0
votes
1answer
26 views

Assign IPs to programs/processes

I need to assign different IP addresses to different processes (mostly PHP & Ruby programs) running on my Linux server. They will be making queries to various servers, including the situation ...
-4
votes
0answers
22 views

EdgeRouter - signals blocked like ports not forwarded (but they are) [duplicate]

i've been configuring my edgerouter router, it get's the internet but the signals are still blocked, just like ports were not forwarded, what could be the problem, maybe something in my WAN_IN ...
-2
votes
1answer
25 views

EdgeRouter Lite NAT to wireless routers [on hold]

i want to connect 2 wireless routers to EdgeRouter-Lite, but im kinda new at this and lost. I know I have to do NAT and the wireless router's ip should be 88.119.128.224 88.119.128.228 (they are ...
0
votes
1answer
24 views

Cisco ASA 5510 Inter-interface routing

I'm trying to setup a Cisco 5510 to route traffic between the outside and inside interfaces where both belong to public IP subnets. Our ISP assigned us a single point-to-point IP (207.107.110.150/30) ...
2
votes
1answer
148 views

How do I set up an IPv6 DMZ with iptables without a static allocation?

I have several networks which are on Comcast's residential network. I need to access those networks from a variety of environments, via an SSH proxy on one of the hosts. (As it happens I'm using ...
0
votes
0answers
154 views

[SOLVED ]Openvpn routing for lan to lan through tun

I am trying to setup an OpenVPN tun to connect two lan's The open vpn connection is up and working but there is a problem with my routing or nat or something. What I need is an example of what a ...
0
votes
1answer
68 views

Block ip forwarding for specific remote ip address

I use ubuntu as gateway for several hosts. I need advise how to block ip forwarding for specific ip address or specific ip range? I tried to block ip via ufw deny rules, but it looks like ip ...
0
votes
0answers
37 views

OpenVPN Server & Two Gateways

I have a network setup as follows: Internet <---> Firewall <---> VPN (1) VPN <---> NAT (2) Internet <---> Firewall <---> NAT (3) (I don't have the reputation to post the picture :/) ...
0
votes
2answers
65 views

Firewall/Packet Sniffer - forward HTTP requests to a different address

I have a particularly "hacky" question/solution and looking for some honest feedback. In an enterprise system there are a number of requests that are destined for www.sometargeturl.com. These need ...
0
votes
0answers
53 views

Multiple gateways with linux on same subnet using single NIC

I have the following configuration; Firewall 1 (site 1); x.x.x.x/26 subnet on external 10.0.0.0/8 on internal (internal IP 10.0.0.10) Firewall 2 (site 2); x.x.x.y/26 subnet on external 10.0.0.0/8 ...
0
votes
2answers
86 views

limit outbound access for an EC2 instance

Our company is in the process to become PCI compliant and one of the requirement is to limit the outbound access of our servers. We have only 1 EC2 instance that falls in the PCI scope and I would ...
0
votes
0answers
70 views

how to whitelist ip, port, protocol and app on a router?

I am looking for the simplest but robust solution to allow user accounts under Windows Server 2012 to use GitHub.com with the GitHub app, but otherwise not a peep is allowed from the server to reach ...
4
votes
4answers
272 views

Why on linux machines, any packets do not pass except icmp, but correctly pass on windows

There is a cluster on proxmox. In a cluster have vm - configured router (pfsense). In the our net have Windows and Linux machines. There is the problem: Windows-machines have access to the internet, ...
1
vote
0answers
30 views

Zyxell USG200 NAT for local computer using wan address

My WAN public address is linked to the server with NAT. How can I set up the firewall to let all local computer use the same NAT rules for www.mypublicaddress.com address from INSIDE the network? I ...
0
votes
1answer
44 views

Reachability with OSPF on firewalled network

I'm trying to figure out how OSPF establishes routes when used on a network with firewalls. Say I have four routers (A, B, C, and D) and two firewalls (F1 and F2), arranged like so: (LocalA) A - F1 ...
0
votes
1answer
58 views

ASA 5505 - Outside IPs required for VPN Tunnel?

