A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

-3
votes
0answers
83 views

What is the best practice to build up a secure connection between networks through the internet in the described case [on hold]

I need to deploy services/servers on MyNetwork to be able to serve the described basic infrastructure: Original image Adding more description: 1. I'm having N Customers with their own LAN connected ...
0
votes
0answers
7 views

OpenVPN advanced privileged client access customization

I have implemented an OpenVPN server running on Tomato router (Let's call the router TR) the OpenVPN server is using TUN interface which means connections between clients and servers are based on ...
0
votes
0answers
22 views

cisco wireless router not allowing full tcp handshake when in router mode

I have a recently-purchased cisco rv220w wireless router. My setup is as follows: Internet -> asa 5505 -> 10.0.1.0 subnet -> wireless router (subnet 10.0.3.0, public facing ip is ...
0
votes
0answers
11 views

Cisco 881W Zone Base Firewall

I cannot ping an Internal system to a DMZ system. I have checked the policy map session and everything time I do a ping the match shows the first ping was matched but none of the other pings were ...
-3
votes
0answers
16 views

Red 5 on Win 7 64 loading external but not local [on hold]

Ok, so when I run an install of any red5 exe... lets say 1.o.1...and I input (10.0.0.2) as the ip on the prompt and 5080 as port... local I can see my home screen... but cannot access /install /demo ...
7
votes
4answers
11k views

How to Unban an IP properly with Fail2Ban

I'm using Fail2Ban on a server and I'm wondering how to unban an IP properly. I know I can work with IPTables directly: iptables -D fail2ban-ssh <number> But is there not a way to do it with ...
1
vote
1answer
4k views

Handshake violation when trying to access one website

I have a TZ 190 Wireless Enhanced with SonicOS Enhanced 4.2.1.0-20e. Yesterday, people could access without any problems a bank website wich uses HTTPS. Today, it is imposible to access only that ...
2
votes
2answers
724 views

Real-time layer 7 (http.request.uri) filtration on freebsd

I have a freebsd 9.0 router with 250-300Mbit/s traffic, and need to filter small list of pages (http.request.uri). I do not care about tor, anonymizers, proxy etc. Just prevent direct access from my ...
-1
votes
0answers
29 views

firewall tool for OS X Mavericks (specifically for preventing brute force attacks) [migrated]

Here's the deal: Over the last few weeks, I've noticed a large number of authentication failures for both the sshd service and the screensharingd service on my Mac OS X Mavericks server (running ...
0
votes
1answer
828 views

Windows firewall logging. Log file is always blank

I have read many similar articles and posts on how to enable windows firewall logging. I have Win2k8r2 server without any Active Directory, DC, domains and other complicated stuff. Almost all of this ...
0
votes
2answers
122 views

Opening ports in EC2

I have an ec2 instance. I have opened a port in the security group for cassandra (9160) and have cassandra listening on it. If I use nmap on the instance, that port does not show up, and I cannot ...
0
votes
0answers
26 views

Opening port 8080 on Windows firewall [migrated]

I am not sure if I am just missing a trick here and it will be something rather simple, or if I am trying to do something that just isn't going to work.. Anyway, I have an asp.net site and I am using ...
-2
votes
0answers
9 views

Redirect to external url [closed]

Looking to redirect internal users to external url. I've been doing research but keep running into dead ends. Any ideas on how to do this without a complicated set up?
1
vote
1answer
259 views

Can't connect to Postgres in production

I'm trying to connect to my Postgres instance on a local IP, which I can connect to with no problem using the psql -h localhost command. However, which trying to run via rails, I get this: $ rails c ...
1
vote
0answers
20 views

Firewall and NAT settings in GSM modem for one server

I have a GSM Modem (PSI-MODEM-GSM/ETH) in field with one device behind, acting as a server. The situation is as follows: "PC" | \_________Dynamic IP: 10.103.153.122 | ...
0
votes
2answers
28 views

Firewall/Packet Sniffer - forward HTTP requests to a different address

I have a particularly "hacky" question/solution and looking for some honest feedback. In an enterprise system there are a number of requests that are destined for www.sometargeturl.com. These need ...
1
vote
2answers
2k views

Configuring Fortigate OS4 for FTPS

I configured iis7 ftp to allow ssl connections. I set the ssl firewall to use ports 50000-50050. If I set up a custom service on my fortigate firewall for ftps with source ports 990-50050 and ...
0
votes
1answer
1k views

How can I debug Cisco Firewall ASA “Dispatch Unit” very high CPU utilisation from ASDM?

