Concerned with software or hardware firewalls

learn more… | top users | synonyms (1)

-1
votes
0answers
13 views

Filtering of incoming and outgoing packets in a firewall

In general, egress http packets should be allowed to pass through the firewalls. Ingress http packets, however, should go through firewall inspections. Suppose the Web server is placed in DMZ. If an ...
0
votes
1answer
38 views

Aside from Remote Exploit Code/Physical Security or Social Engineering - Is there another way to gain access to a network? [on hold]

After spending some time looking into security and remote attacks on a client/network, I feel like I've hit a wall - Every remote attack seems to boil down to one of the following approaches: ...
0
votes
1answer
29 views

Allow loopback in Iptables?

I'm trying to write Iptables rules for a small web server. Almost every source I've encountered recommends to allow loopback access to the web server, but doesn't explain why this is necessary. ...
2
votes
2answers
74 views

Find out what Linux software is trying to phone home

I have seen some suspicious outbound communications blocked on my VPS, which hosts a small experimental Web site, and want to find out which application is making the attempt. The server is running ...
0
votes
1answer
84 views

Would encryption bypass some firewall rules?

Would an encrypted connection be able to bypass a firewall? A firewall is working on layer 1-4 of OSI model, the encryption and decryption is done in presentation layer (layer 7 of the OSI model). Can ...
0
votes
3answers
32 views

How source port field in firewall rule is used

Some firewalls (like the first figure in 13.1.4 in http://doc.m0n0.ch/handbook/examples.html) allow user to specify source port in a firewall rules. But in a TCP connection, the source port is ...
1
vote
1answer
73 views

What security does an ISP provide for its customers?

I've heard that ISPs provide some kind of protection; using NAT and firewalls, to prevent hackers from using tools such as nmap to attack customers from over the Internet. What other technologies are ...
0
votes
0answers
30 views

Firewall best practice

I have to implement a firewall on a Mikrotik RouterBoard. What is a good way to do it? Here is my plan: Note: We are using an OpenVPN (bridge mode) server, a DHCP server, a PPPOE client, and an NTP ...
0
votes
2answers
68 views

Could a router protect our network or need we use an hardware firewall?

I am at a small firm (12 PC on the internal network). We use this network architecture now: Internet(Modem) --> Router --> Firewall --> Switch -- > Internal Network (clients PCs) ...
1
vote
0answers
89 views

Windows Firewall netsh equivalent of iptables u32 module

I have looked everywhere and I can't seem to find a netsh equivalent of the u32 module for iptables. I want to create a rule to Drop a packet that starts with a specific set of bytes. Similar to: # ...
3
votes
2answers
57 views

Blocking incoming traffic from privileged port (< 1024) to mitigate DNS DDos Amplification attacks

Hope someone can clarify. As I understand, in a DNS DDos Amplification attacks Multiple DNS queries are sent to a vulnerable name server with the source IP spoofed to that of the target server. The ...
0
votes
1answer
61 views

Sky Broadband Shield

I was just wondering the implication's to Sky's new revelation of a so called 'shield'. Is this actually even a security feature or just a advertisement stunt for Captain America. I can find very ...
0
votes
1answer
84 views

Dual Firewall DMZ

We've just learnt about firewalls and DMZ and I'm struggling to understand how are these actually implemented ? The architecture we've learned was something like this: Let's say that we have a ...
4
votes
3answers
207 views

Can a web server be secured with just a firewall?

I'm about to go online with my first web site, it is a small project hosted on a regular home PC running Windows 7. I want to keep the software footprint at minimum, so it only contains the operating ...
-1
votes
0answers
21 views

ACL implementation help

So I have network that looks like this: isp ->192.168.24.x - pix ^regional network(172.16.254.x)10.9.8.1 -> 10.9.8.254 asa -> local (172.16.1.x). So basically the pix has three interfaces, one ...
1
vote
0answers
23 views

API deployment infrastructure

We are going to deploy our service, it's drupal based with some additional REST APIs. The drupal servers will be (loadbalanced) put in the DMZ. We think to deploy the REST APIs on an app server in ...
1
vote
2answers
50 views

Is rolling my own firewall on top of my normal firewall dangerous?

