A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

1
vote
0answers
29 views

Why did BFD add euid=0 to APF IP deny_host.rules?

Trimming down some old deny_hosts today and I noticed this one: # added euid=0 on 11/03/14 11:00:04 with comment: {bfd.sshd} euid=0 Anyone know why the BFD would have added euid=0 root/permissions ...
1
vote
1answer
76 views

When iptables is started, there is no ftp access because of timeout

When I start the iptables service, there is no ftp access because of a connection timeout. When I stop the iptables service, ftp works fine. This is the current iptables data: Update: replaced ...
-1
votes
2answers
52 views

How to improve IP tables for web server [closed]

this is my curreny /etc/sysconfig/iptables file for a webserver that must allow http, ftp and ssh access. *filter :INPUT ACCEPT [31395:4050333] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [30540:7083959] -A ...
4
votes
1answer
101 views

firewall and private cloud

We have a private bay in which we built a private cloud with vmware vSphere. We received directly the web trafic on a firewall VM and then we forward the trafic to the appropriate VMs. We are worry ...
0
votes
1answer
35 views

Using Cloud Servers and Firewall

I would like to ask if the configuration of "firewall rules eg. only allowing port 80.. when configuring a server instance on cloud services such as google cloud and amazon aws is securely equivalent ...
1
vote
0answers
90 views

Windows firewall blocking network shares through VPN server

I have a VPN server in front of a 172.16.0.0/24 network. On my client side is a 192.168.1.0/24 network. I am able to successfully VPN in to the server network from the client, and I am trying to ...
3
votes
2answers
218 views

High number connections coming from an IP

On our corporate network we're detecting workstations opening too many connections to the IP address 75.126.196.159 (port 3478) causing the Cisco ASA Firewall 5550 to detect a "SYN Attack" and reach ...
0
votes
0answers
32 views

Fortinet as intermediate router

I have the next scenario: FG1(LAN A) <--IPSEC--> FG2(LAN B) <--IPSEC--> FG3(LAN C) Basically I need that "LAN A" reach "LAN C" through FG2, I've tried with "router policy" and "router ...
0
votes
0answers
341 views

FreeNAS jail port forwarding without DHCP

I'm trying to get port forwarding working correctly with jails, and having trouble (I don't have any experience with ipfw or FreeBSD jails. is ipfw even running by default on FreeNAS? I notice pf is ...
0
votes
1answer
90 views

GCE firewall with Source Tags

Created an instance in GCE, tagged 'tagA' Created firewall rule: tcp:12345, source tag tagA, target tag tagA On the instance executed: nc -l 0.0.0.0 -p 12345 netstat -an | grep 12345 tcp ...
0
votes
0answers
281 views

pfSense: Captive Portal is extremely slow

I migrated my pfSense firewall (2.0.2) from an old computer to a more powerful server. I set up the newest pfSense version 2.1 and migrated via export and import my complete settings. Now I encounter ...
0
votes
1answer
109 views

Asterisk Firewall access Rules

I have a questions regarding the firewall rules for Asterisk VoIP server. I have a restricted access to UDP/TCP port 5060, which seems to be blocking calls. I want to make sure that my VoIP Server ...
0
votes
1answer
33 views

Redirect client cloud traffic [closed]

We recently moved our email to Office365 which has as expected put additional strain on our Internet connection. However, we are moving some services to the cloud which will stretch our Internet ...
0
votes
0answers
136 views

amazon ec2 instance going to a remote ip using openswan tunnel is up but no traffic being established on the remote ip

I having establishing a vpn tunnel to a remote peer/public ip using amazon ec2 openswan. The tunnel is up but no traffic has been seen on our side or the remote side? Is there I been missing? Please ...
0
votes
3answers
293 views

ping and traceroute does not work when UFW deny outgoing by default

How to make ping and traceroute work after setting UFW with deny outgoing by default? Here is my UFW configuration: sudo ufw status verbose Status: active Logging: on (low) Default: deny (incoming), ...
0
votes
0answers
231 views

Enabling the Internet Connection on an EC2 Windows Server 2012 Machine

I've disabled the firewall: netsh firewall set opmode disable I've made sure to accept all inbound and all outbound connections: Is there anything that I should be installing or adding on to the ...
0
votes
0answers
83 views

windows firewall , some ports not listening

I've added an inbound connection rule for my windows 8 firewall on windows server 2012: I've restarted the Windows Firewall. When I check that port using this program, it says that it is not ...
0
votes
1answer
608 views

Juniper SSG5 suddenly slow throughput

I'm trying to find out where in my configuration the problem might be. About a month ago we were easily getting 100 up 50 down through our provider through the Juniper SSG5. Starting a few weeks ago ...
0
votes
2answers
95 views

Is a sonicwall tz105 firewall necessary for my network? [closed]

I was not exactly sure how to best word my question above. I am trying not to ask a subjective question but I really want a little advice from someone who knows more about this, and have a few ...
0
votes
1answer
66 views

Is it possible to block HTTP traffic from specific machines?

