Questions tagged [firewall]
A Firewall is an application or hardware device used to inspect and filter network traffic.
4,276
questions
7
votes
2
answers
27k
views
What ports should be left open on a web server?
I'm going to try deploying my first web app soon, so my experience is lacking. I remember reading somewhere that port scans by bots happen within minutes of being exposed to the internet (maybe that'...
4
votes
5
answers
36k
views
how to open port 53 for bind
how to open port 53 for bind on debian server?
[xxx.xxx.xxx.xxx] 53 (domain) : Connection refused
3
votes
3
answers
3k
views
Iptables rules for Caching Nameserver
We're running Bind as a Caching-Nameserver and these are the 3 rules on our setup to handle the DNS functionality:
iptables -A INPUT -s $OUR_NETWORK -p udp --destination-port 53 -j ACCEPT
iptables -A ...
1
vote
2
answers
233
views
Apache on nondefault port, need help with iptables
I am setting up apache to listen on port 8000.
it's working fine from 127.0.0.1 but the ip address on port 8000 does not work
the ip address is my router and i've already forwarded port 8000 to my ...
2
votes
1
answer
655
views
Virtual firewall in existing network DMZ?
A network configuration question from a relative newbie...
We have an existing LAN setup, with a hardware firewall (D-Link DIR-655) and a Microsoft Small Business Server (which does the DHCP).
We ...
8
votes
2
answers
4k
views
Block IP on EC2. Firewall or other options?
My EC2 (Fedora AMI) based service is being heavily hit by a rogue misconfigured client. What options do I have to block the IP of this rogue client?
3
votes
3
answers
4k
views
Securing a Windows Server 2008 R2 Public Web Server
I'm setting up a public web server: Windows Server 2008 R2, IIS7.5. Does anyone have a tutorial / walkthrough / tips on properly securing a public web server? I've seen a few tutorials but mostly ...
2
votes
2
answers
11k
views
Can someone explain what this vulnerability means?
I'm having a bit of a problem getting my head round what this vulnerability means, can someone help me understand this?
I'm particularly puzzled by the RESULTS section. Why would source port 25 be ...
1
vote
2
answers
12k
views
Why is the System process listning on 80/443?
How come that the system process (pid 4) is listning on all :443 and :80? that means that only IIS can listen to those ports. not visualsvn for example (of course different IP's)
>netstat -aon
...
3
votes
1
answer
462
views
Firewall as a guest VM?
Out of curiosity, would it be pointless/wasteful/silly to put a firewall as a VM guest (regardless of VM host - ESX, Xen, Hyper-V, etc. etc.) and redirect all traffic from other VM guests through the ...
6
votes
4
answers
10k
views
How do you block new incoming tcp connections on X port?
How do you block new incoming tcp connections on X port? Needs to be done with iptables. I actually have a working iptables command but we always reach ip_conntrack_max even when ip_conntrack_max ...
1
vote
1
answer
3k
views
Blocking chat in gmail website with SonicWALL TZ 180 Enhanced OS
We have a SonicWALL TZ 180 with Enhanced OS.
We want to block the chat web app within gmail's site, but not block the whole gmail site.
I've turned IPS on, and all IM to prevent.
Any ideas?
I've ...
3
votes
2
answers
228
views
Programmer configuring a new network [closed]
I'm in the process of expanding my home network from a couple of laptops on a wireless Verizon FiOS router to include:
Linksys 24-port switch
Cisco Pix 515
Cisco 3640 router
One new development ...
1
vote
2
answers
14k
views
How do I allow IPSec over TCP through a Cisco ASA?
I have a internal user that needs to connect via VPN to an external company. The external company's vpn is using IPSec over TCP on port 57369. When my user tries to connect it fails. The logs on my ...
4
votes
6
answers
41k
views
Localhost works but Computer Name does not
When I'm trying to connect to my iis with localhost, everything works fine. When I'm trying to connect with the name of my computer instead of localhost, it doesn't work.
I've found that turning off ...
8
votes
8
answers
19k
views
What is the best Web Application Firewall for IIS? [closed]
What is the best Web Application Firewall(WAF) for IIS? What makes it better than the others? How useful is it at blocking attacks against poorly written code, otherwise known as an Intrusion ...
3
votes
2
answers
446
views
add detailed authentication + logging to pix 515e
I have a pix 515e running pixos 6.3 w/ 64MB RAM, 3 ethernet interfaces, only 2 in use. I am using it as an internet gateway for ~100 devices, daily peak of about 6 Mbps (megabits per second) inbound, ...
