Traffic filtering allows a device to apply security restrictions to network traffic. Filtering can be done on many levels but the most common are TCP, UDP and IP filtering.

learn more… | top users | synonyms

0
votes
0answers
17 views

Is it possible to use iptables and trafficcontrol (tc qdisc) together to set rules on only specific packets/traffic?

I would need to set delay on my network interface such that only a specific set of packets/traffic is affected by this delay. i.e., I can set a 9 sec delay on eth0 tc qdisc add dev eth0 root netem ...
0
votes
1answer
42 views

Spam Traffic, DDOS Attack & Server Crashing

I am running phpfox application in my server under my main domain name fetlock.com and I am getting large amount of spam and also suffering from DDOS attacks from multiple IP addresses. My server ...
0
votes
0answers
74 views

Trouble using net_cls control group in tandem with tc for packet filtering

I'm having some trouble limiting network bandwidth using the net_cls control group in conjunction with the linux traffic controller (tc). I think I might just be confused about how I'm writing the ...
2
votes
2answers
80 views

How to stop a site from redirecting to yours?

One of our competitors recently shut down. Instead of just taking their site down, they decided to redirect all their traffic to us with a 302 redirect. All of the traffic is redirected to us with the ...
2
votes
2answers
110 views

Rejecting traffic where ACCEPT header is empty on favicon.ico requests

As part of filtering out potential harmful traffic, I currently reject traffic where $_SERVER["HTTP_ACCEPT"] is empty. I notice from my logs that a fair number of requests have been rejected due to ...
6
votes
1answer
115 views

Tools for detecting network traffic filtering [closed]

In Iran we have an ongoing problem with the govt. blocking and manipulating various network protocols. I'm looking for a tool, framework or platform to help us analyze and report on any of these ...
0
votes
1answer
79 views

Managed switches and WFilter

we are looking to use WFilter to monitor workstation traffic, it looks like we need a router or switch that does port mirroring, now would that mean we need a managed switch? And if so, would all the ...
0
votes
1answer
58 views

Security risks of allowing incoming traffic as a response of a previous request

I understand that somebody would want to block incoming traffic as a general rule except for public resources. And I also understand that you could want to block all outgoing traffic except for ...
0
votes
2answers
49 views

Web filtering choices [closed]

I'm in the process of starting up my own business and I would like to know when it comes to web content filtering what are my options? I can honestly admit I'm looking for a more user friendly system ...
2
votes
1answer
219 views

What is the purpose of filtering egressing traffic (CSF)?

For a while now I am using CSF as main firewall with LFD, and OSSEC as main IDS. (I like OSSEC over the overreacting builtin IDS of CSF). I tested it for small DoS attacks such a slowloris variants ...
0
votes
2answers
1k views

plesk + high POP3/IMAP traffic, how to check details?

Please check this image, it's a screenshot from plesk 10 of 1 domains mail traffic: This domain has about 1GB POP3/IMAP (OUT) traffic each day. I know that this is not normal because I know the ...
1
vote
1answer
2k views

Linux income filtering based on private destination IP address

I am trying to set up a QoS script in my OpenWRT box so that traffic coming from the Internet is classified into a low prio and a high prio class. The criteria to classify traffic is its destination ...
0
votes
1answer
2k views

Ingress filtering in Linux traffic control: Redirect traffic to IFB device

I have an openwrt router and I want to shape incoming traffic in order to classify all the traffic addressed to a certain IP address in my home network as low priority. For that purpose I want to ...
-3
votes
1answer
2k views

How to get Comcast to stop blocking me? [closed]

I am a web developer running a demo server at home. My site is accessible from Atlanta as well as via my local cellular network. However, both a webserver I have in Utah and a webserver of a service ...
3
votes
4answers
673 views

Is there a good way to keep IPv6 multicast packets off WiFi?

I work on a product that consists of a number of headless Linux boxes that work together as a cluster. These boxes synchronize their state with each other by sending proprietary-format link-local IPv6 ...
2
votes
2answers
339 views

What is 17.10.13.204 (Apple?) doing that's always blocked as port-scanning traffic?

I've just recently noticed an IP address that has been showing up in our SonicWall logs on a pretty frequent basis. Throughout the course of an average day, we'll see around 100 dropped packets ...
1
vote
5answers
202 views

Barring connections if VPN is down

I have a VPN account and use it for sensitive communication. However the VPN connection sometimes is dropped while my main connection to the internet is still alive. The pages I visit through VPN are ...
1
vote
3answers
5k views

Cisco IOS router MAC or IP address filtering

I'm trying to filter a specific device from my network. Either MAC or IP address filtering would do the trick, but I have trouble finding the exact Cisco IOS commands to use. My router is a Cisco 870 ...
1
vote
2answers
4k views

Cisco ASA not forwarding traffic from one interface to another

I am needing help in the configuration process of my Cisco ASA 5510. I have set up 4 Cisco ASA interconnected together via a big LAN. Each Cisco ASA has 3 or 4 LANs attached to them. The IP routing ...
1
vote
3answers
344 views

Unexpected ports open (traffic filtering?)

Discovered this when securing my VPS. No matter which host I scan with nmap, I always get these 2 ports open: 1863/tcp open unknown 5190/tcp open aol What could be the reasons for this? EDIT: ...