Search the Community
Showing results for tags 'firewall'.
-
Hello LTT forum, I've been following Tomaž Zaman, a YouTuber who is planning to create a high-end router. His focus isn't solely on providing behind-the-scenes insights into the design and planning process but also on everything involved in commercializing it.... from picking components for the device and seeking investors and establishing a company. What sets this project apart is its commitment to transparency. Through his videos and posts, he intends to document every step of the process, from idea to execution. He's already uploaded several videos, ranging from the presentation of his prototype to announcing his interest in creating and selling the device. He's also discussed potential pricing based on the bill of materials he's already shared. Summary Personally, I don't know him beyond his channel, but I am very interested in this project, and I believe it deserves a litter of exposure for everyone to appreciate. By sharing this project with all of you, I hope to generate additional interest and foster a community that can contribute ideas and feedback. Sources His YouTube Channel:https://www.youtube.com/@tomazzaman -
Hello! Im looking for help to use a firewall to my server. The main objective is to block these countries -> Russia, China, Belorussia, Ukrain. Because 200%-of the attacks against my gameserver is coming from there. Me and a few friends are playing on it, and im practicing java on it, and this is very annoying. Im looking somthing relatively cheap solution.
-
Hey all, just looking for some tips and tricks to set up a physical firewall on my network. At the moment my Asus Router does the firewall/router combo and it'd be a lot more secure (and not to mention good practice for me since I wanna move up in my IT job) to just use a physical box to process traffic through. Currently I have a HP EliteDesk 800 G3 SFF PC that's kinda been my testbench/tinker box and I'm thinking of turning it into a physical firewall. It only has onboard 1gig ethernet, but in all honesty I'm pretty sure my ISP doesn't offer anything higher than 1gig for me as a consumer anyway, and anything 2.5 gig is just for local transfers anyway. What software would be best and what might be the best way to go about setting it up? I know some people run a Linux based OS that's dedicated for networking (Proxmox and the like basically) but if there are other suggestions as well, I'd be interested to know what they may be. Also any video tutorials or guides to follow alongside are always helpful. I'm much more visual of a learner than text lol. Whatever suggestions you may have will be welcomed graciously. Thanks everyone <3
-
Hello, is this is a correct set of rules to restrict access to NFS shares to two lan:
-
hello i have some doubs about pfsense, i have a 10gb connection in my house and i want to host a game server with at least 300 people online in peaks, and i want to protect the server with a firewall pfsense, i was thinking in buy a low end desktop only to install pfsense that should stop like 90% of kiddos that want to attack the server and my doub is that idk what extension of pfsense i should use... ofcourse i accept any idea that you all can give me UwU
-
Hello, I have installed Pfsense firewall on a cloud VM in proxmox and my pfsense have a public wan IP, but i cant access its web configuration on wan IP, i have tried to allow all outside network and all protocol on its wan address after than i can ping and ssh into console but still cant open the web gui, I have tried the fixes on the internet and it work when i get my wan public ip from dhcp then i can do some changes and i can get access to web gui from wan ip like pfctl -d but this wont work when i put my static public ip Any help please Thank you
-
Hello folks! My friends and I are starting a new company. It is a small art studio. Are there any open source and easy to manage solutions for deploying OS images, software applications and security patches to our studio machines? Anything that allows pushing Group Policies would be amazing. We plan to have about three dozen W10/11 systems along with a few Mac stations. Secondly, any suggestions for an easy to manage firewall and proxy would also be greatly appreciated. I am looking into pfsense at the moment. Lastly, any advice you could share to someone who is not experienced in managing the entire IT stack by themselves would be wonderful! Any pitfalls I should be aware of, any resources or technology that I could learn to make my life a bit easier. Thank you for any responses and for your time.
-
So I haven't had a computer/ laptop in forever. Like 15 yrs. I'm making a pc. But I wonder about Protective Software. Back in the day I was a kid and was sold some software like McAfee, or Nord something and I never knew if it was just a sales trick or if it actually helps. And Do I need something like this? One friend says no and the other says they wont pay for that lol. So I just don't want to make a pc and then get all messed up because I get hacked. Advice?
