A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

4
votes
1answer
10k views

PPTP connection fails with errors 800/806

I've got a client (Server 2008 R2) that won't connect to our production environment PPTP VPN server (Server 2003, running RRAS). The server is behind a firewall that has TCP1723 open as well as GRE. ...
0
votes
1answer
49 views

Firewalld blocks IPv6, ignores config

I'm trying to setup an IPv6 web-server on CentOS 7.2 with NGINX. I have tested my IPv6 connectivity outgoing and incoming - everything works. My IP, AAAA records, etc as fine as well. Essentially ...
2
votes
2answers
4k views

How to block all incoming request through one network interface?

Saying I have a linux server as a router from LAN to WAN. I don't want any incoming WAN request for safety issue. So how should I block all the incoming request through the WAN interface, but ...
-1
votes
1answer
129 views

Need Required Active Directory Ports for Isolated Environment

We have a 100% isolated environment that needs to communicate with our AD infrastructure outside the isolated environment. I need to know all the ports and whether they're incoming or outgoing. These ...
0
votes
1answer
12 views

NRPE Firewall blocking xinetd

From one side, my nagios server, IP 10.1.1.232. Here is my Nagios's xinetd's NRPE config : # default: on # description: NRPE (Nagios Remote Plugin Executor) service nrpe { flags = ...
1
vote
0answers
21 views

cisco asa public server nat issue

I have been tasked with some ASA configuration coming in a few weeks, and to test out some configuration options I have setup a web server on my local network which I would like to be able to access ...
0
votes
5answers
779 views

best opensource firewall

We implemented Untangle opensource firewall on our network and interested to know various other firewalls with GUI interface. Can someone suggest which are the best opensource firewall implemented. I ...
1
vote
0answers
9 views

On Cisco firewall, show access-list main rules only (with line numbers)

For example, if I do a sh access-list Lets say I have a rule on line 2 that has one object-group to another object-group connected on X ports. Well, there may be 30 lines below that, that all say ...
1
vote
0answers
16 views

MySQL on Ubuntu. 10061 error on 3306

A fresh install of Ubuntu inside of a Virtualbox with LAMP option selected. I am unable to connect to the server via telnet on this port or via ODBC from my host machine. I can ping and SSH both ...
0
votes
0answers
13 views

iptables, ufw, and psad - scanned UDP port alerts from router and devices on home network

I have a fresh install of Ubuntu 16.04. I configured iptables, ufw (with gufw), and psad using instructions from https://www.thefanclub.co.za/how-to/how-secure-ubuntu-1604-lts-server-part-1-basics and ...
0
votes
2answers
28 views

iptables - access to port 3306 timeout

I cannot connect to mysql from a remote server. I have bind-address commented out but when I add rules in iptables to block other connections the requesting server's connection times out. I tried ...
0
votes
1answer
3k views

Open port 8009/tcp on Fortigate necessary?

A nmap scan of a Fortigate Firewall showed that TCP port 8009 open is. According to knowledge base articles this is only to download the client for ssl vpn. Is this port used for anything else, and if ...
0
votes
0answers
16 views

Transferring data to Active FTP server fails from DMZ but works fine from LAN

I know there are a ton of similar questions already, but I've read through just about everything I could find and am still having trouble resolving my specific issue. Problem: I am having difficulty ...
1
vote
1answer
1k views

Ubuntu 12.04 open port 80 inside VLAN

I have an nginx server running on ubuntu 12.04 that serves http through port 80 and https through port 443. Everything works fine if I access it from the same computer via localhost, 127.0.0.1 or the ...
0
votes
1answer
22 views

Firewall rules for ssh, ftp and webapps

I'm running a small cluster with Centos 7 and want the following rules for firewall. Have ssh access from anywhere (i'm going to further configure that from /etc/ssh/sshd_config) Have ftp access to ...
1
vote
1answer
1k views

Amazon EC2 Socket connection not being accepted

I am trying to run a java application on my EC2 instance. The application accepts socket connections on port 54321. If I try and connect to it, it times out. My Security Group is set as: TCP Port ...
2
votes
4answers
6k views

Expert iptables help needed?

