Questions tagged [firewall]
Software that controls what connections can be made to and from a network.
2,428
questions
2
votes
1
answer
40
views
Disable content-type detection for CSS types in Firefox
Background
When connected to the corporate network, certain firewall rules are changing the content type of CSS files from text/css to text/html.
Problem
Changing the media type for CSS files to HTML ...
1
vote
0
answers
34
views
nftables: How to stop further chain traversal after accept verdict
Context : https://wiki.nftables.org/wiki-nftables/index.php/Configuring_chains
If a packet is accepted and there is another chain, bearing the same hook type and with a later priority, then the packet ...
0
votes
1
answer
17
views
Excessive VRRP packets getting to my home router
I am calling them excessive, because they fill up the firewall log file in 1 minute.
This router was provided to me by my ISP, and I cannot control the firewall rules that allow or block ...
1
vote
0
answers
18
views
Kali Linux takes way too long to load the GUI after entering the password? IPTABLES
After entering the passward to login, it takes way too long to load GUI.
I think the issue is with the firewall, when I enable it the GUI loads way two long to load. More than a minute, if it's ...
0
votes
0
answers
30
views
pfSense: How to set OpenVPN client as default gateway for just one interface?
I have two LAN interfaces, 192.168.2.1 and .31.1 on my pfSense VM, with VLAN ID 2 and 31, and two WAN interfaces, one to my ISP and another an OpenVPN client to PIA.
I've set the default firewall &...
3
votes
2
answers
313
views
Can I safely disable a firewall rule added by Visual Studio Code?
I am starting web development on Visual Studio Code, and I'm using Live Server to test the resulting pages on my browser. I want also to test using my mobile phone connected on the same private ...
1
vote
1
answer
74
views
My Ports are always Occupied and no Software Shows why (netstat, TCPView)
I have this frustrating Problem that my programs cannot connect to their designated Ports.
I'm using a windows 10 machine and this is how my problem goes:
I open a software which needs port 5053 or ...
0
votes
2
answers
57
views
How to interpret Open | Filtered status of port scan?
I have Softether VPN server running on Windows 10 PC. My ISP offers me CGNAT (IP4) and GUA (IP6).
I have configured it to accept L2TP Ipsec with preshared key.
Now I am checking the open port status ...
1
vote
0
answers
25
views
SSH-ing into the VPN server you are connected to
I have a server running Ubuntu 22.04 that has an Outline VPN service on port 443 (x.x.x.x). I'm trying to SSH into that server (x.x.x.x) while connected to the VPN (x.x.x.x) on Mac. image
I have tried ...
1
vote
1
answer
30
views
Force close port 22 (ssh) on GCP VM
For security reasons, I want to close port 22 (ssh) of my VM that is on GCP.
Currently, if I execute the command telnet xx.xx.xxx.xxx 22 the server responds to me:
Trying xx.xx.xxx.xxx...
Connected to ...
0
votes
1
answer
44
views
How to send back TCP packets using iptables
I am trying to demonstrate TCP communication with a Ubuntu 18.04 box (which mocks a QNX setup) that does not have a listener installed. Consider that due to some license issues it might not be ...
0
votes
0
answers
45
views
Mac OS - How to disable pf on boot
So, after months of hunting to work out why Private Relay isn't working, I eventually tracked it down to the fact that pf is running. When I disable pf with sudo pfctl -d then private relay becomes ...
0
votes
0
answers
28
views
Inbound Port Forwarding From One LAN To Another Via OpenVPN Tunnel (PFSense On Both Sides)
I am going to do my best to explain this. Hopefully this isn't too confusing.
Networks (IPs are EXAMPLES and are not actually mine).
There is a site to site OpenVPN connection setup between Site Alpha ...
0
votes
1
answer
17
views
Configuring nftable firewall for one way packet traffic
Hello I'm a beginner in configuring firewall, but what I want to do is to allow the host a (10.1.0.2) to send packet to host b (10.12.0.10) but that b cannot send packet to a. both machine are ...
0
votes
1
answer
21
views
Defining Inbound and Oubound Policies in Windows Firewall,AV Firewall
In Windows Firewall we define Inbound & Outbound Policies for Web, Network, etc. access as we have separate settings for the same...The same if taken in an AV Firewall for example in Quick Heal ...
0
votes
1
answer
49
views
nftables: isolate VLANs with some exceptions
Say there is a custom router (a Raspberry Pi box) with Debian 11 and nftables installed, with a single physical Ethernet inferface and the following VLANs configured:
eth0.501 192.168.41.0/24 CCTV ...
0
votes
0
answers
79
views
How can I create a firewalld rule that allow SSH connection only from a specific IP address?
