A Firewall is an application or hardware device used to inspect and filter network traffic.

learn more… | top users | synonyms

3
votes
0answers
194 views

Ssh issues on Google Compute Engine

I've just updated a few servers to the newer version of the gce stack, and I've started having some ssh issues that I'm not quite sure how to fix. I've already looked into issues with the firewall, ...
3
votes
0answers
331 views

Firewall “Connection Security” when there is no trust and NATing between the two computers

First a little explanation of my network topology. I have a internal domain, and edge network domain. There is no trust between the two domains (and IT will not allow a one way trust to be set up ...
2
votes
0answers
4k views

[SOLVED ]Openvpn routing for lan to lan through tun

I am trying to setup an OpenVPN tun to connect two lan's The open vpn connection is up and working but there is a problem with my routing or nat or something. What I need is an example of what a ...
2
votes
0answers
395 views

How can configure Cisco ASA 5510 to allow access to Web server in DMZ from LAN with port translation?

I am trying to configure Cisco ASA 5510 firewall to allow access from LAN to DMZ web server. Web server is located in the DMZ and is using port 8080. I don't want users to type port number every time ...
2
votes
0answers
506 views

Clickonce applications being allowed through firewall

The company I work for uses an application that is deployed through clickonce. This means that everytime they update said program the program regenerates in a new location ie: ...
2
votes
0answers
3k views

TCP Keepalive and firewall killing idle sessions

In a customer site, the network team added a firewall between the client and the server. This is causing idle connections to get disconnected after about 40 minutes of idle time. The network people ...
2
votes
0answers
4k views

cisco asa NAT to site-to-site VPN

I'm trying to NAT an external address to an internal address which is not local, but on a remote end of a site-to-site VPN connection. Is this possible? Log says Routing failed to locate next hop for ...
2
votes
0answers
85 views

Connection reset with duplicate query parameters

Is there anything that could cause a connection reset when duplicate query parameters are passed to a page? http://test/?test[]=1&test[]=2 Causes a connection reset http://test/?test[]=1 Works ...
1
vote
0answers
18 views

Why did BFD add euid=0 to APF IP deny_host.rules?

Trimming down some old deny_hosts today and I noticed this one: # added euid=0 on 11/03/14 11:00:04 with comment: {bfd.sshd} euid=0 Anyone know why the BFD would have added euid=0 root/permissions ...
1
vote
0answers
24 views

Windows firewall blocking network shares through VPN server

I have a VPN server in front of a 172.16.0.0/24 network. On my client side is a 192.168.1.0/24 network. I am able to successfully VPN in to the server network from the client, and I am trying to ...
1
vote
0answers
38 views

Dovecot/Postfix mail server replies to [SYN] with [RST, ACK] when user attempts to connect (POP3). Likely iptables?

Currently I am trying to trouble shoot an e-mail server that will allow users to send e-mail, but not log in to the server (POP3) or receive e-mail using their Outlook clients. Previously this was ...
1
vote
0answers
34 views

PF rule for Continuity

So it looks like the Continuity on OS X 10.10 creates network interface on the fly (utun2 here) and my PF blocks it, so that I can't make/answer calls. I'm not an admin, just use the IceFloor for PF ...
1
vote
0answers
72 views

NoVNC being blocked behind firewall, how can I find the port being blocked?

We have an OpenStack cloud running internally and wanted to allow student's access to the NoVNC console from within Openstack's Horizon web panel. Everything work's internally however after adding ...
1
vote
0answers
314 views

Disabling HSTS for managed browsers

What are my options for disabling HSTS both for new sites and for those sites baked into the browser? The use of HTTPS inspection inherently changes the thumbprint of a site by acting as a man in ...
1
vote
0answers
62 views

`ufw insert 1 deny to any` not working

ufw insert 1 deny to any ufw enable ufw status Status output: Status: active Logging: on (high) Default: deny (incoming), allow (outgoing), disabled (routed) New profiles: skip To ...
1
vote
0answers
51 views

Windows Server 2003 Outbound ftp Very Slow with Windows Firewall enabled

From Windows Server 2003, I'm uploading a file (~50MB) every day at 4:00am to my hosting space in the cloud. I'm doing it by calling "ftp -s:" in a batch file that a Scheduled Task runs. I did what ...
1
vote
0answers
463 views

ClearOS Proxy - Block all traffic but two sites and 3 DMZ ips

I've been trying to two days now to get ClearOS to do a proxy setup for my network. This is what I need to do: I need to block all outgoing traffic no matter what it is, all ports and HTTPS as well ...
1
vote
0answers
265 views

