A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

69
votes
19answers
14k views

Why should I firewall servers?

PLEASE NOTE: I'm not interested in making this into a flame war! I understand that many people have strongly-held beliefs about this subject, in no small part because they've put a lot of effort into ...
29
votes
8answers
12k views

Why not block ICMP?

I think I almost have my iptables setup complete on my CentOS 5.3 system. Here is my script... # Establish a clean slate iptables -P INPUT ACCEPT iptables -P FORWARD ACCEPT iptables -P OUTPUT ACCEPT ...
18
votes
3answers
14k views

iptables port redirect not working for localhost

I want to redirect all traffic from port 443 to the internal port 8080. I'm using this config for iptables: iptables -t nat -I PREROUTING --source 0/0 --destination 0/0 -p tcp ...
32
votes
10answers
13k views

iptables Tips & Tricks

I'm sure Linux sysadmins are quite familiar with iptables, the userland interface to the netfilter packet-filtering framework. Now, this "Question" is meant to be a Community Wiki for collecting ...
44
votes
8answers
3k views

Why would I need a firewall if my server is well configured?

I admin a handful of cloud-based (VPS) servers for the company I work for. The servers are minimal ubuntu installs that run bits of LAMP stacks / inbound data collection (rsync). The data is large ...
59
votes
13answers
27k views

What steps do you take to secure a Debian server?

I am installing a Debian server which is connected directly to the Internet. Obviously I want to make it as secure as possible. I would like you guys/gals to add your ideas to secure it and what ...
1
vote
1answer
510 views

SMTP 25 closed even I allow everything in firewall, debian server running sendmail

I am running sendmail + dovecot in my debian server. I have enabled the firewall rules to allow everything iptables -P INPUT ACCEPT iptables -P OUTPUT ACCEPT iptables -P FORWARD ACCEPT ...
21
votes
4answers
9k views

REJECT vs DROP when using iptables

Is there any reason why I would want to have iptables -A INPUT -j REJECT instead of iptables -A INPUT -j DROP
7
votes
4answers
4k views

What to do with an out-of-warranty Barracuda Spam/Web filter?

I'm working with an organization that would like to start using a old Barracuda Spam Filter 300 unit. I've sold and configured plenty of these, but was surprised to see that this unit's warranty ...
10
votes
9answers
2k views

Why buy high end hardware firewalls?

There exist firewalls from Juniper and Cisco that cost more than a house. So I wonder: what does one get from a $10.000+ firewall compared to an 2U server with 4x 10Gbit network cards running e.g. ...
0
votes
1answer
522 views

Connecting to passive FTP over SSL (ftps)

I have setup an FTP service in Windows Azure using this guide http://www.itq.nl/blogs/post/Walkthrough-Hosting-FTP-on-IIS-75-in-Windows-Azure-VM.aspx The FTP Server works well when I connect without ...
16
votes
2answers
7k views

Why is our firewall (Ubuntu 8.04) rejecting the final packet (FIN, ACK, PSH) with a RST

Background, for a long time we have had problems with our firewall that sometimes keep HTTP requests hanging partially loaded until TCP times out. After tracing the traffic on the firewall I noticed ...
23
votes
6answers
3k views

Hardware Firewall Vs. Software Firewall (IP Tables, RHEL)

TL;DR My hosting company says IP Tables is useless and doesn't provide any protection. Is this BS? I have two, co-located servers. Yesterday my DC company contacted me to tell me that because I'm ...
15
votes
6answers
21k views

Enable Ping in Windows Server Firewall?

I've just installed Windows Server 2008 on a server and I'm able to connect through Remote Desktop but can't ping. Do I need to open an special port on the firewall to be able to ping a server?
0
votes
1answer
281 views

how to Upgrade apache httd and openssh to the latest version on endian firewall(Endian Firewall Community is a “turn-key” linux security distribution)?

how to Upgrade apache httd and openssh to the latest version on endian firewall(Endian Firewall Community is a "turn-key" linux security distribution)? Can anyone help me?
14
votes
6answers
73k views

What firewall ports do I need to open when using FTPS?

