Questions tagged [firewall]
Software that controls what connections can be made to and from a network.
2,341
questions
0
votes
2
answers
24
views
Could in-place upgrade of Server 2012 to 2019 affect firewall rules or IIS sites?
An application I support has been installed on Windows Server 2012. The server is to be upgraded to Server 2019 in an in-place upgrade. This is to be done without being tested first.
The application ...
- 121
0
votes
0
answers
10
views
RDP credential were use to connect did not work, please enter new credential [closed]
Last 2 weeks i have been facing remote desktop connection problem. I am new in AWS.
A few day back, I had received an account suspension mail because of payment due. I made all the payment done. Now i ...
- 1
0
votes
0
answers
24
views
Synology NAS not accessible remotely after move. Possible firewall issue?
I am a remote administrator for a client who recently moved physical office locations. I'm having an issue with reconnecting back into the Synology NAS that they use for file store. From what they've ...
0
votes
0
answers
37
views
pfsense - slow connection to internet from wired network but not from wireless/wifi
summary: internet speed tests indicate that the connection to the internet from my wired network is very slow, while speed tests from a device on my wifi network gets the expected (much faster) result....
0
votes
0
answers
22
views
Where are Windows 7 Firewall custom rules stored?
First of all, I know about the existing answers to the question. They mentioned three places in the system registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall
...\SYSTEM\...
- 177
0
votes
0
answers
14
views
Why can't I RDP into my devices behind my router with my wireguard tunnel up
My network setup was working, until I realized that my understanding of the firewall requirements for this assignment (class project) were off and need to alter things. With my new configuration of ...
0
votes
0
answers
21
views
autapf port forwarding tool - UDP port forwarding
We're using NetworkActiv AUTAPF 2.2.6 tool on Windows 11 PC to setup a TFTP server on windows PC.
The configuration are as follows:
We're seeing timeout errors on our system with this setup as ...
- 103
0
votes
1
answer
16
views
IPtables does'nt apply this rule
I got many rules like this :
#!/bin/sh
modprobe ip_conntrack
# Initialiser les tables
iptables -t filter -F
#Vider les règles custom
iptables -t filter -X
#Interdire toutes les connexions entrante ...
- 101
0
votes
1
answer
31
views
Proper path for client's "Local Group Policy" in PS' NetSecurity module
So, by default default, Windows client OSes (and servers too, to a degree) have 2 default Windows Firewall policies: weird local firewall and local group policy. In netsh you can easily switch between ...
- 1
0
votes
0
answers
24
views
Debian with VPN and firewall blocking web traffic
I have a VPN (IKEv2) set up on a Debian VM. I'm trying create a kill switch to stop all traffic when the VPN goes down. I've followed the guidance of this post.
It seems to work fairly well (torrent ...
- 111
1
vote
1
answer
24
views
Computer not pinging from the internet
I am trying to set up DDNS for my machine and it works for the most part. And, I would like to remotely ping to the machine. Now, the DDNS is configured properly and it is taking the IP refresh ...
- 11
0
votes
0
answers
16
views
Send custom/malformed DNS request
The CTF is over now, but there was a CTF called NahamCon (link) that I was playing earlier. There was a challenge that I was certainly interested in but didn't know how to do:
screenshot
I understood ...
- 1
0
votes
0
answers
13
views
Windows Cloud PC Cannot change Windows Defender Firewall default behaviour for outbound connections
I'm trying to set the properties of Windows Firewall to Block outbound connections via Windows Defender Firewall with Advanced Security. This machine is a Windows Cloud PC that is provisioned with ...
- 1
0
votes
1
answer
36
views
Terrible Windows iperf performance
I'm having a weird issue that's totally stumping me. The performance of 10G ethernet on my Windows computer is poor in the incoming direction from one computer, and exceptionally poor from another. ...
- 1,602
0
votes
0
answers
20
views
Need to run determine whether I can reach FTP server, through firewall?
I have an ftp server on a cloud VPS instance. The IP can be obtained from a domain like myvps.example.com.
I would need to run a powershell script across a variety of computers that are sitting behind ...
- 1
0
votes
1
answer
24
views
Can my vps provider see that I'm using a vpn service on my vps?
If so can I know, how do they do it? I contacted the CS and they said that they use something like NextGen firewall and AI to detect these actions. I want to know more about this but cant seem to find ...
0
votes
0
answers
30
views
Should iptables block RST packets for a websocket connection?
I have the following setup for offloading SSL and running home assistant :
Raspberry pi A (model 3, 10.0.0.21 below) is running apache2, NextCloud and iptables.
