0
votes
0answers
35 views

How can I allow NAT from inside to outside and vise-versa when each of my clients will have only one static public IP using an ASA5525-X?

My network topology is pretty basic. My data center provides a router and added a switch just before my cage to provide connectivity to all of the racks. My rack takes the copper drop they provide and ...
0
votes
0answers
34 views

SonicWall Routing Between VLANS

We have a sonicwall NSA 3500, x4 has 2 vlan interfaces so x4:v300 and x4:v301. Each vlan has an IP v300 is 192.168.100.1 and v301 is 192.168.101.1. I then have x4 connected to a layer 2 only switch ...
0
votes
0answers
36 views

Routing traffic from LAN over VPN link out to 'net; works from router, not from LAN. What route is missing?

I have 3 machines. 2, routers, are connected over a VPN. The 3rd is a PC on the lan behind one of the routers. internet | | ROUTER S1 external: YYY.56.52.56 ...
0
votes
0answers
51 views

HTTP not redirecting to HTTPS, Router or Firewall Issue?

I manage an application server in a different department from IT and since they implemented a new firewall as part of emergency maintenance, users are having issues accessing the web app(Blackboard). ...
0
votes
1answer
20 views

Setting up a VPN with rules who can connect with who

For delivering updates and support on software I've been working on I have been thinking about setting up a VPN server. The idea would be that the clients are constantly connected but only the traffic ...
0
votes
2answers
43 views

Assign IPs to programs/processes

I need to assign different IP addresses to different processes (mostly PHP & Ruby programs) running on my Linux server. They will be making queries to various servers, including the situation ...
0
votes
1answer
85 views

Cisco ASA 5510 Inter-interface routing

I'm trying to setup a Cisco 5510 to route traffic between the outside and inside interfaces where both belong to public IP subnets. Our ISP assigned us a single point-to-point IP (207.107.110.150/30) ...
2
votes
1answer
209 views

How do I set up an IPv6 DMZ with iptables without a static allocation?

I have several networks which are on Comcast's residential network. I need to access those networks from a variety of environments, via an SSH proxy on one of the hosts. (As it happens I'm using ...
0
votes
0answers
1k views

[SOLVED ]Openvpn routing for lan to lan through tun

I am trying to setup an OpenVPN tun to connect two lan's The open vpn connection is up and working but there is a problem with my routing or nat or something. What I need is an example of what a ...
0
votes
1answer
187 views

Block ip forwarding for specific remote ip address

I use ubuntu as gateway for several hosts. I need advise how to block ip forwarding for specific ip address or specific ip range? I tried to block ip via ufw deny rules, but it looks like ip ...
0
votes
0answers
51 views

OpenVPN Server & Two Gateways

I have a network setup as follows: Internet <---> Firewall <---> VPN (1) VPN <---> NAT (2) Internet <---> Firewall <---> NAT (3) (I don't have the reputation to post the picture :/) ...
0
votes
2answers
96 views

Firewall/Packet Sniffer - forward HTTP requests to a different address

I have a particularly "hacky" question/solution and looking for some honest feedback. In an enterprise system there are a number of requests that are destined for www.sometargeturl.com. These need ...
0
votes
0answers
89 views

Multiple gateways with linux on same subnet using single NIC

I have the following configuration; Firewall 1 (site 1); x.x.x.x/26 subnet on external 10.0.0.0/8 on internal (internal IP 10.0.0.10) Firewall 2 (site 2); x.x.x.y/26 subnet on external 10.0.0.0/8 ...
0
votes
2answers
128 views

limit outbound access for an EC2 instance

Our company is in the process to become PCI compliant and one of the requirement is to limit the outbound access of our servers. We have only 1 EC2 instance that falls in the PCI scope and I would ...
0
votes
0answers
93 views

how to whitelist ip, port, protocol and app on a router?

I am looking for the simplest but robust solution to allow user accounts under Windows Server 2012 to use GitHub.com with the GitHub app, but otherwise not a peep is allowed from the server to reach ...
4
votes
4answers
397 views

Why on linux machines, any packets do not pass except icmp, but correctly pass on windows

There is a cluster on proxmox. In a cluster have vm - configured router (pfsense). In the our net have Windows and Linux machines. There is the problem: Windows-machines have access to the internet, ...
1
vote
0answers
34 views

Zyxell USG200 NAT for local computer using wan address

My WAN public address is linked to the server with NAT. How can I set up the firewall to let all local computer use the same NAT rules for www.mypublicaddress.com address from INSIDE the network? I ...
0
votes
1answer
46 views

Reachability with OSPF on firewalled network

I'm trying to figure out how OSPF establishes routes when used on a network with firewalls. Say I have four routers (A, B, C, and D) and two firewalls (F1 and F2), arranged like so: (LocalA) A - F1 ...
0
votes
1answer
67 views

ASA 5505 - Outside IPs required for VPN Tunnel?

