Questions tagged [firewall]
Software that controls what connections can be made to and from a network.
2,514
questions
1
vote
0
answers
27
views
Ncat inside WSL2 not behaving correctly
I have an instance of kali linux running in WSL2 on Windows 11. It is configured to use mirrored networking mode, if that is relevant. Typically, if one were to start listening on 127.0.0.1 on any ...
0
votes
1
answer
31
views
How can I block GPSD from communicating out?
I have two computers; one running gpsd and one using gpspipe -w 192.168.90.1 to query the data.
GPSD listens on port 2947 and I want to block it with iptables. I've tried so many rules, but I can ...
0
votes
1
answer
29
views
How to protect tftp server on pc?
I run ubuntu, and I've installed tftp-hpa on my system. I've read that I need to secure my network when I have tftp. Here what I'm talking about and I would like to know the steps to do what they ...
0
votes
0
answers
23
views
HTTP tunnel proxy solutions to escape corporate proxy & firewall
I have a system in a corporate network with a very restrive firewall:
no SSH
only direct traffic allowed is to the corporate HTTP proxy server (80/443)
Deep Packet Inspection
I would like to setup a ...
0
votes
0
answers
17
views
PFSense: Subnet can not communicate to the outside
I have multiple subnets on a hypervisor with four Ethernet ports. Two are called subnets. Both of them are utilizing a NordVPN tunnel as their default gateway.
The first subnet LAN can talk to ...
0
votes
0
answers
25
views
Can Multiple Devices use the same VPN Tunnel IP?
I have a Cybera Firewall device that has a VPN Tunnel IP that Verifone uses to connect to the firewall to configure the Verifone Commander for Help Desk reasons. Can I use that same tunnel IP to have ...
0
votes
1
answer
57
views
Cannot reach domain via HTTPS on the same server behind a PfSense Firewall
I am hosting a platform on a server which has multiple domain names, let's say example.com and anotherexample.com. I am running a Spring Boot backend on that server, which uses the domain example.com ...
0
votes
0
answers
28
views
Zywall ATP - Access Forward but no answer through VPN
I'm looking for a solution to my problem but all my tests have failed.
Basically, I want to reach a device (10.200.195.70) on a subnet (10.200.195.0/24) via my VPN (10.200.200.0/24).
If I connect my ...
0
votes
1
answer
146
views
Traceroute using UDP instead of ICMP?
I am playing a game named "Planetside 2" and since a few days many users including me have high ping issues on a specific server, while others have not.
Therefore I wanted to try to ...
1
vote
0
answers
79
views
Which ports to open on the firewall for this FTP client connection?
I'm using for the first time today https://github.com/veeso/suppaftp and I'm super happy.
On my local machine everything works.
On production machine it does not.
On production machine there is a ...
0
votes
0
answers
45
views
Cannot access PC from Internet via IPv6
I am trying to make my computer accessible from the internet for SSH via IPv6. Unfortunately, nothing I tried so far has worked:
The PC is running Windows 11, 23H2
I can use the IPv6 address (from ...
0
votes
1
answer
37
views
routing traffic using iptables and l2tp
Internet restrictions in my country have essentially made it impossible for VPNs to work.
As such, I wanted to circumvent this issue by using the following method.
Although "residential" ...
0
votes
1
answer
30
views
docker container reachable despite firewall denying incoming traffic
I am in the process of setting up a VPS to run a few docker packages.
The firewall set up to block any incoming traffic (default) just allowing anything that comes in via Wireguard VPN.
Still the ...
-1
votes
1
answer
44
views
Turn on Windows Firewall false notification on boot
For months now, everytime i boot my laptop, i get a false notification to turn on Windows Firewall that is already on
This is so annoying and windows doesn't give an option for this specific ...
0
votes
0
answers
115
views
OPNSense OpenVPN Site to Site VPN unable to reach internal networks
I've been pulling my hair out setting up a site to site vpn with OPNSense.
I followed the official guide with one exception, I'm using certificates.
And I saw in a video that the interfaces created by ...
0
votes
0
answers
42
views
Allow connection to modem dashboard in pf firewall
I am using Murus to manage the rules of my macos pf firewall.
My approach is to block everything by default and allow only what I need. This has worked well so far, with one exception: I cannot seem ...
0
votes
1
answer
78
views
How to get through restrictions blocking OpenVPN?
I have recently set up a VPN server on my desktop at home in the hopes I can connect to it while at the university from my laptop. I have confirmed that I can connect easily on a mobile data hotspot, ...
