0
votes
1answer
33 views

internal proxy server vs DMZ proxy server

What would be reason for placing a proxy server in a Demilitarized Zone (DMZ)? I understand that a DMZ is a separate network to your internal network (lies inbetween internal network and firewall). I ...
4
votes
2answers
651 views

Securing remotely accessible IP cameras that do not support HTTPS

I have some IP cameras set up on my home network, which is WPA2 protected. These cameras are setup to be accessible from the Internet thru my router's DDNS address, and port number. So for example, ...
1
vote
1answer
293 views

Tor traffic seems to be exiting from different Tor exit nodes - is that expected?

I seem to be observing some odd behaviour whilst experimenting with TOR. It's entirely possible this is just my own ignorance as well, in which case I would appreciate some ...
1
vote
6answers
403 views

Secure internet access while traveling

Given the risks of shared wi-fi as stated here, here and here, I would like to ask what are good practices for someone who is always traveling. While having your own wi-fi with a strong WPA2 password ...
2
votes
3answers
1k views

How to block the websites on client machines

In our office we are blocking sites like Facebook, Twitter etc.The problem is that some of the users bypass our proxy and firewalls through external proxy sites like www.youhide.com or ...
1
vote
2answers
1k views

Can an insecure wifi connection block users who download a lot, from say: torrents or usenet? [closed]

Can an 'insecure community network' have automated features to block internet or slow speeds on computers which download a lot, from say: torrents or usenet? I have two computers and one has ...
4
votes
2answers
2k views

Does Java applets reveal the real IP address, even when using proxy or vpn?

Can a Java applet reveal the original client IP address, when browsing through a proxy or a VPN? Why?
0
votes
3answers
585 views

Proxy Server options for school administrators [closed]

I want to set up a proxy server for a school to prevent users to log-in to site like Facebook, Youtube, etc. I have no idea how to do this, so I´d really appreciate your help.
3
votes
3answers
2k views

How can reverse proxies be used to bypass acceptable use policies of a company?

I am wondering how reverse proxies can be used to bypass company acceptable use policies? What can be done to prevent it?
1
vote
1answer
358 views

DNS query through squid? [closed]

My IDS picked up our squid proxy server doing a dynamic DNS request. I wasn't aware squid passed DNS requests from the client to the internal DNS server. Is this possible? Snort Alert: ET POLICY ...
2
votes
1answer
122 views

ISP security compared to enterprise

I've just started reading IT Security, and found some interesting reads on man-in-the-middle and different types of "attacks" that could be used by an enterprise to intercept communications on their ...
3
votes
2answers
696 views

Reveal the True IP of a User

Is there any best practice method (and preferably documented) way of revealing the True IP of a user using a HTTP(S) connection? I.e.: To be able to uncover the true IP from transparent as well as ...
3
votes
1answer
284 views

Could somebody explain connect loop DoS?

I'm trying to understand this vulnerability. How can I reproduce this?
1
vote
3answers
422 views

Install my own proxy

My school network has blocked a lot of webpages, including TeamViewer, which I need. The IT department told me to find a proxy, because it was their ISP who had blocked the sites. To connect to the ...
9
votes
2answers
2k views

Bypassing a reverse proxy/NAT

Reverse proxies and NAT would seem to obscure a network behind such technologies to the point where it would be hard if not impossible to identify ports open and services running. Given that many ...
3
votes
2answers
359 views

loadbalancer, 2 webserver, 1 webserver hacked , how to tunnel out?

Lets say I have one load balancer (HAProxy) and two web servers one gets hacked. Is the attacker able to make outgoing connections when the web servers have no direct internet access (only ubuntu ...
3
votes
2answers
787 views

What is your approach to handling Guest Internet access?

Suppose you're a company that uses a web proxy to block objectionable content on your corporate network, and this technology may cause issues with some 3rd party VPNs. Or perhaps this 3rd party is ...
10
votes
6answers
386 views

Should we configure all devices to never request SSL 2.0, and reject it if offered?

In an effort to reduce man in the middle attacks, when will it be (or was it) an industry accepted practice to reject SSL 2.0 connections on the client and server side? Is configuring this on a proxy ...
9
votes
1answer
4k views

Is SOCKS secure?

In order to create a VPN, I open an SSH tunnel with a command like ssh -D 9000 user@host, and then I set my system's proxy settings to use SOCKS5 through localhost:9000. Well, setting up my home ...
8
votes
5answers
1k views

Creating tunnel with most ports closed?

How can I create a proxy tunnel from a network that has all ports but port 80 closed? I guess I'd have to bind SSH on my server to port 80, but would that introduce problems to my home network since ...