Concerned with software or hardware firewalls

learn more… | top users | synonyms (1)

-4
votes
0answers
94 views

This guy claims no need to apply any Windows update or use Antivirus! Do you agree? [duplicate]

He said only need to block all incoming connections and use Chrome sandbox. You can read his claim and his other replies over here: ...
3
votes
2answers
208 views

Is it safe to not update Windows if you dont accept any incoming connections?

I see this guy shared his thought: How to be safe even without most updated Windows updates So he claims that as long as you do not accept any incoming connections and just use sandbox of Chrome, ...
0
votes
0answers
14 views

Cisco ASA Access List Summary / Visualisation Tool

I have a Cisco ASA firewall config with about 50 interfaces and approximately 4000 rules. I am trying to find a tool that can sort this into an easier to consume list or even a visualisation of the ...
-1
votes
1answer
38 views

How does PeerBlock generate range descriptions?

How does PeerBlock generate the range that it displays? I thought it was through some DNS lookup, but when I do the lookup I get LeaseWeb Content Delivery Network for the attached screenshot. Instead ...
3
votes
2answers
52 views

Why does our network firewall drop netbios-ns packets?

In our local domain environment, we use Sophos UTM to protect our network. When I check the firewall logs, I can see that a huge number of packets dropped by the firewall are netbios-ns (UDP 137) ...
2
votes
2answers
52 views

Is QUIC (Quick UDP Internet Connections) safe to allow through firewall?

Our firewall currently blocks QUIC (UDP 443) traffic which seems to be enabled by default in Google Chrome. Is it safe to allow QUIC or should I wait until it is implemented in all the major browsers? ...
1
vote
1answer
85 views

Raspberry Pi IDS/FireWall - Should I? [closed]

I was excited to setup an IDS/FireWall with my new Raspberry Pi on a standard home network. Reading threats to SSH and Linux, now I am not so sure. Setup by an experienced amateur I'm now concerned ...
6
votes
1answer
99 views

Would a DMZ be safe to use with a software firewall for home networking?

If I set up a Windows 10 PC with a software firewall (TinyWall, which is a front end for Windows Firewall) and blocked all traffic except for a few applications and ports I would be using (Minecraft ...
1
vote
2answers
98 views

How can the nmap tool be used to evade a firewall/IDS?

Some techniques are used to secure the operating system against network attacks e.g.: firewalls, antivirus software, an IDS like SNORT, etc. To take advantage of the nmap tool, is it possible to ...
1
vote
1answer
63 views

Can firewalls decrypt SSL packets?

I was wondering if the firewall has the ability to decrypt the SSL traffic. If so, the network admin is able to read the data in clear text at transit.
0
votes
1answer
62 views

Multiple instances of programs allowed in Windows Firewall

I am new to Windows Firewall. While allowing a program through Windows Firewall, I found multiple entries present for Firefox and Java. Why is that?
0
votes
0answers
39 views

DDoS Solution for request floods [duplicate]

What are the mitigations to protect from ddos? Is using firewall like cloudflare would help or not? My use case is just want to make sure that no one is sending flood of requests i.e. thousands per ...
3
votes
0answers
72 views

Modifying shell code to bypass Windows Firewall

As part of my OSCP's training, I'm supposed to get a shell on a Win7 machine using browser's exploit (MS12-037) with Windows firewall on. I have an idea but I'm having hard time applying it. What ...
1
vote
2answers
44 views

Is there a difference in security between an IP address white list and a domain white list with TLS?

It seems to me that an IP address white list relies on easily spoofed information, while a domain white list, if it forces TLS, at least, relies on the validity of the certificate systems. I may be ...
1
vote
1answer
81 views

How does a malicious user connect to a private network?

I have followed these instructions for setting up a couple of servers to have private networking. It ends by saying "It is important to secure your private networking interface the same way you would ...
1
vote
1answer
69 views

Question about IPv6, NAT, firewall, port forwarding, upnp and security

In the next months/years my ISP might give me IPv6 for my home connection. But what are the security implications? Will local network servers/embedded devices be accessible from the whole internet? ...
1
vote
1answer
41 views

Firewalled bots in UDP p2p botnets?