I'm thinking about playing with/learning about firewalls. It is easier for me to learn by building, so why not build a firewall? If I run it alongside my normal firewall, I'd get the normal ...
1
vote
4answers
108 views

Comprehensive audit of firewall - is Internet truly not accessible?

We have many Linux servers in several co-locations over the world. By design, these machines generally should not be able to access the Internet. Depending on location and role, some sites may have ...
2
votes
1answer
67 views

How to configure Suricata to not interfere with virtual machine

I'm currently planning on setting up Suricata as a firewall on my laptop. I'm wondering however if it's possible to set Suricata to not interfere with traffic to and from specific virtual machines ...
0
votes
1answer
65 views

Is it a bad idea to use port forwarding as a long-term access strategy?

We are deploying multiple copies of the same system (some devices behind a gateway with NAT), and we need to have continued access for some of those devices. Right now our strategy is to have a set of ...
1
vote
2answers
69 views

SSH Security allowing only certain users to connect to the server [closed]

I have set up a remote ssh server on the cloud. I am newb at these things and have managed to bypass the required firewall using SSH. Now I plan on giving the access to only 2 more friends of mine so ...
0
votes
4answers
100 views

How to secure my website's FTP?

When I opened ftp command prompt and typed open mydomain.com, it gave me the following and I think that this is a security vulnerable. connected to mydomain.com. 220----- Welcome to Pure-FTPd ...
2
votes
1answer
100 views

IPS/IDS and Firewall Solution(s) to a Small Office

I was tasked with implementing a network security solution for a small real estate agency. They are a typical old-school mom and pops shop, about 15 employees with basic file sharing, printing, and ...
0
votes
2answers
117 views

Should I restrict Core Networking firewall rules in Windows server?

I have a server that I want to restrict access to by allowing only one IP address to be able to connect to it through desktop and make http request through port 80. Now in my firewall I only have ...
0
votes
1answer
58 views

Application Server <-> Database Firewall [closed]

What threats can a firewall between an application server and a database server mitigate that would not otherwise be mitigated when both the database server and application server are behind the same ...
1
vote
0answers
97 views

Proxy via pfSense and exclusions for DNS

I have posted this to NetworkEngineering.SE, as that seems the more suitable audience for this question. I will leave this question open here but am happy to see it closed. I just did not want to ...
1
vote
1answer
156 views

VPN Client - Addtional Security Layer or a Useless Feature

I have a corporate web portal which is used for staff collaboration including a web-based mail interface connected to MySQL Database, corporate calendar, file storage, customer contacts data with ...
1
vote
3answers
93 views

Make firewall management public?

A friend of mine installed a new firewall software at his company. Sometimes he works from home, and also has to maintain the firewall. The firewall management software is a web site. My friend made ...
0
votes
1answer
115 views

Can a firewall blocking a guest virtual machine secure the host?

I have searched up whether a host is safe from its guest, and generally, it is said that, aside from vendor security flaws, a guest that is infected can infect the host over a shared network. So, ...
-2
votes
1answer
162 views

How can I protect files on my personal home PC for when it is connected to my employers network via VPN? [duplicate]

I think my employer uses Citrix product to supply VPN. I have files in My Documents folder on my home PC that I would not want my employer to be able to access when I am connected over their VPN. I am ...
2
votes
3answers
329 views

iptables: plaintext password protection

I'd like to find a way to block or restrict my access to the web-pages where my password is sent as a plaintext on the internet. Let's assume if I have the same password for all web-pages, is it ...
3
votes
1answer
81 views

Tracking down the source of email attacks

For the past week our company's IDS has been blocking 100-200 meeting invite emails per day from a specific client that are loaded with buffer overflows targeted at Exchange 2003. The payloads are ...
1
vote
2answers
281 views

How can I use a proxy appliance as HTTP Proxy & Reverse Proxy at the same time?

