A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

2
votes
1answer
20 views

Problems Configuring IPTABLE for Samba Share

I am trying to configure Samba on my CentOS 6 server such that only 3 IP addresses have access to the Samba Share. For some reason my iptable configuration is wrong. I have checked lines 11-15 and ...
2
votes
2answers
61 views

wget only works when tcpdump is listening

I am running two Virtual Machines over the XEN hypervisor both with Ubuntu trusty (Linaro-Developer version) with the following simple bridge networking setup: Backend domain (dom0): br0 ...
1
vote
1answer
20 views

How can I protect Sophos OpenSSL settings from being overwritten?

Our company network uses a Sophos firewall with an Apache reverse-proxy, which is configured to allow HTTPS connections. After we realized that some of our clients can not connect over HTTPS, our ...
0
votes
1answer
55 views

Connecting with SQL Server Management Studio (Remote)

All right, here's my problem: I have set up a sql server 2014 on a windows server 2012 R2. If I'm connecting through the local network just with the ip, everything works fine. Now we need to access ...
0
votes
0answers
14 views

My client can't reach my service

At the moment there is a wcf client running on a remote machine and a service running on mine. It's working without issues. If I reverse things and host the service on IIS at the remote machine my ...
-1
votes
2answers
55 views

ESXi 5.5 Isolate Network [closed]

I have recently acquired a poweredge running esxi 5.5, and am creating a network for pentesting purposes. Currently my main network and the pentesting network are entirely seperate entities, having no ...
3
votes
0answers
47 views

What's the recommended way to restrict Internet access per process using SELinux?

Before I have tried to do this using a phony user and iptables to execute commands that needs to be restricted. However now the commands need to read configuration set by each user's environment vars ...
0
votes
0answers
427 views

Nginx proxy_pass reverse proxying behind corporate firewall

Has anyone any idea of how to setup nginx behind a corporate firewall, to reverse proxy requests to servers outside the firewall? The reason I want to do this is I am trying to use an application ...
2
votes
1answer
52 views

Configuring firewall rules

I am trying to configure firewall rules for my windows PC i would like to achieve this scenario All packets from PC A will use this proxy server x.x.x.x at port AA However, these are my rules ...
0
votes
2answers
419 views

How to block internet access when the VPN stops on a DD-WRT router and separate VPN/direct clients?

I am using a DD-WRT 3.0 router to connect via openVPN. In the LAN, 192.168.1.50 is a device which should not go thru the VPN. (How do I set the firewall to have 192.168.1.50 not go thru VPN and How ...
1
vote
0answers
101 views

Drop first packet for every IP with iptables

My servers are getting UDP-flooded with spoofed source IP addresses. They flood with real user packets so I cannot rate limit or block these packets. Is there a way to drop the first packet received ...
1
vote
2answers
115 views

allowing ping packets from specific ip in windows firewall

How do i allow ping packets from a specific ip from my internal network in windows firewall. Whenever, i tried to set custom inbound rules in windows. There does not seem to have a way to achieve ...
1
vote
1answer
62 views

iptables - Filter by MAC on FORWARD chain

I need to setup a firewall between a server, and the clients on the intranet that filters access by MAC on the FORWARD chain. The server has one NIC (on subnet 10.0.0.0/29), the firewall two NICs ...
0
votes
0answers
21 views

Why iptables is not logging

I have the iptables configuration below. I want to block all input but accept some rules. But I want to be able to log the droped connections. But it's not logging. I have this: iptables -N ...
-1
votes
1answer
191 views

Restrict access to Google App Engine app using firewall rules

I'm looking to apply the firewall rules set under "Networking" section of the Google Cloud Platform Developers Console to my App Engine instance(s) set up under "Compute -> App Engine" section. ...
0
votes
1answer
124 views

Where are iptables rules stored on Digital Ocean Ubuntu 14.04

I have a basic standard Ubuntu 14.04 droplet on digital ocean. I used ufw to set some firewall rules but forgot to open port 22 for SSH. I rebooted my server and could no longer log in so DO support ...
0
votes
1answer
69 views

Firewalld Centos 7 creating rule

I created a custom zone inside my firewalld on my Centos 7. This custom zone has no rules yet. I want to do this: first add a rule that allows all the outbound traffic and drops all inbound traffic. ...
-5
votes
1answer
46 views

Centos 7 no firewall & no systemctl [closed]

I really need help, where can I install systemctl and the firewall for centos 7 min? I have tried everything including google which has all turned up no results.
0
votes
1answer
38 views

Why do I have an “any any” rule in iptables at the top and one at the bottom?

