A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

4
votes
3answers
151 views

connected to Centos openvpn but no outside internet access

I am using Windows 7 to connect to a VPS server running CentOS 6.4 First off, I have read every single post and just cant find the solution to my problem I configured my VPN server with openvpn, and ...
2
votes
2answers
2k views

Configuring Fortigate OS4 for FTPS

I configured iis7 ftp to allow ssl connections. I set the ssl firewall to use ports 50000-50050. If I set up a custom service on my fortigate firewall for ftps with source ports 990-50050 and ...
2
votes
0answers
39 views

What might be causing specific IPv6 HTTPS servers to send an excessive number of RST packets?

Client browsers on my IPv6-enabled home network hang and time out when attempting to load https:// URLs from specific IPv6 sites, such as ones operated by CloudFlare. In those situations, the live log ...
2
votes
5answers
1k views

homemade open source gigabit firewall with enterprise grade [on hold]

Has anyone DIYed a *BSD/Linux based firewall that can handle gigabit traffic, running reliably for years? There are quite some software solutions but is there a hardware baseline to achieve reliable ...
0
votes
2answers
7k views

Fortigate 200A firewall CPU high resource usage

This morning I'm receiving complaints from several end users that saying their whole department network are slow and have intermittent. Therefore I've checked our firewall to see whether if something ...
0
votes
1answer
999 views

Allow access to printer between interfaces on Cisco ASA5510

I have a Cisco ASA5510 where we have to separate networks on two separate interfaces. The networks should have nothing to do with each other except that network B needs to access a printer on network ...
0
votes
3answers
1k views

Can't RDP out behind SonicWall Firewall

I am trying to connect to a remote computer. but on m side i believe that my SonicWall Firewall is blocking me from sending a request out. I do not know how to configure the firewall to allow access ...
3
votes
2answers
194 views

Programmer configuring a new network [closed]

I'm in the process of expanding my home network from a couple of laptops on a wireless Verizon FiOS router to include: Linksys 24-port switch Cisco Pix 515 Cisco 3640 router One new development ...
-1
votes
3answers
2k views

Does NAT change the source MAC address? [closed]

I'm trying to secure my home network but don't really need the complexity of a VPN so I'm trying to figure out other options. I'd like to allow my iPhone remote access to my home servers but I can't ...
1
vote
2answers
1k views

Smoothwall Express interface issues

I have a SmoothWall Express box that is currently configured with a Green and Purple interface. Both interfaces are in the same /24 subnet (which seems odd to me). The green interface (address of ...
0
votes
0answers
23 views

nginx or apache for reverse proxy if we want to development on top of the reverse proxy [on hold]

Right now, we are thinking about building an access gateway which is generally a reverse proxy/firewall where we could apply the policy for traffic such as blocking certain user accessing the site ...
-1
votes
1answer
58 views

Opening port 587 on Debian running on Google Compute Engine

I'm attempting to use port 587 for my server mailing purposes. However, I can't seem to be able to unblock the port even after trying the following : Adding port 587 to the Google Cloud network ...
1
vote
1answer
36 views

Limit Connections Per IP Windows 2008 R2 x64

Hello I have been searching for a solution to this, what I want to accomplish is the ability for me to define firewall rules that will limit the amount of connections to certain ports from the same ...
0
votes
2answers
956 views

UFW/IPTables: after setting default outgoing deny, and port 80 outgoing allow, curl still doesn't work

With UFW, I disabled all outgoing and ingoing traffic by default. However, I do allow port 80 in and out: sudo ufw default deny incoming (deny all incoming) sudo ufw default deny outgoing (deny all ...
0
votes
3answers
95 views

Expose a mongodb streaming data server that's behind a firewall, to the internet

I have streaming data on a Windows platform that I capture into Mongodb at fairly high rate of about 800 data points per second. I wish to have access to this data from outside the company, but the ...
-2
votes
0answers
13 views

FTP not accessible outside of LAN [closed]

Ok so I really need some help with this, I have XAMPP installed and am hosting a webiste with it for my friends and i to work on. I am able to see the site just fine and also i am able to get to ...
0
votes
0answers
16 views

