A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

0
votes
0answers
17 views

What is “application-aware” in the context of vShield?

Reading vShield's overview, it is defined as "a hypervisor-based application-aware firewall solution for virtual datacenters". In my limited exposure to the world of firewalls, an "application-aware" ...
0
votes
1answer
378 views

I cannot connect to OpenSSH server running on Ubuntu server from Git bash running Windows, through Cyberoam firewall in network

Situation: I am trying to connect from OpenSSH client inbuilt with Git Bash running on Windows 7 professional x64 to OpenSSH server that runs on Ubuntu Server LTS 14 x64. Both of which are over the ...
0
votes
0answers
31 views

outlook doing remote portscanning

A while ago I switched my mailbox on another domain and configured outlook with an exchange server on that domain. Recently for some strange reason my hosting provider has been complaining that ...
0
votes
1answer
50 views

PSAD IPTables logging error

I installed PSAD on my Ubuntu server and then set the IPTables accordingly. But I still get this error by email: You may just need to add a default logging rule to the /sbin/iptables 'filter' ...
-1
votes
1answer
60 views

remote firewall configuration on centos7

I'm using Centos 7 and am trying to configure my firewall remotely. When I run firewall-config & a window comes up but remains blank. I cannot kill the window with the X close button so I need to ...
-4
votes
2answers
801 views

iptables: open port 25 CentOS 7 [closed]

I have problems opening port 25 for sendmail on my CentOS 7 machine. Here's my iptables configuration: *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] -A INPUT -m state ...
-3
votes
1answer
28 views

Simple to use VPN Firewall [closed]

In my company we use a Cisco ASA 5505 Router with the VPN, Firewall setup, and we route IP and VOIP traffic through it. I can only log into the router from a single computer due to the quirkiness of ...
-1
votes
2answers
85 views

How can I enable protocol traffic with firewalld?

I need to allow Protocol 50 (esp) traffic for ipsec. I can do: iptables -A INPUT -p esp iptables -A OUTPUT -p esp How could I do this with firewalld instead? Same question closed on StackOverflow ...
4
votes
4answers
3k views

Is there a way to see what is actually filtering TCP port communication?

nmap -p 7000-7020 10.1.1.1 Will output all the filtered ports Starting Nmap 6.40 ( http://nmap.org ) at 2015-03-04 12:18 EET Nmap scan report for 10.1.1.1 Host is up (0.00091s latency). PORT ...
-1
votes
1answer
34 views

web application audit task require my remote IP to be allowed on application network firewall [closed]

I want to audit a web application which is hosted on a web server sitting behind a cyberoam firewall. My task is to run a scan from my remote machine which has ISP MTNL broadband. My machine gets a ...
1
vote
0answers
57 views

Windows Server spamming devices on other subnets on port 445

I have a Windows Server 2012 that every few seconds sends packets destined for port 445 on local IPs on other subnets. The IPs on other subnets it is trying to reach are devices such as VoIP phones, ...
1
vote
0answers
237 views

Fortigate 60D - Empty log and report

Environment: Fortigate 60D Forti OS 5.0 I can not see any log or report in the firewall. I have already activated forticloud and I recieve empty reports. Is there something that we have to ...
0
votes
1answer
140 views

How do I open specific ports on Linux (an AWS instance of RHEL v. 7)?

I'm using RedHat version 7. My AWS instances are in a security group with ample permissions for inbound connectivity. I can do Yum updates. The servers can ping each other. I can transfer files ...
-3
votes
1answer
124 views

iptables rules for blocking specific packets [closed]

Im using the following iptables rule: iptables -A INPUT -p tcp -m tcp --tcp-flags PSH,ACK PSH,ACK -m length --length 52 -m state --state ESTABLISHED -j DROP It does it's job for blocking the ...
0
votes
1answer
120 views

Setup fail2ban with apf

Along with BFD we have recently installed fail2ban on our server, it is CentOS and it uses APF to block IPs. I have hunted online on how to get the two to work however when an IP is blocked by ...
0
votes
1answer
57 views

Why the firewall seems to work intermittently?

