A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

1
vote
2answers
88 views

Access Point Iptable/Route rule for allowing device discovery? Devices can connect manually, but not automatically. Multicast/Upnp issue?

I setup a wireless access point on my server and for some reason, everything works but automatic discovery features. I can't see any other devices, upnp devives aren't discovered, and I think it's a ...
1
vote
3answers
5k views

Configuring keepalives with TOAD client communication

I have a scenario where long-idle sessions of TOADSoft client communication with the Oracle server seem to be torn down as they timeout on an intermediate state-full firewall. These sessions could ...
4
votes
2answers
3k views

How do I find out where my IPTables rules are being stored?

I working on a Debian server and I'm trying to figure out where my IPTable rules are being stored. From looking around on the internet I've found there is generally two locations were these are ...
0
votes
0answers
8 views

WinRM Kerberos Authentication With Multiple Domain Controllers

I have configured a Rundeck instance on a Ubuntu host on AWS with the overthere-winrm plugin in order to execute scripts against Windows hosts. The instance is configured to access these hosts as an ...
0
votes
1answer
35 views

SSH: hangs after “connection established”

I have an AWS EC2 instance to which I can't connect through one of Ubuntu servers. However, I can connect to the AWS instance through any machine(with and without private SSH key), but Ubuntu server ...
0
votes
1answer
23 views

Azure load balancer security group attached to NAT pools

I'm looking to lock down a set of Azure load balancer NAT rules to certain CIDR address ranges via network security groups, for the purpose of not directly exposing SSH/RDP ports to the internet. The ...
1
vote
2answers
4k views

iptables block client ip internet access and keep LAN access

With the increase of appliances having network access and the potential for hacking, I want to block specific ip address from accessing the internet, but allow LAN access. For instance, I use a ...
1
vote
2answers
48 views

Which Ports need to be accessible on a Domain Controller for Clients to logon?

We are currently segmenting our network. We will move the servers in another subnet than the clients. Of course the clients still need access to the domain controller to authenticate against it. I ...
2
votes
1answer
14 views

ipset behave differently when adding IP address from iptables and ipset command

I have a list that created below command ipset create foo hash:ip maxelem 40000000 timeout 180 This is how empty foo look like #ipset list foo Name: foo Type: hash:ip Revision: 1 Header: family ...
3
votes
2answers
4k views

Configuring Fortigate OS4 for FTPS

I configured iis7 ftp to allow ssl connections. I set the ssl firewall to use ports 50000-50050. If I set up a custom service on my fortigate firewall for ftps with source ports 990-50050 and ...
0
votes
1answer
1k views

How to unblock service discovery for IPv4 via Avahi?

On a Debian 6.0.6 system (squeeze) I am having trouble resolving a host using Avahi and IPv4. Here is a sample output: : nr@homedog 10102 ; avahi-browse -a + eth0 IPv6 yorkie [00:1f:3b:d8:67:1d] ...
1
vote
0answers
51 views

Iptables firewall causing instability

I've made a script to set an iptables firewall,but it's Causing instability on the local network aplication . The firewall is droping the connection between the clients and the server for a while ...
0
votes
1answer
15 views

ip6tables blocking outgoing+incoming connections

i just changed to a server with ipv6 and therefore i changed my firewall script. Changing my iptables-script to ip6tables does not seem to work though. This is the ipv6 part which neither allows ...
0
votes
0answers
20 views

avoid data leak by block internet access for PCs, but allow internet access through remote desktop

In a small network(in my company), I would like to block some computers(PCs) to access the internet, so that sensitive data or files in those PCs can not be leaked. But I still need users of the PCs ...
2
votes
4answers
19k views

VPN is working, except for DNS lookups. Firewall (Cisco ASA 5505) issue?

I've got the following set up: LAN -> DHCP / DNS / VPN server (OSX 10.6) -> Cisco ASA 5505 -> WAN Connecting to the LAN via VPN works fine. I get all the details properly and I can ping ...
0
votes
1answer
1k views

ZenOSS webinterface connecting

I'm having a problem with ZenOss. I installed the centos stack installer on Centos 5.5 x64. De installation succeeded and no errors where displayed. But when I tried to surft to the ip address it ...
1
vote
3answers
1k views

ping and traceroute does not work when UFW deny outgoing by default

How to make ping and traceroute work after setting UFW with deny outgoing by default? Here is my UFW configuration: sudo ufw status verbose Status: active Logging: on (low) Default: deny (incoming), ...
0
votes
0answers
9 views

Router in bridge mode, configuration [closed]

my Netgear has the chance to be put on "bridge mode". in that way i's use it to connect to WAN port of my firewall. the question is: must i do some other configuration more than this? for example i ...
4
votes
2answers
4k views

UFW Firewall Rules ordering?

