A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

1
vote
1answer
139 views

Cannot Ping Devices Across Interfaces for Shorewall Single IP Three-interface Firewall on Debian Wheezy

Summary I am currently working on a three interface software firewall using Shorewall 4.5.5.3 on Debian Wheezy, and I'm having some difficulty with the loc (eth2) and dmz (eth1) interfaces. The fw ...
0
votes
1answer
42 views

How can I adapt this technique of using a proxy (in firefox) to wget and yum ? [closed]

I work in a large organization where some people have extremely restricted internet access and some are given a fairly large amount of freedom. The way my organization manages this is by running a ...
1
vote
1answer
440 views

My iptable rules do not allow VPN connections

I have installed OpenVPN on my Archlinux server and modified my iptable rules to allow incoming traffic on port 1194 and forward it to the tun0 interface. When I disable/stop the iptables, the OpenVPN ...
0
votes
1answer
57 views

iptables setting output default to DROP

I have two servers: one web, one database. The db server is on a private network. I thought I needed to restrict the default OUTPUT on the web server to DROP and created OUTPUT rules to to ACCEPT ...
0
votes
0answers
212 views

Blocking HTTPS content with a Watchguard (Websense) vs. SQUID and SQUIDGuard using Transparent Proxy mode

I'm trying to compare these 2 solutions when it comes to content blocking : 1 - A pFSense appliance with SQUID and SQUIDGUARD packages configured 2 - A Watchguard FW that uses Websense So, in order ...
1
vote
1answer
107 views

Linux VPS settings to allow $_SERVER['REMOTE_ADDR'] to get client ip [closed]

I have unmanaged VPS server. I am trying to get client IP form PHP $_SERVER['REMOTE_ADDR'] but it's always gives me same for all users that is server internal IP. I have done some R & D and got ...
0
votes
1answer
165 views

Skype Group Chat in a secured location?

When working in a secured location - some place that uses HTTPS inspection for the firewall, possibly application level filtering, etc - how do you get Group Chat to work correctly in Skype? Adding ...
0
votes
0answers
53 views

Trace IP traffic to physical machine under Linux

In my firewall logs I recently see frequent connection attempts from a 10.0.0.0/8 network. This network is used by VirtualBox, but I can exclude that these packets come from those. No physical machine ...
0
votes
1answer
50 views

Limiting number of simultaneous connections to certain host on windows

I have an application which doing TCP connections to some host, accidentally it could be configured to make a lot of connections to that host and overload it. Is there Windows firewall application ...
0
votes
2answers
24 views

Rsync through secure head-node on storage cluster

I wish to use a specific head-node as contact address for my rsync backups, I do no wish to have the backend accessed directly, as it is not as hardened, nor as compatible with the rest of my ...
0
votes
0answers
97 views

Cisco 877 configuration with multiple firewalls behind in parallel using public IP's

I would like to ask how I can configure my cisco 877 adsl router to have multiple firewalls installed in parallel behind the cisco 877 router. I have enclosed a diagram of what I am trying to achieve. ...
-1
votes
2answers
130 views

How to allow all clients access to remote MySQL server? [closed]

So I followed this guide to gain remote access to a MySQL server for my laptop. However, my IP changes and I want to be able to access the server outside my network. How can I allow any client IP ...
0
votes
1answer
40 views

Ubuntu UFW setup on database server for connections to a varying array of clustered applications

I'm a little confused and could use some clarification. Let's say I want to deny all connections to a mongodb server, except for to SSH from my IP and from my IP to port 27017. The way I understand ...
0
votes
1answer
58 views

How to close specific port with SuSEfirewall2?

I'm opening specific ports in a SuSE 11 server to do ssh forwarding. After I finish, how do I close only the ports that I opened? I tried SuSEfirewall2 close EXT TCP 4050 but it seems to close ...
0
votes
1answer
58 views

CentOS - how to tell what conf file CSF (firewall) is using? csf.conf then restart not updating

in /etc/csf/csf.conf the following is setup LF_CPANEL = "5" LF_CPANEL_PERM = "3600" restarting csf by doing the following csf -r does not seem to have an impact on the above attributes. ...
0
votes
0answers
169 views

Why need DHCP Relay (Watchguard) inside the Trusted network?

