Tag Info

Hot answers tagged

3

netsh can be used to configure the Windows firewall. In particular netsh advfirewall ... Example, from Top 10: Windows Firewall Netsh Commands Enable and delete a port: One of the most common things you need to do with Windows Firewall is open ports that are used by different programs. The following examples show how to use netsh to create a rule to ...


2

You would use multiple firewalls side-by-side for redundancy. If one dies, the other takes over. See OpenBSD's CARP protocol for open source implementation. You would use multiple tiers of firewalls because the computers on your network demand different levels of access control. For example, let anyone access your web servers. Only let web servers access ...


1

You will probably have to enable the TCP or UDP port 1883 in Windows Firewall with Advanced Security which is found in Control Panel among Administrative Tools. Add an In-bound rule on the PC where the service runs to allow the incoming requests to 1883 to pass through the firewall.


1

Connectivity may be blocked by Windows Firewall or other third-party firewall software, including a firewall component that might be part of some antivirus software. If it is being blocked by the Microsoft Windows Firewall software, you can open the port using a netsh advfirewall command. From an admin command prompt, you could issue the command below (put ...


1

Try this script, inspired by Dan's comment: #!/bin/bash iptables -I INPUT -s $1 -j DROP at ${2:-now+1hour} <<<"iptables -D INPUT -s $1 -j DROP" Save it as /usr/local/sbin/blockip and run blockip 1.2.3.4 or blockip 1.2.3.4 now+2hours. By default the IP is blocked for 1 hour. You can replace DROP with REJECT if you prefer REJECT semantics.


1

going from 127.0.0.1 to whatever goes through FORWARD Locally you may have to add: iptables -I FORWARD 1 -p tcp -m tcp --dport 1000 -j DROP


1

What is the advantage of having multiple tiers of firewalls? Why do people who live in gated communities lock their front doors, and also their safes?  Because an attacker might find a vulnerability in one defense that allows him to penetrate the corresponding layer.  If you put up a sequence of barriers, that may make it harder for an attacker to ...


1

set tcp-portrange 0 is specific for FortiOS and denotes 'any' port. FortiOS often uses the single zero as a token for 'any'.


1

While the laptop might be ultra-low power, you should consider just picking up a refurbished SFF PC like a Core2Duo. Look for something made within the last 5 years as it's more likely to have good "idle" power saving levels. Your firewall will spend a lot of time idle. You can pickup refurb boxes from NewEgg/Amazon for $60-$100, plus a NIC for another ...


1

A paid option is Little Snitch (€29.95), a network monitor for OS X.


1

This should not be an issue, once you set up your router/firewall to port forward the database to your internal database server. What'll happen when local machine try to connect to data.ddd.com, is that it'll in effect try to connect to its own gateway, which should then forward the requests back to the database server. One caveat is that it is easy to ...


1

What you are missing is a local DNS service. It is quite likely that you router (which I suspect is currently dealing out the ggg.local stuff) may not be able to do this so you would need something to run a DNS on.


1

I see two possible solutions. The first is that you put the data.ddd.com A record in your local DNS server configuration. This is assuming you have a DNS server that you can configure. Unfortunately this is not the case for most soho routers. The second options is to add data.ddd.com to your local hosts file. In both solutions you point data.ddd.com to the ...


1

This can done using netsh. From Stack Overflow answer port forwarding in windows by user1256477 To add forwarding: netsh interface portproxy add v4tov4 listenport=4422 listenaddress=192.168.1.111 connectport=80 connectaddress=192.168.0.33 To remove forwarding: netsh interface portproxy delete v4tov4 listenport=4422 listenaddress=192.168.1.111 ...



Only top voted, non community-wiki answers of a minimum length are eligible