A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

-2
votes
1answer
97 views

Email system architecture and implementation [closed]

It's been over a week already and I am unable to find satisfactory solutions to my problem on the Internet. I hope the experts here could lend a helping hand. I will just go straight on describing the ...
0
votes
0answers
69 views

Configure Firewall to allow incoming connections to Server Running in a VM

I have Lubuntu running in a VMware Virtual Machine (on a Windows 7 host). Within the VM, I am using the git daemon command to serve a git repository. When trying to connect to this server from another ...
0
votes
1answer
114 views

allow machine to access localhost website

I've got some IP rules on an Azure VM, the first blocks all traffic, the second allows my laptop to access the website. Both work fine, however when I try to access a website hosted on the VM locally ...
0
votes
1answer
655 views

Block Outgoing SMTP Except for Mail Server

Masters, Our ISP ask to solve a problem. They said we send many SPAM from our server. (they only give our router IP address, so we don"t know if we have SMTP flooders from infected cllient, our we ...
1
vote
1answer
35 views

NIDS on bridged firewall

I have a firewall (Debian Stable 7.5) which works in bridged mode. The interfaces eth0 (WAN) and eth1 (LAN) are linked with the bridge interface br0. Can I deploy a NIDS (eg. Snort) on this server? ...
1
vote
1answer
99 views

Is there a logical reason why Amazon EC2 won't allow me to specify a port when using GRE?

I want to set up PPTP in EC2 and am configuring a security group. I've already selected the "custom protocol" and am using protocol 47 / GRE. When I select this, the port section is read only. Is ...
2
votes
1answer
319 views

How do I set up an IPv6 DMZ with iptables without a static allocation?

I have several networks which are on Comcast's residential network. I need to access those networks from a variety of environments, via an SSH proxy on one of the hosts. (As it happens I'm using ...
0
votes
0answers
381 views

FreeBSD 10 IPFW IPv6

I'm struggling to allow IPv6 connections on my FreeBSD 10 server. I have a working IPv6 connection. But IPFW blocks all the IPv6 traffic. #!/bin/sh # # flush existing rules ipfw -q flush # allow ...
0
votes
0answers
64 views

Mac OS X Firewall isn't firewalling

Rather confused by the results I'm getting on a Mac OS X Server running 10.8. I have an app that is running a web server on port 8000, which I want to be visible only to localhost. This seems ...
0
votes
1answer
41 views

Block an outbound destination IP to prevent connections waiting timeout duration [duplicate]

It seems like with the basic "DROP" iptables rule, an outbound attempt will still wait the duration of its timeout. For instance, if I block an IP address outbound, then attempt to connect to it via ...
0
votes
0answers
148 views

Traffic forwarding by domain on ZyWall USG 200?

I know this question is very specific, but I have not found any help yet. At our office, we run a small server room with a few servers behind a ZyWall. Unfortunately, we only have one external IP at ...
0
votes
2answers
772 views

Websocket & HTTP proxy with server between two firewalls

I have a server ("A") running behind a firewall, which serves HTTP and websockets. I have no control over the firewall, but do have an external server ("B") to which the internal server can connect ...
0
votes
1answer
39 views

Cloud services can't be reached from complex customer infrastructure

We have several services running on a cloud, they all are hosted on Windows Server 2012 R2, have public IP address and specific port. Some of our customers can't reach them because for "some reason" ...
-2
votes
1answer
39 views

Allow outgoing connections for DNS [closed]

I'm new to IPtables, but I am trying to setup a secure server to host a website and allow SSH. This is what I have so far: #!/bin/sh i=/sbin/iptables # Flush all rules $i -F $i -X # Setup default ...
1
vote
1answer
197 views

Does the TCP-UDP-Proxy policy in Watchguard open me to security problems?

I don't remember seeing this policy since it seems to me like an "all ports open" kind of thing. It is set default "tcp:0(any) - udp:0(any)" If I disable this, even web traffic wouldn't work although ...
1
vote
1answer
157 views

What is the difference between a SPI Firewall and an Application Layer Firewall?

