If I reverse things and host the service on IIS at the remote machine my ...