Raspberry pi B (model 1, 10.0.0.69 ...
- 101
0
votes
1
answer
21
views
SMB2 port range? Port 64663?
I'm copying files via the program Bvckup to a windows share.
From a wireshark capture, I see that the operation uses TCP port 445 and SMB2 port 64663.
I want to make a firewall rule, but I am ...
- 251
0
votes
0
answers
39
views
Is it possible to restrict client-to-client communication on a switch?
I have a linux machine acting as a router with a wifi interface (hostapd) and multiple ethernet interfaces bridged together. I want to add multiple smart home devices to the network.
What I am trying ...
- 13
0
votes
0
answers
36
views
I cant open port on my router to make my computer app public
I use windows10
I already open port on my router admin page (Advanced Port Forwarding).
Windows firewall Disabled
Even if i setup DMZ Address for my LAN 192.168.0.12 my public address not works.
I ...
- 101
0
votes
0
answers
156
views
iptables v1.8.7 (legacy): unknown option "--to-ports"
I am trying in libreelec, that all traffic is redirected to a docker with tor and privoxy, the problem that when entering the iptables rule returns "iptables v1.8.7 (legacy): unknown option "...
- 9
0
votes
0
answers
21
views
FortiGuard firewall strange behavior/trying to bypass
(Excuse me for the non-technical terms, my Knowledge isn't the Greatest)
Context:
I'm an engineering student and I stay in the dormitory of my university
Lets just say that the network isn't the ...
- 1
0
votes
0
answers
18
views
Can't clone a remote repo when ufw is enabled
I have a cloud VM running alpine3.15 [disk mode enabled] and I am able to clone/push/pull to github when ufw is off. However when it is on, all git commands that talk to github get stuck (no output)
I ...
- 101
0
votes
1
answer
24
views
Ansible UFW allow outgoing, deny incoming
try to roll out UFW via Ansible.
- name: Install UFW Firwall
hosts: all
tasks:
- name: UFW enabled
community.general.ufw:
state: "enabled"
policy: "deny&...
- 161
2
votes
1
answer
80
views
Does DNS over HTTPS work in China?
DNS over HTTPS is a new technology that encrypts your DNS lookups, so that your ISP cannot see what domain names you are trying to visit. Firefox enabled it by default for me yesterday. I would like ...
- 23
0
votes
0
answers
35
views
Strange issue with downloading from Google servers
Really strange that i'm not sure how to explain.
I've been experiencing this for a really long time but mostly didn't cared or tried another ways but now i really want to solve this.
I'm using Firefox ...
0
votes
1
answer
29
views
How do I configure the firwall to open all ports to a certain zone?
I created a virtual machine via qemu/kvm on my machine.
The NIC name of this virtual machine is virbr0, and it is managed by the libvirt area of the firewall:
$ sudo firewall-cmd --zone=libvirt --list-...
- 101
0
votes
2
answers
22
views
What's the point of a default gateway?
Maybe there's something I'm misunderstanding fundamentally, but this just isn't clicking.
I deal with networks that look like (Router > Firewall > Switch > Hosts) with a few port forwarding ...
- 1
1
vote
1
answer
84
views
Add a IP to another rule matching hex in iptables linux
iptables -t raw -A PREROUTING -p udp --dport 4578 -m string --hex-string '|fefffffffffffffffff77f12|'
How can I whitelist the IP having the above hexx string automatically on Iptables.
I'll be ...
- 15
0
votes
1
answer
195
views
Port forwarding and IPv6
I have a basic small server that I run on my own computer, which I can access
like this:
localhost:3000
However I would also like to access the server from outside my home, for example
using my phone ...
- 1
0
votes
0
answers
33
views
UDP packets dropped with `ctstate=INVALID`, but meanwhile its connection `[ASSURED]` in conntrack list
I have my router connecting to a remote VPS as so-called 'VPN' that is based on UDP protocol, then the VPS traffic slows down in few seconds after a new reboot.
I can see a huge amount of incoming ...
- 1
1
vote
2
answers
35
views
Nftables firewall rule hex value 0x1fff changed to decimal 8191
I started the process of migrating into nftables, just noticed that while I add this rule
add rule netdev filter INGRESS ip frag-off & 0x1fff != 0 counter drop
should look like this in nftables....
- 13
0
votes
1
answer
20
views
iptables firewall whitelisting limit
We have a distributed system with many clients connecting to this system.
We want the server to be isolated so that only client machines can connect.
We are using IPTables as follow:
/sbin/iptables -A ...
- 1
0
votes
1
answer
14
views
allow firewall after first time disallow
I'm using win10 with UAC enabled, typically this is my working laptop so cannot disable UAC.
