A firewall is a program that controls the incoming and outgoing network traffic on a system. Use this tag for all questions related to firewall configuration and operation.

learn more… | top users | synonyms

0
votes
1answer
25 views

Is there a simple gui application-firewall for linux? [on hold]

I have tried installing Douanne firewall, but I faced problems in installing it ;there are dependency problems. I tried Peerblock but there doesn't seem to be a way to actively pop up a dialog saying ...
0
votes
0answers
25 views

Blocking incoming connections from external ports

How can I block incoming connections from some port which exists on some internet server, not on my PC? I tried to do it by rule <port> DENY IN Anywhere in gufw firewall, but it looks like it ...
2
votes
0answers
22 views

Why does mounting external harddrive trigger a UFW event?

Today I noticed when I plug in my 2TB external Toshiba hard drive, it triggers a ufw event in my logs: Jul 20 11:24:20 linuxbox kernel: [152873.728277] [UFW BLOCK] IN=inet1 OUT= MAC= SRC=xxxa DST=...
0
votes
1answer
9 views

How to investigate routing of firewall issue?

SERVERA needs to reach SERVERB. we cannot ping SERVERB from SERVERA. we cannot see any open port for SERVERB from SERVERA. Question: in general, how can we find out, that it is a routing or ...
1
vote
1answer
27 views

linux + iptables + /etc/sysconfig/iptables

on my linux machine I see the following: iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source ...
2
votes
1answer
47 views

Freebsd: pf firewall doesn't work on restart

I'm running FreeBSD 10.3 p4 and observed some strange behavior When restarting the machine pf starts due to /etc/rc.conf entry # JAILS cloned_interfaces="${cloned_interfaces} lo1" gateway_enable="...
2
votes
2answers
57 views

Fedora 24: ports show as open when scanned from server, but closed when nmapped from outside

I have a Fedora 24 server, serving an Angular2 project. Angular2 automatically opens ports 3000 and 3001 once the service is started. However, although running nmap localhost shows the ports are open, ...
1
vote
1answer
107 views

How to completely block ssh and pings to server running Oracle Linux 6.7

We are facing IP abuse issues and want to completely BLOCK ssh and ability to ping our servers running Oracle Linux 6.7 and only allow vnc connections. How to achieve this using linux firewall or ...
3
votes
3answers
374 views

Build my own firewall, in Java or other high-level language?

I posted a question on ServerFault about a specialized Firewall setup, but as an avid software developer I am also considering rolling my own. I am only interested in using a high-level language, ...
0
votes
0answers
14 views

convert openwrt rules to ubuntu 14

I have the following rule for openwrt firewall & network. Can anyone convert this to ubuntu 14? from /etc/config/firewall (openwrt) to ubuntu 14 command line: config ipset ...
0
votes
1answer
13 views

UFW app based filtering

is there any filtering in ufw which works sort-of like win firewall? basically allowing me not only to create ip/port/proto based rules, but also to bind such limitations to specific executables ...
1
vote
1answer
57 views

How would I limit connections to certain services, to be only accesed via a connection coming from a sub-domains?

I have a personall machine running Ubuntu 14.04.4 LTS. I use it to host a Teamspeak and a Minecraft server and also a website. I am trying to make sub-domains to only point to the right services. So ...
0
votes
0answers
14 views

WLAN with multiple unique users

Following use case: There are 6 holiday apartments which all use the same WLAN. After a preceding law case due to illegal downloads every apartment needs to be monitored for eventually following ...
1
vote
1answer
46 views

iptables configuration

I'm trying to setup iptables, the forward rules are workin fine, but the output rules are making problems. I Can't access internet from the hosts beheind the firewall neither the firewall server can ...
1
vote
1answer
47 views

Block countries based on IP in firewall

I would like to restrict visibility of my server from outside my country. I am connecting to my personal server always from one or two countries. Is there a way to block all the IPs coming from all ...
3
votes
0answers
50 views

Why “echo f” in the case of clearing conntrack table doesn't work on debian?

