Tagged Questions

3
votes
1answer
38 views

IPTables - Port to another ip & port (from the inside)

I currently have a NAS box running under port 80. To access the NAS from the outside, I mapped the port 8080 to port 80 on the NAS as follow: iptables -t nat -A PREROUTING -p tcp --dport 8080 -j DNAT ...
0
votes
0answers
121 views

Migrating a rule from Debian Iptables to PfSense

I have this firewall rule in my (ex) Debian box: -A POSTROUTING -s ! 192.168.1.0/255.255.255.0 -j MASQUERADE And I want to implement the same on my pfsense box.
2
votes
1answer
150 views

How to interpret and react to Shorewall log?

I see the following pattern in every 2-3 sec, for several minutes in syslog: Shorewall:net2fw:DROP:IN=eth0 OUT= MAC=aa:bb:cc:dd:ee:ff:gg:hh:ii:jj:kk:ll:mm:nn SRC=12.34.56.78 DST=98.76.54.32 LEN=60 ...
2
votes
1answer
178 views

Make box only communicate on lan only?

I am running a VM with Debian as the guest OS (I can choose another distro). It has nginx running along with some other software. Some of the software tries to make outgoing connections (for example ...
0
votes
2answers
2k views

How to set up firewall on Debian Squeeze

I have set up Apache, MySQL, PHP, SSH (which I use to connect to the VPS), Node.js, MongoDB and ProFTPd. Now, I want to have a firewall on the system, so that no one hacks the system. For instance, ...
1
vote
1answer
364 views

How can I move firewall settings from one Debian Squeeze web server to another?

I configured a Debian Squeeze virtual machine in VMWare on my laptop. I configured it with a very restrictive set of firewall rules using Firestarter. I then uploaded a copy of its disk image to use ...
2
votes
2answers
304 views

Security with Kernel IP Forwarding Enabled

I recently enabled IP Forwarding on a production web server that also acts as a VPN server. What, if any, security issues did I just set myself up for? And are there any iptables rules I should set ...
0
votes
3answers
377 views

EBtales not working

I wanted to go a little bit further and install EBtables (the 2-layer filtering and routing table). The purpose of it was to only allow the minimal necessary(IPv4 and ARP). To test it I ran: ebtables ...
6
votes
4answers
3k views

Fail2ban block with IPtables doesn't work on Debian Lenny. [moved ssh port]

I've recently decided to do some security maintenance. I saw my logs, and there were some tries against my SSH server. At first, I moved away the SSH port from the default 22. After it, I read ...
5
votes
4answers
2k views

Debian: Which firewall for a newbie?

I have to install a firewall on my server (so without X Server). It's a debian lenny. If it is possible, I want to avoid the use of iptables. Is there a way to install/configure a firewall for a ...