I have the following rules on our server within UFW: To Action From -- ------ ---- 22 ALLOW 217.22.12.111 22 ...
0
votes
1answer
2k views

Juniper SSG5 suddenly slow throughput

I'm trying to find out where in my configuration the problem might be. About a month ago we were easily getting 100 up 50 down through our provider through the Juniper SSG5. Starting a few weeks ago ...
0
votes
1answer
1k views

Cannot connect to remote port 465

I (actually, not me, rather a friend of mine) have a very strange issue. There's a VPS with CentOS, probably version 5: Linux [hostname] 2.6.18-274.7.1.el5xen #1 SMP Thu Oct 20 17:43:28 EDT 2011 i686 ...
-1
votes
2answers
45 views

IPTables chains that just RETURN, as set via iRedMail [SOLVED]

I hate to ask this, but I'm pretty sure I have everything configured correctly with iRedMail as the host for my email server/VPS re dovecot, postfix etc (even though everything is pretty much done ...
-1
votes
2answers
38 views

Can't access to an website even if connected on same network [on hold]

I'm able to access a link from an IP Address but my co-worker can't even though we're connected on the same network ( Both LAN or Wi-Fi ) it's a professional environment so it might be a firewall ...
37
votes
6answers
45k views

How can I prevent a DDOS attack on Amazon EC2?

One of the servers I use is hosted on the Amazon EC2 cloud. Every few months we appear to have a DDOS attack on this sever. This slows the server down incredibly. After around 30 minutes, and ...
0
votes
2answers
1k views

grep, count and sort iptables log to get IPs qty and DPT?

How can I grep count and sort iptables log to get IPs quantity and DPT? Like I used this oneliner to get top IP quantity. egrep -w "Invalid Packet" ipfirewall.log | grep -o '[0-9][0-9]*\.[0-9][0-9]*\...
1
vote
3answers
1k views

How to find which local process is sending spam on a Windows Server 2008 server

I am managing a Win Server 2008 system with a number of hosted web sites. Recently I found that something was sending spam through our SMTP server. The logs indicate that the connections were being ...
1
vote
1answer
18 views

Cisco ASA: Part of the traffic via VPN is blocked

We inherited the management of an ASA 5520 running IOS 8.2(3) from a previous company, and now we are switching the connectivity to a VPN from a LAN link directly connected to one of ASA interfaces. ...
3
votes
2answers
8k views

Windows Server 2012 Port Forward for Specifc Host

I am trying to have a specific host be redirected to another port when trying to access a service on port 80. So, when the client (192.168.1.22) requests a connection to the server (192.168.1.10) on ...
-2
votes
0answers
22 views

Any solution to use RoundCube on a Google Cloud VM Instance?

I have launched a Debian 8 instance, installed ISPConfig with Apache2, MySql, and RoundCube. (Following HowToForge tutorial) But when I tried to send or receive emails using RoundCube, no success. I ...
0
votes
1answer
2k views

Allow access to printer between interfaces on Cisco ASA5510

I have a Cisco ASA5510 where we have to separate networks on two separate interfaces. The networks should have nothing to do with each other except that network B needs to access a printer on network ...
0
votes
0answers
11 views

What other proxy config options do I have when the Windows https proxy requires a username and password for an automated Chrome browser?

I have a Chrome instance driven by Webdriver inside a Docker container in an AWS VPC that needs to access the internet to download some cloudfront content. The Corporate Proxy is setup to require a ...
0
votes
0answers
23 views

Forefront 2010 does not let logins using 'Public or Shared Computer'

I have recently inherited a Forefront TMG 2010 server, and when people try to login and select 'This is a public or shared computer' they are unable to login. No errors, just reloads the same page. ...
1
vote
1answer
137 views

allow only one ip and block others by using cmd in windows firewall

I want to allow one IP address that can connect to internet (whitelist) and block others' connections through internet using Windows Firewall on Server 2008 using command prompt. Is it possible to ...
0
votes
1answer
33 views

Why is UFW not working?

