Questions tagged [firewall]

A Firewall is an application or hardware device used to inspect and filter network traffic.

Filter by
Sorted by
Tagged with
0
votes
1answer
7 views

Debian 10: How can I disable nftables and continue to use IPTables only?

I just installed a new Debian 10 and realized that both nftables and iptables are active and somehow my IPTables rules get mixed up and don't work properly. How can I completely disable nftables and ...
1
vote
0answers
12 views

How to use GPO to update an existing firewall rule?

I used the guidance found here to add a set of firewall rules to my GPO. I performed these steps: Exported all rules from my DC Imported them into my GPO Deleted the ones I didn't want Applied the ...
0
votes
0answers
30 views

How to block external traffic *except* to specific samba host from libvirtd subnet with firewalld?

I'm kind of baffled I'm unable to come up with so little information on the topic after days of research, but I'm experimenting with Centos8 in my lab and would like to use it as a vm host machine ...
0
votes
1answer
23 views

How to uninstall shorewall completely from Ubuntu

I noticed on my some servers shorewall service is installed but it's not running.I want to uninstall it. I executed the command sudo systemctl status shorewall to check status of shorewall and got the ...
2
votes
1answer
72 views

azure: virtual network cant talk to a firewall?

In Azure, you can create a virtual network with one or more subnets. I created one with a single subnet. Then you can assign VMs to that subnet. But at this point, the vms cant see the world, and ...
0
votes
0answers
16 views

configure the firewall to allow ipv6 connections only [closed]

I installed a proxy server from ipv4 to ipv6 with squid. but both my ipv4 and ipv6 address appears.I just want ipv6 to appear with the firewall.I've been dealing with this for 2 months.Please help. I ...
-1
votes
0answers
18 views

IP Address and Domain Restrictions on IIS 8.5 deny rules ignored

I know this has been reported before, but is there any possible way to get the IP Address and Domain Restrictions to actually DENY and IP Address or IP Address range? Is this just a bug in Windows ...
1
vote
0answers
19 views

Problems with accessing external content as sudo/root

System environment: VM running under Debian 9, firewall is iptables. UFW, etc not installed. I run into problems when spinning up a kubernetes cluster by executing sudo kubeadm init. The call causes a ...
0
votes
1answer
53 views

How can I clear blocked IP's from windows firewall?

I have a block rule in windows firewall and under the Scope tab it has hundreds of individual addresses that were added at some point. I am finding I have to click IP and remove for each address. Is ...
-1
votes
1answer
95 views

How do I open a port on one IP only with UFW?

I have seven IPs on my server. Using UFW, if I enter the rule 'ufw allow 7443', port 7443 is exposed and opened on all my IPs. But I only want port 7443 to be exposed on one particular IP address and ...
0
votes
1answer
67 views

How to block/reject all incoming packets from Asia? [duplicate]

I have my own VPS and I want to block/reject all incoming packets from Asia. Is it possible to do it? My server is on Ubuntu.
0
votes
0answers
20 views

Avoid adding new UFW after docker restart

I'm hosting a web application on my server and want to it to be reachable only from a few specific IPs. UFW/iptables sounds like a good choice here. After reading The dangers of UFW + Docker I've ...
0
votes
1answer
28 views

Combined nftables rules for IPv4 and IPv6

One of the main advantages of nftables to iptables is a "Simplified dual stack IPv4/IPv6 administration, through the new inet family that allows you to register base chains that see both IPv4 and ...
-2
votes
0answers
24 views

Routing packets from one virtual machine acting as a firewall to another virtual machine acting as a honeypot?

I have two virtual machines, one acting as a firewall and IDS and another one acting as a honeypot. I was wondering how I would be able to forward an external user to the honeypot after they attempted ...
1
vote
1answer
85 views

IP address blocked in Google App Engine firewall rules but still seeing it in logs

I run a Google App Engine app that has a honeypot admin page to distract from the real admin login page. A while ago I started getting repeated emails saying that someone was trying to log in on the ...
1
vote
1answer
24 views

Allow connections to apache from a dynamic IP

When setting up an Apache server, it's obviously possible to allow connections from a specific IP address [/range]. I have a dynamic IP and I'm wondering, if I use a DDNS service, whether it's ...
4
votes
2answers
557 views

My static ips are inaccessible only from CenturyLink users across all ports

The Problem: How do you diagnose an ISP specific connectivity problem? I host a few sites on local machine. I pay for a business class account with Centurylink and have a lot of 5 static ips. The ...
0
votes
1answer
47 views