I have recently had my first firewall installed so I am very new to this whole situation. I am finding that Dispatch unit is becoming overloaded and it would appear to be the reason I get serious ...
0
votes
0answers
22 views

Multiple gateways with linux on same subnet using single NIC

I have the following configuration; Firewall 1 (site 1); x.x.x.x/26 subnet on external 10.0.0.0/8 on internal (internal IP 10.0.0.10) Firewall 2 (site 2); x.x.x.y/26 subnet on external 10.0.0.0/8 ...
2
votes
1answer
25 views

iptables: does a scanner knows if you DROP packets?

I know how REJECT and DROP chain works. But, as I read here REJECT vs DROP when using iptables, user Dagelf said that the server still replies with TCP SYN/ACK. Does the scanner knows that a packet ...
1
vote
2answers
34 views

Communicating between two servers sitting behind their respective NATs

I'm building an web app (Server A) that communicates with a remote server (Server B) that is connected to the internet. Server B resides behind a NAT and is listening to communication on 3 ...
0
votes
1answer
40 views

netscreen sn25 vs cisco asa5505 speed

Current i have 2 server direct connect to 1 juniper netscreen sn25 firewall then go to internet, the intel 350 nic is setup at 100mbps (which should be able go up to 1000mbps). the problem is this ...
0
votes
0answers
31 views

Force all traffic through VPN

I am using PfSense as a firewall, with its VPN functionality. The client I use is Shrew Soft VPN client. As it is a split tunnel, is there a way I can force all traffic through the VPN connection, ...
0
votes
3answers
1k views

Can't RDP out behind SonicWall Firewall

I am trying to connect to a remote computer. but on m side i believe that my SonicWall Firewall is blocking me from sending a request out. I do not know how to configure the firewall to allow access ...
0
votes
2answers
6k views

Fortigate 200A firewall CPU high resource usage

This morning I'm receiving complaints from several end users that saying their whole department network are slow and have intermittent. Therefore I've checked our firewall to see whether if something ...
1
vote
2answers
909 views

Smoothwall Express interface issues

I have a SmoothWall Express box that is currently configured with a Green and Purple interface. Both interfaces are in the same /24 subnet (which seems odd to me). The green interface (address of ...
1
vote
1answer
621 views

Amazon EC2 Socket connection not being accepted

I am trying to run a java application on my EC2 instance. The application accepts socket connections on port 54321. If I try and connect to it, it times out. My Security Group is set as: TCP Port ...
0
votes
2answers
54 views

IpTables Configuration Not Working to block ports (Centos 6.2)

I am trying to only allow certain IPs to access port 8209. I have tried a few different methods that I read on ServerFault. This method is the most recent one I have tried. I manually edited my ...
0
votes
1answer
868 views

Allow access to printer between interfaces on Cisco ASA5510

I have a Cisco ASA5510 where we have to separate networks on two separate interfaces. The networks should have nothing to do with each other except that network B needs to access a printer on network ...
1
vote
1answer
654 views

Permission denied accessing windows firewall

It doesn't matter who I am logged in as I am getting the following error in the mmc console when I launch the firewall advanced settings There was an error opening the Windows Firewall with Advanced ...
0
votes
2answers
32 views

EC2 security policy private address

I have created an EC2 Security Group that allows incoming traffic from a private ip address in the same account. It is my understanding that a private ip address for a classic instance can change ...
-1
votes
0answers
25 views

firewall and load balancer vmware on one physicall server [duplicate]

I have 2 unit server series Rainer SV311C4-2.4 SATA 35 NR, processor Intel Xeon X3430 Quad Core 2.4Ghz 8Mb L3 Cache memory 8GB. Each unit I will install two virtual mechine for firewall and load ...
-2
votes
3answers
104 views

How do I access port 10,000 on AWS?

