Questions tagged [firewall]

A Firewall is an application or hardware device used to inspect and filter network traffic.

Filter by
Sorted by
Tagged with
0
votes
0answers
9 views

Using a BlockOutbound default policy in Win10 to fully Tunnel all WAN traffic through the TUN/TAP interface

So I got a little "advanced firewall usage" question in Win10. I have a VPN running in a VPS with openvpn , running like a charm , and I wanted to filter all the networking of my endhost (in ...
1
vote
0answers
17 views

Docker Swarm. Containers in one overlay network but on different nodes can't reach each other via tcp

I have a docker swarm cluster with 12 nodes. Containers deployed on single node can reach each other fine via overlay network, but when they are deployed on different nodes, there are connectivity ...
1
vote
0answers
16 views

How to properly clone packets with tee?

Trying to understand the TEE module of iptables. Intend is trying to clone and send the same packet to 2 IPs Tried the following iptables -A INPUT -P tcp --dport 2003 -j TEE --gateway IP1 iptables -A ...
0
votes
0answers
13 views

Cloudron Open Port 5080

I'm attempting to run Antemedia on a Server which is pre-installed with Cloudron. It appears Cloudron's Firewall system has blocked port 5080 by default. There doesn't appear to be an option to open ...
0
votes
0answers
7 views

Changing Mikrotik PPP Address pool

Trying to change address pool given by L2TP connection on Mikrotik. What I have now: 192.168.240.1/23 - local network 192.168.250.1/23 - l2tp address pool, added to IP-Addresses, IP-Pool, Firewall-NAT ...
1
vote
1answer
25 views

VPC firewall rule between load balancer and vms

I've added some vpc firewall rules to prevent access to my load balancer - and allowed only specific ips. The rules seems to block traffic between the load balancer and the VMs. how can I set up a ...
1
vote
1answer
192 views

add firewall rule IN front of a google cloud load balancer

I have a load balancer on google cloud. I want to setup a simple firewall rule that will restrict access to the load balancer from specific ip. how can I do it ?
0
votes
1answer
65 views

Possible to create policy limiting firewall rules in GCP?

Does anyone know if it's possible to create an organizational policy that would prevent the use of having a source set to 'any' for specific ports on firewall rules in GCP? For example, I want to ...
1
vote
1answer
30 views

Block “ethash.poolbinance.com” on MikroTik

Can you explain me. How I can block this address from firewall on MikroTik. I just try to add the rules with only "poolbinance.com" and other rule with "ethash.poolbinance.com" But ...
0
votes
0answers
28 views

Web server, firewall and active directory: internal network connection error “DNS rebinding attack”

I have a problem with a web server (WS) (apache on ubuntu 20.04 server), Fortinet Firewall (FF) and windows Active Directory (AD). My ISP recently upgraded my Internet connection and changed some ...
-1
votes
0answers
21 views

iptables is blocking outbound traffic [duplicate]

I'm using ipset module for iptables to allow only specific IPs in incoming traffic. Here I have allowed only 2 Ips. Only these two IPs can connect to my server However, if I do wget 142.250.195.46 it ...
0
votes
0answers
28 views

Which connections/interfaces are in zone 'docker'?

Executing the below command on Ubuntu 20.04 LTS sudo firewall-cmd --list-all-zone gives me these block, dmz, docker (active), drop, external, home, internal, public, trusted, work, The thing which ...
0
votes
0answers
45 views

wget stuck on the connecting to.. after few iptable rules

I'm using ipset module for iptables to allow only specific IPs in incoming traffic. Here I have allowed only 2 Ips. Only these two IPs can connect to my server However, if I do wget 142.250.195.46 it ...
0
votes
0answers
34 views

IPtables port forwarding to host machine IP

In an LXC container I have Wireguard installed and the client connects normally and I see the port and the information, but when I try to curl to localhost (127.0.0.1) or to the local ip (192.168.1....
-1
votes
1answer
57 views

Ports closed remotely while they are open locally [closed]

i have a problem with a mariaDB server, the port is locally open, but on a remote desktop, the port appears closed. Port Status service 3306/tcp open mysql ^^^^ localhost output ...
2
votes
1answer
37 views

Prove that software works via SOCKS

Intro I have ruby software that utilizes a network during its execution. Recently I got feedback from a user who works behind a firewall and use SOCKS, this software doesn't work for him So I need to ...
2
votes
1answer
36 views

Iptables --reject-with tcp-reset for non-TCP traffic

Here I faced with a bit strange rule: iptables -A INPUT -s 10.26.95.20 -j REJECT --reject-with tcp-reset This rule matches all the protocols from specific network and rejects it with TCP RST packet. ...
0
votes
0answers
31 views

How to Implement Rate Limiting in Azure Web Application Firewall(WAF)?