I am not a system engineer or a network expert (I am more a software developer) and I have the following problem that I have to solve related IPTABLES firewall.
I have n Linux machines that must ...
0
votes
1
answer
52
views
How to do redundancy in this topology (isp and firewall)
behind an ISP router, I did setup a firewall that includes (DHCP server, Squid, ClamAV, Light Squid, Snort, Port Forwarding, and OpenVPN), linked to an ethernet switch.
3 PCs, VoIP server(static ...
0
votes
1
answer
51
views
Sophos UTM virtual appliance VM in DMZ
How safe would it be for a 'VM' Virtual Appliance UTM Sophos Firewall to be in DMZ. Can its security get compromised while the VM is in DMZ.. Im planning on such a setup for VPN access and certain ...
1
vote
1
answer
91
views
Pfsense web interface : 404 pages not found
I'm using a Pfsense as a home firewall, I set it up some month before and it worked perfectly.
Now that I need to open a new port I connect to https://pfsenseip as usual, but this time the result is ...
0
votes
0
answers
34
views
How can I add an outbound rule by windows advanced sercurity firewall on Windows 11?
I wan to add a outbound rule by windows advanced sercurity firewall to block the C:\Users\me\AppData\Local\Microsoft\WindowsApps\ogh.exe so that I can use ogh.exe offline. but when I do that, it can't ...
0
votes
0
answers
44
views
Cannot connect to an email server from a home Wi-Fi
First off, I'm not entirely sure this is the right Stack page to post this into, but hopefully, I'll be redirected to the proper page if not.
A friend of mine had problems connecting to an email ...
1
vote
0
answers
132
views
Can't access my Node.js server with external IP address
Here are the steps I've gone through to setup my server.
I've bought an Orange Pi 5, installed Debian from their website and started to configure it.
I ordered static IP address and in Firewall/...
0
votes
0
answers
23
views
DNAT web server behind double firewall
I have this topology and I want to access my webserver that's located behind the internal firewall
sophos WAN : 213.x.x.75
sophos LAN : 172.16.0.2/24
Pfsense WAN : 172.16.0.1/24
pfsense LAN : 192.168....
0
votes
1
answer
130
views
Wifi VLAN tagging through wifi extenders
This is my current setup: https://www.reddit.com/r/HomeNetworking/comments/11t7j1u/new_home_network_layout_help_firewall_switch/
Where I have a switch that manages the VLANs, and after that, my main ...
0
votes
1
answer
16
views
Streaming data and firewall on Chromebook Linux
I'm trying to use a custom python app that needs to expose a port (5000) on my Google chromebook and it's not working. The python package is python-osc. How do I check if a firewall in Linux is ...
-1
votes
1
answer
60
views
Modifying Windows Firewall to send ICMP unreachable
Can I modify my windows Firewall to send ICMP unreachable rather than drop packets? or this is something that is not available in MS windows.
0
votes
1
answer
119
views
Should Shell Infrastructure Host (sihost.exe) be accessing the internet?
Shell Infrastructure Host (sihost.exe) is causing a Defender firewall dialog to appear requesting internet access and I am curious as to whether Shell Infrastructure Host should be accessing the ...
0
votes
1
answer
33
views
tcpdump shows traffic even for down interface
Using Debian Buster and having configured VLAN interface online, I wonder that tcpdump shows any traffic send to the external IP address?
Having a server on Hetzner and want to configure VLAN traffic ...
0
votes
0
answers
33
views
Nftables exits with "Killed" when trying to update a set with a huge list of ips
I have a huge list of IPs (about 300 000) I want to put into a nftables set (to use with pbr on openwrt). Currently what I am doing is directly executing add element with all the IPs, but nftables ...
0
votes
0
answers
72
views
Can I use VLANs (or virtual interfaces) to create a firewall on single pysical interface?
As my router/gateway to the internet I have an (NB6) SFR-provided, very barebones wifi router. I have to use this to connect to the internet, for auth reasons. This facilitates a mandated 192.168.1.0/...
0
votes
0
answers
267
views
Where to find the firewall settings on my Netgear Nighthawk router?
I just bought a Netgear WiFi router. I'm trying to find where on this I can set the firewall settings, but I have so far failed.
The admin screen has no obvious place for adjusting firewall settings, ...
0
votes
0
answers
26
views
Is it possible to connect to remote 465 via own 443 port?
I have asked this question and am opening a new question as per SE policy.
The remote SMTP server can be connected to via its own 465 port.
However, I want to reach that server via a cloud server. ...
