A firewall is a program that controls the incoming and outgoing network traffic on a system. Use this tag for all questions related to firewall configuration and operation.

learn more… | top users | synonyms

1
vote
1answer
60 views

Email evading my spam filter

I'm having trouble with email evading my Barracuda Spam firewall. I believe the spammers are using my A Record to bypass my MX Record which is what directs email to my Barracuda for processing. How ...
0
votes
0answers
65 views

how do I disable the firewall through YaST?

The fine manual states: The Start-Up section defines how your firewall will start. You can either have the firewall start automatically when booting (recommended), or you can set the firewall ...
0
votes
0answers
206 views

can't connect to remote host with MySQL…firewall problem?

I've granted privileges to thufir for remote access through the shell (correct?), but cannot seem to actually connect. The router firewall has SPI to off. I've disable the IPv6 firewall on the ...
0
votes
0answers
27 views

why do we have same chains in different tables of “iptables firewall” in linux?

why do we have same chains in different tables of "iptables firewall"? Like for example: we have "output" chain in filter table, nat table & mangle table.
0
votes
0answers
142 views

how to set a route and firewall for a static ip

These directions on setting the static ip address for vicidial seem at once very specific and overly broad: Type 'yast lan' and press ENTER Optionally, you can type 'yast' and navigate to the ...
0
votes
0answers
87 views

Unable to ping/SSH web-facing server

I just installed Ubuntu 14.04 LTS onto a box that's set up with one local NIC and one web-facing NIC. The web-facing NIC is configured with a static IP per my ISP. Because networking and security ...
1
vote
0answers
122 views

How do you tweak iptables limit rules on openSUSE Tumbleweed?

I have a fresh install of openSUSE Tumbleweed, it is logging a lot firewall related stuff due to my apple devices multicasting to enable airplay. Lines look like: Mar 14 12:45:13 server kernel: ...
4
votes
1answer
1k views

How iptables tables and chains are traversed

I know linux has 3 built-in tables and each of them has its own chains as follow: FILTER: PREROUTING, FORWARD, POSTROUTING NAT: PREROUTING, INPUT, OUTPUT, POSTROUTING MANGLE: PREROUTING, INPUT, ...
0
votes
0answers
173 views

TCP connections in SYN_SENT not visible with lsof

I have lots of connections in SYN_SENT: $ conntrack -L | grep -c 'SYN_SENT' conntrack v1.2.1 (conntrack-tools): 28100 flow entries have been shown. 14017 But I can't see which process(es) are ...
3
votes
2answers
103 views

How to disable network access for a user?

Trying to disable the network access for the user: [root@notebook ~]# iptables -I OUTPUT -m owner --uid-owner tempuser -j DROP [root@notebook ~]# ip6tables -I OUTPUT -m owner --uid-owner tempuser -j ...
0
votes
0answers
39 views

Forwarding packets through a host

I've setup a Site-to-Site network using this How To This How To fits exactly what I need. But I've a problem. From site wich hosting the OpenVPN AS server (site 2, right in the howto) I can't ping a ...
2
votes
0answers
65 views

Why is traffic matching the public zone instead of the desired zone?

Trying to self-train on firewalld I set up apache and configured the zones as follows: [root@localhost ~]# firewall-cmd --get-active-zones work sources: 192.168.122.1 public interfaces: ens3 ...
4
votes
3answers
199 views

OpenBSD's pf: disable network access for a given user, except for ssh.

If we are using the default firewall for OpenBSD, how can we modify it to disable all the network access for a normal user except for one thing: we want to ssh to the user from random hosts! So ...
1
vote
0answers
105 views

ufw firewall - how to only “allow” when I am going through a proxy

I am using a proxy to navigate on internet, and I am trying to setup a firewall that will only let me connect to internet via this proxy: if I forgot to turn on the proxy, that I should not be able ...
0
votes
1answer
320 views

IPTables Firewall/Router/Gateway needing to block outbound traffic from users

I have multiple ethX interfaces. eth0 is connected to the internet. eth1 is connected to a trusted network. eth2 is connected to a network I need to impose usage rules. What I'd like to do is ...
0
votes
1answer
575 views

How to open server port on RHEL 6.6?