Hoping someone can clear this up for me. I'm on RHEL7.1 and I noticed that in iptables I have a rule that allows anything incoming. I ran this command to get the line numbers and interfaces just to ...
1
vote
2answers
589 views

Replacement for ISA Server / Forefront TMG

We used ISA Server 2006 as network firewall, router, and VPN server - and I loved ISA server, because it did exactly what it supposed to do, nothing less, nothing more (ok, someting more, e.g. ...
1
vote
1answer
147 views

Cannot connect to the MySQL remote server. Debian 8

I have issue that I cannot reach the 3306 port (mysql) even if I set it in iptables. How can I resolve this issue? root@vps191532:# iptables-save # Generated by iptables-save v1.4.21 on Thu Oct 22 ...
1
vote
1answer
78 views

What are the differences between Fail2Ban and BFD (Brute Force Detection)

I have used both Fail2Ban and BFD, typically I go with Fail2Ban on servers running IPTables, and BFD when servers are running APF. Are there any major differences between these 2 services? What are ...
0
votes
1answer
86 views

How can I open a port on just one server IP?

I am setting up a dedicated server for gameserver hosting, which will also host a couple of other server applications (such as a web server). The dedicated server has a total of four IP addresses, ...
0
votes
0answers
291 views

Configure Openvpn and tinyproxy both at the same time In openwrt

I'm building VPN router using Raspberry_pi and openwrt chaos calmer on top of it. I have successfully configured the pi and achieve the Openvpn functionalities without any issues. Pi connect Openvpn ...
0
votes
0answers
15 views

Why would you allow traffic in through a firewall if you aren't NAT'ting it?

Why would you allow traffic from Outside to Inside - i.e. from 9.9.9.9 to WAN_IP of your Firewall Interface, if you then aren't going to do anything with the traffic i.e. NAT it to a given device. ...
1
vote
1answer
49 views

Windows 8.1 IPSec by GPO - no firewall rules generated

I am seeing very strange behavior on Windows 8.1 clients when attempting to configure IPSec rules via group policy. I am configuring several rules through several policies, to be able to target the ...
0
votes
0answers
209 views

Juniper SRX 240 dynamic VPN soft timeout

I have been struggling with this for over 2 weeks now and tried everything i possibly can. The Dyanmic vpn connection works fine, but the pulse client randomly pop's up with a password promt and ...
0
votes
1answer
80 views

Why nmap result is different from online port scanner result?

I have a vps A, and I am running smtp on it. If I run nmap from my local desktop to scan for my vps it turns out that port 25 (smtp) is filtered. However, if I run online scanner (fill my vps's IP ...
0
votes
1answer
149 views

Change the order that an IPTABLE CHAIN is read (Using Fail2Ban)

I have some experience using iptables and fail2ban. Both are working as they should, but I would like to optimize the way packets are "DROPed" when IP & port probing occur. Fail2Ban is doing a ...
1
vote
2answers
57 views

What blocks incoming connection on Windows 7

I have reduced setup to just 2 computers connected via switch with fixed IP addresses. PC-A is able to connect to or ping PC-B PC-B is not able to connect to or ping PC-A Windows firewall is ...
0
votes
2answers
47 views

Only allow traffic trough port 80 in firewall

In our firewall we want to only allow port 80 and close all other ports. This is easy to do, but how can we test if the firewall is only allowing port 80. How do you test and confirm that the ...
0
votes
0answers
39 views

VoIP phones not registering on second zone - SonicWALL TZ210

Environment: Hosted VoIP SonicWALL TZ210 running SonicOS Enhanced 5.9.1.1-39o (latest) ADSL WAN connection The SonicWALL has two zones (subnets), X0 and X2, LAN and Voice respectively. Both are ...
0
votes
1answer
46 views

DDOS and Blocking IP's [duplicate]