I am looking to implement global rate limiting to Azure WAF. I have created custom rate limiting rules but they are IP based. I know Azure DDoS protection provides a certain coverage limit. But my ...
0
votes
0answers
28 views

OHV VPS ports not modified. Where are those rule set?

I have a problem with a VPS ports config (on ovh.com). I set up Debian 10 and updated it. I didn't install any firewall software. OVH infrastructure is protected by a global firewall, but on my panel ...
0
votes
1answer
23 views

OHV VPS ports remain “closed” and can't be changed, why?

I have a problem with a VPS ports config (on ovh.com). I set up Debian 10 and updated it, but when I try to configure ports I get many errors. I found that OVH infrastructure is protected by a global ...
1
vote
0answers
45 views

nftables - limit rate behavior (error or misusage ?)

I am trying to set up a firewall with nftables but I failed to understand and implement a simple rate limit based on the documentation I have found. OS : Ubuntu 20.04 LTS nftables version : 0.9.3 (...
0
votes
0answers
31 views

IPTABLES - POSTROUTING requests are not forwarded back into the LAN

I have some LXC hosted on a Proxmox server. They are all connected to the same network (10.0.0.0/24) and are supposed to go out to the Internet through the proxmox host (10.0.0.254 & WAN IP) This ...
0
votes
0answers
24 views

Conditional port forwarding with ufw as a default policy

Is there a way such that: when a connection is denied (by the rule set) in ufw, it forwards that traffic to another port on the local machine, rather than dropping (by default)? I can see two ...
1
vote
2answers
84 views

Is it worth installing UFW on an AWS EC2 instance?

I would usually run UFW on servers I deploy, however I've just started using AWS and I see they already provide a firewall, allowing to set inbound/outbound rules, etc. So I'm wondering if it's ever ...
1
vote
1answer
45 views

How to deny IP ranges with ufw?

I am getting repeated login attempts from this IP address, 45.135.232.165, apparently a known Russian abusive host. I want to block all traffic on all ports from the entire subnet 45.135.232.*, so I ...
1
vote
1answer
59 views

configure my linux as a router, how do enable port forwarding with nftables?

I'm trying to configure my Gentoo Linux as a router. this is my configuration so far. WAN NIC is enp3s0 and LAN NIC is enp1s0f0 accepting connections to ICMP, tcp ports 53, 22, 80, 443, 445, 5900 and ...
0
votes
0answers
34 views

Preventing docker container from accessing internet except SSH, DNS and SMTP

I have a docker container with an SSH server, an HTTP server, and an SMTP client (that needs to resolve domain names). Besides that, I would like to prevent the container from accessing the internet. ...
1
vote
0answers
50 views

iptables doesn't forward http traffic

I am trying to create a captive portal, and the first thing to do is to redirect all traffic to specific IP:port. I have tried: iptables -t nat -A OUTPUT -p tcp --dport 80 -j DNAT --to-destination <...
0
votes
1answer
104 views

iptables doesn't seem to be stopped

I have a CentOS 7 computer, which originally uses iptables as its firewall configuration tool. The computer has a docker container that listens to port 10079. I want to use firewalld to replace ...
1
vote
0answers
64 views

Does TCP RST packet along with other flags set valid?

When I researched some methods of DDoS protection I faced with some firewall rule which limit packets with RST bit set to 60 per second. Indeed it makes some sense. But it also doesn't check the other ...
0
votes
0answers
46 views

Firewall “any any” rules - Should I remove all these rules?

I inherited a server from another dev that left. And the hosting is telling me to remove all these firewall rules, because these can cause security problems. Not sure if I'm understanding this ...
0
votes
1answer
220 views

pfSense - Enable ssh (port 22) access through the WAN using terminal/console/shell

We need to enable pfSense ssh (port 22) access through the WAN interface to perform certain configurations using pfSense's terminal/console/shell. Actions already taken... "Secure Shell (sshd)&...
0
votes
1answer
29 views

Is it okay to use core ruleset v3.3 on modsecurity v2.9

I am just a beginner in the field of security. I have installed ModSecurity v2.9 on my server using this link. But GitHub repository for the core rule set in the link was outdated, so later I removed ...
0
votes
0answers
13 views

How can we troubleshoot a NetBIOS/firewall issue related to MSDTC? (Funny twist included)

A friend of mine have two servers with MSDTC connecting to two SQL Servers. Everything is fine to one SQL Server, but to the other he often gets error: System.Transactions....
0
votes
0answers
39 views

OPNSense block internet access to device and interrupt any existing connections

In OPNSense I have a Rule that when enabled blocks all internet access to a device. My problem is that any existing connections such as MQTT remain open and operational. I tried using stateless mode ...
0
votes
0answers
42 views

Can you help me to better understand pfSense firewall logs entry fields meaning?