I am trying to open a port (tcp 27017) for access to mongodb on a newly created RHEL 6.6 instance at Amazon AWS. Following mongo docs, I did: sudo semanage port -a -t mongod_port_t -p tcp 27017 I ...
1
vote
0answers
152 views

OpenWRT on embedded device as firewall

I have the following setup in my network: My internet comes in through an ATT Uverse modem/router. The router is in bridge mode because that ATT Uverse modem/router connects to a second higher ...
0
votes
1answer
476 views

PPTP Through IPTables

If this has already been answered, I apologize, I could not find an answer to this during my searching. I am new at Linux/Unix and I have recently implemented a Raspberry Pi firewall/gateway on my ...
1
vote
1answer
939 views

firewalld settings for OpenVPN with https, ssh, and smtp

I am configuring a remote CentOS 7 webapp server to wrap https and ssh inside OpenVPN, while keeping smtp running outside of OpenVPN. I notice that, when I establish an OpenVPN connection from a ...
1
vote
1answer
439 views

multiple user-types/access-rules for OpenVPN on CentOS 7 and firewalld

How can I define separate roles for users and administrator in OpenVPN running on CentOS 7 server? Specifically, the users must only be allowed to https, while the administrator must be allowed to ...
0
votes
1answer
309 views

How can I set up the ULOG target with iptables and MySQL

I'm running CentOS 6.6 32bit as a firewall box using iptables. I want to be able to use the ULOG target to store dropped packets in a MySQL database for statistical analysis. After much Googling I ...
1
vote
0answers
126 views

Redirect all ARP traffic from eth0 to eth1

I would like to redirect ARP traffic, but I'm struggling with arptables and ebtables. I have 2 interfaces: eth0 10.10.10.25 eth1 10.10.10.20 Both in 10.10.10.0/24 I want to redirect the ARP ...
1
vote
2answers
37 views

FTP and WWW services don't acknowledge connections

I have Lubuntu 14.04 LTS with vsftpd and the lamp stack (apache2, etc.) installed. Everything works fine on the LAN. Externally, the services don't acknowledge connection attempts. I can see packets ...
0
votes
1answer
275 views

Stateful user-space firewall for Linux

Is there any stateful user-space firewall for Linux? I'm looking for a firewall that doesn't rely on anything in Linux kernel (like iptables/netfilter) and works with raw packets.
1
vote
1answer
317 views

Open UDP Ports; Can I Close Them?

I'm trying to secure my internet browsing. I just reinstalled Xubuntu 14.04 and GUFW firewall. I have 8 UDP ports open. I don't understand why. The software I currently have open are Firefox, GUFW, ...
0
votes
1answer
28 views

What port uses my backportpackage or bzr?

I am working in a company what uses Ubuntu Precise on the desktops behind a proxy. The Proxy is available in /etc/environment and set as: http_proxy, https_proxy, ftp_proxy, no proxy and their ...
2
votes
1answer
427 views

How to use both syn proxy and connlimit rules with iptables?

I want to write both syn proxy and connlimit rules. I want to send packets to syn proxy first because of performance issue. Here is rule sample. I use bridge interfaces but I dont think it is ...
0
votes
1answer
38 views

kernel security and IDS Firewall + AV together or not?

I try to hardening my server. For doing so, I got a general question: Should I install kernel security patches like selinux and an Anti-Virus with Intrusion Detection Firewall? Does it make sense to ...
1
vote
1answer
251 views

How to setup reverse FTP in RHEL?

Researched: http://www.thecave.info/export-proxy-username-password-linux/ http://stackoverflow.com/questions/5334110/text-based-ftp-client-settings-behind-a-proxy ...
3
votes
1answer
456 views

Changed SSH port without allowing it through firewall, locked out now - what to do?

I have a VPS where I changed the SSH port from the default 22. Unfortunately I forgot to allow the new port through the firewall. I don't have physical access to the server, and my host does not seem ...
1
vote
1answer
165 views

firewall-cmd forward rules for interface with multiple IPs?

I'm looking for a way with firewall-cmd or another command to do the following. An incoming public interface has multiple ip addresses bound to it. How can I forward ports only for one of the IP ...
3
votes
0answers
315 views

iptables: using “conntrack” and “recent” modules to block unsolicited packets

When I only allow RELATED and ESTABLISHED packets, and DROP everything else, my firewall rules work perfectly and I have no problems: ### VARIANT A -A INPUT -i wlan0 -m conntrack --ctstate ...
1
vote
3answers
1k views

what is dhcpv6-client service in firewalld, and can i safely remove it?

