Concerned with software or hardware firewalls

learn more… | top users | synonyms (1)

0
votes
0answers
19 views

Netcat seems to close the connection from the attack box?

I am trying a practice box, and am running into trouble stabilising a connection. I have an RFI vulnerability that allows me to run commands on an Apache server, but does not lead to an interactive ...
0
votes
1answer
40 views

What are all these connection attempts in my firewall log?

I've read many similar answers, but they all dealt with machines that were running publicly accessible services. In my case, I have a (newly installed and fully patched) Ubuntu machine that is used as ...
1
vote
1answer
38 views

Virtualize a hardware firewall?

Hypothetically let's say I have reason to believe my operating system is compromised with spyware, and there's no way to remove or disable it. But I have an advantage insofar that I know the IP ...
1
vote
1answer
32 views

How to best manage multiple applications using the internet with Firewall

Im not new too Linux (Ubuntu 14.x) however I must admit that I have never bothered with a Firewall until now. Im currently using Ubuntu's inbuilt firewall (UFW) with a graphical plugin (GUFW), which I ...
0
votes
1answer
41 views

Firewall Blocking IP Spoofing

I was studying firewalls and I came to think of this. I have a firewall configured as follows: packet filter rule table to allow users of a corporate network to surf the web via HTTP and HTTPS Now ...
1
vote
1answer
230 views

Using nmap to bypass a firewall and perform OS fingerprinting

How can I use nmap to perform operating system detection on a system which has all of its ports filtered by a firewall? Is there a way to bypass it? I have tried: syn scan, xmas scan, fragment scan,...
0
votes
1answer
20 views

Firewall Packet Filter Query

I was reading about firewalls and I have this query. Is each firewall a packet filter? Why or why not? I know that the first generation of firewall's were essentially packet filters, but how does ...
0
votes
4answers
174 views

How to block all porn websites from firewall?

I want to block all porn websites and similar contents in my Windows 7 PC using Windows firewall. Till now I can block it by inserting sites one by one. Is there any category defined for such sites or ...
0
votes
1answer
27 views

Two Factor Authentication VPN

I have a VPN connections Site to Site VPN, for security reason, I want to add 2FA Can I set up 2FA on VPN ?
2
votes
1answer
89 views

What are the advantages of cloud-based firewalls? [on hold]

What are the advantages of firewall based on cloud? Does it cause heavy traffic and make it slower? If it does, is the impact significant? A firewall based on a cloud, as I understand it, will ...
1
vote
3answers
62 views

What security measures can stop an attacker to obtain reverse shell even if a victim clicks and downloads a malicious exe file?

I am doing some hands-on training with Kali linux and one of the exercise I came across was to make an exe file containing malicious payload(say to obtain reverse shell), send it to a victim and hope ...
17
votes
4answers
20k views

With IPv6 do we need to use NAT any more?

I'm wondering how to use NAT with IPv6. Seems that you don't even need it any more. So what exactly is the concept behind firewall configurations in IPv6 environments?
71
votes
3answers
81k views

Is it a bad idea for a firewall to block ICMP?

This question was inspired by this answer which states in part: The generic firewall manifest file finishes off by dropping everything I didn't otherwise allow (besides ICMP. Don't turn off ICMP). ...
0
votes
2answers
165 views

Acceptable secure solution to replace static IP addresses for a web application

I am currently working as a technical lead on a project at a financial institution and have a question about how to provide the same level of security expected by the business in an application we are ...
4
votes
2answers
4k views

Windows Firewall Connection Security with Certificate

I've been fiddling with the Windows firewall configuration of some computers within a VMWare based LAN (no domain). To aid in my testing and debugging, I created a small, self-hosted console ...
0
votes
2answers
76 views

Most likely a compromised system, but is there a way around it? [duplicate]

I think my home computer has been compromised. My question is, does my intruder have access to my computer if I set the firewall to block all traffic? Will editing documents in this mode prevent him ...
42
votes
5answers
44k views

Should SSL be terminated at a load balancer?