0
votes
1
answer
95
views
Get static public IP from a VPS
I'm attempting to assign static public IP addresses directly to my OPNsense box on a local network. My VPS provides me with four IP addresses:
ens4 1.1.1.1
ens4:1 2.2.2.2
ens4:2 3.3.3.3
ens4:3 4.4.4.4
...
0
votes
1
answer
114
views
How do I detect if my firewall is blocking certain ports
On my laptop i do:
openssl s_client -connect w00d8dd4.kasserver.com:465
I can see that the connection works. I can also do :
telnet w00d8dd4.kasserver.com 465
Also no problem.
Now, if I log in to ...
1
vote
3
answers
221
views
How to open LAN port to just one external WAN ip address?
How do I configure my home LAN router (D-Link Dir-882) to accept communication to a LAN IP&port just from one specific WAN IP address only?
More detailed;
I have a port open on my DIR-882 Home ...
0
votes
0
answers
65
views
"Connection not secure" error occurs when I visit websites outside the firewall in VM
I want to transfer packet flow in virtual machine to the host proxy, because my host can visit websites outside the firewall by proxy settings.
Settings on Windows:
I download clash for windows and ...
0
votes
1
answer
179
views
Blocking an ip with netsh
I know that netsh advfirewall firewall add rule name="name" dir=out remoteip=%IP% protocol=TCP action=block
blocks the IP, and we can find the IP by simply pinging it.
I used to use it to ...
1
vote
0
answers
245
views
Allow a QEMU VM access to the internet, while blocking access to LAN
Host OS: Arch linux
I have read the qemu and libvirt documentation regarding networking but still cannot get this to work. I am trying to set up a Linux virtual machine for general use that has access ...
0
votes
1
answer
111
views
Windows 10 ssh server: Network not reachable
I'm trying to set up an SSH server on my Windows 10 machine so that I can SSH into it from my Raspberry Pi.
I installed the SSH server and made sure both ssh-agent and sshd are running. I also added a ...
0
votes
1
answer
25
views
Program Access Denied Error with firewall allowance on a mapped Drive
I'm using a Daw(Native Instruments)
I want to offload the large library files to my NAS (TrueNAS core).
I have access to the NAS via a mapped drive NAS Access.
When I browse to the directory I'm ...
0
votes
0
answers
83
views
Firewall Rules for WIndows Shared WiFi connection
I have a Windows 10 machine running a HTTP server on Port 80. When I am connected to a wired network, or the machine is connected to a WiFi, everybody in the network can access the HTTP server.
If I ...
3
votes
1
answer
61
views
What Does “BBS” in TCPDump Output Mean?
I've recently implemented stricter firewall rules, and I keep seeing the Apple devices on my local network attempt to reach out to 192.168.1.156 or 192.168.1.152. In an attempt to understand what it's ...
1
vote
1
answer
251
views
SSH client connection delay on LAN when Windows Firewall is enabled
The problem appeared once I upgraded my dev computer to Win11, which was running Win10 before that.
My local server is running Ubuntu 22.04.
Win11 ssh clients: putty, WSL2 ssh, both experience 20 ...
1
vote
1
answer
344
views
Windows 10 firewall settings to receive UDP
I have UDP packets sent from a sensor device to a PC running Windows 10. The UDP traffic can be monitored using Wireshark, but only after completely disabling the Windows firewall are the UDP packets ...
-1
votes
3
answers
81
views
Whitelist all USA traffic, blacklist all non USA traffic, can this be done by a country code instead of by IPs?
I've read a dozen guides to using iptables, fail2ban and csf.
The commonality seems to be:
1) generate a list of IP rangess for the country you want
2) write a bash/python script to run the allow ...
1
vote
1
answer
651
views
Allow a list of IP addresses to access ports with UFW
I want to allow a list of (around 100) IP addresses to access a website on an ubuntu server. I'd like to be able to refresh the list via cron.
I'm trying to do it with UFW. I thought this might be ...
2
votes
2
answers
436
views
Change all rules in iptables when changing IP address
I have a network gateway system using iptables to allow/deny traffic to/from an internal network. I have to manually add and remove rules in iptables depending on the requirements of the entities in ...
0
votes
2
answers
124
views
Which firewall Ports to open for SSH in my setup that uses a bridge firewall?
I can't connect to a LAN PC by SSH if I don't open all ports to the LAN PC in the LAN bridge firewall.
I opened 22 and ICMP, with no result.
Then I opened also 53,80,443: no result. (TCP and UDP)
I ...
1
vote
0
answers
101
views
SSH doesn't work through mikrotik
I have Mikrotik RB952Ui-5ac2nD. Everything is working fine.
But now, I found little problem.
I can not connect from LAN to any SSH in internet, but, when I'm connected without mikrotik, i havent any ...