Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [firewall]

A Firewall is an application or hardware device used to inspect and filter network traffic.

-1
votes
0answers
12 views

Internal home Powerline nodes and wireless bridges - can I delete all firewall rules? [on hold]

I have some home devices for Powerline ethernet and wireless bridging. They all are behind a main router that blocks out the outside world. On the power line nodes, I see a few things under iptables. ...
-1
votes
0answers
24 views

User mac Address and IP address

I'm not sure if this question has ever been asked before but, I'm trying to find a way to setup a rule for a Multi-user Id. I do have 7 users using our default user Id = Luma (no we can't create ...
0
votes
1answer
16 views

Handle traffic over network bridge

I have 2 network, LAN1 connected with some hosts and the second LAN2 with proprietary Hardware, similar to PLCs. This kind of PLC is connected via Ethernet and is used for home automation (ie Light ...
2
votes
2answers
26 views

Firewall configuration as code?

We are currently using a Sophos SG230 as Firewall / upstream router and configuration management is pure horror. Even manually backuping the configuration after every change will result in un-diffable ...
0
votes
0answers
39 views

How to firewall Client connections to the internet thru a Windows Server VPN?

I have a Windows Server 2008 R2 configured to provide internet access to Clients connected over VPN using the native RAS of Windows. There is a need to block certain outgoing TCP ports from the ...
-1
votes
0answers
19 views

How are these ips same in iptables? [on hold]

123.30.60.0/24 123.30.60.0/* I found 24 means netmask 255.255.255.0 but can't understand 2 lines above have the same meaning. Please let me know this. Thank you.
0
votes
1answer
23 views

What iptables rules should I add first in the 'ruleset'?

I am setting iptables up the following way: sudo iptables -P INPUT DROP sudo iptables -P FORWARD DROP sudo iptables -P OUTPUT DROP and I want to add the following rules: sudo iptables -A INPUT -m ...
0
votes
0answers
18 views

How to setup WinRM on private interface?

The Windows 10 Pro machine this-machine has two network adapters: WI-FI: connected to a public network PRIVATE: connected to a private network Using WinRM, I would like to run commands on this-...
-1
votes
1answer
54 views

Is someone able to sniff our corporate emails?

To put the long story short: we discovered someone is able to access some of our "secret" links we do send to our clients over email. The links are highly secured with hashes, extremely difficult to ...
0
votes
1answer
42 views

Using iptables to block connections from local network

My network's DHCP address range goes from 192.168.0.100 to 192.168.0.199 and it's subnet mask is 255.255.255.0. I want to use iptables to DROP any INPUT (and OUTPUT too, if possible, as I don't want ...
1
vote
0answers
18 views

Why is Watchguard dropping an open TCP connection?

We are using Watchguard version T35-W. When our system is under heavy load, we sometimes see active TCP client connections are dropped and become black holes. We think that this has something to do ...
0
votes
0answers
13 views

Redirect Outside Traffic to other Outside Address Using Cisco ASA Firewall

Is it possible to send traffic from the internet to another internet address using a Cisco ASA firewall? It needs to be transparent, so that the client, using UDP or TCP behaves exactly as if it were ...
-1
votes
0answers
13 views

Deleted Firewall By Accident - Now I can only upload via Insecure FTP and site is MESSED UP [closed]

I recently got a new laptop and today I decided to remove the annoying McAfee antivirus that popped up every 5 minutes. When I went to remove the program, it seemed to have uninstalled the firewall as ...
0
votes
0answers
9 views

Server 2016 Firewall Will Not Start; Error 5: Access Denied

I have a server running Server 2016. I am trying to get my network to connect back to the domain but the firewall gives me an error saying the following: I have tried everything here I have added ...
0
votes
0answers
13 views

Google Cloud NAT internal IP

I have a running cluster on Kubernetes with GCP, and some services running on App Engines, and I'm trying to communicate between them without being able to access the App Engines from the outside. I ...
1
vote
1answer
36 views
+50

How to debug Mikrotik bridge filter forward rules not having any effect?