Shorewall redirect rule only working for some hosts in the same network

I'm trying to use Shorewall's REDIRECT action to intercept traffic destined for the firewall's port 514 (TCP and UDP) to port 5000 (also TCP and UDP), while also allowing direct traffic to the latter ...
1
vote
0answers
107 views

Firewall and NAT settings in GSM modem for one server

I have a GSM Modem (PSI-MODEM-GSM/ETH) in field with one device behind, acting as a server. The situation is as follows: "PC" | \_________Dynamic IP: 10.103.153.122 | ...
1
vote
0answers
69 views

PF Firewall Rules Help - Block IP Hammering

I'm having an issue where someone is using a VPN / proxy to hammer my server. They will pick on random URL from my website and perform ~20 requests per second to it. Once I ban the IP address, a few ...
1
vote
0answers
627 views

Cisco ASA 5510 multiple vlans on same interface with different security levels and routing between

Looking to setup on my 0/3 interface multiple vlans and looking to get confirmation that this will work. Ethernet 0/3.1 security-level 20 nameif dev-dmz vlan 502 ip address 172.20.2.1 ...
1
vote
0answers
208 views

Exclude an IP address from an openwrt firewall rule

I am using a wrt54gl with openwrt to try and redirect all traffic on my LAN to a specific server, which will run scapy and other network analysis tools and act as a gateway/firewall to the Internet. ...
1
vote
0answers
82 views

Microsoft Forefront TMG, IIS and SQL server on one server

We have a Windows 2008 VPS with IIS and SQL Server, hosted by a provider. We use it for hosting web applications on the Internet. The only firewall we can use is Windows firewall. I would like to have ...
1
vote
0answers
372 views

sophos access https site when user portal is activated

I use a SOPHOS on UTM 9. I have a website behind it on Win Server 2012 R2 / IIS 8 created with a subdomain (e.g. myaccess.mydomain.com). On UTM9 i had do what Stephane say on "serverfault -> sophos ...
1
vote
0answers
63 views

LDAP Integration with the firewall

I am trying to integrate Sonicwall NSA2400 with AD so users can VPN with their domain credentials and able to change password if it expires. Do i need to install ADLS role and configure LDAP, or LDAP ...
1
vote
0answers
52 views

Can IPtables (possibly with libnetfilter_queue library) do everything that snort does?

I have just started getting into network security, firewall, etc. So, please excuse me for asking this basic question. I looked at IPtables and got a good hang of it (nowhere close to becoming an ...
1
vote
0answers
546 views

Firewall/iptables rules for GlusterFS

A great pleasure would be to know which exact iptables rules to use for securing GlusterFS 3.4.2 (with Debian Wheezy) in shared environment. I'm running some dedicated servers at ISP. There are two ...
1
vote
0answers
67 views

Mac OS 10.6.8 Firewall Blocking Wiki for ONE User

This is a very bizarre issue that I hope someone can help with. We're running 10.6.8 server to host our internal wiki. We had the firewall enabled on that machine without any issues. Last week one ...
1
vote
0answers
122 views

OpenStack FWaaS extension

According to the OpenStack API documentation, OpenStack now provides APIs to manage and deploy firewalls to protect the networks. The information available for the firewalls via the APIs seems very ...
1
vote
0answers
270 views

Vyatta Remote Access VPN firewall (PPTP)

I am using Vyatta Remote Access VPN (PPTP) and NAT for proxy. When pc-A and pc-B are connected to VPN, pc-A ipaddress is 192.168.10.10 and pc-B is 192.168.10.11. ...
1
vote
0answers
57 views

Manual firewall configuration with SuSEfirewall2

I have a Suse server and I want to configure its firewall settings by manually editing the SuSEfirewall2 file (located in /etc/sysconfig/SuSEfirewall2). My goal is to accept only specific services on ...
1
vote
0answers
388 views

Sonicwall NSA 2400 Not switching back to Primary VPN after Failover

We are experiencing an issue with our SonicWall NSA 2400 Firewall. We have a secondary gateway over IPSec setup in the event of a failure of our main ISP (which is unfortunately common). The ...
1
vote
0answers
38 views

Zyxell USG200 NAT for local computer using wan address

My WAN public address is linked to the server with NAT. How can I set up the firewall to let all local computer use the same NAT rules for www.mypublicaddress.com address from INSIDE the network? I ...
1
vote
0answers
1k views

Mikrotik router RDP brute force blocking with whitelist

Masters, We have a miktorik router, and we would like to block RDP brute force, but we need whitelist also to allow our collegaues to connect without blocking them. (they sometimes hitting wrong ...
1
vote
0answers
60 views

Firewall rules between windows cluster

I have been given the task to define firewall rules between 2 Windows clusters. The first cluster hosts a clustered middleware application and the second cluster hosts SQL Server. The 2 clusters are ...
1
vote
0answers
43 views

How can i manage bandwidht in linux router or firewall?

