Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [firewalls]

Concerned with software or hardware firewalls

5
votes
0answers
760 views

Firewall in virtual machine

I'm putting my server to use as a file server and a firewall. I'm looking at KVM or Xen VM setup, where file server and firewall get their own VMs and host is just supplying the hardware (so Xen way, ...
3
votes
0answers
140 views

How can Nmap bypass Windows Server firewall rules?

I need to block all communication (inbound/outbound) from server A to server B (all ports/all protocols). Server A should communicate with every machine except server B. I can't place firewall rules ...
3
votes
0answers
47 views

What is this “…ffff:ffe2” traffic being blocked?

I have a fairly simplistic pfSense setup. IPv6 is provided through a Hurricane Electric tunnel. Something on my home LAN is sending traffic from an odd-looking address, and so it's getting blocked, ...
2
votes
0answers
32 views

Beginner UFW question about destination any

I'm learning about UFW with a Raspberry Pi and I don't a couple of things when it comes to UFW rules. Can anyone help me suss a couple things out? My first question is about the destination any. If I ...
2
votes
0answers
96 views

The way for not disabling the firewall in windows

I have been doing this for about a year without knowing the purposes of disabling. Whenever i tried to ping/connected to my host VM via guest VM, i have to disable my host VM's firewall, but does it ...
2
votes
0answers
269 views

Blocking Multiple Failed Postfix AUTH Attempts with CSF

I am using CSF/LFD on my CentOS 7 server, and would like to use it to temporarily block IP addresses that have multiple failed Postfix AUTH attempts. You know the one, I get line after line of: lost ...
2
votes
0answers
2k views

Anyone can identify tool used to perform this attack?

recently I've identified that some hack attempt was performed at one of my servers. I have dumped nginx logs to github, please take a look and try to identify which tool was used to perform this ...
2
votes
0answers
846 views

Isolating Computer on Home Network Using Multiple Routers

My goal is to isolate a computer on my home network. This computer (a rapsberry pi) should be considered untrusted and is accessible from the internet (port 22). I need a solution that will prevent ...
2
votes
0answers
195 views

How to configure NAXSI to accept JSON format in REST APIs?

For example, one of my APIs is: Post request: /api/v0/login body: { "username":"xxx@ggg.com", "password":"eeeee" } I want to secure this API with NAXSI, but I could not find anywhere to config ...
2
votes
0answers
475 views

Configure icefloor to prevent leaks when VPN connected

I am trying to configure the icefloor firewall on OS X 10.9 so as to make sure all traffic will go through VPN. I recently notified that even with "Route all traffic through VPN" option in ...
2
votes
0answers
349 views

What is the security of Powershell “TrustedHosts”? (is it just a name match)?

Powershell has a TrustedHost section that is configured like this: winrm s winrm/config/client '@{TrustedHosts="CorpServer56"}' What security is implied for CorpServer56? Is it just an ASCII name ...
2
votes
0answers
231 views

Why my proxy is still having some connections blocked

I am behind a firewall in France. I connect to proxy A, in Ireland with Dante via SSH port 22 and make a tunnel forwarding port 1080. The proxy works as expected but still having a port range blocked....
2
votes
0answers
224 views

Shorewall stopped policies - routeback

Here goes a very specific question about the insides of Shorewall and Iptables in general. Shorewall supports configuration of "Stopped Policies" using the file routestopped, which defines the ...
1
vote
0answers
42 views

Weak ciphers in TLS VPN

We have a firewall out of our firm network and administrators connect to this firewall by VPN over TLS. Scanning this firewall, the vulnerability scanner get us some warning as the 443 port allow weak ...
1
vote
0answers
36 views

health check to test haproxy — request deny with 200. good idea?

I have been working on a multi-provider redundant load balancing solution using HAProxy, AWS, and Cloudflare. I have a solution, and I believe it will be secure, but I am looking for further ...
1
vote
0answers
53 views

UFW (Uncomplicated Firewall) Question

I was wondering if there's any benefit of adding following rules to a Raspberry-Pi directly exposed to the internet: sudo ufw deny to 0.0.0.0/8 && sudo ufw deny to 169.254.0.0/16 && ...
1
vote
0answers
36 views

Are parts of my system susceptible to IP based malicious attack even with effective IPtables rules?