I run a small network that looks like this: { Win 2008 server , desktops , Wifi AP} -> Switch -> Watchguard XTM21 firewall (the Switch is connected to the XTM's Trusted interface ; the XTM ...
0
votes
0answers
47 views

UDP multicast stream on win server 2k8 R2

so i have 3 mega PCs with win 2k8 installed on them having: 1st) 1 internal NIC and 1 external 2nd) 2 internal NIC and 2 external 3rd) 2 internal NIC and 4 external same stream put on any NIC on 1st ...
1
vote
0answers
77 views

Dovecot/Postfix mail server replies to [SYN] with [RST, ACK] when user attempts to connect (POP3). Likely iptables?

Currently I am trying to trouble shoot an e-mail server that will allow users to send e-mail, but not log in to the server (POP3) or receive e-mail using their Outlook clients. Previously this was ...
0
votes
0answers
24 views

Fail over in Lokiwall Firewall

I have configured lokiwall firewall on my linux machine having multiple interfaces. Dual Routing works fine. However, I wanted to know how does the fail over happen in case a link goes down. Do the ...
0
votes
0answers
193 views

Force all traffic from one user through an OpenVPN tunnel on Debian 6 with iptables and ip route

I’m trying to force all traffic of one user through an OpenVPN tunnel. It is giving me grey hairs. The current situation is that I can either allow all traffic for this particular user, and it will go ...
0
votes
0answers
189 views

Secondary DPM server and access to protection agents at primary server

Disclaimer: This is not an ideal setup. In a perfect world we would have a direct two-way VPN between our site and the remote site. My task is to enlighten the consequences of running a System Center ...
1
vote
1answer
924 views

How to ban Syn Flood Attacks using Fail2Ban?

In my log, I am frequently seeing dropped ips like this: > Oct 30 17:32:24 IPTables Dropped: IN=eth0 OUT= > MAC=04:01:2b:bd:b0:01:4c:96:14:ff:df:f0:08:00 SRC=62.210.94.116 > ...
0
votes
1answer
61 views

Do blocking input ports increases security?

1-Do blocking unused input ports in firewall increases system security? How? (as there is no daemon listening on those ports anyway) 2-Do dropping those unused ports will positively or negatively ...
0
votes
0answers
78 views

Intermittent SSH problems with a specific server from a specific Wifi router

I've been ssh'ing into a specific server from my home office via Wifi and Time Warner Cable internet for years with no problem. In recent months, I started having problems, where I'd be unable to ...
0
votes
0answers
33 views

Using a Barracuda F400 Firewall Router Without a Modem

I'm looking into a problem where VoIP phones don't ring for some of the incoming calls that I believe might be due to the network configuration. Do you need a modem if you are using a Barracuda F400 ...
2
votes
1answer
793 views

Fail2ban jail.local vs jail.conf

Does jail.local file act as an override to jail.conf or as a replacement to jail.conf? When I was learning about Fail2Ban from tutorials, most of them usually say either to copy jail.conf to ...
1
vote
1answer
105 views

MySQL on LAN not working when IPTables enabled

I have two Centos VM. The IP Addresses are as follows : VM_1 => 10.99.0.10 VM_2 => 10.99.0.12 Apache and PHP are in VM_1 and MySQL is in VM_2. Both are having iptables rules. VM_2 is working ...
1
vote
0answers
46 views

PF rule for Continuity

So it looks like the Continuity on OS X 10.10 creates network interface on the fly (utun2 here) and my PF blocks it, so that I can't make/answer calls. I'm not an admin, just use the IceFloor for PF ...
0
votes
1answer
120 views

Can I block inbound traffic from a certain ISP

The problem My server keeps getting DDoS attacks from IP's belonging to Ecatel in The Netherlands. I wrote them a month ago and still haven't heard anything, and keep blocking individual IP addresses ...
0
votes
0answers
41 views

Publishing Multiple SSL Connections via TMG

I am using a Microsoft TMG 2010 as my Firewall. It is configured in a Three-legged approach, with public facing servers in DMZ. There are two public servers. Once is a Citrix Access Gateway which ...
1
vote
2answers
382 views

Test port reachability from a remote host even though the port is not bound to a service?

I need to check whether a remote host is able to reach a specific port. At the time of test the service bound to that port will be down. The possible issues that the test would address would be : ...
0
votes
0answers
59 views

nslookup gives timeout based on request - what gives?