UFW: how to allow access to port 9999 on one IP only

At the bash command line on an Ubuntu 16.04 server, the command 'ufw allow 9999' opens that port on every IP address being publicly exposed on the server. But I only want port 9999 to be exposed on IP ...
2
votes
1answer
47 views

firewalld, `--add-rich-rule` and missing blacklist set

My server uses Centos8 quite recently installed (~1 year). After trying to ban an IP: firewall-cmd --permanent --zone=extz --add-rich-rule='rule family="ipv4" source address="49.88.112....
1
vote
1answer
70 views

UDP connection i/o timeout while port is reachable

on one server we encountered an issue where all kinds of UDP connections are failing. The same application and tests work on other servers with the same OS and similar setup. nc -vz -u 83.61.**.** ...
1
vote
1answer
49 views

Understanding Firewall [closed]

So I am trying to understand Firewall concepts. I know what a Firewall is. My question is to try and understand whether, I need to setup firewall on my linux machine. If there is a firewall setup on ...
-1
votes
2answers
49 views

windows 10 firewall: block any ip address but one

i have just enabled remote desktop on a windows 10 computer, and in fact when i telnet to 3389 port from any other computer i can reach that service, but what i want is to deny the connection from any ...
0
votes
1answer
104 views

ssh connection timed out, why sudo service sshd restart resolves it?

I have a little tricky behavior I can't explain. I have a virtual machine running Ubuntu 20.04, docker 19.03.6and arediscontainer. Hosted on aWindows 2019` Hyper-V machine. There's a second virtual ...
0
votes
0answers
8 views

Rsyslog configuration on Firewall

I have syslog in my Juniper Firewall, Should I install Rsyslog as well as it's successor of Syslog and has other pros over syslog, if yes existing syslog should be untouched on top of install rsyslog? ...
0
votes
0answers
8 views

Allow an ip which comcast xfinity firewall is blocking

I am using a windows host and I am trying to conect it to a linux server. We have a Comcast Xfinity firewall on our network at 10.0.0.1, When I try to ping the server from the Windows Host, the ...
0
votes
1answer
87 views

Can't open port with ufw

I need to open the port 8081 for my application. I want to connect to the application from another server. Problem I can't open the port. I started the application with port 8081 and ip 0.0.0.0 and ...
1
vote
1answer
160 views

How to configure FreeNAS for a WireGuard VPN?

I have a FreeNAS 11.3 system and followed iXsystems' instructions on setting up WireGuard. With a simple wg0.conf I'm now able to connect successfully. I'd like to be able to use this setup as a ...
0
votes
0answers
33 views

Running docker containers only local behind csf firewall

I want to access docker containers only locally behind the csf firewall on a remote Ubuntu server. I changed the DOCKER settings options in /etc/csf/csf.conf to 1 to allow docker to change iptable ...
0
votes
0answers
17 views

Policy — Network isolation for known-vulnerable systems

My client has some systems that can't be patched for a variety of reasons. We have a remediation program underway, but we need to isolate those vulnerable servers until the replacement systems come ...
0
votes
1answer
27 views

Allowing access to UDP range port in ipfw/FreeBSD

I have prepared the following configuration: # cat /etc/firewall.conf add 1000 count udp from any to me 10000 add 1001 count udp from any to me 10001 add 1002 count udp from any to me 10002 add ...
0
votes
0answers
10 views

Not able to SSH/ping/http to server from a network. Able to connect from other

I have a VPS from last 3 months. Today morning, I was copying war to tomcat through SCP and suddenly, connection broke. I was not able to ping SSH or http to the server. Later, when I spoke to tech ...
2
votes
2answers
37 views

Sonicwall - DNS not working, trouble with zones/rules/dns config

We have a new site in tampa (we're based in buffalo NY) and everything works well except for the DNS name resolution. Everything goes over the IPSEC VPN back to our site for services like AD and DNS. ...
-1
votes
2answers
139 views

Redirect the same connection multiple times [IPTABLES]

Im trying to redirect the TCP connections a port multiple times to another ports, i tried this before but didn't work: iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 60000 -j REDIRECT --to-port ...
0
votes
0answers
20 views

Host based firewall in NAT environments

Hi getting straight to the point. I am currently working on the architecture of a Host based firewall. My question/pain point is what happens to these(Host Based Firewalls) when LAN-LAN NAT rules are ...
0
votes
1answer
69 views

How can I use iptables to drop packages for an invalid ether-type?