Yesterday I installed Cent OS 6 and had to flush the default IPtables rules (IPtables -F) in order to access a web app via my browser. Having very little experience with Linux/Network security this ...
1
vote
0answers
86 views

How to block all aplications from internet connection?

I would like to block all windows10 applications from internet access So I found a settings screen on the windows firewall (Windows Firewall\Allowed apps) I would like to uncheck everything from this ...
1
vote
0answers
102 views

Comodo Firewall HIPS (Paranoid Mode) Regedits

Old time lurker and odd poster here with a general question. I think this might fall more in the nature of understanding system processes. I've activated comodo HIPS on paranoid mode to firstly see ...
1
vote
0answers
319 views

How secure is my MLab Shared Cluster MongoDB database?

I have deployed a Meteor application to Meteor Galaxy. I've also created an Mlab.com Shared Cluster MongoDB. Link to the plan features. My application has an SSL certificate installed on the domain. ...
1
vote
0answers
152 views

Security risks introduced when moving from a three tier to a two tier architecture

I host several .net web applications using a standard three tier architecture with web servers located in a demilitarised zone. I have been asked to host a two tier .net web application where the web ...
1
vote
0answers
136 views

Bypassing Client firewall restrictions

Lets suppose we have 2 parties A(me) and B(participant). I want to communicate with B but B's firewall restrictions are not allowing me to communicate with him. Is there any way that I can bypass B's ...
1
vote
0answers
46 views

Firewall rulebase analysis offline/vendor agnostic a thing for FISMA/NIST

During design-time before a build-out, I currently create an excel file version of a firewall rulebase (policy) representing source/target/port/protocol/etc definitions before being pushed to the ...
1
vote
0answers
162 views

UFW behind modem does not block remote IP

I have a small linux server with fail2ban and UFW installed and configured behind internet gateway modem which ssh port is forwarded to server. The attackers are discovering by fail2ban and added to ...
1
vote
0answers
1k views

Different filtering techniques with internal and external firewall?

First of all, lets get the basic information sorted out. Just in case I have it mixed up. There is an external Firewall - Router (or some such device), and there is an internal Firewall (an ...
1
vote
0answers
76 views

Simple DMZ Question Regarding Physical Hardware

So when talking about at setting up a DMZ, if you are currently running a web server, app server, and a database server on the same physical host, you need to migrate them to separate physical hosts ...
1
vote
0answers
86 views

Clustered Juniper devices using public DoD IP addresses for communication?

Ok, so I have to admit I am not an expert in how Juniper networked devices work, so this entire issue might be why I am having issues understanding something I am seeing on a pair of clustered SRX210H'...
1
vote
0answers
198 views

Filter multicast on a LAN

In my dd-wrt firewall, I see the option: filter multicast I searched a lot about filtering multicast, but I could not find a comprehensive reply about this. Should I filter multicast on my LAN?
1
vote
0answers
1k views

Gargoyle (OpenWRT) firewall routing for VPN

At present I have Gargoyle setup on my WNDR3700 to connection to a VPN provider in order to provide a little privacy. However this prevents me from connecting remotely to my home network. Previously I ...
1
vote
0answers
140 views

Why does Windows realtime protection block specific URLs?

I have observed this strange behaviour with Windows (7 to 10). When active realtime protection is enabled, it blocks my own website. The page has nothing special (PHP and JavaScript), just good old ...
1
vote
0answers
158 views

Fortigate monitoring with SNMP and Devmon template

I'm trying to monitor some aspects from our Fortigate firewall (like how many traffic goes through each tunnel) through a combination of Xymon, Devmon and SNMP. I downloaded the MIB files from the ...
1
vote
0answers
45 views

Is it possible to block a debugger from connecting locally?

I work at an enterprise with enterprise-type software on my machine regarding firewalls, virus scanning, and vpns. I'm also a developer. If I'm not connected to the internet I'm not able to debug my ...
1
vote
0answers
70 views

iptable ip_conntrack_max testing

I was trying to understand how ip_conntrack_max works so i have created two VM and set ip_conntrack_max to 10000 I used hping to open 10000 udp connection on VM using following command hping --udp -...
1
vote
0answers
174 views

Web/search engine spider on local network?