-
Is it typical to pay over $500 USD a year for support on a firewall? 3 years ago, our church got a new firewall (Fortinet FortiGate 60E). The purchase price also included 3 years of support from the manufacturer to keep the firmware up to date. Now we're being asked to pay $550 a year or $1680 for a 3 years of support. I was not aware that firewalls are using a subscription model. Some context: Our church runs ~350 a week. We don't have any servers, NAS. Just typical consumer devices (phones, computers, smart TV's.) on a basic network with a main and guest Wifi and some VLAN's for our phone system. Our IT is managed by a 3rd party (Powernet) who is sending us the bill to pay. Is this a typical price or are there better alternatives I should look into? Thanks very much! -David
-
I currently put my network back on my TP-Link router, since it has VPN and DDNS services on it. Still able to access my internal network. So I currently went back to my router due to Pfsense and Opnsense being similar. Pfsense is complicated but once you learn it its gets easier and very confusing GUI. OPNsense is easier for the most part in the GUI layout but when it comes to importing my openvpn hosted on linode, it is a headache. Pfsense is easier to import vpn certs. I hooked up my opnsense box to my 2nd computer to keep my main network going without interupting it. So what im asking has anyone everswitched to OPNSENSE from Pfsense and how has it affected you home network like steam and game servers.
-
A quick search on YouTube and browse of the forums makes me think that LTT should do a new build your own firewall tutorial all things Sophos XG Home specifically. The upload of PfSense / OpnSense is great, but a dedicated upload from start to finish for XG Home would take it to another level. I'm no security engineer/expert however I'm tinkering with XG Home. Having Linus showcase XG Home would encourage loads of others to get on board and bring enterprise grade firewalling to the home, encouraging younger viewers to become interested in security. The fact it is free for home users, even with limited hardware specs, it's more than capable for 1Gbps WAN users with all the features turned on. I'm using a SFF PC with a LP 4 port card from eBay. The machine has a 6400 and 4GB memory. I've managed to LAG all the card's ports for LAN use and the board's port for WAN. There are a ton of features that open source do not come with as standard (although you can always add a plug-in) but even just covering the basics in a full upload from LTT showing how to configure DNS, change LAN IP range, etc would be epic. The one thing I'm personally struggling with is UPnP for basic use such as PlayStation, PC applications such as Plex. You have to manually apply rules to make specific applications to run without problems. As I said, I'm not a network guy so this I struggle with compared to a plug-in you can get using alternatives.
-
Hi everyone! I need to get around my CG-NAT to access 2 IP Cameras from outside my house, (before any of you ask this, no, my carrier does not offer a Public IP address, as i get my service via 4G, and i can choose between a total of 2 carriers, none of which offer public IPs). The Solution i came up with, is to rent a VPS in the cloud that i use as a PPTP VPN server (with port forwarding), and to connect an EdgeRouter (under which i connected my cameras) to it. The VPN works perfectly, even port forwarding does, i even tried connecting directly to it with my pc, and opening ports via Windows Firewall. Now to the main problem, the EdgeRouter, i managed to have it connect to the VPN server, i got an IP address, and i can even surf the web through the VPN, but i just can't get the port forwarding to work, i'm currently to the point where if i expose regular HTTP with port 8080 i can detect SYN packets through WireShark, but it's almost like the response packets can't get to destination, i'm pretty sure it's a NAT issue on the EdgeRouter side. A few details about my setup: Home (Natted) Network: 192.168.1.0/24 EdgeRouter's Network (Where the IP Cameras are): 192.168.10.0/24 VPN's Network (Server and pptpc0 interface): 192.168.50.0/24 VPN Server OS: Windows Server I attached a map of my network topology. Thank you in advance for any advice.