I have some web crawlers, and a specific website seems to be blocking traffic temporarily after some time. The thing is, even though all clients have the same external IP address (they access the ...
0
votes
0answers
86 views

Remove mapping drives from RDP to user from exteral network

I would like to know if you guys have a solution to my problem. I have a terminal server 2012 that can be accessed remotely after a VPN connection and from the LAN. My question is how can I create a ...
0
votes
0answers
215 views

Dynamic IP Blocking on FORTIGATE 200A Firewall

I have FORTIGATE 200A firewall protecting a IIS Server running a ASP.NET website (windows server 2008 and IIS7) I'm not familiar with Fortigate configurations and options. I recently had "attacks" ...
0
votes
1answer
366 views

pfsense with three WAN IP and outgoing NAT

similar situation as this one: How to setup pfSense with multiple public IP's i have a pfsense with multiple wlan ip's. I'm using a Hetzner Server with vmware so i have a virtual machine with ...
-2
votes
1answer
71 views

FTP server | Filezilla | issues connecting

so I am trying to setup an FTP server (Filezilla) on my windows 2012 server. I have installed filzilla server and set the port to 14144 (not the default 14147) I have also ensured the the service is ...
0
votes
1answer
40 views

Why should I remove firewall rule after application exit?

I have a server which listens on port 80 for incoming requests - using HttpListener. I've found that to be able to do that, I need to open up the port (add a firewall rule which enables me to listen ...
2
votes
2answers
709 views

Why is fail2ban not banning this attack?

I have fail2ban installed to ban bruteforce attempts on the ssh password. There are business requirements for not disabling password authentication on this machine. fail2ban was installed using the ...
4
votes
3answers
379 views

Can't access Exchange OWA from Wireless Subnet - Firewall rule?

The Problem The issue is that I can't access port 80 (or 443) on the Exchange server, unless I add a blanket rule to allow all traffic from the client to the server's subnet. If I add a rule to ...
2
votes
1answer
78 views

DNS grey listing and long retry intervals - standard practices?

My company's ISP has implemented what I'll term DNS "grey listing" (or they have a configuration problem) - they are blocking inbound DNS queries between [resolver IP, server IP] pairs that haven't ...
0
votes
1answer
314 views

Configure firewall and proxy server or just firewall for outbound connections

I'm actually a software developer and I am working on a web application which uses Recaptcha. I am using Asp.Net C# in a web form application. I am having an issue with the server trying to verify ...
1
vote
1answer
151 views

Cannot Ping Devices Across Interfaces for Shorewall Single IP Three-interface Firewall on Debian Wheezy

Summary I am currently working on a three interface software firewall using Shorewall 4.5.5.3 on Debian Wheezy, and I'm having some difficulty with the loc (eth2) and dmz (eth1) interfaces. The fw ...
0
votes
1answer
45 views

How can I adapt this technique of using a proxy (in firefox) to wget and yum ? [closed]

I work in a large organization where some people have extremely restricted internet access and some are given a fairly large amount of freedom. The way my organization manages this is by running a ...
1
vote
1answer
528 views

My iptable rules do not allow VPN connections

I have installed OpenVPN on my Archlinux server and modified my iptable rules to allow incoming traffic on port 1194 and forward it to the tun0 interface. When I disable/stop the iptables, the OpenVPN ...
0
votes
1answer
61 views

iptables setting output default to DROP

I have two servers: one web, one database. The db server is on a private network. I thought I needed to restrict the default OUTPUT on the web server to DROP and created OUTPUT rules to to ACCEPT ...
1
vote
1answer
222 views

Blocking HTTPS content with a Watchguard (Websense) vs. SQUID and SQUIDGuard using Transparent Proxy mode

I'm trying to compare these 2 solutions when it comes to content blocking : 1 - A pFSense appliance with SQUID and SQUIDGUARD packages configured 2 - A Watchguard FW that uses Websense So, in order ...
1
vote
1answer
110 views

Linux VPS settings to allow $_SERVER['REMOTE_ADDR'] to get client ip [closed]

I have unmanaged VPS server. I am trying to get client IP form PHP $_SERVER['REMOTE_ADDR'] but it's always gives me same for all users that is server internal IP. I have done some R & D and got ...
0
votes
1answer
200 views

Skype Group Chat in a secured location?

