Questions tagged [firewall]
A firewall is a program that controls the incoming and outgoing network traffic on a system. Use this tag for all questions related to firewall configuration and operation.
1,070 questions
0
votes
1
answer
48
views
Can Linux route external traffic to a loopback?
My computer (server listening) 200.200.50.2 |
My client_computer 200.200.50.4
The problem is that I have a Python server listening on my computer:
python3 -m http.server -b 127.0.0.1 -p 80
I set the ...
3
votes
2
answers
356
views
ssh -Y to remote but xlogo window does not pop up
this seems like a trivial issue but I can't get xlogo to show up from a remote ssh session.
on the ssh server side I have enabled X11forwarding in sshd_config.
from the client I connect with ssh -Y -...
- 1,572
1
vote
0
answers
76
views
Restrict Firefox network access with nftables (Linux alternative to Windows per-executable firewall rules)
On Windows it is possible to apply firewall rules directly to an executable (eg firefox.exe) so that only that application is restricted.
I am trying to achieve the Linux / nftables equivalent on ...
- 3,234
0
votes
1
answer
71
views
Opensuse LEAP 16 Services
I did a new installation of Leap 16 and I'm starting to struggle to set it up.
I don't use it as a server but as a desktop, and I don't need remote connections, because it's a single PC and it's not ...
- 25
3
votes
4
answers
379
views
Why do I receive response from the closed via iptables port
I set the following rules on the server with help of iptables
sudo iptables -A OUTPUT -p tcp --sport 22 -j DROP
sudo iptables -A INPUT -p tcp --dport 22 -j ACCEPT
Why am I getting a response via SSH?
...
- 159
2
votes
2
answers
247
views
I'm confused. Is my UFW firewall working or not?
Linux Endeavouros.
I don't understand how to tell if my firewall is on or not.
Using systemctl status ufw gives:
ufw.service - CLI Netfilter Manager
Loaded: loaded (/usr/lib/systemd/system/ufw....
- 232
0
votes
0
answers
178
views
How to idiomatically secure a Fedora Workstation system against all incoming connections?
Dear ServerFault community!
I run Fedora Workstation (currently version 42) on my laptop, and would like to configure my firewall to just reject or drop all incoming connections to keep my system ...
- 25
0
votes
0
answers
60
views
Problem using "dynamic" maps with nftables
I want to create an nftables filter rule that drops traffic where the source and destination address are equal. Nftables only allows to compare addresses against constants or sets/maps. So I tried to ...
- 1
0
votes
1
answer
63
views
iptables changes not having any effect [closed]
I was attempting to interrupt a TCP connection on my system, and was altering iptables rules using the iptables command.
Nothing I did seemed to have any effect, though. Inserting and deleting rules ...
- 185
1
vote
1
answer
201
views
How to enable the listing of Chromecast devices in the full network (mDNS): Chromecast devices are not showing in VLC or Chromium
Chromecast is working well in my home (trough multiple switches connecting different rooms) but I am unable to cast from my openSUSE Linux device. The Chromecast devices are not showing up neither in ...
- 111
1
vote
2
answers
151
views
Does Linux have a generic way to dynamically open ports? (Desktop)
By generic, I mean, mostly standard, i.e. not dependent on ufw or firewalld. What I am asking is if there is something akin to what you have on Windows, where if some game wishes to "Open to Lan&...
- 273
0
votes
1
answer
75
views
Iptables does not apply drop policy for other ports
I'm running a server where iptables is configured with a default DROP policy and I’ve only explicitly allowed certain ports (e.g., HTTP, HTTPS, SSH on port 22, etc.). Despite never adding a rule for ...
2
votes
1
answer
396
views
libvirt kvm virtual routed network: cannot ping gateway itself or beyond
I'm having trouble with libvirt kvm's routed networks where a VM inside a routed virtual network can ping every VM in my home subnet except the default gateway... or any gateway for that matter.
I ...
- 21
0
votes
1
answer
60
views
Unable to change firewall active zone
I am trying to update my firewall but now i want to revert it back to public
so basically the firewall is running and it was
public (active)
target: default
icmp-block-inversion: no
interfaces: ...
- 1
0
votes
1
answer
82
views
IPFW documentation
I am setting up router inside freebsd jail with ipfw, I might be blind, but I could not find comprehensive documentation on IPFW, which would make subject clear.
I read both "firewall" and &...