ISC DHCP Server - Client Uplink Is Not Working

Running a DHCP server, client(s) does not have up-link (0Mbps) and has a downlink (50Mbps.) I am setting up a gateway/router on a PC running Debian Wheezy with ISC-DHCP. I have 1 WAN (eth0) and 2 LAN ...
0
votes
0answers
10 views

CSF not blocking ports [closed]

Yesterday I've installed CSF on my VPS. I blocked many ports on my machine (allowing only these included in /etc/csf/csf.conf However, my services like teamspeak or mumble server are still able to be ...
0
votes
1answer
13 views

WatchGuard XTM510, Dialed in VPN (PPTP) users cant Ping hosted datacentre machine on BOVPN

we have a BOVPN from our network 192.168.1.0/24 range to some hosted environments at a datacentre. 172.15.0.1/20 any machine on our internal network ranges can communicate with the systems at the ...
-3
votes
1answer
31 views

How to create inbound rule on Windows firewall for custom service?

Service is written in C#. It is a server that requires opening port 8080 for inbound connections. It runs as Local System and has unrestricted SID (created by sc tool). If I add in Windows Firewall ...
1
vote
2answers
925 views

Sonicwall App Control Advanced

I have a custom application that accesses a remote range of IP addresses, lets say for example 206.0.0.0 - 206.255.255.255, this is UDP based traffic. The issue is, Sonicwall NSA has been configured ...
0
votes
2answers
41 views

Assign IPs to programs/processes

I need to assign different IP addresses to different processes (mostly PHP & Ruby programs) running on my Linux server. They will be making queries to various servers, including the situation ...
3
votes
0answers
21 views

Searching Objects on SonicWALL (NSA 2600, SonicOS 6.1)

Ok, this may sound like a dumb question, but does the SonicOS web interface not have a search option for object definitions? One of my clients recently decided to replace their Astaro Security ...
-2
votes
1answer
23 views

iptables prerouting with match-set

I'm trying to create a iptables entry to redirect a list of ip's to another port. Using ipset I can setup and add lists of ip's and reject them with this command iptables -t nat -A INPUT -p tcp -m ...
0
votes
2answers
78 views

Ubuntu UFW firewall turns itself off

I have UFW enabled on my server. However, I find that it is disabled at times, showing a status of "firewall not loaded". I enable it, verify that it is running (shows loaded and gives me a list of my ...
-4
votes
0answers
22 views

EdgeRouter - signals blocked like ports not forwarded (but they are) [duplicate]

i've been configuring my edgerouter router, it get's the internet but the signals are still blocked, just like ports were not forwarded, what could be the problem, maybe something in my WAN_IN ...
-3
votes
2answers
26 views

Login before using the internet

How do you setup a user login page in order to connect to the internet just like the one at McDonalds and Radisson Blu? What kind of setup is that? We are in school and would like to have that kind ...
0
votes
2answers
28 views

Access to multiple FTP servers through a firewall

I have 4 web servers for different tasks, behind a firewall. I have a single public IP and I want to connect to my servers with FTP with this IP. I tried to use a different port but no results. So my ...
0
votes
0answers
16 views

how to use --rdest flag in recent table

Here is why I try to accomplish: When receiving a UDP packet, put IP address of the source address in recent table. sudo iptables -A INPUT -p udp --dport xxxxx -m recent --set -j ACCEPT When send ...
14
votes
6answers
74k views

What firewall ports do I need to open when using FTPS?

I need to access an ftps server (vsftpd) on a vendor's site. The vendor has a firewall in front of the ftps server and I have a firewall in front of my ftps client. I understand that ports 990, 991 ...
0
votes
0answers
19 views

2 Vlans on a Cisco PIX 515 with DMZ

I have to install an application server on a networks dmz. The application will sit on a network but has no interaction with the other devices on that network. I was thinking that the firewall(Cisco ...
-1
votes
1answer
48 views

How should I properly block outgoing http traffic with iptables

I'm experimenting with iptables, and I'm trying to allow all outgoing requests for HTTPS, but to block HTTP. I have the code below; Chain INPUT (policy ACCEPT) target prot opt source ...
3
votes
1answer
29 views

Linux NFLOG - documentation, configuration from C

Several different places (e.g. http://wiki.wireshark.org/CaptureSetup/NFLOG) recommend using Linux's "NFLOG" firewall module to capture packets generated by a particular UID, like this: # iptables -A ...
1
vote
3answers
1k views

Unable to access internal network through PfSense WAN port

Our branch office is unable to connect to our internal network for some reason. However we can connect to the branch office domain controller from behind PfSense. The following is our setup: ...
0
votes
1answer
30 views

UFW — How To Open Port 8080

I thought I had allowed connections to http-alt (8080) using ufw. My reasoning for thinking this is because: gerrit2@localhost:~$ sudo ufw status Status: active To Action ...
3
votes
1answer
115 views

What are the repercussions of using an EOL Cisco firewall?

