A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

0
votes
0answers
15 views

How can I allow HTTPS traffic on Forefront server

I have installed Forefront 2010 and added a rule to allow ALL Outbound traffic of any type to the external network as a test. It works OK for http traffic but blocks everything https. Can anyone help ...
6
votes
5answers
180 views

Adding second firewall to ISP connection with multiple subnets?

My routing knowledge is a little rusty. I have a fibre internet connection hooked up like this: The managed switch breaks out VLANS for transparent lan service that is also through the ISP's box. ...
0
votes
1answer
8 views

Installing Shorewall on Debian stable

I'm going to install Shorewall on a Debian stable Linux box. The shorewall version in the stable repositories is 4.6.4.3-2. Shorewall website suggests to pin apt preferences and force the download of ...
1
vote
3answers
1k views

ping and traceroute does not work when UFW deny outgoing by default

How to make ping and traceroute work after setting UFW with deny outgoing by default? Here is my UFW configuration: sudo ufw status verbose Status: active Logging: on (low) Default: deny (incoming), ...
0
votes
1answer
2k views

Juniper SSG5 suddenly slow throughput

I'm trying to find out where in my configuration the problem might be. About a month ago we were easily getting 100 up 50 down through our provider through the Juniper SSG5. Starting a few weeks ago ...
0
votes
2answers
1k views

grep, count and sort iptables log to get IPs qty and DPT?

How can I grep count and sort iptables log to get IPs quantity and DPT? Like I used this oneliner to get top IP quantity. egrep -w "Invalid Packet" ipfirewall.log | grep -o '[0-9][0-9]*\.[0-9][0-9]*\...
0
votes
0answers
20 views

AWS ec2 has 30:1 Network IN due to Wordpress Hack Bot Scripts, Any way to stop?

My aws instance has 30:1 ratio of network IN to network OUT; this is likely due to various countries pounding the hell out of all my multisite domains. My setup is aws ec2, elasticip aws rds ...
3
votes
5answers
15k views

SNMP being blocked by Windows 2008 Firewall even after firewall exceptions added

I have a few Windows 2008 servers that I'm trying to setup SNMP monitoring. I have installed and configured the SNMP service. I have also turned on the exceptions from SNMP and SNMP Traps in the ...
2
votes
2answers
3k views

Juniper SSG5 DHCP IP Pool is full. Unable to offer IP address to client

hope we have some Juniper guys around, I have configured a Juniper SSG5 as our main firewall/router the DHCP server set on interface bgroup1 to have a rang from 10.10.10.76 to 10.10.10.210 All ...
0
votes
0answers
17 views

Accessing a workstation behind a firewall [on hold]

Situation: I have a workstation using school network, and a laptop. I want to be able to (SSH) access my workstation from my laptop from a different network. Problem: School network blocks all ...
0
votes
0answers
12 views

Block outgoing connections on Centos 7 with firewalld

I'm having following rules : public (default, active) interfaces: eth0 sources: services: dhcpv6-client http https ssh ports: masquerade: no forward-ports: icmp-blocks: rich rules:...
0
votes
1answer
2k views

Allow access to printer between interfaces on Cisco ASA5510

I have a Cisco ASA5510 where we have to separate networks on two separate interfaces. The networks should have nothing to do with each other except that network B needs to access a printer on network ...
0
votes
1answer
29 views

unable to connect to webserver from LAN (access from outside is fine)

We would like to give both our customers and coworkers a single link (subdomain.ourdomain.com) to access a common web application. I set up a web server on a machine connected to LAN, it's accessible ...
1
vote
1answer
732 views

How does one send Sonicwall firewall logs via gmail?

We have a Sonicwall TZ215 that allows configuration of the logs and alerts to be sent to admin addresses. However, we only have gmail/google accounts available to us and there is no option for ...
2
votes
1answer
29 views

Cannot access to any port of Azure VM except RD (3389)

I have a new Windows Server 2012 Azure Virtual Machine. Everything works fine through RD until I try to access from outside. I cannot access SQL Server service (I gave up after 1 hour of trying ...
-1
votes
0answers
14 views

Will a router try to route traffic coming in from a mirror port? [closed]

I am working on migrating an old bsd based firewall do a new solution. At first, we are going to migrate the firewall service to a new clustered set of machines running FreeBSD+PF. As the policy ...
0
votes
2answers
2k views

Access print server through firewall?