After a detailed analysis, I collected these details. I am under a UDP Flood which is more of application dependent. I run a Game-Server and an attacker is flooding me with "getstatus" query which ...
0
votes
0answers
19 views

Server 2012 r2 — Opening firewall on remote Server Core machine for MMC (Comp. management) access [closed]

MCSA student here. I'm having some difficulty with this one. Same subnet and workgroup. Server 1 is a physical 2012 R2 server. Server 2 is a Server Core running as a VM on a workstation. As part ...
1
vote
4answers
3k views

Sonicwall NSA2400 - No internet access

We've got a SonicWall NSA2400 configured with a LAN (X0) and a WAN(X1) interface. It was setup and working fine until just recently when a temporary worker changed some settings most likely NAT. We ...
-3
votes
1answer
23 views

Issue in Accessing FACEBOOK site in Domain network

In our Domain,We have setup firewall to prevent unwanted access to the websites. But a weird thing is even network administrators(whose IPs are not blocked by firewall) cannot access to facebook ...
1
vote
2answers
3k views

iptables block client ip internet access and keep LAN access

With the increase of appliances having network access and the potential for hacking, I want to block specific ip address from accessing the internet, but allow LAN access. For instance, I use a ...
0
votes
0answers
13 views

Does IKEv2 (Windows Client) require the client firewall to perform NAT-T?

I am kind of new to IPSec VPNs. I am trying to set up an IPSec implementation using libreswan with IKEv2 for road warriors. Being road warriors these clients will likely be behind their home ...
-1
votes
0answers
14 views

Disable load balancing fortigate 100D

I have wan1 with static ip, wan2 ppoe Port 1 with address 192.168.1.0/24 Port 2 with address 10.0.0.0/24 I just want port 1 go through wan1 and port 2 go through wan 2. No load balancing Every time I ...
3
votes
2answers
4k views

Configuring Fortigate OS4 for FTPS

I configured iis7 ftp to allow ssl connections. I set the ssl firewall to use ports 50000-50050. If I set up a custom service on my fortigate firewall for ftps with source ports 990-50050 and ...
0
votes
0answers
37 views

FTP protocol Extremely slow on Windows 10. What could be causing this?

I am running 2 different devices (A pc and a laptop) both on the same network, both Windows 10. The laptop has standard transfering speeds on the FTP protocol. The PC has extremely slow transfer speed ...
2
votes
2answers
45 views

Check if iptables rules are working

I have three virtualboxs. 1) Virtual machine VM-A that works as a router with two interfaces: eth0 - 10.160.10.254 eth1 - 172.10.0.254 2) Virtual machine VM-B that works as an internal network ...
0
votes
1answer
1k views

ZenOSS webinterface connecting

I'm having a problem with ZenOss. I installed the centos stack installer on Centos 5.5 x64. De installation succeeded and no errors where displayed. But when I tried to surft to the ip address it ...
0
votes
0answers
20 views

netfilter, block port range [31000-32000] on public interface eth2

I need to block the port range [31000-32000] on my public interface eth2. Services can be accessed using private network interface eth3 I have tried : root@master-sbg-01:~/# iptables -A INPUT -i ...
0
votes
1answer
1k views

How to unblock service discovery for IPv4 via Avahi?

On a Debian 6.0.6 system (squeeze) I am having trouble resolving a host using Avahi and IPv4. Here is a sample output: : nr@homedog 10102 ; avahi-browse -a + eth0 IPv6 yorkie [00:1f:3b:d8:67:1d] ...
2
votes
4answers
18k views

VPN is working, except for DNS lookups. Firewall (Cisco ASA 5505) issue?

I've got the following set up: LAN -> DHCP / DNS / VPN server (OSX 10.6) -> Cisco ASA 5505 -> WAN Connecting to the LAN via VPN works fine. I get all the details properly and I can ping ...
0
votes
1answer
2k views

Juniper SSG5 suddenly slow throughput

I'm trying to find out where in my configuration the problem might be. About a month ago we were easily getting 100 up 50 down through our provider through the Juniper SSG5. Starting a few weeks ago ...
3
votes
2answers
7k views

Windows Server 2012 Port Forward for Specifc Host

I am trying to have a specific host be redirected to another port when trying to access a service on port 80. So, when the client (192.168.1.22) requests a connection to the server (192.168.1.10) on ...
1
vote
2answers
42 views

RPC Server is unavailable while trying to promote a domain controller. Open firewall

So I've been scratching my head around this problem for a few days now. This is a quick schema of our infrastructure : Our Primary Domain Controller is running in an hypervisor, in our datacenter. ...
0
votes
1answer
25 views

