Concerned with software or hardware firewalls

learn more… | top users | synonyms (1)

1
vote
2answers
318 views

VPN Client - Addtional Security Layer or a Useless Feature

I have a corporate web portal which is used for staff collaboration including a web-based mail interface connected to MySQL Database, corporate calendar, file storage, customer contacts data with ...
1
vote
3answers
110 views

Make firewall management public?

A friend of mine installed a new firewall software at his company. Sometimes he works from home, and also has to maintain the firewall. The firewall management software is a web site. My friend made ...
0
votes
1answer
704 views

Can a firewall blocking a guest virtual machine secure the host?

I have searched up whether a host is safe from its guest, and generally, it is said that, aside from vendor security flaws, a guest that is infected can infect the host over a shared network. So, ...
-2
votes
1answer
432 views

How can I protect files on my personal home PC for when it is connected to my employers network via VPN? [duplicate]

I think my employer uses Citrix product to supply VPN. I have files in My Documents folder on my home PC that I would not want my employer to be able to access when I am connected over their VPN. I am ...
2
votes
3answers
547 views

iptables: plaintext password protection

I'd like to find a way to block or restrict my access to the web-pages where my password is sent as a plaintext on the internet. Let's assume if I have the same password for all web-pages, is it ...
3
votes
1answer
110 views

Tracking down the source of email attacks

For the past week our company's IDS has been blocking 100-200 meeting invite emails per day from a specific client that are loaded with buffer overflows targeted at Exchange 2003. The payloads are ...
1
vote
2answers
559 views

How can I use a proxy appliance as HTTP Proxy & Reverse Proxy at the same time?

I have a BlueCoat ProxySG 810 appliance and want to use it as both an HTTP Proxy Server for clients on the Inside interface of a PIX 525 Firewall (OS Version = 8.0(4)) and a Reverse Proxy Server for ...
1
vote
0answers
251 views

Bypass Nmap Scans Being Blocked [closed]

A friend has set up a VM for me to play with, I am currently stuck on a little problem: On this network he set up, there are 6 machines and a router, 5 servers (plus the router) show up on a typical ...
0
votes
1answer
216 views

How does a website get pass my server firewall and attempt to hotlink to my server resources?

I was stumped when I saw the following lines on my Apache server error log this morning: [authz_core:error] [client ::1:37317] AH01630: client denied by server configuration: ...
5
votes
2answers
195 views

Security risks of leaving open a VPN connection

We have older firewalls that don't allow for scheduling up/down times of VPN connections, and we're working with a client that will need to connect to it at different times each day. What are the ...
0
votes
1answer
1k views

What is the difference between SYN cookie, SYN cache, and SYN proxy?

I am trying to understand some techniques regarding SYN flood prevention and there are three terms I couldn't find a clear explanation of. The terms that are confusing me are: SYN Proxy SYN Cache ...
0
votes
1answer
139 views

How can an out-of-the-box (Windows) server not be secure? [closed]

Background: I'm considering switching from shared web hosting to VPS for added security. However - managed VPS's costs much more than unmanaged ones. So, assuming: I secured my website against any ...
1
vote
0answers
59 views

Pf rules configuration

Do these rules appear to be an adequate start? _interface="en1" _linode="66.228.57.75" #lish-atlanta.linode.com _ssh=" { 74.207.224.182 66.175.210.225 } " set block-policy drop set skip on lo0 ...
0
votes
1answer
532 views

Bridge Firewall vs Routing Firewall

What is the difference between bridge and routing firewall ? How they both works and what are the security advantages/disadvantages for both scenario ?
0
votes
4answers
12k views

What is the difference between antivirus and firewalls

I need a brief explanation about the differences between antiviruses and firewalls
1
vote
3answers
407 views

Best practice for accessing management port of firewall

I'm in the process of setting up a bunch of servers at the other end of the world (well, 8 hours travel time) in a co-location place. The servers and firewall all have a remote management port (KVM, ...
1
vote
2answers
331 views

how to find out if a program sends data to internet (without permission)?