I have a BlueCoat ProxySG 810 appliance and want to use it as both an HTTP Proxy Server for clients on the Inside interface of a PIX 525 Firewall (OS Version = 8.0(4)) and a Reverse Proxy Server for ...
1
vote
0answers
120 views

Bypass Nmap Scans Being Blocked [closed]

A friend has set up a VM for me to play with, I am currently stuck on a little problem: On this network he set up, there are 6 machines and a router, 5 servers (plus the router) show up on a typical ...
0
votes
1answer
138 views

How does a website get pass my server firewall and attempt to hotlink to my server resources?

I was stumped when I saw the following lines on my Apache server error log this morning: [authz_core:error] [client ::1:37317] AH01630: client denied by server configuration: ...
5
votes
2answers
117 views

Security risks of leaving open a VPN connection

We have older firewalls that don't allow for scheduling up/down times of VPN connections, and we're working with a client that will need to connect to it at different times each day. What are the ...
0
votes
1answer
354 views

What is the difference between SYN cookie, SYN cache, and SYN proxy?

I am trying to understand some techniques regarding SYN flood prevention and there are three terms I couldn't find a clear explanation of. The terms that are confusing me are: SYN Proxy SYN Cache ...
0
votes
1answer
95 views

How can an out-of-the-box (Windows) server not be secure? [closed]

Background: I'm considering switching from shared web hosting to VPS for added security. However - managed VPS's costs much more than unmanaged ones. So, assuming: I secured my website against any ...
1
vote
0answers
30 views

Pf rules configuration

Do these rules appear to be an adequate start? _interface="en1" _linode="66.228.57.75" #lish-atlanta.linode.com _ssh=" { 74.207.224.182 66.175.210.225 } " set block-policy drop set skip on lo0 ...
0
votes
1answer
204 views

Bridge Firewall vs Routing Firewall

What is the difference between bridge and routing firewall ? How they both works and what are the security advantages/disadvantages for both scenario ?
2
votes
4answers
3k views

What is the difference between antivirus and firewalls

I need a brief explanation about the differences between antiviruses and firewalls
1
vote
3answers
249 views

Best practice for accessing management port of firewall

I'm in the process of setting up a bunch of servers at the other end of the world (well, 8 hours travel time) in a colocation place. The servers and firewall all have a remote management port (KVM, ...
1
vote
2answers
195 views

how to find out if a program sends data to internet (without permission)?

We have an application to save our customers data (some kind of CRM). This application has been written in Delphi and is a client/server application. This program apparently is sending out ...
0
votes
1answer
100 views

Two-factor port-knocking via SMS (TXT)

It seems to me that a useful alternative or supplement to traditional port-knocking, fwknop, etc, for a system requiring only occasional access, would be to: Set up a one-time pad of keys, and a ...
0
votes
2answers
68 views

Is there a down side to how so many security products bundle multiple components into one these days?

For example it seems like anti-virus, anti-spam and firewalls have sort of merged into one product. Is there a downside to this? I don't know of any software firewalls that can be purchased without an ...
1
vote
3answers
116 views

hardware firewall placement

In a home office environment with cable internet, can a hardware firewall be placed in front of/upstream from a cable modem to also protect the modem from tampering by the isp or a hacker?
2
votes
3answers
292 views

Why block network ports?

There was another good question here on why you should block outgoing traffic: Why block outgoing network traffic with a firewall? But I was hoping to get an answer on why it is a good idea to block ...
2
votes
2answers
226 views

Are there “LAN IPs” on the internet?

I have a home-made web application and thought that an easy way to secure it's administration interface would be to simply reject all IPs that arent from 192.168... Is this viable? is it possible for ...
1
vote
2answers
128 views

How to restrict access to unwanted sites?

I use Ubuntu 13.10. I tried to used OpenDNS to restrict some websites. Unfortunately, I couldn't do that. I use AirStream 1200 USB modem to access WiMax internet. OpenDNS setting didn't work for me at ...
1
vote
0answers
140 views

Throttling DropBox behind a firewall

Our office network bandwidth gets choked when an employee copies a large file into her DropBox, since it gets downloaded on several machines (of other employees). LAN Sync is an option, but needs to ...