One thing that I don't understand about peer to peer botnets, is how a bot stays connected to the network considering the protocol used is UDP. Since the UDP is connectionless, and the bot is behind ...
2
votes
1answer
49 views

Counting on firewalls only : sound security strategy to prevent intrusion?

I had this discussion with a friend of mine who is a windows sysadmin. He said to me that for his company's IT security, he is doing only updates on the windows server. But except these system ...
2
votes
1answer
80 views

What are the security implications of autorun and external drives?

I have some questions about the security implications of accessing internal and external storage since I cant find any more information on it from what I've read. I have read about a variety of ...
2
votes
2answers
101 views

How to block I2P and Freenet to my network?

I am trying to find a way to block I2P and Freenet darknets in a corporate network. Does anyone know a way to block them (on firewall)? Do I need to close particular ports or block entry nodes (like ...
2
votes
2answers
38 views

Why do ALGs restrict traffic on a given TCP port based on the protocol?

My understanding is that application level gateways restrict the traffic they proxy based on port and protocol - say HTTP over port 80 or MQTT over port 1883. Both types of traffic are using TCP as ...
-2
votes
4answers
75 views

Zero-day malware protection [closed]

What is the best approach in defending your company against zero-day malware? Is there a firewall/system to do that? Is it good to run every file in a sandbox and to track activity of the sandbox?
0
votes
2answers
54 views

Protection against file distributed malware

Let's say I have one server called A which host an upload website which is connected at the network connection B. Let's say one of my clients uploads multiple .rar files of 1 MB (that contains malware ...
3
votes
1answer
42 views

Better alternative to WAF path whitelisting?

We are managing a WAF which is being used by some applications. Recently I tried to use a Valid URL module to white list all the APIs and static resources of an application. Although from the security ...
1
vote
1answer
46 views

Best appraoch to test inhouse firewall effectiveness

We have Fortigate 100D that has antivirus profiles enabled like SMPT, POP3 and IMAP. How one could make sure that the antivirus is working as expected ? For instance it seems that Fortigate has ...
3
votes
1answer
27 views

Why can't nmap identify the danted(socks5) service on non-standard port?

I'm testing nmap's abilities, I started a socks5 proxy server with danted, and started it on port 10090 I tried the following command, and expect it to tell me port 10090 runs a socks server, nmap ...
1
vote
2answers
113 views

Using nmap to bypass a firewall and perform OS fingerprinting

How can I use nmap to perform operating system detection on a system which has all of its ports filtered by a firewall? Is there a way to bypass it? I have tried: syn scan, xmas scan, fragment ...
5
votes
2answers
229 views

Setup a private VPN for family in China?

I have family in China. During the past weeks their internet connection was severely limited. VPNs such as Astrill and similar weren't working anymore. Is it possible to setup my own VPN (or ...
2
votes
1answer
61 views

If a firewall deletes DOS packets before they reach the designated application. Is it then possible to break trough the firewall with a DDOS attack?

My Question is that if a Firewall blocks for example a DOS attack of UDP packets. Is it then possible to "break" or take up the capacity of a server by sending enough packets trough a DDOS attack? or ...
0
votes
2answers
55 views

What is the difference between single hardware firewall and router?

With some googling, I learnt that routers contain hardware firewall. But I saw in many pictures that firewall and router devices are apart as follows: I know that there are a lot of firewall ...
0
votes
0answers
41 views

NetScaler config rule sample for cross site scripting attacks

I am trying to create rules to block requests to pages where XSS vulnerabilities have been detected. Lets say the /contact_us page is vulnerable to XSS, how can I block traffic trying to reach that ...
1
vote
2answers
116 views

Shared Office Network Security - VPNs, Firewalls, and systems

First, let me premise this post with the fact that I am completely new to network security. I have done a fair bit of reading up, but I am certainly by no means a professional. If anything I say here ...
1
vote
2answers
73 views

Deep Packet Inspection: Any real world examples of threat mitigation via DPI? [closed]

So I understand conceptually how DPI works, but I'm a little skeptical regarding the actual benefits of this technology. Considering the possible risks associated with deploying DPI, i.e., decrypting ...
0
votes
0answers
37 views

VPN and traffic filtering

VPN server assigns to the client public ip address and doesn't offer NAT function. In this case, can firewall on the client side to filter (inspect) VPN traffic (L2TP/IPSec, IKEv2, SSTP, OpenVPN)? I ...
16
votes
3answers
5k views

Running windows in virtual machine, should I bother with security?