I've set up a Site-Site VPN and it seems the config is fine as the other site can establish the tunnel fine. The problem I have is that my side never tries to bring the tunnel up. Ping/telnet ...
0
votes
2answers
522 views

Routing between multiple Mikrotik Firewalls

I have 2 Miktorik RouterBoards, an RB1100 and a RB951G. The 951G is acting as my Wireless box, and has Guest, Internal and Internet Only Wireless networks. The RB1100 has 3 WAN connections (2x150/10Mb ...
0
votes
0answers
80 views

Routing static IPs

This is probably a simple question for you experts. I have a BT infinity business broadband account, that offers 5 static IP addresses. I'm trying to expose a server on one of those addresses. This ...
0
votes
2answers
113 views

IP Routing with 2 Subnets

We currently have a Cisco ASA on a range with only two usable IP addresses. The Cisco has 217.67.255.31 and the BT NTE box (for the leased line) has 217.67.255.32. (on /32) Now we want to split this ...
1
vote
0answers
65 views

Wireless Bridging two Sonicwall Firewalls

We have two sites (essentially two small buildings side by side but we are unable to run CAT5 cable between them) which are currently linked via a wireless bridge. We will be splitting the sites so ...
0
votes
1answer
995 views

How to set up port forwarding on a NETGEAR ProSafe™ Gigabit 8 Port VPN Firewall FVS318N?

UPDATE: Rule might be right, but app still isn't functional. See more details after the screenshots. I want to forward port 3000 to a machine in the local network (192.168.1.106). So far I've ...
1
vote
3answers
295 views

Securing a guest VM to give it internet access, but block access to host LAN

I have a Linux guest VM running under a Windows host. If I set the networking mode to NAT, the guest can get internet access (which I want), but can also access the hosts LAN (which I dont). For ...
2
votes
2answers
62 views

Cisco Network Object NAT to get Internet?

So I've inherited a Cisco ASA 5505, and I have no experience whatsoever with the things! There are two Network Interfaces both WAN facing, and the LAN interface of course. Now in NAT rules, there are ...
0
votes
1answer
63 views

Site to Site VPN Tunnels

This is more of a theoritcal question then a problem. With regards to Site to Site VPN links, let's for the sake of the question say we have two Sonicwall Firewalls. Site A and Site B SonicwallA ...
0
votes
0answers
42 views

Is there a way to diagnose *where* comms to a port on a windows machine is being blocked?

I am developing a system that comprises an email server. I have so far been unable to connect on port 25 (using telnet), despite having checked the following are set up correctly. Connections to port ...
0
votes
1answer
140 views

Firewall connected to a switch using 2 ports (LAN & DMZ), but switch management talks on DMZ port

Someone let me know if I'm off track here. I'm setting up a firewall with 3 ports configured (WAN, LAN, and DMZ). The LAN and DMZ ports both connect to the same switch, on which I will configure a ...
1
vote
1answer
398 views

ASA 5510 - Routing between Interface

I have a WAN interface and 2 LAN interface. I need both the LAN be able to access a server outside the network via the WAN (outside) interface. I am using a ASA 5510 firewall instead of a router, ...
3
votes
1answer
469 views

Rotating outgoing IPs using iptables

I am trying to rotate outgoing IPs using iptables. I want to rotate outgoing connections between three IPs, one by one. Here is what I'm doing with iptables: root@server:~# iptables -t nat -I ...
0
votes
1answer
97 views

Interface ip address discrepancy

This is very strange. Output of ip route show: default via 192.168.1.1 dev eth0 metric 100 192.168.1.0/24 dev eth1 proto kernel scope link src 192.168.1.10 192.168.1.0/24 dev eth2 proto kernel scope ...
0
votes
0answers
59 views

DNS Routing Issue on Our Wireless Router

We have a domain we are hosting internally. We then have a Guest Wireless Belkin Router setup to allow traffic off of our network. The Guest_Wireless Router is setup in front of our firewalls, not ...
0
votes
1answer
252 views

Vyatta change IP packet destination port on forward, based on source IP range

This might be really easy or really impossible - but any help would be great. I want to host a web server with multiple hosts on the same IP but different ports. This host will be routable to the ...
0
votes
1answer
55 views

Firewall traffic routing when visiting a specific website

I've got an odd question/request, here's what it is. We have a block of 5 public static IP addresses and there's a website that they are requesting that we try and set up so that when we visit it ...
0
votes
2answers
407 views

Routing to secondary LAN with Shorewall

I'm setting up Shorewall (4.4.26.1), and have been trying to figure out routing between two LAN segments for the good part of the afternoon. It's time to ask for help. ((INTERNET)) | | ...
0
votes
1answer
111 views

PFSense: Internal server don't see the real ip, only the ip of the gateway pfsense