-
Hello everyone I have an issue with Hamachi and similar software such as ZeroTier. My issue is that everything seems to work, except for me sending data to anyone else on my networks. I am unable to ping anyone due to it timing out, and Hamachi's diagnosis tells me this: Tunnel: OK Local results: Adapter configuration: OK Traffic test: OK Peer results: [255-123-905] Adapter configuration: OK Traffic test: Inbound traffic blocked, check firewall settings I have tried making inbound and outbound rules for Hamachi in my windows firewall. I have tried disabling my anti virus and firewall. I have tried allowing Hamachi to communicate through Windows Defender Firewall. I've tried disabling protection for Hamachi under Domain, Private and public profile. I've tried reinstalling Hamachi, restarting Windows and then reinstalling Hamachi. I also tried running it as an admin. Last I tried joining my phones hotspot. I am unable to port forward due to my living situation / not allowed access to the Router and such. My friends are able to join if I host a server for whatever game it maybe, the experience is terrible, as in they appear to be 10-60 seconds behind. I can't seem to find any solutions to my problem online after working on this all day yesterday. I've exported my system informations and attatched it to this post. 1071702263_SystemInformation.txt -
Hello, i have build a NAS with Free Nas and wanted to set up a firewall. On google i couldnt find any helpfull informations. Does anyone know a way to setup a firewall or know where to find this information?
-
I've been using Avast Premium Security for years and the experience has always been positive (except for the annoying pop-up ads), but as my current subscription is about to expire I'm left wondering if it is still necessary in this day and age when I keep hearing about how good Windows Defender is. Besides, aren't malware and ransomware the biggest threats these days more so than viruses? Wouldn't be better to invest in a solid firewall and/or malware removal tools (and common sense, of course) instead of relying on these services and the speed with which they update their databases? Avast is offering a pretty awesome discount to renew my subscription, but would that be the right move? Would invest in something like Malwarebytes be a better option instead? -
Alright so I tried to see which ports twitch studio beta uses, it doesn't use TCP 1935 like RTMP, I tested it with my firewall, OBS doesn't work, but twitch studio beta does, and there seems to be no documentation about this. If you know please feel free to share. -
I wanted to set up a firewall on my router or even dns to block apples update servers. I keep pressing cancel on updates and postponing updates yet when I woke up it had taken an update and I lose my jailbreak. So how do I block apple update servers on a router and how do I find the ip addressed to block. Would I use a network sniffer?
-
Idea: I currently have two machines at home with config below: Machine 1: Case: Lenovo ThinkstationC30 CPU:2 x E5-2640V2 Motherboard: Lenovo Proprietary Memory: 64GB ECC Ram Storage: 120GB MSata Drive for Proxmox OS 1TB 7200rpm Sratch Drive 2x 3.5 Seagate NAS IronWolf 2 TB ( Slow VM storage-ZFS Mirror-0) 2x 2.5 Samsung 850 EVO-Series 500 GB (Fast VM storage- No RAID/ZFS) PSU: 800W Gold Networking: Intel Quad port NIC 1 Onbaord GPU: 1.Nvidia K4000 PCI passthrough to a Gaming VM 2.HD6450 1GB for Server Video out Current VMs list : Firewall: 4 Cores 6 GB (Currently using 20% CPU and 55% RAM) Load Balancer: 4 Cores 8 GB (Currently using 34% CPU and 75% RAM) Xpenology: 2 Cores 2 GB (Currently using 1% CPU and 39% RAM) Ubuntu-1: 4 Cores 2 GB( Currently using 2% CPU and 33% RAM) Ubuntu-2: 2 Cores 2 GB( Currently using 1% CPU and 30% RAM) Ubuntu-3: 2 Cores 1 GB( Currently using 7% CPU and 92% RAM) Windows VM : 8 Cores 8 GB with Nvidia K4000 passthrough I have a Synology 718+ with 2x4 TB drives installed for VM backups from Poxmox. Machine 2: Case: Fractal Design Meshify C ATX CPU: AMD Ryzen 3600X Motherboard: MSI MAG X570 TOMAHAWK WIFI ATX AM4 Motherboard GPU: RTX 2080 Super Memory: Crucial Ballistix 16 GB (2 x 32 GB) DDR4-3600 CL16 Memory Storage: 256 GB M.2 SSD 2 TB Seagate Firecuda gaming PSU: Corsair TX650m I am thinking to merge the above to machines into one with below config: Motherboard: MSI MAG X570 TOMAHAWK WIFI ATX AM4 Motherboard ( already have ) Case: Fractal Design Meshify C ATX ( already have ) CPU: AMD Ryzen 9 5950X (will buy based on suggestions) GPU1:RTX 2080 Super(For Gaming VM) ( already have ) GPU2: AMD HD 3450(for Proxmox) ( already have ) Memory:Crucial Ballistix 64 GB (2 x 32 GB) DDR4-3600 CL16 Memory (will buy based on suggestions) CPU Cooler: Noctua NHD15 (will buy based on suggestions) Boot SDD: 250GB M.2 SSD ( already have ) PSU: Corsair 650W ( already have ) Storage: 2x 2.5 Samsung 850 EVO-Series 500 GB ( already have ) 2x 3.5 Seagate IronWolf, 2 TB, NAS ( already have ) 1x 2.5 2TB Firecuda ( already have ) Networking: Intel Quad port NIC ( already have ) 1 Onbaord ( already have ) I have below questions : 1. Is this a good idea? 2. If point 1 is a good/decent idea should 5950x is enough or a overkill ? will 3950x would do ?