I've set up a Site-Site VPN and it seems the config is fine as the other site can establish the tunnel fine. The problem I have is that my side never tries to bring the tunnel up. Ping/telnet ...
0
votes
2answers
663 views

Routing between multiple Mikrotik Firewalls

I have 2 Miktorik RouterBoards, an RB1100 and a RB951G. The 951G is acting as my Wireless box, and has Guest, Internal and Internet Only Wireless networks. The RB1100 has 3 WAN connections (2x150/10Mb ...
0
votes
0answers
88 views

Routing static IPs

This is probably a simple question for you experts. I have a BT infinity business broadband account, that offers 5 static IP addresses. I'm trying to expose a server on one of those addresses. This ...
0
votes
2answers
128 views

IP Routing with 2 Subnets

We currently have a Cisco ASA on a range with only two usable IP addresses. The Cisco has 217.67.255.31 and the BT NTE box (for the leased line) has 217.67.255.32. (on /32) Now we want to split this ...
1
vote
0answers
80 views

Wireless Bridging two Sonicwall Firewalls

We have two sites (essentially two small buildings side by side but we are unable to run CAT5 cable between them) which are currently linked via a wireless bridge. We will be splitting the sites so ...
0
votes
1answer
2k views

How to set up port forwarding on a NETGEAR ProSafe™ Gigabit 8 Port VPN Firewall FVS318N?

UPDATE: Rule might be right, but app still isn't functional. See more details after the screenshots. I want to forward port 3000 to a machine in the local network (192.168.1.106). So far I've ...
1
vote
3answers
468 views

Securing a guest VM to give it internet access, but block access to host LAN

I have a Linux guest VM running under a Windows host. If I set the networking mode to NAT, the guest can get internet access (which I want), but can also access the hosts LAN (which I dont). For ...
2
votes
2answers
71 views

Cisco Network Object NAT to get Internet?

So I've inherited a Cisco ASA 5505, and I have no experience whatsoever with the things! There are two Network Interfaces both WAN facing, and the LAN interface of course. Now in NAT rules, there are ...
0
votes
1answer
72 views

Site to Site VPN Tunnels

This is more of a theoritcal question then a problem. With regards to Site to Site VPN links, let's for the sake of the question say we have two Sonicwall Firewalls. Site A and Site B SonicwallA ...
0
votes
0answers
44 views

Is there a way to diagnose *where* comms to a port on a windows machine is being blocked?

I am developing a system that comprises an email server. I have so far been unable to connect on port 25 (using telnet), despite having checked the following are set up correctly. Connections to port ...
0
votes
1answer
184 views

Firewall connected to a switch using 2 ports (LAN & DMZ), but switch management talks on DMZ port

Someone let me know if I'm off track here. I'm setting up a firewall with 3 ports configured (WAN, LAN, and DMZ). The LAN and DMZ ports both connect to the same switch, on which I will configure a ...
1
vote
1answer
537 views

ASA 5510 - Routing between Interface

I have a WAN interface and 2 LAN interface. I need both the LAN be able to access a server outside the network via the WAN (outside) interface. I am using a ASA 5510 firewall instead of a router, ...
3
votes
1answer
564 views

Rotating outgoing IPs using iptables

I am trying to rotate outgoing IPs using iptables. I want to rotate outgoing connections between three IPs, one by one. Here is what I'm doing with iptables: root@server:~# iptables -t nat -I ...
0
votes
1answer
108 views

Interface ip address discrepancy

This is very strange. Output of ip route show: default via 192.168.1.1 dev eth0 metric 100 192.168.1.0/24 dev eth1 proto kernel scope link src 192.168.1.10 192.168.1.0/24 dev eth2 proto kernel scope ...
0
votes
0answers
65 views

DNS Routing Issue on Our Wireless Router

We have a domain we are hosting internally. We then have a Guest Wireless Belkin Router setup to allow traffic off of our network. The Guest_Wireless Router is setup in front of our firewalls, not ...
0
votes
1answer
278 views