I'm trying to use a pfsense as a substitute of our hosting centers cisco gateway on my testbed for testing our new firewall The setup is: [Internet]->[Wan: ?? -Hosting Center Router- Lan: ...
0
votes
0answers
526 views

Windows 7 workstation can't access file shares over VPN

Windows 7 workstations that are joined to a Windows Server 2003 R2 domain are unable to access file shares after being moved to a remote location via a VPN. The workstations were previously on the ...
0
votes
1answer
845 views

Fortigate restrict traffic through one external IP

I've got a fortigate 400A at a client's site. They've got a /26 from British Telecom, and we're using 4 of those IPs as a NAT Pool. Is there a way to say that traffic from 172.18.4.40-45 can only ...
0
votes
1answer
356 views

UDP packets to IP addresses other than specific ones not arriving and not shown in Wireshark

I'm writing a service using UDP, but I can't manage to reply to the client. When sending to the client via the DHCP-assigned IP (192.168.1.143) Wireshark shows no sent packets. The server receives ...
0
votes
3answers
714 views

Using a nat rule to translate 80/443 traffic to web server, but internal users cannot access it using external ip/domain name

I am using Cisco ASDM for ASA I have my internal network called soa. My outside interface is called outside. Let's say my outside IP given to me by my ISP isp is y.y.y.y I have a web server inside ...
2
votes
1answer
348 views

Packets marked INVALID in FORWARD rule

I have a firewall that has 3 IP aliases on 1 physical interface. Packets get dropped between these 3 interfaces (either ICMP, HTTP, or anything else). We tracked it down to these packets being marked ...
1
vote
1answer
749 views

What are the security risks in running pfsense on a box with a wireless radio?

In my network pfsense is the firewall and router for my entire network. It is the only machine with direct WAN access. All other machines are behind it (and connected through a switch). I am trying to ...
3
votes
3answers
1k views

What are the security risks of using pfsense in a virtualised environment?

I am thinking of using pfsense on my ubuntu server box. I'd virtualise pfsense with virtualbox, and have it route and firewall all traffic both on and destined to my server as well as the the rest of ...
0
votes
1answer
776 views

Using firewall in routed or transparent mode

For the last years we've been using a Sonicwall PRO 2040 firewall in a relatively small hosting environment. But we want to upgrade to a faster box which also support IPv6 and preferably we'd like to ...
2
votes
1answer
726 views

Routing between subnets on different vlans connected by a router/firewall

I have two networks that I'd like to connect with a router/firewall to filter traffic between the two. One network is on a public subnet, let's say 64.22.12.192/27 and the other network is on a ...
2
votes
1answer
413 views

Amazon AWS VPC how to open a port? [duplicate]

Possible Duplicate: How to setup a MySql server to accept remote connections? I have a VPN with public and private subnets; I am considering only public subnet for now. The node 10.0.0.23, ...
1
vote
2answers
1k views

Destination Based Routing with Fortigate 60B Firewall

First let me start off that I'm not very knowledgeable when it comes to networking so some terms what not may be over my head. I just know enough to get around. So all traffic goes through the WAN 1 ...
3
votes
1answer
2k views

pfSense router on a LAN with two gateways

I have a LAN with an ADSL modem/router on it. We have just gained an alternative high-speed internet connection at our location, and I want to connect the LAN to it, eventually dropping the ADSL. ...
1
vote
0answers
205 views

Checkpoint NGX FW1 Routing Between Networks

We have an old Checkpoint NGX FW1 firewall which we have to maintain. For the most part we leave it alone and it just chuggs away and works. The person who originally set it up left years ago and ...
-2
votes
1answer
460 views

Force virtual machine to only connect to the internet through a VPN whose IP dynamically changes, and never use ISP connection?

I want to set up a Windows virtual machine where the only network access allowed is via a VPN connection. If the VPN connection fails, the VM should never be allowed access through my normal (ISP) ...
-1
votes
2answers
507 views

Route ssh traffic based on hostname using FreeBSD/pf?

I have a proxy/firewall machine running FreeBSD 9, using PF to route and filter traffic as needed. Now I'm setting up a git server, which runs over ssh, but I'm already using port 22 for ssh. I would ...
3
votes
3answers
351 views

identify a router that cuts certain port

Is there a way to identify which particular router between me and some server blocks connections on certain port? I am in a hotel in Thailand, where they have recently changed some settings in their ...