GENERAL FIREWALL SUPPORT IS OFF-TOPIC. Support questions may be asked on https://superuser.com. A firewall is a network security device or software. Please specify the brand and model or version in your question.
Questions tagged [firewall]
3022 questions
411
votes
8 answers
How can I remove specific rules from iptables?
I am hosting special HTTP and HTTPS services on the ports 8006 and 8007 respectively. I use iptables to "activate" the server; i.e. to route the incoming HTTP and HTTPS ports:
iptables -A INPUT -i eth0 -p tcp --dport 80 -j ACCEPT
iptables -A INPUT…

Jeroen Ooms
- 31,998
- 35
- 134
- 207
375
votes
12 answers
Open firewall port on CentOS 7
I am using CentOS 7 and I have to ensure that ports 2888 and 3888 are open.
I read this article but this did not work because on CentOS 7 OS there is no iptables save command.
Someone told me that the above URL is not valid for CentOS 7. and I…

Knows Not Much
- 30,395
- 60
- 197
- 373
161
votes
16 answers
What is the best practice of docker + ufw under Ubuntu
I just tried out Docker. It is awesome but seems not work nicely with ufw. By default, docker will manipulate the iptables a little bit. The outcome is not a bug but not what I expected.
For more details you can read The dangers of UFW + Docker
My…

Yi-Chien Chang
- 1,763
- 2
- 11
- 6
106
votes
12 answers
Viewing my IIS hosted site on other machines on my network
At home I have a simple network setup containing 2 machines.
On one machine i have a site hosted with IIS7. Rather than the standard localhost/index.htm address I have added an entry in the HOSTS file pointing the local IP (127.0.0.1) to this domain…

Truegilly
- 1,061
- 2
- 8
- 3
93
votes
3 answers
iptables block access to port 8000 except from IP address
I've never used iptables, and the documentation online seems a bit opaque.
I'd like to block all requests to port 8000 on my server except those coming from a specific IP address. How do I do that using iptables?

will
- 3,103
- 4
- 25
- 30
86
votes
12 answers
Connection refused to MongoDB errno 111
I have a Linode server running Ubuntu 12.04 LTS and MongoDB instance (service is running and CAN connect locally) that I can't connect to from an outside source.
I have added these two rules to my IP tables, where < ip address > is the server I want…

dbcooper
- 2,299
- 2
- 14
- 8
56
votes
1 answer
ufw Linux firewall difference between reject and deny
Using the uncomplicated firewall ufw, I can set ports/services to reject and deny.
For example:
ufw deny www
ufw reject www
Can someone explain to me the difference between the two approaches?

CuriousFirewallNewbie
- 579
- 1
- 4
- 3
45
votes
3 answers
Jenkins Slave port number for firewall
We use Jenkins 1.504 on Windows.
We need to have Master and Slave in different sub-networks with firewall in between.
We can't have ANY to ANY port firewall rules, we must specify exact port numbers.
I know the port Master is listening on.
I also…

Ivan
- 9,089
- 4
- 61
- 74
44
votes
1 answer
Using PacketFilter to transparently proxy packets in OS X
There is a cool utility out there called sshuttle. It has depended on ipfw to forward packets in the past. It appears that ipfw is mostly broken in Mavericks and the advice is to use PacketFilter for this now.
I've spent most of the day looking at…

Matt Smith
- 588
- 4
- 9
41
votes
3 answers
Will html5 websockets be crippled by firewalls?
I'm extremely excited about html5's websockets spec but I have a concern.
These days everyone is operating off of some network, with routers (wired/wireless) that have built in firewalls, windows has a built in firewall too.
With that in mind when…

Travis
- 7,391
- 12
- 43
- 52
39
votes
2 answers
what url should I authorize to use pip behind a firewall?
I have a server, onto which I want to use Python, that is behind a company firewall. I do not want to mess with it and the only thing I can do is to make a firewall exception for specific URL/domains.
I also want to access packages located on PYPI,…

Marc-Olivier Titeux
- 1,209
- 3
- 13
- 24
38
votes
5 answers
How do I get the Mac OS X Firewall to permanently allow my iOS app?
I'm writing an iOS app that acts as, among other things, a telnet server. Naturally, it begins listening for connections as soon as it starts.
When I run the app in the Simulator, Mac OS X (I happen to be on 10.7.3) prompts me to Allow or Deny my…

OldPeculier
- 11,049
- 13
- 50
- 76
35
votes
1 answer
Recaptcha - Availability in China
We are developing a site that will require the usage of a captcha service.
Has anyone successfully use Google Recaptcha for a website for users from Mainland China?
Did you have major problems with load-time?
Did you experience any reliability…

wacdany
- 991
- 1
- 10
- 19
33
votes
12 answers
VS 2015 + Bower: Does not work behind firewall
Problem
In Visual Studio 2015, using bower, my package restores fail when behind a firewall with an error similar to:
ECMDERR Failed to execute "git ls-remote --tags --heads git://github.com/jzaefferer/jquery-validation.git", exit code of…

SeanKilleen
- 8,809
- 17
- 80
- 133
31
votes
4 answers
Puppeteer/chromium on Mac chronically prompting "accept incoming network connection?"
I have a node application that uses puppeteer to test a web site. Up until we updated to latest puppeteer 1.12.2 we had no problem.
Node launches puppeteer on timer
On every launch, system asks: "Do you want to the application Chromium.app to…

Eric Oemig
- 487
- 6
- 9