-4
votes
1
answer
49
views
Block youtube.com via `iptables`
For productivity reasons, I want to block access to YouTube.
What I have tried. I started by running:
dig A youtube.com +short
and then feeding the resulting address(es) to
sudo iptables -A OUTPUT -...
0
votes
1
answer
52
views
I have 3 router but devices in the local network does not communicate with each other
First router (195.105.1.1) is the one that was provided by ISP and we have 2 other routers. Both are connected to ISP router. Second router (195.105.1.2) has a local network which is 165.18.0.010. ...
0
votes
0
answers
23
views
Remote connection to software not working when UWF is enabled due to firewall
I'm running Windows 10 Enterprise LTSC (version 10.0.17763). I've setup everything I need and I'm configuring UWF filters. I enabled protection for C: volume, and added a couple of exclusions for:
...
0
votes
0
answers
20
views
Firewall incoming packets are dropped with VLAN configuration
In my Windows PC, installed scapy tool for sending packets from my system to raspberry Pi board connected to my machine using VLAN.
In my raspberry Pi board, Firewall rules are already configured and ...
0
votes
2
answers
97
views
Dedicated Ip Address using vpn connection
I am a newbie in Network connections and I developing an application that needs to connect to a Server "Y", the connection is allowed just for an specific IP through the firewall, this IP ...
0
votes
0
answers
37
views
Knockd not executing the knock command
I am trying to setup knock daemon, however it does not seem to execute the knock command. To debug the issue, I used this simple configuration, which is slightly edited example from the documentation:
...
0
votes
0
answers
85
views
How do I block range of incoming IPs in Windows Advanced Firewall
On Windows Server 2022 I am trying to block an IP range from
168.228.0.0 to 168.228.0.255
So having researched I came up with this:
168.228.0.0/16
However I am still getting DNS queries from random IP'...
1
vote
1
answer
181
views
IPTables rules and networking with problems 2
My plan is to have a computer that forwards all traffic from internal interface ens19 to openvpn-interface tun0. The system has 2 physical interfaces: ens18 for local network with Internet connection ...
0
votes
1
answer
405
views
Docker timeout port 53 - ISP to blame?
I'm running a Synology NAS with docker and used to have multiple containers running perfectly fine for months. Last week I switched ISP and use their router to connect to the internet. Since then my ...
1
vote
1
answer
179
views
Unable to open port on debian vps
Trying to open 51820 UDP
I do
iptables -A INPUT -p udp --dport 51820 -j ACCEPT
then iptables -L
I can see
ACCEPT udp -- anywhere anywhere udp dpt:51820
then I do
/sbin/...
0
votes
0
answers
73
views
Singe NIC Router/Gateway and DHCP server bootps safe with WAN access?
I have my Pi running debian acting as a DHCP/DNS server, I want to enable it as a gateway/router for NAT loopback/hairpinning to enable the public IP to be resolvable within the LAN which my default ...
1
vote
1
answer
126
views
how fast a firewall/DPI system can find an ssh server IP on a random port [closed]
Sniffing SSH traffic on port 22 to determine the server IP address should not be hard for any firewalls/DPI systems.
I am wondering if the port is random thus we have around 60k possibilities, how (...
0
votes
0
answers
39
views
UFW not filtering FORWARD traffic on same (tun0) interface
I have an Ubuntu 22.04 server with OpenVPN running and I want to filter access between clients on the tun0 interface with UFW.
As far as I know this all has to do with the FORWARDING chain within UFW.
...
1
vote
0
answers
45
views
Force Chrome to open localhost sites only
I want to use Chrome for development only and FireFox for all the other stuff. Is it possible to prevent Chrome from going to the internet completely and open only sites from localhost?
0
votes
0
answers
72
views
VoIP phone not working for outgoing calls
I am trying to set up a VoIP phone hosted by Zadarma.
I am using a Grandstream HT801 ATA that is connected via ethernet to a TP-LINK Deco M4R mesh system.
The ATA is successfully registering the phone ...
0
votes
0
answers
115
views
Can't share Wi-Fi connection over Ethernet with both the firewall and overlay filesystem on
I've configured my Raspberry Pi 4B to automatically connect to Wi-Fi and share its Internet connection to the ethernet port using NetworkManager.
This works so long as:
the firewall (UFW) is off OR
...