When working in a secured location - some place that uses HTTPS inspection for the firewall, possibly application level filtering, etc - how do you get Group Chat to work correctly in Skype? Adding ...
0
votes
0answers
60 views

Trace IP traffic to physical machine under Linux

In my firewall logs I recently see frequent connection attempts from a 10.0.0.0/8 network. This network is used by VirtualBox, but I can exclude that these packets come from those. No physical machine ...
0
votes
1answer
52 views

Limiting number of simultaneous connections to certain host on windows

I have an application which doing TCP connections to some host, accidentally it could be configured to make a lot of connections to that host and overload it. Is there Windows firewall application ...
0
votes
2answers
24 views

Rsync through secure head-node on storage cluster

I wish to use a specific head-node as contact address for my rsync backups, I do no wish to have the backend accessed directly, as it is not as hardened, nor as compatible with the rest of my ...
0
votes
0answers
98 views

Cisco 877 configuration with multiple firewalls behind in parallel using public IP's

I would like to ask how I can configure my cisco 877 adsl router to have multiple firewalls installed in parallel behind the cisco 877 router. I have enclosed a diagram of what I am trying to achieve. ...
-1
votes
2answers
133 views

How to allow all clients access to remote MySQL server? [closed]

So I followed this guide to gain remote access to a MySQL server for my laptop. However, my IP changes and I want to be able to access the server outside my network. How can I allow any client IP ...
0
votes
1answer
41 views

Ubuntu UFW setup on database server for connections to a varying array of clustered applications

I'm a little confused and could use some clarification. Let's say I want to deny all connections to a mongodb server, except for to SSH from my IP and from my IP to port 27017. The way I understand ...
0
votes
1answer
64 views

How to close specific port with SuSEfirewall2?

I'm opening specific ports in a SuSE 11 server to do ssh forwarding. After I finish, how do I close only the ports that I opened? I tried SuSEfirewall2 close EXT TCP 4050 but it seems to close ...
0
votes
1answer
63 views

CentOS - how to tell what conf file CSF (firewall) is using? csf.conf then restart not updating

in /etc/csf/csf.conf the following is setup LF_CPANEL = "5" LF_CPANEL_PERM = "3600" restarting csf by doing the following csf -r does not seem to have an impact on the above attributes. ...
0
votes
0answers
185 views

Why need DHCP Relay (Watchguard) inside the Trusted network?

I run a small network that looks like this: { Win 2008 server , desktops , Wifi AP} -> Switch -> Watchguard XTM21 firewall (the Switch is connected to the XTM's Trusted interface ; the XTM ...
0
votes
0answers
49 views

UDP multicast stream on win server 2k8 R2

so i have 3 mega PCs with win 2k8 installed on them having: 1st) 1 internal NIC and 1 external 2nd) 2 internal NIC and 2 external 3rd) 2 internal NIC and 4 external same stream put on any NIC on 1st ...
1
vote
0answers
84 views

Dovecot/Postfix mail server replies to [SYN] with [RST, ACK] when user attempts to connect (POP3). Likely iptables?

Currently I am trying to trouble shoot an e-mail server that will allow users to send e-mail, but not log in to the server (POP3) or receive e-mail using their Outlook clients. Previously this was ...
0
votes
0answers
25 views

Fail over in Lokiwall Firewall

I have configured lokiwall firewall on my linux machine having multiple interfaces. Dual Routing works fine. However, I wanted to know how does the fail over happen in case a link goes down. Do the ...
0
votes
0answers
205 views

Force all traffic from one user through an OpenVPN tunnel on Debian 6 with iptables and ip route

I’m trying to force all traffic of one user through an OpenVPN tunnel. It is giving me grey hairs. The current situation is that I can either allow all traffic for this particular user, and it will go ...
0
votes
1answer
197 views

Secondary DPM server and access to protection agents at primary server

Disclaimer: This is not an ideal setup. In a perfect world we would have a direct two-way VPN between our site and the remote site. My task is to enlighten the consequences of running a System Center ...