I've setup some rules on my ufw but I think it's just not blocking anything. This is its current status: ~# ufw status verbose Status: active Logging: on (low) Default: deny (incoming), allow (...
0
votes
2answers
2k views

Access print server through firewall?

At my workplace, we have two fiber networks setup, one for the business network and the other for process control (industrial manufacturing). On the business network, there is a standard print server ...
1
vote
2answers
166 views

Server sending packets every 5 minutes to 3 IPs

Been noticing in our firewall logs that three connections are being constantly established every 5 minutes from our web server and trying to send a packet to destination port 43 (whois port) cycling ...
0
votes
1answer
41 views

How can I configure an HAProxy server running behind a firewall?

I am having trouble with the following: I am setting up an HAProxy load balancer on CentOS 7 behind a firewall. The firewall on the HAProxy server as well as the outside firewall are configured so ...
0
votes
1answer
90 views

Windows server 2012, unable to access site in some ports from outside

We have our website hosted in a windows server 2012 server. Some staging sites are also hosted on same server in different port numbers like 5015, 5014. Now I wanted one more site to be added and ...
0
votes
1answer
558 views

One workstation gets slow access to the server, but others are fast

I've just setup a machine with Windows Server 2008. It hosts various services, like IIS, POP3, SMTP, Music for Squeezeboxes, VNC. All was working well for the first week or so. One day I needed to ...
1
vote
0answers
28 views

CISCO ASA ASDM Allow internal IP to access external IP

I'm running ASDM 7.2 and have 2 servers on the same local ip range that can communicate ok. These 2 servers have external IP's and I need to get them communicating on the external IP's but this fails. ...
0
votes
0answers
37 views

Trying to have a static IP with Elastic Beanstalk applications

My goal is to deploy a web application to Elastic Beanstalk and allow for a user to access that application from their corporate network. Their network controls access to sites using IP addresses and ...
1
vote
1answer
11 views

Accessing internally stored documents via hyperlinks in Websites on a DMZ server

We have a vendor-provided application running internally (LAN) on a Windows/MS-SQL 2012 server, providing access via IIS on the same box. The application is able to store attached documents - these ...
3
votes
3answers
3k views

How to enable firewall on Centos 7?

My firewall is currently inactive. systemctl status firewalld firewalld.service Loaded: masked (/dev/null) Active: inactive (dead) I used the following command to enable the firewall # systemctl ...
1
vote
2answers
3k views

Juniper SSG5 DHCP IP Pool is full. Unable to offer IP address to client

hope we have some Juniper guys around, I have configured a Juniper SSG5 as our main firewall/router the DHCP server set on interface bgroup1 to have a rang from 10.10.10.76 to 10.10.10.210 All ...
1
vote
2answers
842 views

How can I make an Azure Web Role accessible only via Virtual Network

I have a web role that I have configured via the NetworkConfiguration section of the .cscfg to be part of a Virtual Network. I only want the web role to be accessed from other computers within the ...
2
votes
1answer
22 views

How do I add a mangle rule to my saved iptables firewall rules file?

I've set up OpenVPN on my Debian server and would like to add a rule to iptables. I already have a file that lists default filter rules that iptables reads from (pre-up). I tried adding the rule to ...
-1
votes
0answers
14 views

ufw not working on openvz vps

I'm trying to make ufw work for an Ubuntu 14.04 vps using openvz. All questions about this problem (like this one) lead to the same site. This one: http://blog.bodhizazen.net/linux/how-to-use-ufw-in-...
-2
votes
0answers
23 views

Cannot get firewall to work

I have 2 machines A and B with 2 ethernet interfaces eth0 (internet) and eth1 (local) a) I want A to act as a FW and would like to install Shorewall on it and have in & outbound traffic go thru A ...
0
votes
0answers
16 views

Deploying builds from Jenkins Slave

we are trying to get set up to use group instance of Jenkins. Both Jenkins Master and Slaves are cloud hosted. Once the build is completed on the slave we need to deploy it to a development server in ...
-1
votes
1answer
48 views

Overwriting Cisco ASA config using only console access

I'd like to be able to apply a pre-written config to a Cisco ASA 5505, but presently I only have access to it via the serial console and not over the network. Various sources suggest pasting the ...