When download a exe or jar, try to execute it, sometimes windows firewall will prompt whether allow or not ...
- 101
0
votes
1
answer
75
views
Relay TCP upload traffic and make download traffic go directly to the client
This is a supplement for iptables SNAT for UDP rule is only applied to some traffic
In fact, I have three machines:
the client
the target server
the relay server
What's my motivation for doing this?
...
- 13
0
votes
1
answer
100
views
iptables SNAT for UDP rule is only applied to some traffic
I want to use Source NAT to change the local IP address of UDP traffic. However, only locally-generated traffic has the NAT rule applied, replies to traffic generated from remote sources do not have ...
- 13
0
votes
0
answers
39
views
How do I remotely connect to my home network which is behind a firewall that is connected to a VPN provider?
I apologize if this is a duplicate question, feel free to direct me to an existing answer. I don't know the terminology so I don't think I recognize the answer if it's out there.
I'd like to be able ...
0
votes
1
answer
53
views
How can I check if firewall is blocking ping from machine belonging to a specific subnet on Linux CentOS7?
I am not a system engineer (I am a software developer) and I have the following problem.
I have this Linux CentOS 7 server. A collegue told me that he can't ping this server from some specific machine ...
- 6,539
0
votes
1
answer
23
views
How do you configure firewall to map ports outside to a device inside lan?
Using TPLink omada sdn controller, I wanna map remote desktop connection 3389 on my home computer (uses a fixed IP address) to port 4000 on the WAN interface...
Cant seem to figure out how to do this
- 274
0
votes
1
answer
227
views
Enable access to host service with ubuntu firewall from docker container
I have a service running on a host at port 8545. I have several docker containers which need access to this service on the host. The host is running ubuntu. I've successfully configured
extra_hosts:
- ...
2
votes
2
answers
131
views
Bridge-Mode to prevent double NAT/Firewall advantages?
In my network I currently have a cable connection with an ISP provided (consumer grade) modem/router combo device. Behind this modem there is a pfSense box. The pfSense box is acting as firewall and ...
- 123
-1
votes
2
answers
38
views
What is the correct term for "secondary IP addresses" handled by a firewall's primary interface?
I have an aging and now-unsupported "ProSAFE" VPN firewall running defense around a /28 block of public IP addresses leased to us by our datacenter. Our WAN drop is a single ethernet cable. ...
1
vote
1
answer
82
views
Allowing ICMP (ping) incoming packets in Windows 11 firewall
I noticed Windows 11 doesn't let ICMP packets through by default. The network needs to be assigned to a non public network and the appropriate firewall rules have to be activated. I found the ...
- 7,619
0
votes
0
answers
15
views
Using host & iptables as bastion before mongoDB
I am trying to setup a config on a "bastion/NAT" host.
I have 2 mongoDB host, which are behind firewall, my bastion and a set of clients.
my bastion has main IP: 10.198.24.10 and 2 aliases: ...
0
votes
0
answers
87
views
OPNsense system to replace Router
I'm planning on building a system to replace my current router and want to use OPNsense. This will work right? Ask because it says firewall on website but also routing, so must be a router.
Hardware:
...
- 1
0
votes
0
answers
24
views
How do I filter inbound/outbound traffic based on words?
I need to filter some outbound requests to certain sites based on the request headers and post data. I might be interested in filtering inbound packets as well.
They are in plain text (ie not https).
...
- 826
2
votes
2
answers
627
views
How do you properly allow two devices on separate subnets to communicate (PFSense)?
I'm trying to figure out how to get 192.168.0.22 to properly ping/be able to transfer files with 192.168.77.10. Firstly, is this a dumb setup? I'm mainly using it right now just for educational ...
- 43
0
votes
1
answer
36
views
Command Prompt to Enable ports in Windows Firewall
I was experimenting and was not able to find an way to enable rules/ports under Inbound Rules in Windows Firewall.
Every thing I've tried so far only shows or creates something new such as this
netsh ...
0
votes
1
answer
67
views
How can Windows Firewall be used to further increase security in Windows 10, would it be by blocking particular ports?
How can Windows Firewall be used beyond it being turned on, to increase security of a Windows 10 Home PC, would it be best to use the firewall to block these ports?
I would like it to be as secure as ...
- 77
-1
votes
0
answers
189
views
Mikrotik setup firewall rules for NAT
I read through similar questions here but I did not find the right answer.
I've just bought a Mikrotik hap ac2 router to learn its configuration, and tried to set up NAT. It seems to be working ...
- 1