When hosting a cluster of web application servers it’s common to have a reverse proxy (HAProxy, Nginx, F5, etc.) in between the cluster and the public internet to load balance traffic among app ...
1
vote
0answers
18 views

Filter multicast on a LAN

In my dd-wrt firewall, I see the option: filter multicast I searched a lot about filtering multicast, but I could not find a comprehensive reply about this. Should I filter multicast on my LAN?
0
votes
2answers
61 views

Do any open-source firewalls support remote management? [closed]

Remote management is essential if you have to run more than three network devices, and is supported by all commercial firewall products. For example: Palo Alto Networks: In addition to control ...
2
votes
1answer
161 views

How does a firewall doing HTTPS inspection verify the servers certificate?

I have a question about HTTPS inspection. As per Checkpoint website: In outbound HTTPS inspection, when a client in the organization initiates an HTTPS connection to a secure site, the Security ...
0
votes
1answer
18 views

Default GW IP address shared with management interface IP: any securirty implications?

Building out separate VLAN for management interfaces. The proposition is to use Default GW IP address as a management interface for network device. Any security concerns?
0
votes
1answer
90 views

Why does DNS Spoofing not working on HTTP ,HTTPS Sites? [in my case]

I am trying to perform a DNS spoofing attack, but the confusing thing is that when I'm performing the attack on HTTP sites, nothing happens. But when I perform it on HTTPS sites, when I reach the ...
0
votes
1answer
78 views

Detecting DNS tunneling

I have been trying to detect/establish DNS tunneling. First of all I logged out of my user account of the captive portal. Findings: $ nslookup <somesite> // works fine $ ping <somesite> /...
11
votes
2answers
2k views

Firewall on smartphones

PCs communicate with the help of ports,eg. HTTP communication takes place over port 80. Due to the nature of these ports, an open port is an avenue for an attack. That's where firewalls come in. The ...
1
vote
1answer
19 views

Does altering the routing table to my hub defeat the purpose of a VPN?

I am running a VPN on my server with openvpn. When running openvpn I have a shell script that runs afterwards: ip rule add from 192.168.0.19 table 128 ip route add table 128 to 192.168.0.0/24 dev ...
1
vote
2answers
62 views

What is a firewall and its DMZ?

My question is in regards to network security. I understand that there should be a demilitarization zone at the border for your network. It is there where the perimeter firewall should live and ...
9
votes
3answers
2k views

Evasion techiques for WAFs

Are there any documented techniques for evading Web application firewall for testing WAF rule configurations?
-4
votes
1answer
42 views

Public IP from my UVerse router [closed]

Please keep in mind that I don't know much so use small words and talk slowly when helping me out. At work we have our network set up in the following way: Our internet comes from AT&T U-verse ...
4
votes
2answers
399 views

Blacklisting IP addresses — when should we take action?

I am responsible for securing an AWS environment and am noticing various recon attacks against the environment. We have the option of blocking the IP addresses in our firewall, but the environment is ...
1
vote
0answers
21 views

Blocking FORWARD on iptables except port 80 [migrated]

I got a subnet that is protected by a computer that acts as a firewall. The rules I want this firewall to have are: Deny all INPUT iptables -A INPUT -j DROP Allow all OUTPUT iptables -A OUTPUT -j ...
1
vote
1answer
67 views

Does a Web Application Firewall only protect OSI layer 7?

Does a Web Application Firewall (WAF) that is protecting application layer 7, as well protect other layers of the The Open Systems Interconnection (OSI) model?
2
votes
3answers
611 views

Security risk with using internal IP on public DNS

A web server inside the office network which is accessed by staff internally and the internal DNS resolves web.company.com to the server's LAN IP. Publicly, company.com nameservers belong to their ...
1
vote
3answers
17k views

Port Scan Detected and Blocked! - Bitdefender 2014

I have Bitdefender Total Security 2014 Recently I have been getting the message/alert "Port scan detected and blocked", I did not cared about it much till I getting increasing specially in a specific ...
0
votes
0answers
51 views

How to view which ports are opened on firewall?

