A Firewall is an application or hardware device used to inspect and filter network traffic.
Questions tagged [firewall]
4221 questions
1
vote
0 answers
IPTables hashlimit-above incorrect count
I'm currently having trouble trying to setup a rule on IPTables to rate-limit certain packets. I can't just use the normal limit mode on iptables as this has to be per dstip and dstport.
The rule looks like this:
iptables -A PREROUTING -t raw -p udp…

user1372896
- 123
- 1
- 7
1
vote
1 answer
Windows Security Credentials when Using GPO (Group Policy Editor)
I've a problem to be clear and short:
I wanted to add some users for a restriction (Deny Log through Network), in Users Rights Assignment in GPO And then, Windows is Asking for my credentials (User + Password) When I want to add these Users.. And…

user375536
- 11
- 2
1
vote
0 answers
Filter Cisco ASA syslog messages that do not have a class
If I'm troubleshooting something in particular on an ASA, then it's often useful to be able to filter the syslog messages I'm seeing to only those that are relevant. If I'm troubleshooting something like VPN tunnels, then I can filter by the "vpn"…

dbr
- 1,852
- 3
- 23
- 38
1
vote
0 answers
Blocking DHCP transit traffic on bridge
I have a linux bridge machine bridging tap0, tap1 (2 networks) together into a br0. I would like to stop only the dhcp traffic between the 2 bridge endpoints.
I have tried everything with ebtables but has no effect:
Bridge table: filter
Bridge…

pinky
- 11
- 1
1
vote
1 answer
What is the destination of the spoofed source ip packet in terms of the netfilter chains?
Good day every one.
Let's assume next configuration: we have a router with a public IP address 1.2.3.4 (external interface - wan).
If for some reason the router receives a packet with a spoofed source IP address which is the same as the public…

excanoe
- 133
- 3
1
vote
2 answers
Throttling windows 10 updates through corporate firewall
I help manage the IT infrastructure at our small company. We have about 15 PCs here, most of them running windows 10. We also have a 15Mbps internet link.
Whenever a computer downloads a large windows 10 update (such as the recent anniversary…

Daniel Tan
- 13
- 2
1
vote
1 answer
Can I limit WMI to a specific network interface
I have a Windows Server 2012 R2 virtual machine with two network interfaces. I would like to be able to query WMI on one interface and block all WMI request on the other. So far, no matter what I've tried, Windows firewall will either block both…

R. McGee
- 111
- 1
1
vote
1 answer
SSTP VPN clients are connecting OK but unable to access LAN resources
I've recently reconfigured our Firewall which handles DHCP for our LAN 192.168.0.0/23 (ie. 192.168.0.0 - 192.168.1.254 with subnet mask 255.255.254.0) due to an expanding list of connected devices.
All devices receive their DHCP address fine and can…

Reece
- 783
- 2
- 13
- 32
1
vote
2 answers
Allowing HTTPS through the pfSense Firewall
I've included my current setup.
However, when I try and access the firewall from outside my organization, I only get this:
ERR_CONNECTION_TIMED_OUT
Am I not the correct protocols through?
EDIT:
(not mentioned is above this ruleset I back a…

Jason
- 3,931
- 19
- 66
- 107
1
vote
2 answers
How to restart a Java service without disruption using firewall/iptables?
If enable this rule
iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to 8080
Then connections coming to the server port 80 are redirected to localhost:8080. If I want to restart the service, can I just start the service on another…

David Hofmann
- 131
- 6
1
vote
1 answer
multiple ip dnat with firewall
i am having a vmware install running multiple VMs i would like 1 of them as a router/firewall where all external IPs are connected to
and running different services on the other VMs like apache ftp postfix ...
i am a bit lost whit this iptable…

Ino
- 21
- 3
1
vote
0 answers
Block outgoing connections on Centos 7 with firewalld
I'm having following rules :
public (default, active)
interfaces: eth0
sources:
services: dhcpv6-client http https ssh
ports:
masquerade: no
forward-ports:
icmp-blocks:
rich rules:
Everything works fine, then I'm adding…

sule
- 11
- 1
- 3
1
vote
1 answer
Allow Application in Windows 7 Firewall on per-NIC basis
I want to allow an application on a Windows 7 Professional System to only be accessible through the OpenVPN TAP adapter by configuring the Windows Firewall accordingly.
Unfortunately I cannot find an option therefor. I found out that it is possible…

Richard Neumann
- 144
- 1
- 8
1
vote
3 answers
Merge VPNs of two Watchguard firewalls into one firewall
I have two different Watchguard XTM 515 firewalls. Each has it's own set of VPNs created in them.
Now I need to use only one firewall to handle the VPNs of both. But the problem is that I don't know the PSK of VPNs (I inherited those firewall after…

Hemant
- 229
- 1
- 3
- 12
1
vote
1 answer
pfSense Shell : apply config modification without reboot
I'm currently trying to edit the configuration of a running pfSense in production with the pfSsh.php shell. By using the pfSsh.php shell I'm able to modify the configuration but once I write it, it isn't applied to the system.
Is there a way to…

Arka
- 13
- 1
- 5