I've this iptables rules on first server which has the role of a client connecting to a second mysql server through LAN adapter. *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT ...
1
vote
1answer
176 views

Linux - show dropped packets form firewall

I am trying to set up a sip trunk and so far everything has gone well. The only issue I face is that the call does is not received when the iptables service is running. By stopping the service ...
1
vote
1answer
103 views

Any idea why SFTP works differently based on the client machine/network

I have an odd situation. From Computer A with PSFTP.EXE (putty sftp client) I can connect to a remote sftp server and use dir and chdir to browse around. If I try to get or put files I get a ...
0
votes
1answer
50 views

Re-routing packets back inside the network on a SonicWall firewall

I have two wireless networks, one guest network which uses a 10.0.0.0 network to assign IP address to guests and one internal one who gets the IP address from the internal DHCP (let's say ...
0
votes
1answer
83 views

What firewall configuration do I need for SFTP to be able to put files on a remote server

I have a situation in production where SFTP (using Putty PSFTP) is working when I connect and list files on a remote server but put and get fail with error permission denied. In my dev environment I ...
0
votes
0answers
51 views

How to manage overload of ICMP with PF?

I would like to make a basic managment of ICMP overload with packet filter on FreeBSD. The function I would like to realise is:     if target receive too many ICMP from a given source IP address,   ...
0
votes
1answer
265 views

iptables v1.4.21: Couldn't load match `-d':No such file or directory

i am running kerenl 3.14.18 and using iptables 1.4.21, built with these options --static-enable --disable-shared. when i run this command: /sbin/iptables -A PREROUTING -m -d 127.3.0.2/24 -j DNAT ...
0
votes
0answers
18 views

Ganglia server in Google Cloud

Fairly new to the google platform. I needed to open up port 8649 for a ganglia server environment. When I modified the default network and added the port it shows that tcp:8649 is opened. I'm able to ...
0
votes
0answers
24 views

Temporary IPTable Rules when Process Runs

Struggling to find the solution for this and maybe it's easier than I'm making it out to be. I need to open ports in the firewall when a process runs. That process could be requesting the usage of a ...
0
votes
0answers
138 views

Forwarding traffic between interfaces inside a docker container

I have created a docker container executing the following command docker run -it --net=none --cap-add=NET_ADMIN --name firewall ubuntu /bin/bash after I have attached it two interfaces eth0 and ...
0
votes
1answer
126 views

How to allow only subnet for port with iptables

What i am trying to do is to DROP any packets to specific UDP port, except those one from my secured subnet 10.8.0.0/24. iptables -t nat -A --src 10.8.0.0/24 -p udp --destination-port 63210 -j ACCEPT ...
-1
votes
1answer
197 views

Setting up pfsense on a small business network for firewall use

I have approximately 20 machines that will all be on the same subnet with a pfsense firewall. I have no experience with pfsense, so I am just starting out. I have the following configuration: The ...
-3
votes
1answer
38 views

IP address detection through firewall [closed]

Suppose my computer connections are filtered by a firewall on which I have no information and no control. Will the administrators of the network will know which websites I did visit thanks to their ...
0
votes
2answers
82 views

Individuals able to hit our bandwidth cap… Only a recent phenomenon?

We have a 10Mbps (synchronous) connection with our ISP. Recently we have discovered that if a single user is watching Netflix, or if I run Windows Update on a PC, we will totally saturate that 10Mbps ...
0
votes
1answer
194 views

Restricting access to user groups in OpenVPN

I just used the instructions in this tutorial to install OpenVPN on a CentOS 7 server. I am able to ssh and https into the remote CentOS 7 server through the VPN from a client machine. However, it ...
0
votes
1answer
79 views

Proxy action for user-agent blocking with regular expressions not blocking

I have a server behind a Watchguard XTM firewall and want to block incoming RESTClients who has certain user-agents in their request headers. I have implemented several rules to do this: List image ...
1
vote
1answer
169 views

iptables log established connections

I have a rule in my iptables which logs denied connections i.e. -A INPUT -m limit --limit 5/min -j LOG --log-prefix "iptables denied: " --log-level 7 I want a similar rule that logs all established ...
0
votes
2answers
43 views

DNAT on the POSTROUTING chain

What happens if I try to do a DNAT in the POSTROUTING chain of the NAT table in iptables? Suppose I change the destination IP of the packet in the POSTROUTING chain to an address that should get ...
1
vote
2answers
68 views

How to limit external access to mail server?