2
votes
1
answer
864
views
ASA firewall newbie tutorial [closed]
I am new to managing routers/firewalls and now need to manage a ASA 5510 in a small enterprise. I used to just demand settings from our network provider, thus I am familiar with the basic concepts, ...
2
votes
1
answer
2k
views
Cisco Pix 501 - reaching local host limit, showing odd IP addresses
I am running out of licenses on my Pix 501, and the show local-host command lists a number of odd IP addresses that do not belong to my 10.10.1.* subnet. Any idea what they are? The only thing I could ...
-1
votes
1
answer
58
views
Firewall connections from every country in the world [closed]
Ok, this is very interesting, and just posted on Slashdot by someone (not me).
It appears that the guy receives packets in busts from all the countries in the world, and he does not understand what's ...
3
votes
5
answers
2k
views
Is it beneficial to chain multiple firewalls at the perimeter? [closed]
I'm currently running ISA 2004 and will soon be running an Untangle box. I've always felt a tiny bit safer putting these more advanced software firewalls behind a dumb hardware firewall (like mid-...
2
votes
2
answers
4k
views
Linux Firewall Appliance that Supports iPhone VPN
I'm look for a Linux based Firewall Appliance that supports incoming iPhone VPN connections out of the box.
The rest here is the current status of my research into this topic.
Currently I'm using ...
1
vote
1
answer
2k
views
Unstable VPN Connections from netgear router
I am having trouble with a NETGEAR ProSafe VPN Firewall (model FVX538).
The system is set up to form one end of an IPSec VPN tunnel, and most of the time it works fine. However, for a couple of days ...
1
vote
1
answer
205
views
View Security Server and Direct Connection
I have a Security Server for my connections from the Internet. This works fine, accept when I enable "Direct Connection to the desktop". I found the following statement on this:
If you bypass the ...
2
votes
2
answers
289
views
"Where" to put Exchange 2007 Server Roles in the network
I'm reading through the documentation for deploying Exchange 2007, and I'm puzzled by one section. I was intending to place the Edge role on its own non-domain machine in the DMZ, and the remaining ...
0
votes
1
answer
953
views
Windows Vista firewall blocks Java application
I'm currently working with vista on a domain account with VERY restricted permissions. Every time I'm using a new application which tries to reach the network, my boss has to input his admin password ...
1
vote
2
answers
2k
views
IIS 7: using IP address and port for different sites
I have an IIS7 set up. So far I do not have a domain name for it however we have an IP address.
I want to have just two environments on this server, one for staging and one for production.
Staging - ...
1
vote
1
answer
249
views
Remote login to SQL Server Express 2008
I am trying to remotely access MS SQL Server Express 2008.
I have turned on service "SQL Server Browser"
I have turned on service "SQL Server
(SQLExpress)"
I have enabled TCP/IP and set dynamic
...
1
vote
1
answer
1k
views
How to stop OpenEsb Glassfish Admin console from opening connection to glassfishesb.org
I have a Glassfish v2.1 app server (OpenEsb distribution) running behind a very restrictive firewall. Some times a bottom frame will appear, trying to connect to this address: http://glassfishesb.org/...
1
vote
2
answers
609
views
Encrypting MSMQ
So I want to do asynchronous, disconnected, across-the-Internet messaging with WCF. Probably due to my background in Apache ActiveMQ, I'm looking at MSMQ for this.
In ActiveMQ, it was a simple thing ...
0
votes
1
answer
611
views
openvpn dual install (client and server) routing problem
I have the following install:
PROD net (10.88.88.0/24)
OFFICE net (192.168.2.0/24)
on PROD I have openvpn server (vpnprod), so OFFICE can connect.
on OFFICE I have openvpn machine (vpnoffice) ...
0
votes
4
answers
1k
views
How to access webservers running on ports blocked on company's network?
Case: I have set up a Mac mini (Snow Leopard, not server edition) with the Atlassian suite (JIRA, Confluence, etc. running on port 8080, 8090...) at home. At work I cannot access web-sites running on ...
0
votes
2
answers
167
views
Logging inbound firewall pings, organization by IP
Is there some way or a program that can do this? A VPS of mine has been receiving a very large number of pings, almost to mini-ddos level. I need to track the pings made, by IP address (or even just ...
0
votes
1
answer
706
views
DrayTek VigorPro 5510 + IPCop
Our network uses a DrayTek VigorPro 5510.