We have an application to save our customers data (some kind of CRM). This application has been written in Delphi and is a client/server application. This program apparently is sending out ...
0
votes
1answer
141 views

Two-factor port-knocking via SMS (TXT)

It seems to me that a useful alternative or supplement to traditional port-knocking, fwknop, etc, for a system requiring only occasional access, would be to: Set up a one-time pad of keys, and a ...
0
votes
2answers
75 views

Is there a down side to how so many security products bundle multiple components into one these days?

For example it seems like anti-virus, anti-spam and firewalls have sort of merged into one product. Is there a downside to this? I don't know of any software firewalls that can be purchased without an ...
1
vote
3answers
158 views

hardware firewall placement

In a home office environment with cable internet, can a hardware firewall be placed in front of/upstream from a cable modem to also protect the modem from tampering by the isp or a hacker?
2
votes
3answers
613 views

Why block network ports?

There was another good question here on why you should block outgoing traffic: Why block outgoing network traffic with a firewall? But I was hoping to get an answer on why it is a good idea to block ...
2
votes
2answers
245 views

Are there “LAN IPs” on the internet?

I have a home-made web application and thought that an easy way to secure it's administration interface would be to simply reject all IPs that arent from 192.168... Is this viable? is it possible for ...
1
vote
2answers
179 views

How to restrict access to unwanted sites?

I use Ubuntu 13.10. I tried to used OpenDNS to restrict some websites. Unfortunately, I couldn't do that. I use AirStream 1200 USB modem to access WiMax internet. OpenDNS setting didn't work for me at ...
1
vote
0answers
196 views

Throttling DropBox behind a firewall

Our office network bandwidth gets choked when an employee copies a large file into her DropBox, since it gets downloaded on several machines (of other employees). LAN Sync is an option, but needs to ...
1
vote
4answers
1k views

Block all Nmap scan methods on Windows [closed]

How can I prevent someone from scanning my Windows box using Nmap? I used Comodo as my firewall but someone still can scan my box using Nmap and get some info like open services and OS detection.
2
votes
2answers
288 views

Identify if files are being transferred from my computer over the internet

This may seem like a silly question to most, but... I recently has some spyware infected on my machine, which I have since gotten rid of. Using a couple of scanners (that come recommended on various ...
7
votes
4answers
2k views

Is blocking UDP and TCP sufficient to prevent unwanted network activity?

I want to be 100% sure that my machine only connects where and when I want it to. If I use a firewall that blocks all UDP and TCP packets but those that I explicitly allow to pass, can I be 100% sure ...
2
votes
3answers
348 views

Suspicious VMWare connections that bypass firewall

I'm running VMWare 5 and I have found that when I start up VMWare I see two connections: TCP 10.100.100.161:55555->as-40816.engx.vmware.com:https (ESTABLISHED) TCP ...
1
vote
2answers
261 views

Are KIS 2014, Malewarebytes Pro and SpyBot sufficient to prevent internet attacks?

As mentionned in the title, I have KIS 2014, Malewarebyte Pro and Spybot installaed on my windows 7 (regularly updated). I regularly scan my pc for viruses and spywares and clean it with Glary ...
3
votes
2answers
438 views

Using only a firewall, how do I protect a database server from be exposed?

If I had two firewalls, I could put a web server within a DMZ and then with the second firewall restrict the access to the DB server. However, If I only have one firewall, how could I accomplish ...
7
votes
3answers
16k views

Difference between IDS and IPS and Firewall

The differences between an IDS and a firewall are that the latter prevents malicious traffic, whereas the IDS: Passive IDS: the IDS only reports that there was an intrusion. Active IDS: the IDS also ...
1
vote
1answer
569 views

Is there a supported way to run a custom log export script at boot time in Checkpoint's Gaia OS?