Many people don't clear the conntrack table when they want to reload their firewall rules. When you have some ESTABLISHED connections, all the sessions won't be affected when you add a rule that ...
0
votes
1answer
40 views

Shorewall 4-interface setup

I am trying to use shorewall on Arch to manage a setup with 2 local networks and 2 ISP connections. Ultimately I want traffic from local network 1 (192.168.1.0/24 interface enp5s0) to use ISP 1 (76. .....
2
votes
1answer
26 views

What are the most restrictive external firewall / DNS listening port settings I can have for my DNS server (internal clients only)

This question relates specifically to hardening the configuration of DNS, firewalls and at the limit, ntp. (not proxys, http access,vpn's or other services). This is about the externally-facing side ...
3
votes
1answer
70 views

Add route from internal network to external network

I am using a box running Arch as my router and firewall (with shorewall). Recently, I tried to add another network onto the system, which failed horribly. After putting everything back where it was ...
1
vote
0answers
12 views

DD WRT restrict access but exclude subdomain

I know it's possible to restrict access to some websites in Access restrictions section. I'd like to know if it possible to exclude from restriction subdomain of a site. For example: http://...
0
votes
1answer
31 views

Understanding Iptables rules to prevent DDoS

Following IPTables rules exist on my system as some preventive measures against DDoS attacks -A INPUT -s 255.0.0.0/8 -j LOG --log-prefix "Spoofed source IP" -A INPUT -s 255.0.0.0/8 -j DROP -A INPUT -...
0
votes
1answer
30 views

iptables connection mark not balance

The following is my network topology: + + | | | | | | | +-----------...
1
vote
0answers
53 views

Why fail2ban doesn't put some IP address in jail

This is several days ago, I observed some IP addresses was't banned by fail2ban, and continued to brute force attack on different port of ssh. This an extract of my logwatch: undef: 22 times a [...
0
votes
1answer
77 views

How do I make sure the iptables is closed?

I want to disable iptables completely. I followed the instruction like /etc/init.d/iptables close it said there No such file or directory [root@dataapp02 tmp]# service iptables stop Redirecting ...
3
votes
3answers
65 views

IPtables installation question

I am new to installing iptables and have an excellent book called "Linux Firewalls: Attack Detection and Response" by Michael Rash. I have a few questions before I begin. I want to make an ...
0
votes
0answers
38 views

Unable to access http server when ufw is running, on Raspbian?

I have a Raspberry Pi running Raspbian, with Apache2 for the web server. Some recent change seems to have broken my ability to access my web server, when ufw is running. The server simply doesn't ...
0
votes
2answers
124 views

Packet flow in a virtual bridge with two interfaces, centos 7

I am struggling to create a bridge firewall with iptables since I cannot find/catch packets flowing through a bridge with two interfaces in centos7. No ip addresses are configured on interfaces or the ...
3
votes
1answer
188 views

What ports need to be open on a firewall to access the internet?

Let's say as the example that I have a firewall that blocks ALL ports from all sources/destinations. What ports would I need to open to be able to successfully run: ping google.com ...and are ...
0
votes
0answers
13 views

pcfl - Allow ssh for an specific IP

I'm working with pfctl on Mac OS X. Im trying to make a policy/anchor what blocks SSH for ALL ips, minus specific ip. I try this: pass in on fxp0 proto tcp from any to any port < 22 flags S/SA ...
0
votes
2answers
49 views

Access to the internet from a firewalled server

I'm trying to set up a test Docker platform at work. I need pull images, but can't do so because the test server does not have direct internet access (firewalled). There is another server that can ...
0
votes
3answers
59 views

iptables: block all inbound traffic over a certain port number

It is possible using iptables (on Debian) to block all inbound connections for all the ports with a port number over (as an example) 16000. Like this (using 16000 as reference): The port 15999 is ...
4
votes
1answer
25 views

What does the “Incoming” option refer to in ufw?

I am configuring a firewall on my Linux Mint 17.2 to maximize security, mainly to put my mind at rest that no one will be able to do anything malicious. In gufw, there are options for allowing or ...
0
votes
0answers
44 views

How to firewall qemu/kvm guest in host machine?