I'm looking at using an ASA 5520 for the database of an ecommerce site. According to End-of-Sale and End-of-Life Announcement for the Cisco ASA 5520 Adaptive Security Appliance, this product is ...
0
votes
0answers
12 views

Something in the network is causing my REST interface to respond to requests with an empty body

We import orders from online through a REST interface over HTTP, which sends back JSON responses. I've confirmed that the code itself works, and it works on the test server. For some odd reason, ...
1
vote
3answers
998 views

Sonicwall NSA2400 - No internet access

We've got a SonicWall NSA2400 configured with a LAN (X0) and a WAN(X1) interface. It was setup and working fine until just recently when a temporary worker changed some settings most likely NAT. We ...
3
votes
2answers
2k views

How do I forward/NAT all traffic to one interface/IP to a remote IP?

I have one "server A" that has multiple IPs attached to it, like so: eth0:0 1.1.1.1 eth0:1 1.1.1.2 eth0:2 1.1.1.3 I have another "server B" that also has multiple IPs attached to it, like so: ...
0
votes
3answers
868 views

Server not reachable on all TCP ports from all locations

I have a very strange situation on a Linux (CentOS) server. Firstly, from my Ubuntu desktop PC, I can successfully connect to all services that are running on it, on ports 22, 80, 8080 and others. ...
3
votes
3answers
665 views

Apache Server not reachable on Ubuntu VM

I am new to linux/ubuntu, but I want to set up an apache webserver on an ubuntu VM. I created a VM on amazon AWS, installed the apache. But now I can not reach it via browser. I am not sure if the ...
3
votes
1answer
4k views

PPTP connection fails with errors 800/806

I've got a client (Server 2008 R2) that won't connect to our production environment PPTP VPN server (Server 2003, running RRAS). The server is behind a firewall that has TCP1723 open as well as GRE. ...
0
votes
1answer
31 views

Use pfSense for outgoing mail?

How/Can/Should I use my pfSense router as an outgoing mail server? I have several webservers and devices on my internal network that need to send mail out to the Internet. However, I don't need a ...
1
vote
1answer
28 views

pfsense: Prohibit all outbound connectivity from inside going out, except for one system's traffic

I've got a lab environment here for some testing of software which should only run on this "lab environment" network. To that end, the "lab environment" has a pfsense firewall sitting on the ...
4
votes
3answers
79 views

ESXi hosted on public IP without firewall

So I've got an interesting problem. I currently rent a couple of servers from Hetzner (a German hosting provider). Each server has a soft firewall and does something like web hosting / database. I ...
0
votes
1answer
1k views

Open port 8009/tcp on Fortigate necessary?

A nmap scan of a Fortigate Firewall showed that TCP port 8009 open is. According to knowledge base articles this is only to download the client for ssl vpn. Is this port used for anything else, and if ...
2
votes
1answer
2k views

Watchguard config, drop-in or mixed-routing mode?

I have a Watchguard XTM 2 that is currently acting as a firewall and a router for my business network, I currently have the WG setup in mixed-routing mode and am happy with the current configuration. ...
0
votes
1answer
35 views

Using nginx to access internet through intranet

I don't know if I am going about this in the right way, but here's what I need to do. I have a website that's available on the internet. But I have some users who only have access to the intranet. I ...
11
votes
1answer
9k views

What does “!Z” and “!X” mean in a traceroute?

When you see "!Z" or "!X" in a traceroute, what does that mean? Where is it coming from, and how do I fix it?
0
votes
1answer
32 views

Cisco ASA 5510 Inter-interface routing

I'm trying to setup a Cisco 5510 to route traffic between the outside and inside interfaces where both belong to public IP subnets. Our ISP assigned us a single point-to-point IP (207.107.110.150/30) ...