firewall

Loopback connections working in user's context but not working from Local System account

We have a networking application that can run from a service account as well as a regular user's account. The app tries to open up a loopback connection to another service running on the local machine. So for example it tries to connect to: 127.0.0.1 port 2000. On a very small number of Windows machines we're seeing an issue where tryin...

Avoid Windows Firewall popup with Sockets on localhost

I have written a simple Java application that interacts with multiple instances of itself using sockets. The first instance automatically takes on the role of the server, listening on a specific port, and all subsequent instances connect to it. The problem I'm faced with is that Windows Firewall pops up asking me if I want to unblock th...

FreeBSD bandwidth distribution

We have a FreeBSD server. Primary IP is 11.11.11.11. Also there are two additional IPs 22.22.22.22 and 33.33.33.33. Need to set up a firewall on this server doing the following: If user downloads from 11.11.11.11, grant him 5Mbit guaranteed bandwidth. If user downloads from 22.22.22.22 limit download bandwidth to 320Kbit per incoming ...

Access an internal site through an external site.

I'm pretty sure the answer to this question is no, but I just wanted to get some feedback before I go down another path. Here is my scenario. I have two websites. Website 1 is an internal website that cannot be accessed outside of our domain. Website 2 is an external website that can be accessed outside of the domain, but has acces...

wfp inside Windows service

I am calling a VC++ DLL from a windows service that was written in C#. The DLL handles all interaction with the WFP. When compiled as a console app, everything works fine (as long as I run as administrator). When compiled and ran as a service, the DLL fails on FwpmEngineOpen0(). This is the same symptom that I received when I didn't run ...

How can we troubleshoot intermittent "An existing connection was forcibly closed by the remote host" errors when remoting

We have the "standard" three tier architecture with our middle tier hosted in IIS and accessed via .net remoting. These errors occur between our web and web services servers (front tier) that are remoting to the app servers (middle tier). We'll get this error 3-10 times a day out of ~130K total calls in the day. The exception and stac...

winbindd fails to resolve local network names when firestarter firewall is up on ubuntu.

I'm using Samba and windbindd on my linux boxes. Without a firewall up on the linux box I have no trouble resolving LAN machine names: user@laptop-linux:~$ ping desktop PING desktop (192.168.1.100) 56(84) bytes of data. 64 bytes from 192.168.1.100: icmp_seq=1 ttl=128 time=0.878 ms when I start the firewall I get: user@laptop-linux:...

Will firewalls block my non-HTTP network protocol even if I use TCP port 80?

I want to create a simple JSON-based protocol to allow my game to talk to my custom server, but I don't want embed it in HTTP. If I send a custom text-based protocol request to my server on port 80, will firewalls block it for not using HTTP format, or do they only care about the port number? I won't use the same server as a web server...

WCF Service didn't reply, timeout encounters on a system behind firewall with NAT

I am encountering a strange problem, here is my scenario One WCF Service (named WCF1) is deployed on Web Server with basicHttpBinding (streaming enabled) I've a Windows Service Application which consumes WCF1, and hosts a WCF Service (named WCF2) with namedPipeBinding (duplex). A Windows Application which consumes WCF2, and handles e...

Avoiding a Windows Firewall popup

Hi My organisation produces a suite of Windows applications that make use of networking, and so when users run our software for the first time, the Windows Firewall (if it is running) brings up a pop-up, informing the user that our app(s) are trying to use the network, prompting the user to allow or deny access. This occurs with plenty...

Creating a local server visible through firewalls

I have a local server written in C++ listening to inbound TCP connects using plain socket ::accept() and UDP recvfrom(). I have two problems with this that I wish to solve: Can I programatically make Windows let me open the accept socket without it automatically being blocked by the Windows (software) firewall? Are there any ports I ca...

Windows Firewall using programmatically

Hello, I have difficulties to find anything related windows firewall (about how to add aplications to except list, close ports or disable internet access to some applications) in C++. I found even MS site shows examples in Visual Basic. Where i can find examples in C++ ? Thanks ...

How to send a secure request to a data tier over a firewall

I've been asked to populate a flash file with some data from a database. I said, "Great, I will write some PHP that talks to the database and outputs xml. The swf can call that file." My boss then told me that that solution wouldn't make the cut with IS, and I would have to find a more secure way of doing it. Ugh! My proposed solution ...

fail2ban: ban incorrect plesk login-attempts (brute force)

How can i ban incorrect login-attempts to the plesk webinterface by using fail2ban to prevent brute-force attacks ? . ...

Iptables: Two IP-Adresses, allow Port 3306 just for one

my server has two ip's: # IP one: 192.168.45.1 (allow MYSQL on Port 3306) # IP two: 192.168.45.2 (disallow MYSQL on Port 3306) . how can i configure iptables, to drop incoming connections for a specific IP and allow it to the other? . # # Allow MYSQL-Port only for 192.168.45.1! # /sbin/iptables -A INPUT -p tcp 192.168.45.1 --dpor...

Can't connect to local mail server (MDAEMON) from outside

Hello. I have a mail server in our local network that run through Kerio firewall. I open tcp 110 port, and try to get mail from Mdaemon to Gmail, but all in vain. Thanks in advance. ...

Sneaking behind China's Great Firewall : DNS issues

Hi there, I have a website hosted on appengine, and I use my own domain name on it. It appears that mysite.appspot.com can be accessed (I checked on http://just-ping.com) but that mysite.com is blocked. How can I manage that? Edit: I use google apps on my domain, for mail, blogging on subdomain, and redirecting to appengine. These 3 ...

Genetic Algorithms for computer security

I am in the process of choosing project for uni. And I am really interested on combining genetic algorithms and computer security. Therefore my question, Is it possible to use GA on any aspect for computer security? For example?. I was thinking something like a evolutionary firewall/anti-virus that will be able to self protect/inhibit t...

How can you use php xdebug if you are on NAT behind a firewall?

I have the following use case for debugging a PHP application: The developer does have a private IP address The developer can connect only to a limited number of ports from the server, like 80, 8080, 3128, others being limited by the outgoing firewall. Still if the outgoing requests are HTTP he could use a proxy that does not have thi...

Does a firewall on a machine only block stuff from outside the machine or also from processes on the machine?

Does a firewall running on a machine only block stuff from outside that machine, or do they block communication between processes on a machine communicating via ports? Specifically, I'm writing a windows service which will expose an http RESTful service for other processes on the machine. The service will be running on a non-standard po...