I was setting up a test webserver on my local network earlier, and whilst sorting out the firewall I noticed the following in the log (/var/log/ufw.log - I'm using UFW on Ubuntu 14.04): Jul 9 14:17:...
1
vote
0answers
236 views

Firewall requirements for SaaS service providers

I have not had much success compiling a workable overview on the topic of firewalls and application service providers, despite making a rather extensive contribution to Google's workload this month. I'...
1
vote
0answers
590 views

How should I configure my Tor-dedicated firewall for optimum security?

I'm setting up a Tor-based isolating proxy using the 'Anonymizing Middlebox' iptables rules specified here: https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy i.e. iptables -t nat -...
1
vote
0answers
119 views

API deployment infrastructure

We are going to deploy our service, it's drupal based with some additional REST APIs. The drupal servers will be (loadbalanced) put in the DMZ. We think to deploy the REST APIs on an app server in ...
1
vote
0answers
753 views

Proxy via pfSense and exclusions for DNS

I have posted this to NetworkEngineering.SE, as that seems the more suitable audience for this question. I will leave this question open here but am happy to see it closed. I just did not want to ...
1
vote
0answers
100 views

Pf rules configuration

Do these rules appear to be an adequate start? _interface="en1" _linode="66.228.57.75" #lish-atlanta.linode.com _ssh=" { 74.207.224.182 66.175.210.225 } " set block-policy drop set skip on lo0 ...
1
vote
0answers
508 views

Throttling DropBox behind a firewall

Our office network bandwidth gets choked when an employee copies a large file into her DropBox, since it gets downloaded on several machines (of other employees). LAN Sync is an option, but needs to ...
0
votes
0answers
68 views

Filter/Block OpenVPN clients' access to a specific website

As stated in the title I would like to restrict VPN clients' access to specific websites. More specifically, I push the route for 5 websites to the clients via the server config. However, I would ...
0
votes
0answers
43 views

PHP socks proxy with no port opening

let's say i have file apache file access on a webserver, but due to firewall rules etc, i can't connect to ssh and can't open a port. Is there a way to do this exactly this : create a socks proxy on ...
0
votes
0answers
29 views

Distributed network with one host behind dmz and the other without

Context: This a question from my homework assignment. There is a company with two sites A and B. B is behind DMZ (firewall - proxy mail server - firewall) and A is just behind a firewall Network A ...
0
votes
0answers
72 views

How should firewall be configured to allow using an image scanner over WiFi to avoid jeopardizing security?

I'm having a dilemma if I should post this here or on superuser, finally I decided it's more security related so I post it here, if it's wrong please move. The situation: There is an Epson all-in-one ...
0
votes
0answers
32 views

Windows 10 disable most networking

Is it possible to disable all networking besides the web browser on Windows 10, especially including Microsoft-specific services? This should help with privacy concerns.
0
votes
0answers
99 views

SSH Tunneling Issue with Plink

so I'm trying to follow this tutorial to bypass firewalls and IDS by routing traffic through an SSH pipe and receiving a Meterpreter reverse shell (reverse_tcp) from a Windows computer across the ...
0
votes
0answers
462 views

How to determine DoS protection rates for firewall

I am looking to enable my Firewall's DoS protection, and when searching for values to put in the rate fields, am finding that the answer is usually "it depends". While there is almost always room for ...
0
votes
0answers
947 views

connections to AkamaiGhost

I've seen two computers on a network are initiating connections to AkamaiGhost server on the Internet on port 80. Is this a security violation? Firewall is blocking them, and no one is actually doing ...
0
votes
0answers
34 views

I have a question on hardening my windows 8 host firewall rules

I use the following setup for my internet connection. MyPC/RDP -> RDS server -> Internet (this is over a paid public WiFi access point). What I want is to strengthen my Win 8 firewall rules (...
0
votes
0answers
772 views

Deny a plugin (.dll file) access to the Internet (windows)

I want to deny a VST plugin access to the internet, but when I try to block it in Windows Defender, the file doesn't show up. The file/program is being opened only in other programs (in this case a ...