-1
votes
1answer
32 views

Firewall Connections fail to open under load

Problem : During High load , our applications are encountering errors : java.net.connection Time out. After some investigation , we found out that it was Firewall the root cause, but still don't know ...
0
votes
2answers
210 views

How to globally limit total number of TCP connections with iptables?

I'm having quite a difficult time figuring out how to REJECT both inbound and outbound connections from a machine with iptables once the total number of TCP connections hits a global maximum without ...
1
vote
2answers
152 views

How to implement firewall in LAN(out of users' os) like EC2 have done?

In aws ec2, users can set up security groups which works like a firewall, usually, firewall work behind a gateway/nat server, however, I found that firewall in EC2 works in the LAN, too. For example, ...
0
votes
2answers
2k views

Problems with MDNS flooding on port 5353 UDP

I am running into a big issue at a small network i manage. This network is an Apple network, with airport extremes, expresses, mac book pro's, imac's, ipads, iphones etc... I went to add something to ...
3
votes
4answers
508 views

Determining cause of TCP/IP connect issue without traceroute

I'm trying to connect from a company network to a host (via HTTPS), but my attempts fail with timeout. I can resolve the host. I know the host is up. I know there is a firewall filtering by incoming ...
1
vote
2answers
693 views

What does this output from HPing mean?

hping command: hping3 -G --rroute $domain -i u1000 Result: len=80 ip=127.0.0.1 ttl=64 DF id=0 sport=0 flags=RA seq=176 win=0 rtt=0.2 ms (same route) len=80 ip=127.0.0.1 ttl=64 DF id=0 sport=0 ...
0
votes
5answers
341 views

Help me understand Public/Private IP space and NAT

I just started working at a small-medium sized business after graduating school. So much of my knowledge is high level concepts without a lot of hands on. My understanding that according to rfc1918 ...
2
votes
2answers
498 views

Recommendation for a non-standard SSL port

On our server I have a single IP, and need to host 2 different SSL sites. Sites have different owners so have different SSL certificates, and can't share the same certificate with SAN. So as a last ...
1
vote
1answer
1k views

Can someone explain what this vulnerability means?

I'm having a bit of a problem getting my head round what this vulnerability means, can someone help me understand this? I'm particularly puzzled by the RESULTS section. Why would source port 25 be ...
0
votes
2answers
3k views

Sonicwall resetting connections (For no apparent reason)

We have a Sonicwall Pro 3060 that is transparently bridging traffic to the Internet and a VPN to another site. We are having connections being reset for no apparent reason. For instance, connecting ...
0
votes
5answers
1k views

What ports are least likely to be probed on the internet?

Suppose you've got a server that runs insecure software and you have to make it publicly accessible, what ports are "safest" for providing that service on the internet. By "safest" I mean least likely ...
0
votes
4answers
2k views

how to make standard ssh port a stealth port?

I'm running a personal ssh server on a nonstandard port. If someone tries to log into my ssh server thru the standard port 22, it seems that the server sends "Connection refused" message. $ ssh ...