I need to access an ftps server (vsftpd) on a vendor's site. The vendor has a firewall in front of the ftps server and I have a firewall in front of my ftps client. I understand that ports 990, 991 ...
10
votes
1answer
7k views

iptables: difference between NEW, ESTABLISHED and RELATED packets

Part of a firewall on a server : iptables -A INPUT -p tcp --dport 22 -m state NEW --state -m recent --set iptables -A INPUT -p tcp --dport 22 -m state --state NEW -m recent --update --seconds 100 ...
4
votes
11answers
3k views

Small business firewall/VPN device [closed]

What's a good small business (<50 users at a location) firewall and VPN device? Wireless would be a nice addition, and I'm thinking of something in the $1,000 range. This would be for businesses ...
13
votes
4answers
4k views

Hardware firewall vs VMware firewall appliance

We have a debate in our office going on whether it's necessary to get a hardware firewall or set up a virtual one on our VMWare cluster. Our environment consists of 3 server nodes (16 cores w/ 64 GB ...
5
votes
9answers
18k views

block Torrent through firewall

is there a way to block users on firewall level from using torrents?
4
votes
3answers
1k views

SSH from A through B to C, using private key on B

I'm looking for a simple way to SSH from my local machine, A, through a proxy, B, to a destination host, C. The private key that goes with the public key on C is on B, and I can't put that key on my ...
3
votes
3answers
918 views

Open Source XML Firewalls?

Does anyone know of any open source XML firewalls that provide equivalent functionality to DataPower, Vordel, etc?
2
votes
1answer
847 views

How to Deploy an ASP.NET Web API- and Browser-based Application to a Production Environment [closed]

(Please forgive if this is posted in an incorrect forum. We didn’t know exactly where to post it.) We have an ASP.NET Web API single page application - a browser-based app running in IIS to serve up ...
1
vote
3answers
329 views

Server Firewall preventing sending of email

The firewall on my VPS appears to be preventing my site from sending email. It was working fine until the end of last month. My hosting provider (Webfusion) has been next to useless. I am able to ...
5
votes
3answers
2k views

iptables — OK, **now** am I doing it right?

This is a follow up to a previous question where I asked whether my iptables config is correct. CentOS 5.3 system. Intended result: block everything except ping, ssh, Apache, and SSL. Based on ...
4
votes
5answers
7k views

iptables port forwarding on debian

I'm trying to setup a simple port forwarding firewall and I can't make the basic non-firewall configuration to work. I have setup the iptables script as follows #!/bin/sh # interfaces LAN="eth1" ...
1
vote
3answers
634 views

SSH connection keeps crashing

although this is not a real programming question perhaps anyone has any idea regarding my problem. It's pretty weird. When I remotely connect one of our ubuntu servers per ssh the connection can be ...
1
vote
2answers
2k views

Open Source Unified Threat Management Software Options

Does anyone have experience or could recommend an open source Unified Threat Management (UTM) package that we could install on our network using hardware we already own? Looking for something that ...
0
votes
6answers
15k views

Active FTP client blocked by Windows Firewall on Windows 7

I have an application that runs as a service and contains an FTP client. It needs to connect to an FTP server that only supports Active FTP. When I attempt to get a list of files or download a file, ...
0
votes
2answers
557 views

Running NFS with iptables, change firewall?

I have a number of web servers on which I've set up iptables as the firewall, this is working great. However, I also have a dedicated file server running NFS and I need to firewall this machine as ...
0
votes
1answer
331 views

One workstation gets slow access to the server, but others are fast

I've just setup a machine with Windows Server 2008. It hosts various services, like IIS, POP3, SMTP, Music for Squeezeboxes, VNC. All was working well for the first week or so. One day I needed to ...
5
votes
3answers
1k views

Firewall still blocking port 53 despite listing otherwise?

I have 3 nodes with virtually the same iptables rules loaded from a bash script, but one particular node is blocking traffic on port 53 despite listing it's accepting it: $ iptables --list -v Chain ...
3
votes
3answers
556 views

Is NAT based on URL possible with port 80?

I only have 1 IP address, but I would like to host 2 websites: www.example1.com and www.example2.com on the same IP. So I was wondering if there is a router/firewall feature that let's me do that?
2
votes
5answers
2k views

Advantage of hardware firewalls over software firewalls?