I'm experiencing issues with the server and noticed that i'm under some sort of a DDOS attack, i have blocked the IP's in the Firewall, yet the IP's show up in netstat. Is this normal? tcp 0 ...
3
votes
1answer
101 views

iis server whitelisting inbound traffic to a limited set of IP addresses

We want to whitelist a list of IP addresses for a website running on a IIS in windows 2008 server. Since this list of IP addresses would be dynamic we would like to store that in a text file which ...
0
votes
2answers
971 views

iptables rules not working

I am at a loss to why my iptable rules are blocking access to https://example.com:9700 despite accept rule being added I start by clearing out everything iptables -P INPUT ACCEPT iptables -P ...
0
votes
0answers
91 views

CentOs 6 as Firewall, forward traffic from eth1 to eth0 -> destination host prohibited

I'm setting up Firewall with a CentOs 6.0 for testing. I'm doing this on two virtualmachines. First VM (Firewall) has 2 interface: eth0 - connected to NAT with 10.0.2.10, access to internet eth1 - ...
-2
votes
1answer
72 views

unable to connect ftp on google compute engine instance [closed]

I am using pure-ftpd on ubuntu instance. I can connect to ftp from that instance as ftp localhost but not from outside I can access apache2 server from anywhere by External-IP. which firewall / ...
3
votes
1answer
81 views

VM-VM only network with KVM

I'm trying to create a VM only network where guests can speak to each other, but not with the host. I want to isolate the host for security reasons, as multiple test users will be using the VMs. ...
1
vote
0answers
46 views

TCP Syn cookies is it always turned on when enabled?

For Linux kernel 2.6.32 if I set net.ipv4.tcp_syncookies = 1 will that be always used or only during a SYN flood attack? I found 2 sources which says the opposite. 1: "There are, however, two ...
0
votes
1answer
69 views

Not able to “Run As” any application on a server in the TRUSTING domain using an account from the TRUSTED domain

There are two domains: "dom1" and "dom2". "dom1" is the trusting domain. "dom2" is the trusted domain. I.e. there is a one way trust where domain "dom1" trusts domain "dom2". Servers joined to ...
3
votes
0answers
100 views

Sophos firewall default settings do not allow HTTPS from Java 6 clients

Our current (default) Sophos firewall (Apache reverse proxy) settings does not allow Java 6 clients to connect over HTTPS. The ssltest result shows that the reason is "Client does not support DH ...
3
votes
1answer
99 views

CentOS 7 ip masquerade for internet access

My CentOS XYZ has two network interfaces: iface1 136.136.10.10 is connected to gateway 136.136.10.1 iface2 192.168.10.1 is connected to private network XYZ can access the internet through gateway ...
1
vote
1answer
72 views

Restrict XP to access internet in Server 2012 R2 Domain using GPO?

How can I restrict only XP machines to access internet in Server 2012 R2 Domain environment using GPO? I need to allow those XP machines to access local Intranet sites in the Domain environment just ...
1
vote
1answer
46 views

How to confirm Nginx `deny` is working?

I setup Nginx to deny a specific IP address and would like to confirm that it is working. How can I do this? In principle, I'd like to do something like: ping -from <blocked ip address> <my ...
0
votes
0answers
348 views

Can't connect to the data port with FTP server running in Vagrant (passive mode)

I want to connect to Vagrant via FTP and the data connection is failing. I can actually connect and login, but when trying to enter passive mode and list the remote directory, the DATA connection ...
0
votes
0answers
76 views

iptables - forward traffic to VPN client

Following Scenario: Router forwarding traffic on port 80 to Machine A Machine A 192.168.0.254 Running Owncloud on port 80 Connected to VPN Provider Machine B 192.168.0.123 can connect to ...
-1
votes
1answer
145 views

Sonicwall Block all internet traffic but email

I set up a sonicwall to block internet to users on a certain switch port. Works well, but now they want to access email, while still blocking the internet. I can't figure out a way to do this using ...
0
votes
0answers
11 views

Firewall effect - connected with some ISP v/s ISP + VPN [duplicate]

Suppose I am connected to internet using some ISP (could be a private/personal ISP or office/company ISP) and I am accessing a website. Questions: Only my laptop's firewall be in effect or ...
0
votes
0answers
48 views

Can not block countries in CSF firewall

I have CSF firewall installed + LFD. I have blocked several countries in csf.conf file. Restarted CSF/LFD. CC_DENY = "CN,BR,CA,HK,TW,RO,RU,UA,MD,KZ,TH" I just checked Nginx logfile and found the ...
0
votes
1answer
221 views

Relationship between bastion host and jump host

What's are the differences/similarities between a "bastion host" and a "jump host"? Are they usually used interchangeably?