I have Linux server for internet sharing . i have 6 Mbps bandwidth, Now i want set 30Kbit to 40Kbit per user bandwidth. I want configure without proxy. It is possible that tc configration will ...
1
vote
0answers
131 views

Strange dropped packets coming from port 8888 and with ACK or ACK+PSH set

Background During an incident on a small privative network (1 router/FW + 1 server) my server got accidentally exposed to the internet. Fortunately it was protected by it's own UFW to allow only 1 ...
1
vote
0answers
92 views

CheckPoint Firewall R71: Is it possible to reserve an IP for a specific MAC address on a VPN session?

My Checkpoint firewall is configured to allow users to open the GUI (Smart Dashboard) only if their IP is on the allowed list. Whenever I work from home (I use the CheckPoint SNX client on an Ubuntu ...
1
vote
0answers
93 views

Wireless Bridging two Sonicwall Firewalls

We have two sites (essentially two small buildings side by side but we are unable to run CAT5 cable between them) which are currently linked via a wireless bridge. We will be splitting the sites so ...
1
vote
0answers
56 views

Windows 2k3 IPsec policy. Block all traffic prevents IPSec communication

I'm looking to harden down A Win2k3 server that talks to a branch over an IPsec tunnel based connection. Windows 2k3 firewall doesn't offer control of outbound communications, so I've turned to the ...
1
vote
0answers
67 views

Restrict “open” ethernet traffic to OpenVPN Traffic only when on a certain network

I would like to set up a pf or ipfw firewall rule on my Mac OS X 10.8 notebooks so that all Traffic on wireless and cabled networks is restricted to calling "home" through OpenVPN when I'm not in the ...
1
vote
0answers
642 views

Local transparent proxy with ipfw and squid

I want to use a local transparent proxy to have a single place to enter the password to an office proxy. Basically, all the TCP packets sent to port 80 except the ones sent to specific subnet should ...
1
vote
0answers
216 views

What is Bonjour Linux IPTables Firewall Ports?

I'm trying to configure my iptables in order to allow Pidgin to use Bonjour protocol, now according to: Bonjour for Windows doesn't work due to firewall settings, I have to allow Multicast DNS / ...
1
vote
0answers
152 views

Only ICMP traffic allowed inbound on ISA Server 2006

I have recently set up a connection to a remote site. The connection between the sites is done at the ISP level (ie, this is not a B2B tunnel on ISA). I'm fairly lightweight in the networking realm, ...
1
vote
0answers
446 views

Windows Filtering Platform blocking packets for legitimate traffic

I am running into an issue with traffic from a webapp server to a database server being blocked or filtered. I have allowed inbound and outbound traffic on the needed ip and port with a firewall rule, ...
1
vote
0answers
628 views

Puppet agent (v3.0.1) hangs connecting to master (v3.1.1) in VM behind firewall (with NAT based access)

I am using puppet agent v3.0.1 (On FreeBSD), trying to connect to a puppet master v3.1.1 (On Ubuntu) and the puppet agent hangs with the following debug output: puppet agent --debug --no-daemonize ...
1
vote
0answers
25 views

Can I run sharepoint 2007 native report viewer in synchonous mode?

We are hosting a SharePoint MOSS 2007 environment and installed and use the Native Report Viewer with SSRS 2005. All works fine from the LAN, but from internet, the report viewer displayes a page not ...
1
vote
0answers
2k views

Outlook client behind forefront TMG 2010 unable to connect to External Exchange server

Here is my situation. Our office just got sold and we are working on the migration to the new company's environment. Everything has worked fine until the Outlook client's migration. Our firewall is ...
1
vote
0answers
334 views

UDP Range Nat Translation port forwarding RPT Traffic to inside host PBX Cisco ASA 5505 8.2a

I have an Asterisk based PBX that I'm providing VoIP services with, My gateway is a Cisco ASA 5505 running 8.2 and I only have one public IP Available along with other services I provide with that IP. ...
1
vote
0answers
654 views

juniper ssg320 intrazone configration issues Close - AGE OUT

We have one main office and another small office that holds only 5 people. We have recently setup OpenVPN on our main office and created a bridged vpn between our main office LAN and a windows 2003 ...