iptables -A OUTPUT -p tcp -o eth0- -s 192.168.1.0/24 --sport 445 -m
hashlimit --hashlimit 20/sec --hashlimit-mode dstip --hashlimit-name
samba -j ACCEPT
iptables -A OUTPUT -p tcp -o eth0- -s 192.168.1.0/24 --sport 445 -j REJECT

[ more ]  [ reply ]

We have to either renew the licence on our Checkpoint Firewall-1 NG
(and upgrade it) or change to another software solution for our
firewall setup.

Our approximately 25000 users pay for internet, some of them use a
pay-as-you-go-system. At the moment the accounting is done by custom
programs that

[ more ]  [ reply ]

HI
This is normal for ISA and you can fix this by going to:
Open the ISA Server Console and expand the Configuration, and select General, and then Click on "Define Firewall Client Settings", You will have a new Window for the "Firewall Client Settings"
Click on the Application Tab and from the list

[ more ]  [ reply ]

Hi,

I am using Windows server 2003 network with ISA 2004 as proxy. I am having
problem in passing MS outlook requests. Even I created a firewall rule to
allow all outbound traffic to external, but unable to solve the problem.
Outlook configuration is quite OK as when I by pass proxy, it works fine.

[ more ]  [ reply ]

Hi,

I've run into, believe it or not, the exact same issue, to the letter. I was wondering if you had any luck, since this was so long ago.

[ more ]  [ reply ]

Hi All,

We are in the process of reviewing our entire Security Gateway (3 Gateway
Point)

We are trying to replace MailMarshal and N2H2 with a hardware base solution

Issues on

Primary

Email Filtering (Anti-Virus, Spam, Reporting etc)
Web Filtering
Hardware Base

Secondary

A Firewall, IDS, Proxy

[ more ]  [ reply ]

Dear friends,

in order to reduce some time settings network firewalls i wrote a
framework i would like your comments on. Of course, i did not to pass
the ideia of being a lazy professional, but there are settings all the
same everywhere. For instance, rule to prevent packets incoming with a
source

[ more ]  [ reply ]

I have a similar setup except my setup looks like this:

cable modem --> pix --> wrt54gs.

My setup works very nicely. I had to do some routing because I have different subnets. You may need to put some routes on your Linksys (they don't route very well). It may not be a bad idea to switch th

[ more ]  [ reply ]

Hi,
You do not need to specifically ban Something (Such as this).

Virtual hosts are ok as long as they are Single purpose devices.

PCI does not allow running dns and web on the Same Component -let alone separate Security Zones

So this is a big no no to which I would add the phrase "Contribitory

[ more ]  [ reply ]