A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

2
votes
2answers
46 views

Windows firewall, netsh, block all ips from a text file

am using the following scrip to block ip's from a text file into the windows firewall. I'm using windows 2008 R2 @echo off if "%1"=="list" ( netsh advfirewall firewall show rule Blockit | ...
-1
votes
0answers
13 views

Windows 8.1 third party firewalls and Hyper-V virtual switch compatibility [on hold]

I have the following problem: Hyper-V is installed on windows 8.1 with an external virtual switch. Everything works fine with windows firewall. When i try to install any third party firewall on ...
0
votes
2answers
42 views

Limiting IP access geographically

I don't want to cause any offence here, but whenever I take a look at the logs for my servers I can see I am constantly having IP addresses in China try to login to my machines, hoping to get access ...
6
votes
2answers
314 views
+100

For an internet-facing, all-roles-in-one Exchange server, what do I need to let through the firewall?

As the result of a recent penetration test, in which we did not fare well, it has been brought to my attention that our internet facing, all-roles-in-one, Exchange 2010 SP3 server has no firewall in ...
-1
votes
0answers
19 views

Want to block torrent traffic (p2p) & other unwanted sites [on hold]

I have a Dlink 260E UTM & subscription IPS/IDS , WCF & antivirus.i want to know how to block P2P traffic on it & other unwanted sites by using IPS/IDS & WCF. I am new to this ...
0
votes
2answers
21 views

Cisco PIX 501 and jumbo frames

We currently have a cisco pix 501 running in our office building and we just got word that our network is going to updated to run jumbo frames. I haven't been able to find much information, but from ...
-1
votes
0answers
30 views

Access to alternative DirectAdmin port is removed from iptables after a while

First i installed csf. Then these auto block rules: http://help.directadmin.com/item.php?id=380 Next i opened a different port in csf for directadmin to listen to. Also added the exception to ...
1
vote
0answers
17 views

Why did BFD add euid=0 to APF IP deny_host.rules?

Trimming down some old deny_hosts today and I noticed this one: # added euid=0 on 11/03/14 11:00:04 with comment: {bfd.sshd} euid=0 Anyone know why the BFD would have added euid=0 root/permissions ...
-1
votes
1answer
21 views

Host-name based web forwarding in software firewall [on hold]

This is another one of those "what should I use instead of Forefront TMG" questions, although I will try to be very specific about my request. Please advise a software firewall product, that would ...
1
vote
1answer
48 views

When iptables is started, there is no ftp access because of timeout

When I start the iptables service, there is no ftp access because of a connection timeout. When I stop the iptables service, ftp works fine. This is the current iptables data: Update: replaced ...
1
vote
2answers
87 views

Website not visible from only 1 office

Small website for our company is visible from every location except from computers in our office. Ive ruled out everything I can think of, including : Firewall. m0m0wall, very basic straightforward ...
0
votes
1answer
27 views

Using Cloud Servers and Firewall

I would like to ask if the configuration of "firewall rules eg. only allowing port 80.. when configuring a server instance on cloud services such as google cloud and amazon aws is securely equivalent ...
-2
votes
2answers
41 views

How to improve IP tables for web server [closed]

this is my curreny /etc/sysconfig/iptables file for a webserver that must allow http, ftp and ssh access. *filter :INPUT ACCEPT [31395:4050333] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [30540:7083959] -A ...
4
votes
1answer
93 views

firewall and private cloud

We have a private bay in which we built a private cloud with vmware vSphere. We received directly the web trafic on a firewall VM and then we forward the trafic to the appropriate VMs. We are worry ...
1
vote
3answers
1k views

Sonicwall NSA2400 - No internet access

We've got a SonicWall NSA2400 configured with a LAN (X0) and a WAN(X1) interface. It was setup and working fine until just recently when a temporary worker changed some settings most likely NAT. We ...
1
vote
3answers
3k views

WMI: How can I fix the port?

I need to use WMI for getting some information from my servers. But I have a server in DMZ, so I need to open a port in my firewall. I've searching and I found that WMI uses random port. How can this ...
0
votes
2answers
826 views

Routing between multiple Mikrotik Firewalls

I have 2 Miktorik RouterBoards, an RB1100 and a RB951G. The 951G is acting as my Wireless box, and has Guest, Internal and Internet Only Wireless networks. The RB1100 has 3 WAN connections (2x150/10Mb ...
3
votes
2answers
90 views

High number connections coming from an IP

On our corporate network we're detecting workstations opening too many connections to the IP address 75.126.196.159 (port 3478) causing the Cisco ASA Firewall 5550 to detect a "SYN Attack" and reach ...
2
votes
3answers
2k views

How do you block new incoming tcp connections on X port?