I have a qemu guest with following network topology: Internet <-> eth1.96[bridge]tap96 <-> eth0[guest] I need to allow access to guest machine only from one specific /24 network and I ...
1
vote
1answer
72 views

Iptables rules doesn't work as expected

I need to block access to my server from the outside of my private network. I need to allow pings from my server out only to my private network and answer pings initiated from my private network as ...
1
vote
0answers
86 views

How to block access to “private” host-only network from VirtualBox nat interface (separate host-only networks)?

Scenario: 1 VirtualBox host with many vms. Different host-only networks are configured for different vm categories: Some vms are "private", others are "standard" vms. Most of these vms, including some ...
0
votes
1answer
60 views

Block incoming ssh with a reply message

I want to block all the incoming ssh to my system from a particular set of ips and send them a typical message saying something of sort: You don't have permissions to access this server as the ...
0
votes
0answers
19 views

Adding IP Blocklists to OSSEC

I've been reading through some documentations for OSSEC trying to learn some new tricks and such to make it more effective, and what I got really interested was looking into was seeing if it's ...
3
votes
1answer
374 views

Debian-Jessie: How do you check iptables status?

In old sysvinit I would just do service iptables status and see if it was running or not. But in newer Debian-Jessie I grep for iptables in the list of services and don't see iptables listed anywhere....
1
vote
3answers
111 views

preventing DoS attack in Apache webserver

This is the version of apache we're using - httpd-2.2.15-39.el6.centos.x86_64 We recently had our website down due to DoS attack and hence started exploring iptables, and how to use it to prevent DoS ...
1
vote
1answer
110 views

iptables rule explanation

I was looking to update iptables in our webserver which would prevent DoS attack to an extent. 1) Related to web traffic, below are the iptables rules i found. iptables -I INPUT -p tcp --dport 80 -...
0
votes
0answers
101 views

Which iptables chain does a new stream created by TEE go to?

Where do packets go after being created by the TEE target? I am working on mirroring some traffic that needs to go to multiple computers on my network. So what happens to both streams after using ...
2
votes
2answers
193 views

Traffic of specific program through vpn [duplicate]

is it possible to only let the traffic of Deluge through a VPN (OpenVPN) and the other traffic not with iptables? Kind regards
0
votes
0answers
141 views

Is there a local “firewall” to block by “X-Forwarded-For” IPs behind the reverse proxies?

The situation is quite typical. I'm using CentOS + Apache(s) behind a Load-balancer for the WebSites. At this point, let's assume i don't have any access to the Load-balancer (or) let's forget ...
1
vote
0answers
74 views

How to limit the number of connections per-host passing through a router/bridge?

For some reasons, our Internet provider has a limitation on the number of simultaneous opened connections between the machines hosted in our private network and the Internet which is around 4000 ...
3
votes
1answer
425 views

Block all internet connections unless connected to OpenVPN server

I want to block all internet connections unless I'm connected to my OpenVPN. Now of course, I need to allow connection to the VPN server. Can this be done, by allowing out/in traffic to/from the VPN ...
0
votes
1answer
305 views

Permanently start the OpenBSD pf Firewall on OS X

I use Mac OS X El Capitan 10.11.3 at the desktop OS. As everyone knows, is Apple's Mac OS X built on FreeBSD! I use normal only Debian/GNU/Linux on desktop and OpenBSD on Server and Firewall: So my ...
2
votes
1answer
142 views

Debian Jessie server has no internet access

I have a server running Debian 8 Jessie that constantly loses it's internet access for seemingly no reason. The server has two wired connections, the internet access is on eth0 and the internal ...
1
vote
1answer
187 views

UFW rules to allow specific behaviour

I'm new to UFW. One of our servers were compromised and I had to immediately: Deny all inbound. Deny all outbound. Allow all SSH. Allow outbound DNS. Allow Git clone, push, pull, etc. Allow only ...
2
votes
2answers
154 views

Block Internet access, but not network access for a user

Hi I would like to block one user on all of the linux machines (Debian Wheezy) from being able to surf the internet, chat and email. However they are using linux based Rip stations for large format ...
1
vote
1answer
21 views

UFW: Allow traffic only from a dynamic IP on its last 2 elements

I am trying to setup the following rule on ufw: ufw allow from 217.87.123.0/24 So to allow incoming connections from all 217.87.123.* addresses. The problem is that my IP does not always start ...