I have the following strange problem with the DNS lookups in our Windows domain (dns service runs on the domain controller): from machine 'A': dns request for machines in the same network zone ...
0
votes
2answers
169 views

Cisco 887VA - Cannot open port 110

I am trying to configure a Cisco 887VA at work to open port 110, but no matter what I try, it doesn't seem to work. The router is accessed from within the building via a web UI but require CLI ...
0
votes
0answers
77 views

How can I log and maybe even block IPs that send lots of incoming UDP traffic?

we run a voice / teamspeak server which receives legitmate traffic on port 9987 from many ips. Sometimes we get DDoSed. So people use single Servers and send 1-3 Gbits of UDP Floods to that port. This ...
0
votes
1answer
54 views

Smoothwall firewall seems to be preventing “large” uploads

One of our customers has a Smoothwall firewall at the edge of their network. External users should be able to use a mobile app to upload images. The images are sent as base64 encoded strings in a JSON ...
0
votes
1answer
46 views

Making a server “read only” except for me (what the inbound/outbound rules mean)

I have an ec2 instance. It will start a webserver, and my public ip is myip. I ssh into my machine. What should incoming and outgoing rules? Why? I want only my ip to be able to change things on the ...
0
votes
1answer
86 views

Cisco PIX Firewall Version 6.3(5)

I am unable to ssh to any servers. I've exhausted every possible thing except the corporate firewall. Its an old cisco pix firewall. [model] Cisco PIX 501 I'm trying to figure out 1) how to ...
0
votes
1answer
85 views

iptables with sticky forwarding/routing

My iptables is sticking. I have a DNS server behind IPTables and down a NAT'ed OpenVPN pipe. Using tcpdump I see DNS packets hit the outside router but it takes 4 or 5 DNS query attempts before the ...
0
votes
1answer
85 views

multi-wan problems with web services

I recently set up a multi-wan connection for a small company, because they are at the end of the line for any possible ISP, services do go down, and they really depend on their Internet connection. I ...
0
votes
2answers
93 views

IP rules misconfigured, lost access to server

I have to give my IP rule like, DROP if source is not from 127.0.0.1 AND destination is 9200 But unfortunately, I gave it like, DROP if source is not from 127.0.0.1 (missed the port) So I lost ...
0
votes
0answers
18 views

Sonicwall 250m bandwidth

We have an nsa 250m with the SonicOS Enhanced 5.9.0.2-107o version. Is there a way to manage bandwidth by group ? I'm already able to do this this by user with this method Firewalls => Access rules ...
0
votes
0answers
29 views

netsh advfirewall : how to force to prompt matched IP

I have a netsh script that inserts some IP's to block in the Microsoft firewall. All these rules are working perfectly. I would like to create an additional rule to have a popup / prompt from the ...
0
votes
1answer
613 views

ufw seems to block all incoming connections when defaulting to block outgoing

I am currently trying to configure ufw on Ubuntu 12.04 but to my understanding it behaves oddly. i tried allowing just some services on a remote machine, denying everything else. I thought - anyway, i ...
0
votes
0answers
72 views

Is the IP based filtering in Amazon EC2 enough to ensure security?

I am hosting a webserver using Amazon EC2 and want it to be accessible only from a particular IP. I have set up my security groups to allow connections from only that IP. ...
1
vote
0answers
146 views

NoVNC being blocked behind firewall, how can I find the port being blocked?

We have an OpenStack cloud running internally and wanted to allow student's access to the NoVNC console from within Openstack's Horizon web panel. Everything work's internally however after adding ...
0
votes
0answers
113 views

Setting up a firewall to route between interfaces on a gateway

I've been trying to setup a firewall on my debian gateway with iptables. The gateway is connected to a a network 12.120.0.0/24 on eth0 behind a NAT and the subnetwork behind it is 12.120.4.0/24 eth1. ...
0
votes
2answers
451 views

sonicwall-multiple IP's for same interface

I am new to sonicwall.Is there any way to add multiple ip's to a sonicwall interface ?. In my lab there are two local networks connected to same switch (networks are overlapped). I need to communicate ...
1
vote
1answer
61 views

why i see two kind of IP at my ping?

i have a Windows Server 2008 R2 with external DNS Server on it. all domains works fine but when i ping one of theme i get this result and site is down . C:\Users\Administrator>ping xxx.com ...
0
votes
1answer
111 views

HAProxy fails to connect when Shorewall firewall is enabled on web servers

I have a fairly standard HAProxy / Web Cluster setup, which is running perfectly fine - as long as I don't enable the Shorewall firewall on the web cluster servers. As soon as I do, error messages ...
0
votes
1answer
64 views

Router/Firewall Hardware Failure Testing

My company has a Sonicwall Pro 3060 Enhanced that has been in service 24/7 for about 10 years since it was originally purchased. Lately the box has seemed to have hiccups in passing traffic (although ...