At my workplace, we have two fiber networks setup, one for the business network and the other for process control (industrial manufacturing). On the business network, there is a standard print server ...
1
vote
1answer
24 views

Allow Application in Windows 7 Firewall on per-NIC basis

I want to allow an application on a Windows 7 Professional System to only be accessible through the OpenVPN TAP adapter by configuring the Windows Firewall accordingly. Unfortunately I cannot find an ...
0
votes
0answers
7 views

CSF/LFD does not recognize mod_security-Log-entries

unfortunately my CSF/LFD login failure daemon and firewall does not recognize the entries which are added to /var/log/modsec_audit.log. I enabled the mod_security-feature in /etc/csf/csf.conf: # [*]...
3
votes
2answers
474 views

Will reverse DNS lookup impact firewall performance

Would it generally impact the performance of a firewall if it has to enable a site by domain rather than IP? The context is we have an application that runs on Google Appengine (no fixed IP's) and a ...
3
votes
3answers
3k views

How to enable firewall on Centos 7?

My firewall is currently inactive. systemctl status firewalld firewalld.service Loaded: masked (/dev/null) Active: inactive (dead) I used the following command to enable the firewall # systemctl ...
-1
votes
0answers
9 views

Freesco cant ping other machines [closed]

Im having some trouble with setting up Freesco on my VMworkstation, hoping someone can help.. I have a freesco VM with 3 NICS NIC 1 - Bridged with host 192.168.0.2 255.255.255.0 GW 192.168.0.1 (my ...
0
votes
0answers
19 views

firewall-cmd on OpenVZ CentOS 7

So I've been trying to set up a webserver on my VPS with CentOS 7. To do this I've used this tutorial. Installation of MySQL/MariaDB and PHP worked successfully. However I can't access my server, ...
0
votes
1answer
27 views

Is there some project/tool for testing web server firewall quality? [closed]

Would like to have a test with different aspects of firewalls. For instance, a test that would output info on: Layer 3/4 attacks DNS amplification attacks SMURF attacks ACK attacks Layer 7 attacks ...
1
vote
1answer
20 views

pfSense Shell : apply config modification without reboot

I'm currently trying to edit the configuration of a running pfSense in production with the pfSsh.php shell. By using the pfSsh.php shell I'm able to modify the configuration but once I write it, it ...
0
votes
0answers
9 views

Merge VPNs of two Watchguard firewalls into one firewall

I have two different Watchguard XTM 515 firewalls. Each has it's own set of VPNs created in them. Now I need to use only one firewall to handle the VPNs of both. But the problem is that I don't know ...
1
vote
1answer
26 views

What is correct iptables chain to put -j NETFLOW

I have a router, with firewall (with drop policy), nats, services. I want to account all factual traffic (inputed before firewal, outputed by services, and passed firewall in forwarding), with its "...
1
vote
1answer
35 views

limiting ip range on openvpn server

We're trying to setup a openvpn server on centos 6. We have blocked all IP adresses except a couple in a whitelist via /etc/hosts.deny, also we did the same with csf.deny (except for the whitelist). ...
2
votes
1answer
28 views

Rule of fail2ban not working when the request is from the brute force attack

I have a situation where some IP from moldova try everyday discover my basic auth credentials with some type of brute force attack. However I have a rule with fail2ban that should avoid this ...
3
votes
1answer
8k views

Handshake violation when trying to access one website

I have a TZ 190 Wireless Enhanced with SonicOS Enhanced 4.2.1.0-20e. Yesterday, people could access without any problems a bank website wich uses HTTPS. Today, it is imposible to access only that ...
2
votes
2answers
2k views

How to establish firewall rules that accepting 11211 port in intranet for memcached ( Fedora)?

I am new for fedora and backend. And i have a job recently, to build a game server via linode. The current setup is 2 linode + 1 nodebalancer, I have a memcached server on each linode and I have setup ...
0
votes
0answers
16 views

Windows Firewall causing connection throttling

I have an application running on Win8.1 (or WinServer2012, it makes no difference) that provides two HTTP server listeners in separate processes (one using HTTP.SYS via .NET HttpListener, the other ...
0
votes
1answer
4k views

iptables forward rule not working in openwrt

I am trying to apply some iptables forwarding rules in openwrt. Here is my scenario - My server has two cards ath0 and br-lan. br-lan is connected to internet and ath0 to private network. The other ...
0
votes
0answers
16 views

Jenkins master node incoming port number for slaves?