How can I access port 10000 on Amazon Web Services? I added port 10,000 to a security group, but I still cannot access it. I can only access the service locally. [root@ip-172-31-15-65 ~]# curl -I ...
1
vote
3answers
1k views

Unable to access internal network through PfSense WAN port

Our branch office is unable to connect to our internal network for some reason. However we can connect to the branch office domain controller from behind PfSense. The following is our setup: ...
-1
votes
2answers
54 views

How to handle an abuse complaint? [closed]

I have just received an abuse complaint from my hosting service: [2014-04-04 03:30:23 CET] [Timestamp:1396575024] [11717182.634230] Firewall: *UDP_IN Blocked* IN=eth0 OUT= SRC=My IP ...
0
votes
1answer
608 views

How to set up port forwarding on a NETGEAR ProSafe™ Gigabit 8 Port VPN Firewall FVS318N?

UPDATE: Rule might be right, but app still isn't functional. See more details after the screenshots. I want to forward port 3000 to a machine in the local network (192.168.1.106). So far I've ...
0
votes
0answers
16 views

Xenserver firewall consideration

We are setting up Xenserver for a production environment with seperate VMs for a website, billing, control panel, mail. My question is, should we rely on each server's IPtables or is it necessary to ...
1
vote
1answer
1k views

DHCP relay through Fortigate 60B firewall isn't working

I inherited a network with a Fortigate 60B firewall. The VPN dial up client works right now as long as I specify a static IP. Problem is, it becomes hard to manage when I need to assign each and every ...
0
votes
1answer
50 views

FortiGate 80c port forward

I have a FortiGate 80c and I'm getting at a lost on how to port forward to get my OpenVPN service accessible externally. I did setup the VirtualIP assigning tcp 1194 on the internal IP to the ...
1
vote
1answer
33 views

What is proper host in PGAdmin for accessing postgresql through firewall

Here is my situation. I have Postgresql installed on a Windows Server on a LAN. I have an IIS web server set up outside the lan. I want to connect to the postgresql database from the webserver. ...
2
votes
3answers
2k views

Proper network configuration for a KVM guest to be on the same networks at the host

I am running a Debian Linux server on Lenny. Within it, I am running another Lenny instance using KVM. Both servers are externally available, with public IPs, as well as a second interface with ...
0
votes
1answer
33 views

XenServer virtual network firewall

We are setting up XenServer machine with several VMs for our ecommerce business. We are intending to distribute services across several VMs (1 for web, 1 billing, 1 email, etc.) The XenServer machine ...
1
vote
3answers
775 views

Sonicwall NSA2400 - No internet access

We've got a SonicWall NSA2400 configured with a LAN (X0) and a WAN(X1) interface. It was setup and working fine until just recently when a temporary worker changed some settings most likely NAT. We ...
0
votes
1answer
26 views

iptables stopping access to websites

I have iptables set up on a server to only allow whitelisted ips to access it: :INPUT ACCEPT [1695:323274] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [987:756890] :xxx - [0:0] -A INPUT -s 12.34.56.78/32 ...
0
votes
2answers
61 views

Firewall high availability

Context: My company is on the verge of a major network improvement, we will expand our network to remote offices via radio bridges. The firewall will be handling: 3 mission critical networks 3 non ...
1
vote
1answer
693 views

Ubuntu 12.04 open port 80 inside WLAN

I have an nginx server running on ubuntu 12.04 that serves http through port 80 and https through port 443. Everything works fine if I access it from the same computer via localhost, 127.0.0.1 or the ...
0
votes
1answer
39 views

Cannot add address object using CLI on Sonicwall NSA2400 (5.9 firmware)

Based on an example from "SonicOS 5.9 Enterprise Command Line Interface Reference Guide" I have tried to add an address object using command below (which is not changed compare to prior firmware): ...
0
votes
0answers
39 views

SonicWall NSA2400 after firmware upgrade to 5.9 - not able to log some intrusion prevention/detection statements

After upgrading firmware to 5.9 version I'm not able to log intrusion prevention/detection for statements like PHP CGI Argument Injection, Remote Command Execution, Remote File Inclusion, WEB-ATTACKS, ...
0
votes
1answer
845 views

Remote Desktop working in LAN, but not over WAN

We have a server with Remote Desktop enabled, but we can only access the server from inside the LAN. Port forwarding on port 3389 is set up on the gateway/modem (Comcast SMCD3G) and canyouseeme.org ...
2
votes
1answer
2k views

Watchguard config, drop-in or mixed-routing mode?

I have a Watchguard XTM 2 that is currently acting as a firewall and a router for my business network, I currently have the WG setup in mixed-routing mode and am happy with the current configuration. ...