I use Mdaemon mail server. It can be accessed from internal network and from internet (using mail client and web interface). The problem is I need to limit which users can access their mails from ...
0
votes
2answers
274 views

WatchGuard blocking internal UDP packets

I'm seeing lots of packets that our WatchGuard firewall is dropping. They're all hitting either 255.255.255.255. or 224.0.0.1 using UDP 8612 / 1947 / 17500. Since I've started seeing these messages ...
2
votes
1answer
135 views

UFW rules in place and enabled yet traffic still allowed

I have UFW configured to try and block some unwanted IPs and associated requests. #ufw status |less Status: active To Action From -- ------ ...
1
vote
1answer
149 views

Whitebox firewall in datacenter environment

I am looking into alternatives to commercial firewall appliances. Most of the resources available online describe home network firewalls or sub-gigabit networks. Considering than 10GbE is becoming the ...
1
vote
0answers
15 views

Can a firewall handle packets being sent to it by a network TAP?

We have the intention of examining incoming mails for security purposes. In order to do so we figured out the solution will include: Network TAP - To copy all SMTP traffic to the firewall Firewall - ...
0
votes
1answer
52 views

Cannot access IIS Express from another machine

I can access the IIS express website fine from my local machine, either via localhost, or via its IP address. However when I try to browser to that IP address from another machine, it times out. I ...
0
votes
1answer
39 views

Barracuda Web Application Firewall WAF - HTTP - Barracuda Does Not Filter Links Clicked on Page

I am trying to figure this out. Basically the virtual IP 192.168.1.110 will filter port 80 to the real ip address 192.168.20.110. I can confirm this in the logs. When I click any link on the page ...
0
votes
1answer
42 views

FTP and WWW services don't acknowledge connections

I have Lubuntu 14.04 LTS with vsftpd and the lamp stack (apache2, etc.) installed. Everything works fine on the LAN. Externally, the services don't acknowledge connection attempts. I can see packets ...
-2
votes
1answer
56 views

What is the point of a firewall?

Newbie question: I have set up a new Linux server. I have got SSH running on port 22. I have got Apache running on port 80. I am told I should enable a firewall but why is that? 80 and 22 are the ...
0
votes
2answers
79 views

DNS servers trying to send data to google+ - google DNS

I was looking through my watchguard traffic today and noticed a lot of traffic going from my two local DNS servers to "Google-Plus". I'm assuming watchguard has that labeled incorrect as the IP ...
0
votes
0answers
119 views

Does firewalld handle the common attack rules of iptables by default?

I'm in the process of migrating servers to CentOS 7 from 6.5 and the most major change appears to be the shift from iptables to firewalld. My prior experience with iptables tells me that there are a ...
1
vote
1answer
137 views

Which incoming port is required by JIRA's outgoing (SMTP) e-mail functionality?

I have a JIRA 6.3.15 installed on an Ubuntu 14.04 in a VirtualBox VM. The host system for VirtualBox also is an Ubuntu 14.04. I configured JIRA to use SSL (as described here ...
0
votes
0answers
54 views

What is inserting “/*SC*/” and “/*EC*/” into HTML email comments?

Something is inserting the strings "/*SC*/" and "/*EC*/" into the HTML comments within emails received by our corporate email system: We use MS Exchange at multiple locations, but this is only ...
-1
votes
1answer
49 views

How to open a mysql port for 2 server connected in LAN

I have 2 servers connected togheter in LAN, and both on external network too. One eth0 and the other eth1 adapter. On both servers I've installed mysql. I'm able from both server to connect to their ...
-3
votes
1answer
119 views

What is the easiest way to block access from all countries except for one? [closed]

I have a Ubuntu 14.04 server which runs a game server and it's under heavy DDos attack right now. It's not a English-speaking community, so I don't need access from any other countries but mine. All ...
0
votes
0answers
43 views

VPN-tunnel renegotiation problems

I have an application running on top of Celery with redis as a broker. Redis is hosted at our datacenter but the workers are hosted on a separate line. We have setup two-way communcation between the ...
-1
votes
3answers
1k views

How to detect what's blocking my incoming traffic on Ubuntu 14.04 LTS, if it's NOT iptables and NOT EC2 Security Group?

I have SSH root access to an EC2 instance. It's Ubuntu 14.04 LTS. I have nginx web server listening on all interfaces on port 80 TCP. It's accessible from this server but not from the outside. ...