Specifically, we're using fwm logexport piped to logger to dump the audit logs in real time via syslog to our SEIM. It works great if the command is run manually (in the background) from the "expert" ...
3
votes
1answer
118 views

Who watches the watchmen? User empowerment over firewall behaviour on a personal computer

I've been exploring the gamut of free Windows firewall applications recently and have encountered the following problem: The better firewalls are excellent at stopping other apps from phoning home ...
1
vote
1answer
52 views

Moving all servers to routeable IP Addresses

Company I am consulting to wants to move all their servers from private IP space to public IP space. I'm am trying to convince them that this is a bad idea that it makes sense to move only certain ...
1
vote
2answers
83 views

Should I use a firewall even though I am on a private vlan inside a data-center?

Working on setting up some new infrastructure and I want to configure everything so that it's as secure as it needs to be, but I don't want to worry too much about adding additional unneeded ...
0
votes
1answer
112 views

Packet filtering firewall - (Network Layer) [closed]

I would like to know what does this particular rule of the packet filtering firewall ruleset do: Source Address: Any Source Port: Any Destination Address: 192.168.1.0 Destination Port: 1023 and above ...
2
votes
1answer
833 views

Expose web service in a secure manner

Requirement I have a web service I need to expose on the DMZ for external communication. The web service communicates directly with a critical database that sits on an internal net. Current ...
-1
votes
1answer
117 views

Benefit of having strict ACLs [closed]

My company uses strict ACLs for the connection between two boxes. What are the benefits of these?
-1
votes
2answers
150 views

Linux: Blocking outside attempts at attacking computer

in the past when I wanted to block outsiders from attempting to start connections with my Linux machine's various TCP services, what I was told to do was to add this line to /etc/hosts.deny: ...
2
votes
2answers
852 views

Benefits of REJECT over DROP on a single PC

Recently I learned about the difference between DROP and REJECT in a firewall. I understand that REJECT is better because it closes the connection immediately instead of waiting for timeout as DROP ...
1
vote
1answer
117 views

Why do outgoing rules have priority over incoming rules?

I've been spending the morning playing with my routers and I've checked one thing: All of them come by default with an implicit deny configuration for incoming traffic, that is all packets should be ...
1
vote
1answer
405 views

Limit BitTorrent Sync connections to a specific network

Is it possible to limit BitTorrent Sync connections to a a specific network using the client software? Right now the closest I can come up with would be IP limitations imposed on each client using a ...
1
vote
2answers
64 views

Handling security with sub-domains pointing to boxes

Generally, despite running hardware+software firewall combos and keeping every layer 7 aspect of the box secure, I don't like to disclose the direct IP addresses of our servers to the public as a ...
2
votes
5answers
2k views

SYN flooding attack causing high CPU on hardware firewall

I have a ZyWall USG 200 firewall. A few days ago there was a SYN flooding attack on it causing 100% CPU load. After investigating it turns out this was attack from a single IP address and while the ...
1
vote
4answers
29k views

How to effectivily block torrents on my network?

Hie, As per my network policy, we have to block all torrent traffic from network. To do this, I used to block all ports above 1024 on my firewall/proxy devices. But due to this, many other ...
3
votes
5answers
158 views

Windows: Any method to enforce user confirmation before the browser opens a URL requested by an external desktop app?

A robust outgoing firewall will protect against desktop applications directly connecting to the internet without your permission. However, as the browser is a generally authorized application for ...
-2
votes
2answers
101 views

Why do home internet users cant communicate with their peers? [closed]

As a home internet users, why does my ISP block my communication with any other client on the same subnet as mine? It is done for security obviously, but what is the risk? Update: as clarified by ...
1
vote
0answers
125 views

Why my proxy is still having some connections blocked

I am behind a firewall in France. I connect to proxy A, in Ireland with Dante via SSH port 22 and make a tunnel forwarding port 1080. The proxy works as expected but still having a port range ...
9
votes
2answers
2k views

Kerberos authentication over the public internet

What are the threats to having the KDC accessible via the internet for remote clients? It's my understanding that the authentication is a challenge/response protocol and that the password is never ...
-1
votes
1answer
67 views

firewall settings for VPN

In my firewall settings there are options for "Allow VPN connections via PPTP" and "Allow VPN connections via L2tp-IPsec". All of my internet traffic goes through a VPN. Should I have these settings ...