Securing Nas drives behind an internal software based firewall

I have a couple of Nas drives that are wide open for everyone on the network to see

I am wondering if I could have Pc's with two NIC's

One going to normal network and one going to a switch which I would then connect the NAS drives too as well

At least that way I could monitor the firewall

Or is there another solution?
Anwsers on a postcard

Ian.

After a nasty Trojan virus, we have implemented windows firewall SMB block rules on our client computers to block incoming SMB.   This allows us to protect computers on the same network from a lot of malware file dropping.

We are also implementing a new Patch Manager that uses WSUS as an intermediary.   This mechanism requires SMB and WMI.   So, with Group Policy I tried to put in an exception in the rules using an allow if secure, then putting in the computers that need access.  I found out that if there are local rules that allow SMB and they are merged, it will allow anything through.   I also went the route of setting up a machine (windows 10) firewall manually, then exporting all the firewall rules with an exception (defined in remote computer scope), then denying local firewall rules and local security connections through the GPO.   This, initially, I thought worked.   However, when testing the same GPO on a windows 7 machine, it did not clear out the local firewall rules.

Is there something different I need to do for windows 7 firewall, or is there another route we should take?   Right now our LAN to LAN segments are protected with firewall, but clients on the same segment are vulnerable to each other unless I do a block rule (which takes precedent over any allow rule).

Client has brand new Win 10 Pro with Windows Defender...
He cannot access a certain website...
www.commonsku.com is providing an online training video...

Clicking on the video takes you to www.useloom.com...and Defender goes crazy...red page..."infected website"...email to tech at commonsku.com says we need to whitelist
useloom.com...

Got the IP addys...edited hosts file...no joy...
Tried to go into Defender but cannot figure out how to allow a website thru Defender...

Go to New Rule...nothing there that would apply to a website...Programs...Ports...etc...no HTTP://...

Need a little help...can't be hard....I'm just not seeing it...

thanks

what is the difference between state full inspection and deep packet inspection ?


thanks !!!

Hi all,

I'm looking for "firewall" software which I can install on my Windows 2008 server so clients can securily connect to this server.
Is this possible and which is a trustworthy vendor for this. I know I can also use the built-in but more and more systems like Apple do not really support it anymore and because this server is behind a shared connection a hardware firewall is not possible.

Thanks for your advice in this matter.

Best regards

Windows 10 Version 1809  Build 17763.107
Windows Defender Security Center says:
"Windows defender firewall is using settings that may make your device unsafe"

I reset the firewall and it seemed to work in fixing this.,
Then I applied our standard script which adds firewall settings.
Now the message is back.
But how to find the problem?

so all of a sudden some emails stop flowing and my connector is not validating, been setup for years and we did not change any server or network settings

i have Office 365 and a hybrid server - exchange 2010

the emails that are failing are coming from my mercury server and flows thru my exchange to office 365. i have contacted microsoft support but they are saying its an internal issue.

Description of problem:
I have this a text file

# Generated by iptables-save v1.4.21 on Fri May 11 16:48:14 2018
*nat
:PREROUTING ACCEPT [104870:20593583]
:INPUT ACCEPT [116564:21221907]
:OUTPUT ACCEPT [17993376:1098269263]
:POSTROUTING ACCEPT [17993377:1098269323]
-A PREROUTING -p tcp -m tcp --dport 443 -j REDIRECT --to-ports 4443
-A OUTPUT -d 127.0.0.1/32 -p tcp -m tcp --dport 443 -j REDIRECT --to-ports 4443
COMMIT
# Completed on Fri May 11 16:48:14 2018
# Generated by iptables-save v1.4.21 on Fri May 11 16:48:14 2018
*filter
:INPUT ACCEPT [104255:21990084]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [116465543:24365206954]
-A INPUT -p tcp -m state --state NEW -m tcp --dport 4443 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 8081 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 8443 -j ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p tcp -m tcp --dport 8080 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 8081 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 8443 -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited 
-A FORWARD -p tcp -m tcp --dport 4443 -j ACCEPT
-A FORWARD -p tcp -m tcp --dport 8081 -j ACCEPT
COMMIT
# Completed on Fri May 11 16:48:14 2018

Select all Open in new window

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.Place the File in a Tmp directory as iptables-export-ref2.txt
2.Run the Command: sudo iptables-restore -t < /tmp/iptables-export-ref2.txt
3. Error: Iptables-restore v1.4.21: iptables-restore: unable to initialize table 'nat

Actual results:
It gives error : iptables-restore v1.4.21: iptables-restore: unable to initialize table 'nat

Expected results:


Additional info:
I am not sure what is missing here and what needs to be done to get this implemented.

We have a user with a HP Officejet 6830 that we are trying to setup with HP EConnected/EPrint (print over Internet).  Everything goes smoothly throughout the setup, however, upon adding the printer the dot is orange not green on the HP EConnected site.  However, in checking the printer locally he have a green check mark for EPrinting.

The user has a basic home network with a AT&T UVerse (not sure of the exact manufacturer).  Do you need to open up certain ports for EPrint to work on one of these routers?  (In the past wet set one up on a home network with a Negear router and it was plug and play--green dot next to printer not orange.

I am doing my first sbs 2011 Standard to office 365 hosted exchange migration.

I am using migration wiz and 4 of 5 mailboxes failed. one talked of actively refiusing the connection.

It reminded me - there's a watchguard firewall at the sbs 2011 location.  I remember once someone else having a problem with too much data going to /. from 1 place that the watchguard shut it off - there's a setting to limit amount of data to / from 1 external location that was on by default.

Anyone know where that is?  Could that be why they are failing the migration?

can you tell me where to look to disable that if it's on. and maybe where to look to see if that feature was activatted in the last 48 hours?

THANKS!