I have a perimeter modem that should have a firewall, but the admin portal does not display much useful info on what settings it has and whether it is on or not. How would you get a list of open ...
-1
votes
1answer
51 views

Security Best Practices - firewall Outgoing traffic vs incoming [closed]

For a PC that only needs basic internet access, for web browsers and updates, generally speaking, is there any need for incoming ports to be opened on the pc's firewall? If outgoing port filtering is ...
1
vote
2answers
7k views

How secure is blocking all incoming connections on my ADSL or cable router?

My router, an up-to-date ADSL Fritz!Box 7340 router with a fixed leased IP address, has been configured to block all incoming traffic. Assuming, for the sake of argument, no extra security is ...
44
votes
10answers
53k views

Why do people tell me not to use VLANs for security?

I have a network, where a have a couple of VLANS. There is a firewall between the 2 VLANs. I am using HP Procurve switches and have made sure that switch-to-switch links accept tagged frames only and ...
-4
votes
3answers
64 views

How to pass website firewall, in PHP? [closed]

Recently, I have posted a question, (http://stackoverflow.com/questions/37494896/how-to-save-file-from-url-to-web-server-by-php). And, there is an answer in question. In this answer, he said: "So the ...
2
votes
2answers
93 views

Dedicated OS vs Debian for SOHO Firewall? [closed]

I want to set up a firewall for a small office. I have a server on which I can install an OS of my choice. I was thinking of trying pfSense but ran into some testing problems and tried IPFIre (Linux ...
0
votes
1answer
42 views

Network configuration: Preventing my computer being used as a proxy?

I recently installed an extension for Chrome called Hola (skip to next paragraph if you know it). It calls itself a VPN, but is basically a proxy pool AFAIK. You can choose a country from a list in a ...
12
votes
3answers
13k views

Proxy vs. Firewall

I understand that very simply put a proxy is a sort of 'man in the middle' allowing/denying access to certain services/resources. Strictly in terms of security (I mean here privacy, parental control ...
2
votes
3answers
1k views

iptables: plaintext password protection

I'd like to find a way to block or restrict my access to the web-pages where my password is sent as a plaintext on the internet. Let's assume if I have the same password for all web-pages, is it ...
1
vote
1answer
448 views

What's a secure firewall rules using UFW?

On my Ubuntu server I have these services running: netstat -tlnp Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program ...
26
votes
3answers
5k views

Is it practical to pre-blacklist certain GeoIP regions?

In recent events, a server I've been managing with has been under a few attacks, a risk you take when hosting a web-server. The firewall has been set up properly to only allow connections through the ...
3
votes
1answer
70 views

How does firewall differentiate between browsing and downloading?

The firewall installed at my college's router allows me to surf the internet but never allows me to download any package that has a size more than 100mb. I wonder how exactly does it differentiate ...
8
votes
3answers
13k views

How to protect myself against paid DDoS services?

I am domestic user and I am getting attacked regularly by a guy that hates me. Here is the background story: that guy uses Skype resolvers (tools offered by paid DDoS services) to find out my IP ...
1
vote
1answer
108 views

Multiple instances of programs allowed in Windows Firewall

I am new to Windows Firewall. While allowing a program through Windows Firewall, I found multiple entries present for Firefox and Java. Why is that?
0
votes
1answer
41 views

Packet Filter with Access Control List

http://i66.tinypic.com/29p50zp.png Can anyone explain how to read and understand row 1,2 and 3? My understanding for row 1 is : If any inside packets want to go to outside via any source port to ...
3
votes
2answers
261 views

Is it safe to not update Windows if you dont accept any incoming connections?

I see this guy shared his thought: How to be safe even without most updated Windows updates So he claims that as long as you do not accept any incoming connections and just use sandbox of Chrome, ...
0
votes
0answers
31 views

Cisco ASA Access List Summary / Visualisation Tool

I have a Cisco ASA firewall config with about 50 interfaces and approximately 4000 rules. I am trying to find a tool that can sort this into an easier to consume list or even a visualisation of the ...