There are a lot of hardware firewalls out there, but what is their advantage / use over software firewalls, as I can also easily set those up without having to buy pricy hardware firewalls? Are there ...
2
votes
1answer
8k views

How can a block IP addresses using Windows Server 2008 firewall?

I have started to get various login attempts from different IP addresses. How can I block these IP addresses in the Windows Server 2008 Firewall?
1
vote
1answer
390 views

How do I allow only certain IPSet set's to access a certain port with iptables?

I'm using IPSet to build IP ranges for different countries as follows : # Canada ipset -F ca.zone ipset -N ca.zone nethash for IP in $(wget -O - http://www.ipdeny.com/ipblocks/data/countries/ca.zone) ...
1
vote
1answer
510 views

Inside Users can´t reach the DMZ, as well as outside from my cisco ASA 5520 v.7

I'm configuring my Cisco ASA 5520 version 7 and below is the show run of the machine: ASA2> ASA2> en Password: ASA2# sh run : Saved : ASA Version 7.0(8) ! hostname xxxxxxxxxx domain-name ...
1
vote
1answer
445 views

Why did my new iptables rules screw up outbound traffic?

I recently set up Tomcat on Port 80 using instructions provided by Werner Puschitz. In essence, I had to execute these two iptables commands: iptables -t nat -I PREROUTING -p tcp --dport 80 -j ...
1
vote
2answers
2k views

Splitting up multiple WAN's on Sonicwall

I have a cable connection running to our FW. We are supplanting that connection with another fiber connection to be used on a separate LAN. The cable connection and LAN is running fine. If I ...
1
vote
3answers
143 views

IP tables - changes not persisting

I've tried to open port 8605 on my server (used for socket connections) using: iptables -I INPUT 2 -s 0/0 -p tcp --dport 8605 -j ACCEPT However the change is not persisting, the port closes itself ...
0
votes
1answer
400 views

Outside or Internet users canot reach my dmz

Hi everyone out there. I have configured my aa 5520 v7. and so far im facing a problem in my connection and therefore i wish someone here can help me to sort it out. wright now Internal network can ...
0
votes
0answers
2k views

Configuring a Cisco ASA 5520 V7

I need to replace a 1700 Cisco router with a Cisco Asa 5520 firewall version 7. Before I make the switch, I want to be sure everything is working properly. I'm open to all suggestions. What i need ...
0
votes
2answers
844 views

Can A layer-4 firewall block TCP traffic from a specific user on a multi-user system?

Layer 4 firewall is a device that can look at all protocol headers up to the transport layer and not the headers above that layer.
-1
votes
2answers
251 views

how to ssh to the machine behind the firewall? [duplicate]

Possible Duplicate: SSH to a computer that will then SSH to another computer I have 3 Linux machines A, B and C. I can ssh from A to B; B to C but not from A to C directly because C is ...
-8
votes
2answers
725 views

How strong is parallels plesk 11 inbuilt firewall for linux os? from an newbie [closed]

I am new to Linux Dedicated server hosting and plesk panel 11 and i would like to know about inbuilt plesk 11 firewall security features and how harden it is?
43
votes
5answers
258k views

How to check if a port is blocked on Windows?

What is the easiest way to check if port 3306 on my localhost is being blocked?
11
votes
4answers
3k views

iptables management tools for large scale environment

The environment I'm operating in is a large-scale web hosting operation (several hundred servers under management, almost-all-public addressing, etc -- so anything that talks about managing ADSL links ...
29
votes
4answers
102k views

Is it possible to change an “Unidentified Network” into a “Home” or “Work” network on Windows 7

I have a problem with Windows 7 RC (7100). I frequently use a crossover network cable on WinXP with static IP addresses to connect to various industrial devices (e.g. robots, pumps, valves or even ...
25
votes
3answers
29k views

Windows equivalent of iptables?

Dumb question: Is there an equivalent of iptables on Windows? Could I install one via cygwin? The real question: how can I accomplish on Windows what I can accomplish via iptables? Just looking for ...
10
votes
5answers
15k views

How to Unban an IP properly with Fail2Ban

I'm using Fail2Ban on a server and I'm wondering how to unban an IP properly. I know I can work with IPTables directly: iptables -D fail2ban-ssh <number> But is there not a way to do it with ...