What is the difference between a SPI Firewall and an Application Layer Firewall? In what circumstances would I prefer one over the other?
0
votes
2answers
155 views

pfsense CARP - wan failure on firewall

I have recently configured 2 firewall (on 2 DELL PowerEdge R210II with ESXI 5.1) with pfsense. We have several LANs and 2 WANs. Everything is running fine but i have a strange behavior: i can access ...
0
votes
0answers
1k views

VPN pptp connection Unable to pass through linux iptables

I have set up a windows VPN server behind Linux - Ubuntu box that is working as firewall and proxy server. Now I want people from outside to be able to connect to the VPN server, but the connection is ...
0
votes
1answer
290 views

iptables to allow input and output traffic to and from web server only

I have an Elastic Search server which seems to have been exploited (it's being used for a DDoS attack having had NO firewall for about a month). As a temporary measure while I create a new one I was ...
0
votes
0answers
37 views

Reverse web proxy with time constraints

I have a web application which produces several unique URLs of the type http://service.company.com/service.html?type=aaaa&key=jfiZm6u6cW where the last part is a randomly generated key. Each such ...
0
votes
0answers
475 views

Port Forwarding to a VPN Client

I'm looking for some help getting a port forward setup to a VM running Ubuntu 12.04 on my LAN. I can forward the port to the VM successfully and connect to the service over the Internet. But when I ...
0
votes
1answer
26 views

What is http+s (firewall settings)

I'm able to configure my firewall settings for http, https and http+s, but I'm not sure what http+s is or could be used for?
0
votes
1answer
200 views

Slow Website Access from China

I just made a wordpress based website for a client that operates in China. The website is being cached completely by W3 Total Cache and served very fast in Europe (where our main server is located). ...
0
votes
1answer
92 views

UFW blocking webrick on port 3000

On a ubuntu 10.0.4 server runs redmine. starting webrick with: ./server webrick -e production -b lvps46-173-79-113.dedicated.hosteurope.de -d makes redmine available in browser. as soon as we ...
1
vote
0answers
462 views

ClearOS Proxy - Block all traffic but two sites and 3 DMZ ips

I've been trying to two days now to get ClearOS to do a proxy setup for my network. This is what I need to do: I need to block all outgoing traffic no matter what it is, all ports and HTTPS as well ...
1
vote
1answer
99 views

Is there any danger in disabling windows firewall on a azure worker role?

I'm trying to troubleshoot a bug on our Azure worker role where we occasionally get the error "Unable to read data from the transport connection: An established connection was aborted by the software ...
0
votes
1answer
228 views

correctly setup PF with loopback interfaces for nginx proxy

I am trying to run couple of freebsd jails for my web server and application server, which is running node.js I have one network card (igb0) with a custom loopback interface (lo666) for which i have ...
0
votes
1answer
76 views

iptables blocks ip address even though it is specified to allow it. Why? [closed]

I'm at a loss to explain why these rules don't have the same effect as whitelisting ip addresses. Can anyone tell me why? # /etc/hosts.deny ...
-5
votes
1answer
387 views

Blocking facebook and other social networking sites from corporate LAN whilst maintaining an audit trail of all sites visited [closed]

I am setting up an office LAN, and I want to give it internet access but i want to be able to do the following: Maintain a black list of sites not to visit (e.g. facebook and other social sites), so ...
1
vote
1answer
2k views

Assign static IPs to tap clients in pfSense's OpenVPN server

I am trying to set up a pfSense server with OpenVPN. The OpenVPN will use the tap interface, tun clients are no option for us. The LAN network is 10.0.0.0/24, the pfSense machine is 10.0.0.10 and ...
0
votes
1answer
213 views

Correct way to open ports for fastcgi using iptables

I'm running a server with nginx and fastcgi. I'm using TCP sockets for fastcgi rather than Unix sockets as I've read that this scales better. The fastcgi server is running on fastcgi://127.0.0.1:9000. ...
0
votes
2answers
115 views

Hardware firewall for Linux web (and mail) server allows UDP connections to any local port from remote ports 53 and 123 — is this safe?

