firewall

Is this a Windows XP firewall bug?

I have a webserver running on my Windows XP computer. I have set the firewall to allow incoming HTTP connections: Firewall settings window->'Advanced' tab->select my network connection->Settings->Services->check 'Webserver(HTTP)' checkbox. Normally, this works. However, sometimes upon restarting the server machine, the firewall again b...

Client firewall blocks all ports but 80 and 443, need away to forward requets on port 443 to SSH or HTTPS

Hi, I am currently working at a client were they have locked down the network, except for ports 80 and 443. I need to connect to our server using SSH, but the same server also runs our website. We do not want to invest in a new server or place a second network card. I have been searching the internet for away to setup our linux server ...

How secure is IP address filtering?

I'm planning to deploy an internal app that has sensitive data. I suggested that we put it on a machine that isn't exposed to the general internet, just our internal network. The I.T. department rejected this suggestion, saying it's not worth it to set aside a whole machine for one application. (The app has its own domain in case that's ...

jboss 4.2.2 GA under windows server 2008 - possibly firewall related?

I've been running JBoss 4.2.2 GA for ages now under XP 64 and server 2003. Recently I decided to install server 2008 (x64) over my xp 64 installation and use it as my desktop as so many people love to tout... Unfortunately now when I start JBoss 'something' - and i am assuming it's somehow the windows firewall - prevents connections fr...

Is it possible to get the remote ip address in the Apache log file when behind a NAT firewall?

I'm using Apache2, Ubuntu 8.10. Currently Apache is logging the gateway's IP as the host ip, what do I have to do to get it to log the remote client's IP address instead? Is this even possible, or does the NAT router "lose" it for good? Update: It actually looks like it's only logging the gateway's IP for addresses from within the net...

How to use RMI with applet client behind a firewall?

How can I use RMI with a applet client behind a firewall? How can I use RMI with a firewalled server and firewalled applet client? (If possible) I know that the RMI server uses port 1099 (by default, but this is configurable); however after this the communication requires a new socket on a different random port. I also know that you ca...

A WCF service behind a firewall generates a wrong wsdl URI

Hi, I developed a WCF service and i have published it with IIS. All goes well inside the local network but when the service is accessed by an external client from the internet, redirected by a firewall, the service generates a local wsdl uri that cannot be solve by the client. Something like this: URI needed: http://external_url/serv...

SQL Server Ports

We recently installed a sonic firewall on our network. We have a SQL 2005 express server that's configured to listen on dynamic ports. In its configuration manager the dynamic port number is set as 1067 with its default port still 1433. From my understanding we need to have the following ports open for it to work: Tcp 1433 Tcp ...

What Protocol Does Microsoft Easy Assist Use?

I realize this doesn't directly seem like a programming-related question... but I would like to understand on a TCP/IP level how this might work. I'd like to understand this so that I can better remotely help my own clients (sidework). I worked with a Microsoft engineer the other day, and I was really surprised that Easy Assist worked t...

How to detect a firewall in Windows?

Hi, My app needs to make a GET request to a website and I'd like to be able to know if it's being blocked by a firewall, and ask the user to add an exception. How can I find out that my get request failed because of a firewall, instead of something else? ...

MSDTC - how many ports are needed

I have a considerably large application that uses MSDTC. How many ports should I open? Is there any way to determine it? EDIT: I know what ports I need to open, I don't know how many I need. ...

Transparently proxying telnet traffic?

We have written a tool to proxy telnet traffic, and fork the inbound/outbound streams for recording purposes (this is a testing tool to test a legacy system). However, we hit a snag. The legacy system relies on knowing a client's ip address in certain cases, but when we use our proxy the clients' addresses are all changed to the proxy's ...

Risk of exploits "backwards" into outbound tcp connections.

I am building a server application that will maintain connections to other applications by initiating TCP connections out through a firewall that is only open for outbound traffic to the relevant IP's ports that the application will connect to. What is the risk of someone having taken over the machine(s) we connect to being able to expl...

Linux iptables TRIGGER target description

I'm writing application which controls Linux firewall (using iptables). I need to implement some port triggering. There is TRIGGER target which seems to be suitable for it. However, I can't find good documentation of it (actually it's really hard to find any documentation of this target). Does anybody can redirect me to any information a...

(network sockets) bytes stuck in Send Queue for 15 minutes; why?

I have a Java program running on Windows (a Citrix machine), that dispatches a request to Java application servers on Linux; this dispatching mechanism is all custom. The Windows Java program (let's call it W) opens a listen socket to a port given by the OS, say 1234 to receive results. Then it invokes a "dispatch" service on the serve...

Should a web server's firewall block outbound HTTP traffic over port 80?

I understand the need for putting a web server in a DMZ and blocking inbound traffic to all ports except 80 and 443. I can also see why you should probably also block most outbound traffic in case the server is compromised. But is it necessary to block outbound HTTP traffic over port 80? If so, why? A lot of web applications these days ...

git push/pull times out

I can't git push/pull to github from my corporate vpn: git push origin master ssh: connect to host github.com port 22: Connection timed out fatal: The remote end hung up unexpectedly I assume this is a firewall issue, b/c if I disconnect from the vpn it works. Is there anything I can do to work around it? Or am I stuck disconnecting f...

How do I write code to get through NAT in a similar way to Skype?

Does anyone knows, how skype redirect NAT and FireWalls? ...

How to programmtically open ports on firewall appliances?

Is there a reliable programmatic method to open ports common firewall appliances? ...

Is there a connlimit module for ip6tables?

Hi, Does anyone know if there is a connlimit module that can be used for ip6tables? Please let me know. Thanks, Kenneth ...