Concerned with software or hardware firewalls

learn more… | top users | synonyms (1)

1
vote
2answers
301 views

VPN Client - Addtional Security Layer or a Useless Feature

I have a corporate web portal which is used for staff collaboration including a web-based mail interface connected to MySQL Database, corporate calendar, file storage, customer contacts data with ...
2
votes
1answer
166 views

ASA5505 DMZ issue

I have ASA5505 , connected to the WAN on port 0 (called Vlan2), and connected to my development LAN on port 7 (Called Vlan1). I want to add DMZ, and I connected switch and servers to port 3, and ...
2
votes
1answer
298 views

How to configure Suricata to not interfere with virtual machine

I'm currently planning on setting up Suricata as a firewall on my laptop. I'm wondering however if it's possible to set Suricata to not interfere with traffic to and from specific virtual machines ...
1
vote
1answer
21 views

Is there a trusted independent firewall review company?

I don't know how to write this without it sounding like a plug (lol), but it's not. So please don't close-vote it, even if you really want your editor badge. Here goes: There's this site called ...
1
vote
1answer
22 views

How can I implement a whitelist based on packet content?

At the moment I am looking for some way on Linux to have packetfilter whitelisting done but based on finegrained parameters such as packet content rather than more general parameters such as protocol ...
0
votes
1answer
87 views

How does the Dell Sonic wall Authentication works?

My College Router has Dell Sonicwall authentication. We will be automatically redirected to the login page. If the username and password is correct a new popup opens showing that user 'x' has logged ...
0
votes
1answer
50 views

ESET detected incoming connection to Rundll32

My ESET Smart Security 7 detected incoming connection from an external computer, since Rundll32 can be run by any programs on my computer and I don't know which program is doing this, so I am ...
0
votes
1answer
196 views

Foreign MRT.exe?

I was managing my firewall using AVG and I noticed this was allowed: I have north american locale, and sometimes Japanese locality(?), and that is not Japanese. It is getting through my firewall, ...
2
votes
0answers
19 views

cisco asa syn flood detection and response not working

I have a Cisco ASA 5510 (ASA Version 8.3(2)) that has been getting a syn flood attack on it (or more accurately through it - targeting a host behind it) a couple of times a day for the past few days. ...
2
votes
0answers
100 views

Shorewall stopped policies - routeback

Here goes a very specific question about the insides of Shorewall and Iptables in general. Shorewall supports configuration of "Stopped Policies" using the file routestopped, which defines the ...
1
vote
0answers
23 views

Configure icefloor to prevent leaks when VPN connected

I am trying to configure icefloor firewall on OS X 10.9 so as to make sure all traffic will go through VPN. I recently notified that even with "Route all traffic through vpn" option in tunnelblick ...
1
vote
0answers
43 views

API deployment infrastructure

We are going to deploy our service, it's drupal based with some additional REST APIs. The drupal servers will be (loadbalanced) put in the DMZ. We think to deploy the REST APIs on an app server in ...
1
vote
0answers
215 views

Proxy via pfSense and exclusions for DNS

I have posted this to NetworkEngineering.SE, as that seems the more suitable audience for this question. I will leave this question open here but am happy to see it closed. I just did not want to ...
1
vote
0answers
41 views

Pf rules configuration

Do these rules appear to be an adequate start? _interface="en1" _linode="66.228.57.75" #lish-atlanta.linode.com _ssh=" { 74.207.224.182 66.175.210.225 } " set block-policy drop set skip on lo0 ...
1
vote
0answers
177 views

Throttling DropBox behind a firewall

Our office network bandwidth gets choked when an employee copies a large file into her DropBox, since it gets downloaded on several machines (of other employees). LAN Sync is an option, but needs to ...
1
vote
0answers
115 views

Why my proxy is still having some connections blocked

I am behind a firewall in France. I connect to proxy A, in Ireland with Dante via SSH port 22 and make a tunnel forwarding port 1080. The proxy works as expected but still having a port range ...
0
votes
0answers
16 views

Which IPTables chains should I log from a security perspective

So far I've always been logging the INPUT and OUTPUT chains because I only used iptables as host firewall. Now I'm configuring network firewall which uses iptables, but I don't know whether I should ...
0
votes
0answers
33 views

Is it possible to covertly tunnel data using L3DSR? (or any other TCP or IP layer hack)

I asked this question on ServerFault regarding how a Netscaler embeds low level data in a TCP packet, round-trips it, and then uses that data to loadbalance the user. Similar to DNS Tunneling, I ...
0
votes
0answers
82 views

How should I configure my Tor-dedicated firewall for optimum security?

I'm setting up a Tor-based isolating proxy using the 'Anonymizing Middlebox' iptables rules specified here: https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy i.e. iptables -t nat ...
0
votes
0answers
162 views

OpenVPN and firewall configuration in LuCI

I'm trying to find the best (most secure) configuration for the firewall in OpenWRT. I'm using LuCi to configure all the stuff. I have successfully created a VPN (OpenVPN). It is supposed the best ...