I'm trying to tighten security on a linux web server. It has a hardware firewall with a default rule set and I noticed two rules that concern me: remote port: 123; local port: ANY; protocol: UDP; ...
0
votes
1answer
209 views

Can't connect to remote server. Socket error = #2000

I don't know what went wrong, but I get a Timeout after logging in to the proftpd server. STATUS:> [12.05.2014 16:30:24] Getting listing ""... STATUS:> [12.05.2014 16:30:24] Resolving ...
0
votes
0answers
39 views

Windows server 2003 SP2 firewall - limit inbound connections

I am trying to make the server running Windows 2003 Server SP2 to allow connections only from the local network or and couple of specific remote IP. I have experience using Linux only and therefore I ...
2
votes
1answer
172 views

Whitelist outbound traffic in VPC to changing IPs

I'm working with EC2 servers in a VPC where we'd like as little outbound traffic as possible, and for all outbound traffic to be explicitly whitelisted. However, based on EC2 security groups or ...
1
vote
1answer
171 views

How do you prevent an Active Directory 2012 R2 Domain Controller from advertising the domain on a specific interface?

Short version: How do you prevent an Active Directory 2012 R2 Domain Controller from advertising the domain on a specific interface? I want that network to not be flagged as a domain network, and no ...
-1
votes
2answers
354 views

block all packets in windows 7 (so nothing appears in wireshark)? Can anything locally installed do it?

is it possible to block all packets in windows 7, so that nothing appears in wireshark? I have tried choosing Block all for incoming. for outgoing, I see it has no block all option, just a block ...
4
votes
1answer
109 views

Ban an IP when the server received an amount of data from it

What I need : There are many result for adding a drop rules by an amount of request per laps of time, but I need to drop by received byte count from a particular address over a period of time. ...
2
votes
1answer
99 views

iptables traversal and the chain policies, manual editing

I like editing the iptables file manually, but there's something that confuses me a bit. From how I have understood iptables from the manual, it traverses the rules from top to bottom, and if no ...
1
vote
2answers
170 views

Give internal access to external client

I am newbie in the networking issues. I got a question for which I don’t know how to solve. I have my internal network that has a fixed IP (only accessed by VPN) and I have a server where I put some ...
-1
votes
1answer
49 views

Firewall Based on NIC

I have an IIS 8.5 Server running on Windows Server 2012 r2. The server itself has 2 network cards. Rewrite: Can you block ports based on a network adapter? IE: I have two network adapters, both ...
2
votes
0answers
4k views

[SOLVED ]Openvpn routing for lan to lan through tun

I am trying to setup an OpenVPN tun to connect two lan's The open vpn connection is up and working but there is a problem with my routing or nat or something. What I need is an example of what a ...
0
votes
1answer
525 views

Block ip forwarding for specific remote ip address

I use ubuntu as gateway for several hosts. I need advise how to block ip forwarding for specific ip address or specific ip range? I tried to block ip via ufw deny rules, but it looks like ip ...
1
vote
1answer
73 views

Websever behind Sonicwall, Gateway Timeout

I am stuck here, I have a Cradlepoint CBA750B in IP-passthrough mode connected to x1 on my Sonicwall NSA220. Behind the Sonicwall I have a webserver on the LAN. I have X1 set to use DHCP to get the ...
1
vote
0answers
264 views

Shorewall redirect rule only working for some hosts in the same network

I'm trying to use Shorewall's REDIRECT action to intercept traffic destined for the firewall's port 514 (TCP and UDP) to port 5000 (also TCP and UDP), while also allowing direct traffic to the latter ...
4
votes
4answers
1k views

How can I make an internet facing TFTP server secure?

I have many Cisco IP phones that operate in the following manner (oversimplified): Negotiate with DHCP for IP, DNS, TFTP, etc. Look for SEPXXXXXXXXXXXX.cnf.xml configuration file on TFTP server ...
3
votes
1answer
289 views

Need help understanding capturing from Wireshark?

I am having issues with my FTP servers. Connecting, sending and receiving fail sometimes, and it is not consistent. I manage to capture and filter by IP the packets, I just need pointers on what can ...
5
votes
2answers
421 views

Where does a firewall application fit into the software stack?

I'm trying to figure out where a firewall application on a server fits into the software stack, and at what point in the networking process the firewall "kicks in," from the perspective of an ...
0
votes
1answer
383 views

How to surf the internet using static IP using SSL VPN [closed]

I have a Fortinet 60D device which configured to use SSL VPN this appliance connect to ADSL router with WAN interface and to my Radius server on LAN interface. The problem is when I go out to the ...
0
votes
2answers
69 views

2 lans on the same switch safe? [closed]

I have a modem with 5 ports. Each port gets a static IP address from the web. Basically if i ping one of those static IP addresses from home i am pinging directly one of those ports. On the first ...