The content filtering on this isn't particularly strong - It work's on IP ranges - for example, our 10.0.10.xx range can view anything, but 10.0.65.xx has ...
2
votes
4
answers
5k
views
Linux Firewall + Loadbalancer distribution
Can anyone recommend a Linux specialized distribution (or appliance) which provides both Firewall and Load-balancer?
Something similar to IPCop for example, but containing LB as well?
Thanks in ...
1
vote
3
answers
217
views
Which is Better Firewall
I am doing a new WAN/LAN Design and wanted to know what would be a better in terms of value, reliability, support and performance. I need to connect 3 remote office to main HQ and multiple field staff ...
0
votes
2
answers
233
views
Stateful Firewall Rules Obeyed by Switch?
I have a stateful firewall (pfsense) with a WAN and LAN port, with the LAN port connected to an unmanaged switch (DLink Gbit) and several computers connected to the switch.
I was wondering if the ...
2
votes
5
answers
52k
views
Error applying iptables rules using iptables-restore
Hi I'm using Ubuntu 9.04 on a VPS. I'm getting an error if I apply a iptables rule. Here is what I have done.
1.Saved the existing rules
iptables-save > /etc/iptables.up.rules
Created iptables....
0
votes
1
answer
8k
views
Linux: how to configure a secondary IP address upon boot-up?
Greetings experts,
I've configured a nice little linux firewall machine here. It's got eth1 for the internal network (10.0.0.*), and eth2 for the external network (65.130.27.69/27). eth0 is not ...
0
votes
2
answers
11k
views
Sonicwall resetting connections (For no apparent reason)
We have a Sonicwall Pro 3060 that is transparently bridging traffic to the Internet and a VPN to another site. We are having connections being reset for no apparent reason. For instance, connecting ...
0
votes
3
answers
2k
views
Gigabit Dual WAN Cisco or Juniper Router / Firewall?
Hi I am currently looking for a Gigabit Dual WAN Cisco or Juniper Router / Firewall. Can someone please make a recommendation for me. I cannot find anything Thank you!
1
vote
5
answers
189
views
Servers - Value of onboard firewall
Should server's run their own firewalls (Windows Firewall, Linux IPTables), or is it simply not worth it? Is the answer different for 5 servers vs 50 vs 500? (Assuming the prior has servers on the ...
0
votes
2
answers
1k
views
Changing default gateway on workstations connected to Windows Domain SBS server
We have xp workstations connected onto a small business server acting as active directory/isa firewall/proxy (no dhcp). Is there a reason that after installing a 2nd firewall on the network (same ...
0
votes
1
answer
439
views
access linksys router admin module remotely if linksys is behind a linux router
My linksys wireless router is behind a Linux router and I would like to access the linksys router's admin module remotely.
How do I configure iptables so I can open the admin module?
iptables -t nat ...
13
votes
2
answers
20k
views
Do I need seperate iptables rule for ipv6 address?
On my debian 5.0 server, I setup some iptables rules like below:
ACCEPT tcp -- eee.fff.ggg.hhh aaa.bbb.ccc.ddd tcp dpt:80
DROP tcp -- 0.0.0.0/0 aaa.bbb.ccc.ddd ...
2
votes
3
answers
1k
views
SSH Tunneling to box behind firewall
I've got a computer behind a firewall, a home desktop, and a server. I can reverse ssh tunnel to the server from computer_behind_firewall, and then
ssh localhost -p some_port
while on the server,...
1
vote
4
answers
480
views
iptables and snatting to different networks
linuxbox (p.q.r.t)
|
|
INTERNAL ------ ABCD ----- INTERNET
(p.q.r.s) (m.n.o.k)
ABCD has 3 interfaces connected to linuxbox, INTERNAL N/W, ...
0
votes
2
answers
432
views
Change configuration of a cisco pix 515 via SNMP
I have a cisco pix 515 as firewall for some web servers. What I want to do is to automatically add banned ips to the firewall to block traffic at the network level.
At the present time I have a ...
1
vote
1
answer
193
views
My sysadmin is on vacation, Help!
I wanted to trouble shoot a certain issue on the server, but I could not connect my debugger since the person who maintains the firewall is off on a vacation. I dont want to mess with his settings. He ...
0
votes
1
answer
1k
views
Basic Iptables question (Open connection both ways)
I am trying to open a connection on a machine both ways. That is I am trying to open say the port 8001 and I did this.
iptables -A INPUT -p tcp --dport 8001 -j ACCEPT
Now how to configure so the ...