1
vote
1
answer
481
views
Windows 10 - Firewall - Outbound rule to allow access for one service hosted by svchost.exe
Initial question
Today, I'm stuck with a Windows Firewall problem and I hope you can help me.
I'm trying to create rules dedicated to services but I can't make them match.
I found some related topics ...
0
votes
2
answers
95
views
Is my home network being attacked?
I started to learn about network security and firewalls. My network is very simple, I have a router (MikroTik) and my laptop is connected to it via WLAN. The router has following (default) firewall ...
0
votes
1
answer
144
views
How to allow Microsoft OneNote in Windows Firewall?
I have a Windows Firewall set to block all outbound connections by default. I want to allow OneNote to go through.
Currently, I have these firewall process rules:
%ProgramFiles%\Microsoft Office\root\...
0
votes
0
answers
23
views
Iptable rules through two firewalls for an rdp connection
Suppose I have a network topology similar to the one above, if i wanted to rdp into a host on the private network from home these are the following iptable rules i have:
Firewall 1:
$IPT -t nat -A ...
-1
votes
1
answer
261
views
IPtables dropping packets I can't see with tcpdump and I don't know why?
My IPtables rules are blocking apt update for example:
root@vpn:~# apt update
Ign:1 https://pkgs.tailscale.com/stable/ubuntu jammy InRelease
Ign:2 http://de.archive.ubuntu.com/ubuntu jammy InRelease
...
0
votes
0
answers
31
views
Firewall detects strange ip's (hosts) in the network
I need your suggestion.
My router antispoofing detects and blocks the ip's like: 10.211.87.139; 10.209.198.166; 10.25.59.222. I'm not using these subnets, I tried to set my adater as static with given ...
0
votes
1
answer
443
views
FTP access blocked despite rule opened
I am setting up FTP service on a Win 11 Pro machine. I enabled the FTP rules in Windows Defender Firewall as below:
However, on a neighboring PC, I couldn't telnet to port 21. But if I shut down the ...
0
votes
0
answers
135
views
Can't access remote port 81 despite netstat showing it bound
I have an apache server with multiple VirtualHosts filtered by the ServerName directive. I am now attempting to have a VirtualHost filtered based a seperate port number, but am having issues.
My ...
0
votes
0
answers
81
views
Home Network - Port open, Firewall rule set - still unable to connect
I'm trying to setup a Minecraft Server for the Kids to play on and ensure no adults can interact with them.
I followed the tutorial on how to install it and it seems to be up and running. I just can'...
0
votes
0
answers
12
views
Windows Defender Firewall blocking Windows Defender Antivirus updates [duplicate]
I want to use Windows Defender Firewall to block outbound connections. I've configured it to block outbound connections and added a rule to allow the browsers (i.e. allow-list). However Windows ...
0
votes
1
answer
116
views
IPTables rules and networking with problems
I'm using a Fritzbox for normal network and an own installed Router on rpi3 for an own network with openvpn, dnsmasq and iptables. Over the last few years the setup worked good. You can find the ...
0
votes
1
answer
66
views
PaloAlto FW behind two consumer routers cannot reach internet
I'm doing initial setup of a PaloAlto PA-440 firewall at home before I overhaul my LAN but can't get the FW to access the internet to download licenses and updates. What should I look at/change on the ...
1
vote
1
answer
153
views
Missing Parameters in PowerShell Firewall Outbound Rule Command
I have an existing Outbound Rule in my firewall with a set of specified IP addresses. For enhanced security, I want to append additional IP addresses to this rule using a shell script. I am trying to ...
0
votes
1
answer
172
views
Internet connection activ only after restart of nftables
I configured a DIY Debian-based router without DHCP and DNS server.
MY PROBLEM:
When I switch on the router and the system boots, the Internet connection on clients becomes available for 4 -5seconds (...
0
votes
2
answers
91
views
Transferring a working slackware router/firewall to ubuntu 20.04 - netplan configuration problems
I obtained my original slackware linux on 19 3.5" floppy disks in the days when CDROMs didn't exist and have been maintaining and upggrading via text terminal ever since.
A recent thunderstorm ...
0
votes
0
answers
926
views
windows 11 firewall not opening ports
I have this strange problem. I searched the forums for a week and everywhere i get the same suggestions i tried already or just not the same problem. If i missed one, please let me know.
I have ...
1
vote
0
answers
59
views
firewall vs Soap (electronic billing API)
This is a complex question since it includes configuration and programming at the same time, but neither Sophos support nor the electronic billing service (consumer API) have given me an answer.
...