I am not a sysadmin or a network administrator (I am a software developer). Working on a project I have to understand more in details the meaning of a log obtained from a pfSense instance. I am using ...
0
votes
1answer
39 views

Configuring shorewall's masq file for a three-interface firewall connected to a router with a single static IP address

I am trying to follow the guide for setting up a "three-Interface Firewall" running Shorewall version 5.0.4. (https://shorewall.org/three-interface.htm). I also have a Procurve switch that ...
0
votes
0answers
12 views

What does “Header” mean in ipset output?

With ipset utility I'm trying to add port ranges. I create my list such way: # ipset -N SOME2 bitmap:port range 123-500 # ipset list SOME2 Name: SOME2 Type: bitmap:port Revision: 3 Header: range 123-...
0
votes
0answers
52 views

MMC crash during remote firewall management

Using MMC, I'm attempting to remotely manage the Windows Defender Firewall on our Hyper-V Server 2019 instance (no GUI, CLI only). The NetBIOS name is SERVER1. The Windows Defender Firewall Remote ...
0
votes
0answers
15 views

pfsense 2 wan 2 gataway

I need to create 2 gateways for 2 wan on the same lan on pfsense example: 192.168.0.1> wan1 adsl1 192.168.0.2> wan2 adsl2 the wan are already set up and working but I can't configure the second ...
0
votes
1answer
37 views

Want to enable Windows Server firewall - how to know what ports to open

For added security, we're thinking of enabling the firewalls on our 2016 and 2019 servers. Currently, they're all behind our edge router/firewall, and every server has its firewall disabled. Sometimes,...
1
vote
1answer
33 views

Can I SSH to my Google Cloud compute engine VM without allowing traffic from 0.0.0.0/0 in firewall rule?

I wish to access my debian VMs in Google Cloud Compute Engine with SSH, but I don't want to allow traffic from universal range i.e 0.0.0.0/0 in the firewall rules as we process confidential ...
1
vote
2answers
199 views

systemd-timesyncd requires incoming ephemeral ports opened

I'm trying to get some sort of time synchronization configured for a Ubuntu server. The server is behind a cloud-provider-stateless firewall. Through some trial and error I found out that in order for ...
0
votes
2answers
24 views

Certificate for SSL decryption policy on NGFW

I am trying to understand SSL decryption before planning to implement it in the network. For the SSL forward proxy, as I read we will be installing some CA certificate or similar on the NGFW in order ...
0
votes
1answer
19 views

Can SCCM or WSUS actively initiate a new TCP connection to the client?

I have computers connected to a corporate domain network with SCCM (+WSUS?) running on common TCP ports (8531, 443, 80 I guess). The computers are behing a hw firewall and new outbound connections to ...
0
votes
0answers
51 views

Using SSH Tunnel Port Forwarding To Access Docker Web Service

I have a web application running on a public IP. It is accessed via HTTPS on port 443. I want to be able use SSH Tunneling to access it from my local machine. This works so far: ssh user@remoteip -N -...
1
vote
0answers
20 views

Application role in preventing DDOS

I have an application that is being planned to be exposed to internet clients via a reverse proxy deployed in the DMZ, . I have recommended that the deployments use WAF/Cloudflare along with this to ...
0
votes
0answers
24 views

Best way to establish and secure communication from multiple subnets to device behind firewall (DMZ, NAT, port forwarding?)

I'm looking for advice on how to best implement a DMZ on a FortiGate firewall (FG-F100), as in the proposed architecture drawing attached diagram. The goal is to establish a security barrier between ...
0
votes
0answers
19 views

Best practices for Docker Swarm et al and a firewall / router / proxy

I'm operating a Docker Swarm, so I have a few nodes with a bunch of services on them. In order to have a layer of protection, high availability, and just not having the swarm being connected to the ...
0
votes
0answers
28 views

Openvpn - Install-Script (angristan)

I want to use the following script to install openvpn on a little cloud-server: https://github.com/angristan/openvpn-install/blob/master/openvpn-install.sh It seems to me that the ip(6)tables that are ...

1
2 3 4 5
80