-
My dad and I are wanting to build a server, I would like the server to be able to run Minecraft with at least 8 players and mods. My dad would like to use it for use to share files and also use it as a firewall as we are getting alot of attacks. I was wondering if first if is possible to do all 3 things on one server. Second what parts do we need or what prebuild server (if there are any) we could buy. He has set a budget of $1000 Dollars or less. I have also heard to not waste money on a GPU for this type of server as RAM and CPU are more important and that the integrated graphics would be fine for using a monitor, is this true? Any and all help is appreciated and Thank You for taking your time to help. -
Business-y question here... Got a 5 user business currently running a Sonicwall that is coming to it's very expensive license renewal. Keep looking at the Ubiquiti USG (the small one, not the big rackmount pro model) as an alternative. 80Mbps down, 20Mbps up Very flat network, no fancy VLANs, Port forward or NAT rules, just internet straight out.
-
Hi I have problem connecting from the internet to my server with windows server 2019 on it for testing purposes I have already disabled windows Firewall but it is still unreachable. I do not have installed any type of antivirus/firewall software, in the past I’ve had Glasswire installed but I have uninstalled it some times ago, so I don’t think it can cause problem. I have no idea what the problem could be, some advice? thank you
-
hi i have a server with windows server 2019 and connectify Hotspot/Dispatch PRO installed, my problem is that even if i disable the windows firewall i can remotly access the server only via LAN, if i forward a port like 22 (which is the one that i need), from external network it is not reachable, i think that the problem may be Connectify Driver but i'm not sure. Some advice? PS i have other servers that uses ports too, i have tested port 221 on another and it worked so i'm sure the problem is the Computer that i have described before
-
Hello everybody in the LTT forum, I am counting on the swarm intelligence of y'all because I am totally lost rn. A relative of mine bequeathed his beloved networking hardware to me. He told me it would be a hardware firewall but I have no idea how to set it up or how to access the configuration of this device. Unfortunately there is no chance of asking him for help. So: how to I use this thing? I also received a small odroid xu4s with it but it didn't come with the micro SD card. Any ideas? On the top panel of the rack device it says varia controller unifi. I am thankful for help! Please don't laugh at the lack of my networking/Linux knowledge...
-
I don't know if any of you are experienced with extensions like StayFocusd, but those extensions are just horrible at blocking websites. I have tried many of these website blockers and most of the time, either they work, or don't work, or can be bypassed with a vpn. I did initially learn about the editing host files method but that can be bypassed using a vpn, very easily. Is there any other way I can strictly block websites on my computer? Like just on my pc and not on other devices such as my phone or someone's else's phone? I'd also love to know if there is any way I can block specific websites on my entire network. Like no one using my wifi connection at home (wireless or ethernet) can access it, on their laptop/computer/phone etc. -
So let's imagine I have two servers on the same network with a single incoming internet connection. I want to run both servers on the same port, let's say 443, so that I don't have to append :someport to the address for the other one. Now let's also say that I have two domain names, both of which resolve to this same public IP address. Is it then possible create a port forwarding rule for my router (OpenWRT) to inspect incoming connections, and direct them to the appropriate server based on what domain name they used/resolved to get there? So that even though they're on the same network and sharing the same single internet connection, the servers can host services on the same external port and trust that users will be auto directed to the correct server based on their intended target. Can the router even see that information if a packets are encrypted via TLS/HTTPS, or is that part of the data encrypted as well?
