Questions tagged [firewall]

GENERAL FIREWALL SUPPORT IS OFF-TOPIC. Support questions may be asked on https://superuser.com. A firewall is a network security device or software. Please specify the brand and model or version in your question.

3022 questions
411
votes
8 answers

How can I remove specific rules from iptables?

I am hosting special HTTP and HTTPS services on the ports 8006 and 8007 respectively. I use iptables to "activate" the server; i.e. to route the incoming HTTP and HTTPS ports: iptables -A INPUT -i eth0 -p tcp --dport 80 -j ACCEPT iptables -A INPUT…
Jeroen Ooms
  • 31,998
  • 35
  • 134
  • 207
375
votes
12 answers

Open firewall port on CentOS 7

I am using CentOS 7 and I have to ensure that ports 2888 and 3888 are open. I read this article but this did not work because on CentOS 7 OS there is no iptables save command. Someone told me that the above URL is not valid for CentOS 7. and I…
Knows Not Much
  • 30,395
  • 60
  • 197
  • 373
161
votes
16 answers

What is the best practice of docker + ufw under Ubuntu

I just tried out Docker. It is awesome but seems not work nicely with ufw. By default, docker will manipulate the iptables a little bit. The outcome is not a bug but not what I expected. For more details you can read The dangers of UFW + Docker My…
Yi-Chien Chang
  • 1,763
  • 2
  • 11
  • 6
106
votes
12 answers

Viewing my IIS hosted site on other machines on my network

At home I have a simple network setup containing 2 machines. On one machine i have a site hosted with IIS7. Rather than the standard localhost/index.htm address I have added an entry in the HOSTS file pointing the local IP (127.0.0.1) to this domain…
Truegilly
  • 1,061
  • 2
  • 8
  • 3
93
votes
3 answers

iptables block access to port 8000 except from IP address

I've never used iptables, and the documentation online seems a bit opaque. I'd like to block all requests to port 8000 on my server except those coming from a specific IP address. How do I do that using iptables?
will
  • 3,103
  • 4
  • 25
  • 30
86
votes
12 answers

Connection refused to MongoDB errno 111

I have a Linode server running Ubuntu 12.04 LTS and MongoDB instance (service is running and CAN connect locally) that I can't connect to from an outside source. I have added these two rules to my IP tables, where < ip address > is the server I want…
dbcooper
  • 2,299
  • 2
  • 14
  • 8
56
votes
1 answer

ufw Linux firewall difference between reject and deny

Using the uncomplicated firewall ufw, I can set ports/services to reject and deny. For example: ufw deny www ufw reject www Can someone explain to me the difference between the two approaches?
45
votes
3 answers

Jenkins Slave port number for firewall

We use Jenkins 1.504 on Windows. We need to have Master and Slave in different sub-networks with firewall in between. We can't have ANY to ANY port firewall rules, we must specify exact port numbers. I know the port Master is listening on. I also…
Ivan
  • 9,089
  • 4
  • 61
  • 74
44
votes
1 answer

Using PacketFilter to transparently proxy packets in OS X

There is a cool utility out there called sshuttle. It has depended on ipfw to forward packets in the past. It appears that ipfw is mostly broken in Mavericks and the advice is to use PacketFilter for this now. I've spent most of the day looking at…
Matt Smith
  • 588
  • 4
  • 9
41
votes
3 answers

Will html5 websockets be crippled by firewalls?

I'm extremely excited about html5's websockets spec but I have a concern. These days everyone is operating off of some network, with routers (wired/wireless) that have built in firewalls, windows has a built in firewall too. With that in mind when…
Travis
  • 7,391
  • 12
  • 43
  • 52
39
votes
2 answers

what url should I authorize to use pip behind a firewall?

I have a server, onto which I want to use Python, that is behind a company firewall. I do not want to mess with it and the only thing I can do is to make a firewall exception for specific URL/domains. I also want to access packages located on PYPI,…
Marc-Olivier Titeux
  • 1,209
  • 3
  • 13
  • 24
38
votes
5 answers

How do I get the Mac OS X Firewall to permanently allow my iOS app?

I'm writing an iOS app that acts as, among other things, a telnet server. Naturally, it begins listening for connections as soon as it starts. When I run the app in the Simulator, Mac OS X (I happen to be on 10.7.3) prompts me to Allow or Deny my…
OldPeculier
  • 11,049
  • 13
  • 50
  • 76
35
votes
1 answer

Recaptcha - Availability in China

We are developing a site that will require the usage of a captcha service. Has anyone successfully use Google Recaptcha for a website for users from Mainland China? Did you have major problems with load-time? Did you experience any reliability…
wacdany
  • 991
  • 1
  • 10
  • 19
33
votes
12 answers

VS 2015 + Bower: Does not work behind firewall

Problem In Visual Studio 2015, using bower, my package restores fail when behind a firewall with an error similar to: ECMDERR Failed to execute "git ls-remote --tags --heads git://github.com/jzaefferer/jquery-validation.git", exit code of…
SeanKilleen
  • 8,809
  • 17
  • 80
  • 133
31
votes
4 answers

Puppeteer/chromium on Mac chronically prompting "accept incoming network connection?"

I have a node application that uses puppeteer to test a web site. Up until we updated to latest puppeteer 1.12.2 we had no problem. Node launches puppeteer on timer On every launch, system asks: "Do you want to the application Chromium.app to…
Eric Oemig
  • 487
  • 6
  • 9
1
2 3
99 100