In a CentOS 7 server, I type in firewall-cmd --list-all, and it gives me the following: public (default, active) interfaces: enp3s0 sources: services: dhcpv6-client https ssh ports: ...
2
votes
1answer
354 views

blocking all but specific ips from specific services in CentOS 7

In a CentOS 7 web server that needs to remain totally closed to the public, I need to block all ip addresses and then only allow specified ip addresses to access specified services. How can I ...
0
votes
1answer
551 views

Block all but specified range of ip's input to an specific port [duplicate]

In a CentOS 7 web server, how do I configure firewalld to block all but a specific list of ip addresses from making successful http or https requests? I know that I can use httpd.conf to restrict by ...
0
votes
1answer
636 views

how to make firewall changes permanent via firewall-cmd?

I am trying to open some ports in CentOS 7. I am able to open a port with the following command: firewall-cmd --direct --add-rule ipv4 filter IN_public_allow 0 -m tcp -p tcp --dport 7199 -j ACCEPT ...
1
vote
1answer
73 views

libvirtd and filtered ports

I am new to virt-manager. After having configured a virtual network (new interface virbr0) with 2 VMs that should be able to communicate, I discovered that most ports are filtered. For example, the ...
1
vote
0answers
134 views

Linux Bridge Network with Static IP Addresses and Firewall

any and all help is appreciated. I am trying to set up my Network Map Can you give me advice in setting up my interface file? If I set a static IP on my PLC on the same gateway, I shouldn't need to ...
0
votes
1answer
66 views

iptables INPUT command

On a machine called ubuntu1, this is the iptables command: sudo iptables -A INPUT -p icmp -j DROP on the other computer (xp1) I can not ping the ubuntu1.So this is OK. But On ubuntu1 can ping xp1. ...
1
vote
0answers
73 views

Initial iptable rule and knockd operation in vps

Today I launched a vps with Debian 7 x64 and started playing around with it. I installed xampp as well as knock daemon to get my hands dirty. So, all I wanted to do was to actually block all requests ...
1
vote
2answers
131 views

iptables is ignoring rules?

I've found some strange traffic through tcpdump (traffic is ongoing always): 13:00:13.203754 IP 1.2.3.4.1028 > 188.113.188.16.56881: UDP, length 103 13:00:13.204396 IP 1.2.3.4.1028 > ...
0
votes
1answer
3k views

CentOS 7 Firewalld zone configuration for private web application

I have read all the man pages related to firewalld and also explored all of the files that come pre-installed in firewalld before it is configured. How can I configure the zones of the firewall to ...
0
votes
0answers
64 views

OpenVPN on Ubuntu VM

I am trying to create a VLAN Network from my home network for a web-dev platform. I am running Ubuntu servers in VirtualBox on a Windows 7 machine. I am running an Ubuntu DHCP/OpenVPN/Shorewall ...
1
vote
1answer
62 views

Iptable forward interfaces for gateway machine

I have two Ethernet interface being configured to use as system gateway ex: eth1: 10.10.1.0 eth2: 10.10.2.0 I want to forward all the packets which are coming to the 10.10.2.0 gateway contacting ...
1
vote
1answer
313 views

Assp won't start

I tried to install ASSP (Anti-Spam SMTP Proxy Server),but when I try to start it I get the following: $ perl assp.pl Perl version 5.012003 (5.12.3) is at least recommended to run ASSP 2.4.3 (14313) ...
0
votes
1answer
2k views

viewing firewalld logs via remote login to CentOS 7 server

I have firewalld installed in a remote CentOS server. When I log into the server over the internet as root, I type the following command to access the firewalld logs: journalctl ...
0
votes
0answers
2k views

Network firewall on CentOS, host cannot be resolved?

I have a centos machine and I am trying install some dependencies using yum. When I do this I keep getting a message saying the host cannot be resolved. I was told the previous person that used the ...
1
vote
1answer
122 views

Application specific DNS problem?

I'm working on a live stream transcoder application using nginx + ffmpeg. Everything works fine when I use avconv to transcode, but if I use ffmpeg, I get this error: [tcp @ 0xb4e9da0] Failed to ...
1
vote
1answer
161 views

Allow wifi connections only to a local service, don't route to the wired ethernet

I have a Raspberry Pi running Linux (Raspbian) which is connected to my corporate Internet over an Ethernet cable. The RPi also has a wifi adaptor plugged into a USB port. I've been following along ...
2
votes
1answer
9k views

log files in CentOS 7 [closed]

In CentOS 7, how can I locate and view all the system logs that tell me who tried to enter the system, who got in, what processes they contacted, what they accomplished, etc. I want to be able to ...