19:27:47.782291 98:9b:cb:: > ff:ff:ff:ff:ff:ff, ethertype Unknown (0x88e1), length 60: 0x0000: 0000 a000 b052 38e5 d57f 0000 0000 0000 .....R8......... 0x0010: 0000 0000 0000 ...
0
votes
0answers
13 views

Client Side Connection Error for FTP/FTPS

I have VPS Server from a Cloud service Company with public IP assigned to it.OS is Windows Server 2019 Datacenter eddition. I set up FTP/FTPS Server on it with Valid Domain Like ftp.x.com. I enabled ...
0
votes
0answers
56 views

AnyDesk TCP tunnelling port “closed” since Windows 10 2004

I connect to my company computer via AnyDesk. I have set up a TCP tunnel from local port 11111 to remote port 22, to have an SSH connection to the remote machine. This stopped working since I ...
0
votes
0answers
18 views

Port Forward keeping original IP (firewall-cmd)

I'm using the following firewall-cmd command to forward port 55500 from 1.1.1.1 to external ip 2.2.2.2: firewall-cmd --permanent --zone=public --add-forward port=port=55500:proto=tcp:toport=55500:...
1
vote
1answer
55 views

Deny port redirection based on source IP - firewalld

I'm trying to forward a port to an external IP using firewall-cmd, but I need to deny access from certain ips. To setup a port-forward of port 55500, I use: firewall-cmd --permanent --zone=public --...
-2
votes
1answer
30 views

How to avoid Antivirus Firewall blocking?

I just released a game that requires a PC and a mobile phone to communicate via UDP in a local area network. I have a mechanism that adds rules to the Windows firewall for the game. However, some ...
1
vote
2answers
44 views

How to exclude ModSecurity rules by hostname?

I'm using OWASP core rule set 3.2.0 set up with ModSecurity 3.0.4 and ModSecurity-nginx. If I have a rule exclusion like this, in REQUEST-900-EXCLUSION-RULES-BEFORE-CRS.conf: SecRule REQUEST_URI "@...
0
votes
1answer
121 views

iptables: employ DROP or REJECT rules in non-'filters' tables, namely the NAT table?

For an iptables(8) firewall that is otherwise "properly locked down" in the filter table, is there any use to employ DROP, REJECT or similar, terminating, "blocking or disabling" rules in non-filters ...
0
votes
1answer
33 views

Google Cloud IKEv2 VPN on Ubuntu Compute Engine VPS

As I stated in the title, I am installing the strongSwan and configure the IKEV2 VPN on the VPS. But, as you know, GCP has its firewall rules, which I am not familiar with that. I am using this ...
0
votes
1answer
21 views

openvpn restricting clients from accessing certain IP's in internet with ufw

I'am looking for a solution which can block openvpn clients in accessing certain website(ip's) in internet, i tried ufw rules like below , but doesnt seems to work from client, what piece do i miss? ...
1
vote
1answer
82 views

How to use defined variables in Nftables though terminal (not in script)

I want to run these two commands in a interactive shell, one after the other (as root and with the "filter" table and the "input" chain loaded): nft define lala=1.2.3.4 nft add rule ip filter input ...
0
votes
0answers
24 views

How we have differentiate the packet capture based on the RX & TX

I am working in the security industry. We have taken packet capture on the firewall multiple times. Can we take Pcap based on RX and & tx and force the tcpdump command to write the output in two ...
0
votes
0answers
28 views

Windows firewall outgoing rule exception not working

I set custom outbound firewall rule on Windows Server 2019 which deny all outgoing traffic on 192.168.2.0/24. The rule is working for all until I set an exception in "Local principal/Exceptions". When ...
0
votes
1answer
37 views

Firewall not allowing DNS resolution

I have the following network on the firewall Infrastructure - 192.168.10.0/24 Gateway 192.168.10.1 (firewall interface 1) DNS Server 192.168.10.2 HostsA - 192.168.20.0/24 Gateway 192.168.20.1 (...
1
vote
1answer
87 views

AWS WAFV2: ACL Rule for allowing access to specific URI Path

I have some web acl managed rules in AWS ELB that are blocking webhooks from Pusher api. They don't provide an IP list that I could include in a white list. I'm trying to create my own rule to allow ...
1
vote
1answer
25 views

How to use IPTables to keep a running total of the amount of data passed to and from a single IP?

I need to keep a running total of the number of bytes passed between my server and a remote server (port unspecific). I would like to keep this running total written in a file. I'm a bit new to ...

1
2 3 4 5
76