Vyatta change IP packet destination port on forward, based on source IP range

This might be really easy or really impossible - but any help would be great. I want to host a web server with multiple hosts on the same IP but different ports. This host will be routable to the ...
0
votes
1answer
58 views

Firewall traffic routing when visiting a specific website

I've got an odd question/request, here's what it is. We have a block of 5 public static IP addresses and there's a website that they are requesting that we try and set up so that when we visit it ...
0
votes
2answers
492 views

Routing to secondary LAN with Shorewall

I'm setting up Shorewall (4.4.26.1), and have been trying to figure out routing between two LAN segments for the good part of the afternoon. It's time to ask for help. ((INTERNET)) | | ...
0
votes
1answer
116 views

PFSense: Internal server don't see the real ip, only the ip of the gateway pfsense

I'm trying to use a pfsense as a substitute of our hosting centers cisco gateway on my testbed for testing our new firewall The setup is: [Internet]->[Wan: ?? -Hosting Center Router- Lan: ...
0
votes
0answers
653 views

Windows 7 workstation can't access file shares over VPN

Windows 7 workstations that are joined to a Windows Server 2003 R2 domain are unable to access file shares after being moved to a remote location via a VPN. The workstations were previously on the ...
0
votes
1answer
1k views

Fortigate restrict traffic through one external IP

I've got a fortigate 400A at a client's site. They've got a /26 from British Telecom, and we're using 4 of those IPs as a NAT Pool. Is there a way to say that traffic from 172.18.4.40-45 can only ...
0
votes
1answer
451 views

UDP packets to IP addresses other than specific ones not arriving and not shown in Wireshark

I'm writing a service using UDP, but I can't manage to reply to the client. When sending to the client via the DHCP-assigned IP (192.168.1.143) Wireshark shows no sent packets. The server receives ...
0
votes
3answers
904 views

Using a nat rule to translate 80/443 traffic to web server, but internal users cannot access it using external ip/domain name

I am using Cisco ASDM for ASA I have my internal network called soa. My outside interface is called outside. Let's say my outside IP given to me by my ISP isp is y.y.y.y I have a web server inside ...
2
votes
1answer
484 views

Packets marked INVALID in FORWARD rule

I have a firewall that has 3 IP aliases on 1 physical interface. Packets get dropped between these 3 interfaces (either ICMP, HTTP, or anything else). We tracked it down to these packets being marked ...
1
vote
1answer
803 views

What are the security risks in running pfsense on a box with a wireless radio?

In my network pfsense is the firewall and router for my entire network. It is the only machine with direct WAN access. All other machines are behind it (and connected through a switch). I am trying to ...
3
votes
3answers
1k views

What are the security risks of using pfsense in a virtualised environment?

I am thinking of using pfsense on my ubuntu server box. I'd virtualise pfsense with virtualbox, and have it route and firewall all traffic both on and destined to my server as well as the the rest of ...
0
votes
1answer
923 views

Using firewall in routed or transparent mode

For the last years we've been using a Sonicwall PRO 2040 firewall in a relatively small hosting environment. But we want to upgrade to a faster box which also support IPv6 and preferably we'd like to ...
2
votes
1answer
976 views

Routing between subnets on different vlans connected by a router/firewall

I have two networks that I'd like to connect with a router/firewall to filter traffic between the two. One network is on a public subnet, let's say 64.22.12.192/27 and the other network is on a ...
2
votes
1answer
445 views

Amazon AWS VPC how to open a port? [duplicate]

Possible Duplicate: How to setup a MySql server to accept remote connections? I have a VPN with public and private subnets; I am considering only public subnet for now. The node 10.0.0.23, ...
1
vote
2answers
1k views

Destination Based Routing with Fortigate 60B Firewall

First let me start off that I'm not very knowledgeable when it comes to networking so some terms what not may be over my head. I just know enough to get around. So all traffic goes through the WAN 1 ...
3
votes
1answer
2k views

pfSense router on a LAN with two gateways

I have a LAN with an ADSL modem/router on it. We have just gained an alternative high-speed internet connection at our location, and I want to connect the LAN to it, eventually dropping the ADSL. ...
1
vote
0answers
242 views

Checkpoint NGX FW1 Routing Between Networks

We have an old Checkpoint NGX FW1 firewall which we have to maintain. For the most part we leave it alone and it just chuggs away and works. The person who originally set it up left years ago and ...