As part of diagnosing a different problem were trying to add a bridge filter rule that will stop all traffic from forwarding between two interfaces on a bridge. The router has two interfaces ether1 ...
-1
votes
0answers
11 views

lan unable to reach server via any protocol [closed]

background: whm server - static ip of server host x.x.x.33 gateway of static ip range: x.x.x.46 lan operates via dhcp router at 192.169.1.2-255 I am receiving this message: Feb 10 11:56:34 server ...
0
votes
0answers
35 views

Google cloud compute: Traccar Installation

I have a google cloud server that I installed ubuntu 18.04 LTS on with traccar installation on port 8082. I cannot open the tomcat and deployed application in the browser from the google cloud ...
4
votes
1answer
90 views

HTTPS from web server in China is blocked by RST TCP packets (Great Firewall?)

I'm hoping someone can provide some insight to a weird issue we're having as of 3 February 2019. TL;DR HTTPS sites on an IIS server in China are returning TCP RST packets after the initial TLS ...
0
votes
0answers
34 views

NGINX as Reverse Proxy + Apache

I have IPFIRE as my Firewall. It's works great but i have a little problem with this scenario.. In my network, IPFIRE have 3 nics (GREEN, RED AND ORANGE) and i have 2 physical servers in the ORANGE ...
0
votes
1answer
26 views

unable to access apache server from browsers

I have installed apache2 on linux server, listening to port 80. But, I am unable to connect to the server when trying from browser. But when I am trying with curl command, curl < ip >:80 It ...
0
votes
1answer
25 views

AWS site-to-site VPN - Security of the tunnels

It is described on AWS documentation that a site-to-site VPN involves the creation of two Tunnels between the virtual private gateway in AWS and the customer gateway on-premises. (See https://docs.aws....
0
votes
0answers
12 views

Ubuntu Droplet sending DDoS attack [duplicate]

Since we had a couple of issues with our Hosting provider, we moved our Magento2 installation to a DigitalOcean, Ubuntu 18 based Droplet. Basically, we have just installed Nginx, PHP7.1 with related ...
1
vote
0answers
25 views

Regulate OpenVPN users' access to specific websites

More specifically, I push the route for 5 websites to the clients via the server config. However, I would like to block CLIENTS's access to one of these websites on an ad-hoc basis. In order to ...
0
votes
0answers
19 views

Make VM accessible over RDP with pfsense

I would like to make my VM which is in the test environment accessible from a specific Network (called FW_PRODUCTIVE) over RDP. For doing that, I did make following steps: Create 1:1 NAT Rule ...
0
votes
0answers
7 views

Google Cloud IP address setup for counter-party

If I publish a server to a counter-party and it needs me to supply an IP address to setup its firewall, what IP should I give? Is there any contingency for the IP? For example, if, for whatever reason,...
0
votes
1answer
27 views

How to specify multiple rules in iptables?

The manpage says (emphasis mine): -A, --append chain rule-specification Append one *or more* rules to the end of the selected chain. [...] -D, --delete chain rule-specification Delete ...
0
votes
0answers
21 views

Making iptables port forwarding access from LAN

I have rule in my config like below: $IPT -t nat -N FOO $IPT -t nat -A FOO -i eth0 -p tcp --dport 444 -d public_eth0_address -m conntrack --ctstate NEW,ESTABLISHED,RELATED -j DNAT --to-destination ...
-1
votes
0answers
28 views

Can I disable NAT and still have firewalling

I have the following network setup: home edge router (LAN: 192.168.178.0/24): | |------ home lab router [dd-wrt] (LAN: 192.168.1.0/24) | |------ home office router [open-wrt] (LAN: 192....
0
votes
0answers
22 views

Configure CSF firewall to read Nginx error log

In my CSF config file /etc/csf/csf.syslogs, I have the following setting: # Nginx: /var/log/nginx/error_log But my actual nginx error log path is /var/log/nginx/error.log. Is this something I need ...
-1
votes
1answer
52 views

Building Firewall for Deployed System

I have an approach I would like feedback on for building a firewall for a system that is already deployed (i.e., multiple servers running in the field with no firewall whatsoever). All of the servers ...
0
votes
0answers
22 views