I have a Jenkins version 2.8 master node running on Ubuntu 14.04 and my slaves node cannot connect to it unless I disable the firewall via sudo ufw disabled. I have port 8080 already open so folks ...
0
votes
1answer
4k views

alternative to forticlient for IPSec vpn? [closed]

our company has a fortigate firewall and we forticlient software. the software has many function like antivirus, parental contro, vpn etc. but we only use it for the vpn purpose. my question is there ...
0
votes
0answers
15 views

Restrict internet access with firewall rules for a VM running on Linux [closed]

I have Red Hat 7 running on my workstation, and Windows 10, used for working with Windows programs, in a virtual machine running on KVM/QEMU. The workstation, fulfilling the role as hypervisor, and ...
5
votes
3answers
2k views

How to create a Windows 2008 Advanced Firewall rules group definition through the command prompt

Is there a way to create a group, or add to an existing group, to a rule in Windows Advanced Firewall (preferable through a command prompt or WSH script). Edit:
0
votes
1answer
1k views

Juniper ScreenOS Windows 7 Vpn client

I'd like to configure my Juniper firewall so users can VPN from the windows built in client. Can anyone provide me with that information on how to go about configuring this? (I'm somewhat new to ...
3
votes
1answer
564 views

What is the windows server equivalent of iptables?

I found this post however it is outdated and appears to be focused on consumer versions of Windows. What is the Windows Server 2012+ equivalent of iptables?
3
votes
1answer
308 views

Searching Objects on SonicWALL (NSA 2600, SonicOS 6.1)

Ok, this may sound like a dumb question, but does the SonicOS web interface not have a search option for object definitions? One of my clients recently decided to replace their Astaro Security ...
0
votes
1answer
32 views

issues configuring firewall rules for Postgres on Centos

I am attempting to follow this guide to allow remote connections to postgres http://www.cyberciti.biz/tips/postgres-allow-remote-access-tcp-connection.html At the moment I am running into issues with ...
1
vote
2answers
2k views

Smoothwall Express interface issues

I have a SmoothWall Express box that is currently configured with a Green and Purple interface. Both interfaces are in the same /24 subnet (which seems odd to me). The green interface (address of ....
4
votes
1answer
10k views

PPTP connection fails with errors 800/806

I've got a client (Server 2008 R2) that won't connect to our production environment PPTP VPN server (Server 2003, running RRAS). The server is behind a firewall that has TCP1723 open as well as GRE. ...
0
votes
1answer
1k views

Can't connect VPN tunnel when other on same NAT-router is connected

We have recently changed our FW to a ZyWall 310 with drastically improved throughput over the old one. However there is a new problem that occurred, we have several L2TP/IPSec clients that connect to ...
0
votes
0answers
26 views

how to set transparent proxy for server to get all request of client

How to set transparent proxy for manually created socket server to get traffic on that port which is socket listening? I had tried : squid- squid server and my server cant run on same port oracle ...
4
votes
5answers
2k views

Can a global IPv6 address be NAT'd to an internal IPv4 address at a firewall-level?

As an organisation we've just requested our first IPv6 allocation. At present we are a wholly IPv4 organisation with a global IPv4 address allocation configured on our edge router and used (...
0
votes
1answer
59 views

NAT firewall, auto-add to whitelist triggered by DNS lookup? [closed]

I am interested in setting up a firewall. This is going to include your usual NAT, with port-forwarding for incoming connections. However I want the outgoing connections to use a whitelist of ...
2
votes
1answer
4k views

Watchguard config, drop-in or mixed-routing mode?

I have a Watchguard XTM 2 that is currently acting as a firewall and a router for my business network, I currently have the WG setup in mixed-routing mode and am happy with the current configuration. ...
0
votes
0answers
21 views

Sonicwall inter WAN interface communication

I have the TZ105 sonicwall and X0 is LAN and the rest 4 interfaces are 4 different ISP connections through 4 ISP routers respectively. Basically I cannot get any device connected to an ISP router to ...
21
votes
4answers
12k views

Where does UFW (uncomplicated firewall) save command-line rules to?

You add a rule like this: ufw allow 22/tcp The rule is saved, and is applied even after reboot. But it's not written anywhere in /etc/ufw. Where is it saved to? (Ubuntu, using ufw as pre-installed.)...