How do you block new incoming tcp connections on X port? Needs to be done with iptables. I actually have a working iptables command but we always reach ip_conntrack_max even when ip_conntrack_max ...
1
vote
0answers
24 views

Windows firewall blocking network shares through VPN server

I have a VPN server in front of a 172.16.0.0/24 network. On my client side is a 192.168.1.0/24 network. I am able to successfully VPN in to the server network from the client, and I am trying to ...
-1
votes
0answers
17 views

windows firewall iptables equivalent? [closed]

How can I block all outgoing packets whose payload contains a given string in Windows ?
0
votes
2answers
644 views

ConfigServer Security and Firewall — after setup, how much daily management required?

I'm looking at using ConfigServer Security and Firewall (CSF; iptables-based). After I configure it properly, how much daily ongoing management is required of me to keep my server secure? Am I going ...
3
votes
1answer
5k views

PPTP connection fails with errors 800/806

I've got a client (Server 2008 R2) that won't connect to our production environment PPTP VPN server (Server 2003, running RRAS). The server is behind a firewall that has TCP1723 open as well as GRE. ...
0
votes
0answers
12 views

Fortinet as intermediate router

I have the next scenario: FG1(LAN A) <--IPSEC--> FG2(LAN B) <--IPSEC--> FG3(LAN C) Basically I need that "LAN A" reach "LAN C" through FG2, I've tried with "router policy" and "router ...
1
vote
1answer
3k views

iproute2 rules and iptables NAT… what is the difference?

We have 2 different ISP connections. Our previous "IT guy" setup our firewall like so: When /etc/rc.local was executed on startup, it did a bunch of ip rule add and ip route add commands in order to ...
0
votes
0answers
25 views

FreeNAS jail port forwarding without DHCP

I'm trying to get port forwarding working correctly with jails, and having trouble (I don't have any experience with ipfw or FreeBSD jails. is ipfw even running by default on FreeNAS? I notice pf is ...
0
votes
0answers
10 views

GCE firewall with Source Tags

Created an instance in GCE, tagged 'tagA' Created firewall rule: tcp:12345, source tag tagA, target tag tagA On the instance executed: nc -l 0.0.0.0 -p 12345 netstat -an | grep 12345 tcp ...
33
votes
9answers
14k views

Why not block ICMP?

I think I almost have my iptables setup complete on my CentOS 5.3 system. Here is my script... # Establish a clean slate iptables -P INPUT ACCEPT iptables -P FORWARD ACCEPT iptables -P OUTPUT ACCEPT ...
0
votes
1answer
2k views

iptables forward rule not working in openwrt

I am trying to apply some iptables forwarding rules in openwrt. Here is my scenario - My server has two cards ath0 and br-lan. br-lan is connected to internet and ath0 to private network. The other ...
0
votes
0answers
18 views

pfSense: Captive Portal is extremely slow

I migrated my pfSense firewall (2.0.2) from an old computer to a more powerful server. I set up the newest pfSense version 2.1 and migrated via export and import my complete settings. Now I encounter ...
0
votes
0answers
19 views

Asterisk Firewall access Rules

I have a questions regarding the firewall rules for Asterisk VoIP server. I have a restricted access to UDP/TCP port 5060, which seems to be blocking calls. I want to make sure that my VoIP Server ...
1
vote
1answer
205 views

How to ban Syn Flood Attacks using Fail2Ban?

In my log, I am frequently seeing dropped ips like this: > Oct 30 17:32:24 IPTables Dropped: IN=eth0 OUT= > MAC=04:01:2b:bd:b0:01:4c:96:14:ff:df:f0:08:00 SRC=62.210.94.116 > ...
0
votes
1answer
25 views

Redirect client cloud traffic [closed]

We recently moved our email to Office365 which has as expected put additional strain on our Internet connection. However, we are moving some services to the cloud which will stretch our Internet ...
0
votes
0answers
16 views

amazon ec2 instance going to a remote ip using openswan tunnel is up but no traffic being established on the remote ip

I having establishing a vpn tunnel to a remote peer/public ip using amazon ec2 openswan. The tunnel is up but no traffic has been seen on our side or the remote side? Is there I been missing? Please ...
2
votes
1answer
3k views

Watchguard config, drop-in or mixed-routing mode?