IIS ftp server issue from command line

I'm trying to config an ftp server on IIS (Windows Server 2008 R2) I configured basic authentication with read,write permissions for a user and no SSL I also opened port 21 on server firewall then ...
2
votes
0answers
32 views

Block incoming traffic in bonding mode when primary interface is down

My server running on latest kernel (4.4.6) has configured a bond device (bond0) with two enslaved interfaces eth0, wlan0 with primary interface eth0. cat /proc/net/bonding/bond0 Ethernet Channel ...
1
vote
1answer
63 views

Azure ARM VM creation with Network Security Groups

I have a network with enabled Network Security Groups where I deny Outbound Port 80 and 443. All Outbound traffic is managed through a Squid Proxy. Now, I want to create a new Virtual Machine in this ...
0
votes
0answers
12 views

How to isolate two containers connected to the same bridge?

I have several LXD containers which are bound to a single bridge (the default lxdbr0 or another one, it does not matter). The host itself has another two interfaces, one ultimately connecting it to ...
1
vote
1answer
1k views

How to find which local process is sending spam on a Windows Server 2008 server

I am managing a Win Server 2008 system with a number of hosted web sites. Recently I found that something was sending spam through our SMTP server. The logs indicate that the connections were being ...
2
votes
3answers
2k views

IP Address Conflict with Router/Firewall

I've been having IP issues with my local box for a couple months now. Usually when it starts acting up I don't have the patience to look into it, so I just drop onto DHCP, but this morning I've ...
0
votes
0answers
13 views

Iptables linux routing with 2 chain proxies

Im trying to setup a connection between a PCs in my local network, to foreign resource XYZ in a specific way. My network is currently configured like this: I have a pc behind the proxies -> Then I ...
1
vote
0answers
30 views

Not able to RDP to the VM which is part of new subnet in Azure virtual network

Here are my environment detail I am using Azure IaaS (Infrastructure as Service) I am having one vNet (Virtual Network) I have set-up site to site connectivity (on-premise to azure) I have one subnet ...
0
votes
2answers
1k views

grep, count and sort iptables log to get IPs qty and DPT?

How can I grep count and sort iptables log to get IPs quantity and DPT? Like I used this oneliner to get top IP quantity. egrep -w "Invalid Packet" ipfirewall.log | grep -o ...
3
votes
2answers
11k views

tcp syn checking

I have a WatchGuard Firebox that I've recently configured. All of the policies look fine and all appropriate services seem to be working correctly. However, one or two (seemingly) random nodes keep ...
0
votes
1answer
61 views

OpenVPN Ubuntu Server Routing Problems No Internet

I'm running OpenVPN on Ubuntu 15.04. When I connect to the server, I can connect and authenticate correctly (I use PAM auth because I'm lazy). Once connected I can't ping the server or access the ...
0
votes
0answers
9 views

CSF Firewall unblock countries

I've a VPS Server running CENTOS 6.7 x86_64 with CSF Firewall activated. Sometimes I see in "Firewall Deny IPs" that blocks suddenly connections from my country (Spain) to some of my clients. Not ...
1
vote
3answers
36 views

UFW: How to block http requests on another port than 80?

I am running an application on port 7000 which is part of a network. So it has to communicate over port 7000 with all other servers of the network (not LAN, dynamic IPs). It has also a web frontend ...
-1
votes
1answer
45 views

How can I block access to the internet for static addresses?

I have a router on CentOS 7 which provides access to internet for several IP addresses, which are reserved at DHCP server. Other hosts are blocked. If someone put static address from the reservation ...
1
vote
0answers
23 views

Sizing Firewall for Micro-Datacenter

We have a small data center we're finishing. We have a core+spline and then redundant TOR switches. Everything is basically whitebox 10gb switches running Cumulus; although, we will upgrade the core ...
-1
votes
0answers
16 views

OpenVPN Firewall management

I'm trying to restrict access to have and establish connection just from their offices. Example, we have 2 officess with x.x.x.x and y.y.y.y so i would like just from those two ip to have access and ...
0
votes
1answer
1k views

Cannot connect to remote port 465

I (actually, not me, rather a friend of mine) have a very strange issue. There's a VPS with CentOS, probably version 5: Linux [hostname] 2.6.18-274.7.1.el5xen #1 SMP Thu Oct 20 17:43:28 EDT 2011 i686 ...