Howto : Forward UDP to multiple Hosts via Linux Firewall

I have to forward UDP Messages to 2 hosts. I'm doing this at the moment with socat socat - udp4-listen:12202,fork | tee >(socat - udp-sendto:localhost:12201) >(socat - udp-sendto:192.168.0.5:...
0
votes
0answers
24 views

virtual network manage multiple ip

I have an Private Virutal Server with two ip. Th OS is Ubuntu 16. I would like to allow only* the ports 22,80,442 on the first ip and Allow the ports 12301,12302,12303,12304 on the second ip. How I ...
0
votes
1answer
51 views

iptables not filtering traffic from my cloud based camera

I have a camera that I can access from the manufacturer's cloud platform through a phone app. At the same time, I possess a router running Linux which I want to program to block the camera's access to ...
1
vote
2answers
41 views

Apple devices not connecting to sites on my server

I run a Linode with about 30 Wordpress sites. Over the past several weeks I have seen several emails from Apple users who have not been able to connect with sites on my server and I need to get this ...
-1
votes
0answers
22 views

Migrating to GCP - Isolating service to service communication in App Engine

We are migrating some server software over to GCP and are having some troubles setting up some things correctly. We are running 2 nodejs services on the App Engine (standard environment), where one ...
0
votes
1answer
41 views

How to scan our range of ports efficiently? [closed]

I am trying to create a script that will check if my firewall works correctly. For that I need a command that checks our range.
0
votes
1answer
57 views

NFS client firewall settings and rpcbind

I have a server (Debian 9.6) which mounts an NFSv3 share for backup purposes. Does it need any specific firewall settings ? I have found that rcpbind is listening on port 111 and 903 and is ...
0
votes
1answer
32 views

UFW port open but connection still refused

I have mongodb running and I want to access it from an external machine Output from ufw status Status: active To Action From -- ------ ---- ...
0
votes
0answers
48 views

Set a specific port for javaw.exe and java.exe

I understood the differences between java.exe and javaw.exe by this link. I know that javaw.exe and java.exe belongs to Java from Sun Microsystems (Run time library), they have some dynamic ports in ...
0
votes
0answers
42 views

Strange network behaviour

I have following problem: In my company we have for our department a own subnet which is build as folloing: Company router --- ipfire --- [NAS (which handels DHCP), Storage Server, ...] The ...
0
votes
0answers
31 views

Set a specific port for SSAS

I'd like to force the SSAS (SQL Server Analysis Service) instances to use from a specific port instead of using dynamic port because of the firewall policy. According to this link The default port ...
0
votes
0answers
20 views

IIS Server / Windows 2016 Server Essentials - Firewall?

Need help here... Running Windows Server Essentials 2016 and added an IIS website. When accessing the site from anywhere on our internal subnet 192.168.1.x, the site returns the proper page. Even ...
0
votes
1answer
19 views

linux route nic2 connections to nic1

I have in linux envrioment: 1) firewall (192.168.1.1) 2) server1 (192.168.1.2) 3) server2 ubuntu (NIC1 - 192.168.1.3 - NIC2 - 192.168.2.1 - can customize) 4) device1 - 192.168....
0
votes
0answers
22 views

UFW allow from rules for service names (Nginx HTTP, OpenSSH)

I'm trying to set-up a server, but deny access from all IPs except specific IPs. I've installed the services OpenSSH and NGINX. To add these services to my firewall (using UFW), I am required to add ...
0
votes
0answers
37 views

How to remedy TLS handshake issue while forwarding packets between two NATs?

There is a local network with Wifi router working as NAT server, which is connected to an ISP. It's needed to place a firewall between the router and ISP which filters incoming and outcoming traffic, ...
0
votes
2answers
41 views

Google Compute Engine: Trouble accessing internet from an instance without external IP

I am trying to install some libraries from some instances that don't have external IP addresses on a VPC network. There is one instance on that network that does have an external IP address and ...
0
votes
0answers
12 views

Gateway routing through tun interface

I have questions on the ip packet flow for the following scenario: I want my workstation "WKS" access Internet though a dedicated gateway "GW" in charge of mounting a tun interface and direct all my ...
0
votes
0answers
26 views

Failover issues when running multiple firewalls with multiple switches

We have 2 cisco asa 5506-x configured in an active/standby configuration. We have 2 switches which have 2 vlans configured, vlan 1 for internal traffic, vlan 2 for external traffic. Each firewall ...
0
votes
0answers
42 views

Make linux redhat as a inline transparent firewall

We want to make a redhat server with two networks card acting as an inline transparent firewall. We simply want that all card1 traffic to be forwarded to card2 and card2 to card1. Card1 traffic can ...