I'm running Windows in a virtual machine on my mac (via Parallels). Should I bother installing antivirus, firewall and using other conventional wisdom practices (like don't open unknown .exe etc)? I ...
0
votes
2answers
81 views

Using Two Different Brands of Security Tools To Block Backdoors

There's this idea of using 2 brands of firewalls both inline that is usually brought up: {Internet}<-->FW(A)<-->FW(B)<-->{Internal Network} Or using 2 algorithms: {Plain ...
1
vote
1answer
76 views

UDP DNS & Firewall

This question might be simple but please understand my lack of knowledge. I am seeing a lot of DNS packets dropped by our firewall (sophos SG125) by default rule 60001. There are three Domain ...
0
votes
0answers
109 views

Gargoyle (OpenWRT) firewall routing for VPN

At present I have Gargoyle setup on my WNDR3700 to connection to a VPN provider in order to provide a little privacy. However this prevents me from connecting remotely to my home network. Previously I ...
19
votes
4answers
2k views

Detect non HTTP packets using port 80

We are currently doing port whitelisting on our firewalls which is working well but this of course does not prevent the implementation of side channels or the misuse of these ports for other purposes. ...
-1
votes
2answers
88 views

Determining Firewall settings (Ports, etc) for specific applications

How can we identify the network or network firewall requirements for a Desktop or Web application. Meaning what ports are required by the applications. How the Cloud and non Cloud networks communicate ...
2
votes
1answer
73 views

Linux (!) Network Architecture for CTF-scenario [closed]

My boss recently enrolled me in an InfoSec training. I am part of the network team, but have limited experience in InfoSec. My first assignment is to draw a layout of a network that will be used ...
0
votes
0answers
161 views

Isolating Computer on Home Network Using Multiple Routers

My goal is to isolate a computer on my home network. This computer (a rapsberry pi) should be considered untrusted and is accessible from the internet (port 22). I need a solution that will prevent ...
0
votes
0answers
24 views

How does a firewall protect against denial of service attack? [duplicate]

I do not know much about firewalls etc, but I am curious as to how a firewall protects against Denial of service attacks. My understanding is that, sending a lot of requests(more than the server ...
5
votes
1answer
188 views

If all ports are closed, do I need firewall?

I often read an article which enables a firewall to secure public Wi-fi. But I think a firewall may not be needed when (like nmap said) all ports are closed. If all ports are closed, all packets ...
4
votes
1answer
163 views

IPtables Linux Firewall and IPsec traffic

Can iptables filter out incoming datagrams that are IPSec-tunneled packets going to port 25?
6
votes
4answers
685 views

Using unusual port numbers [duplicate]

Are there any security benefits to setting up the ports on your firewall to non-standard numbers? For example, using port 15 for the SQL service.
2
votes
2answers
80 views

Database Protection : External & Internal

My company is using a weird database setup and I can't really figure what it is adding in term of security. Our Setup Outside World [Firewall] DMZ – Web Server [Firewall] External Database ...
0
votes
1answer
59 views

Is it safe to host passwordless web applications/software with web GUI in Virtual Machines

I have a Linux Mint Virtual Machine which I use quite a lot with my Windows host. I have lots of Software installed there (mostly with web GUI so I can access them from host easily). So I am ...
0
votes
0answers
46 views

Windows Firewall Log question

I have a question about log entries within my Windows Firewall log. I see these kind every now and then: #Fields: date time action protocol src-ip dst-ip src-port dst-port size tcpflags tcpsyn tcpack ...
0
votes
1answer
140 views

A seemingly innocent program is attempting to connect online. Should I be worried?

OS: Windows 10 64-bit updated, usually used for development and Steam-CSGO. Straight to the point: Solitaire just tried to connect to the internet. Details: After tightening my firewall rules after ...