I have a Watchguard XTM 2 that is currently acting as a firewall and a router for my business network, I currently have the WG setup in mixed-routing mode and am happy with the current configuration. ...
0
votes
1answer
2k views

Open port 8009/tcp on Fortigate necessary?

A nmap scan of a Fortigate Firewall showed that TCP port 8009 open is. According to knowledge base articles this is only to download the client for ssl vpn. Is this port used for anything else, and if ...
-1
votes
3answers
50 views

ping and traceroute does not work when UFW deny outgoing by default

How to make ping and traceroute work after setting UFW with deny outgoing by default? Here is my UFW configuration: sudo ufw status verbose Status: active Logging: on (low) Default: deny (incoming), ...
1
vote
1answer
1k views

Juniper SSG5 DHCP IP Pool is full. Unable to offer IP address to client

hope we have some Juniper guys around, I have configured a Juniper SSG5 as our main firewall/router the DHCP server set on interface bgroup1 to have a rang from 10.10.10.76 to 10.10.10.210 All ...
-3
votes
0answers
36 views

Large number of requests, high outgoing traffic [duplicate]

I have a VPS on Linode with Ubuntu 12.04 LTS on which I run my staging server (protected with basic HTTP authentication). I the recent days, I received a high number of requests from a handful of IPs ...
0
votes
4answers
1k views

Server not reachable on all TCP ports from all locations

I have a very strange situation on a Linux (CentOS) server. Firstly, from my Ubuntu desktop PC, I can successfully connect to all services that are running on it, on ports 22, 80, 8080 and others. ...
1
vote
1answer
866 views

Ubuntu 12.04 open port 80 inside WLAN

I have an nginx server running on ubuntu 12.04 that serves http through port 80 and https through port 443. Everything works fine if I access it from the same computer via localhost, 127.0.0.1 or the ...
0
votes
1answer
162 views

Configuring firewall centOS

Hi I am trying to configure my ip tables...but I can't seem to make this work... I'm not sure why (this is my first dedicated server) -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp ...
0
votes
0answers
50 views

Enabling the Internet Connection on an EC2 Windows Server 2012 Machine

I've disabled the firewall: netsh firewall set opmode disable I've made sure to accept all inbound and all outbound connections: Is there anything that I should be installing or adding on to the ...
15
votes
4answers
17k views

What firewall ports need to be open to allow access to external git repositories?

What firewall port(s) need to be open to allow access to external git repositories?
1
vote
3answers
890 views

How to block ALL communications with an IP-address using iptables?

I have a FreeBSD system behind a Linux-based router (using DD-WRT firmware). The FreeBSD system is running sshd and is regularly probed by various script-kiddies. It currently runs a script, that, ...
0
votes
1answer
52 views

Juniper SSG5 suddenly slow throughput

I'm trying to find out where in my configuration the problem might be. About a month ago we were easily getting 100 up 50 down through our provider through the Juniper SSG5. Starting a few weeks ago ...
0
votes
0answers
15 views

windows firewall , some ports not listening

I've added an inbound connection rule for my windows 8 firewall on windows server 2012: I've restarted the Windows Firewall. When I check that port using this program, it says that it is not ...
2
votes
4answers
13k views

VPN is working, except for DNS lookups. Firewall (Cisco ASA 5505) issue?

I've got the following set up: LAN -> DHCP / DNS / VPN server (OSX 10.6) -> Cisco ASA 5505 -> WAN Connecting to the LAN via VPN works fine. I get all the details properly and I can ping ...
0
votes
2answers
37 views

Is a sonicwall tz105 firewall necessary for my network? [closed]

I was not exactly sure how to best word my question above. I am trying not to ask a subjective question but I really want a little advice from someone who knows more about this, and have a few ...
0
votes
1answer
34 views

Is it possible to block HTTP traffic from specific machines?

I have some web crawlers, and a specific website seems to be blocking traffic temporarily after some time. The thing is, even though all clients have the same external IP address (they access the ...