Network Security - securing network infrastructure and connections

learn more… | top users | synonyms

3
votes
2answers
487 views

How do I securely separate a wireless subnet from the wired network?

My setup looks like this: In the interest of security, I'd like to separate the wired network (where the Workstation is plugged in) from the wireless subnet. I don't trust some of the devices in ...
0
votes
3answers
255 views

Why there are uninvited incoming packets to my ADSL connection?

To verify this, I boot my PC from Kali Linux live distro. Before establishing ADSL/PPP connection, I start Wireshark and listen on any pseudo device. Then I create the connection to ISP network. ...
0
votes
1answer
167 views

Sniffing 3g network Pockethound

I was wondering if its possible to prevent 3g sniffing. Its not about the security of the information sent over 3g, but being able to use your 3g without anyone able to see traffic. There are machines ...
1
vote
1answer
60 views

Why should I run OWASP Broken Web Applications Project as host only or NAT?

We have a hard time getting VMWare to work in bridged mode. We can get it to work in Bridged mode. Why is it so important to run it with host only or NAT?
5
votes
1answer
1k views

DSL Modem Compromised?

Just found out that the primary & secondary DNS servers have been changed to 95.211.156.101 & 5.45.75.11. I had the following setup in place. MAC filtering and WPA2 for WiFi. ...
0
votes
1answer
93 views

How can an out-of-the-box (Windows) server not be secure? [closed]

Background: I'm considering switching from shared web hosting to VPS for added security. However - managed VPS's costs much more than unmanaged ones. So, assuming: I secured my website against any ...
2
votes
4answers
442 views

Does using WPA2-Enterprise just change the attack model vs WPA2-PSK?

As far as I can tell based on the reading I've done so far, WPA2-Enterprise uses the same encryption and security algorithms and methods as WPA2-PSK, with the addition of using another service for ...
0
votes
2answers
170 views

Encryption of PCI data, and PCI-DSS scoping

I read another question which made me think... If you encrypt PCI data (credit card numbers, etc.) using PGP or AES and send it through a firewall, is that firewall in scope? Alternatively, what ...
0
votes
1answer
239 views

What are the realistic chances of email being intercepted via SMTP/TCP-IP? [closed]

Dear SMTP and TCP/IP network security gurus: I'm curious about what is the realistic risk of sensitive information (such as a email pdf attachment) being intercepted/read by a hostile party from a ...
2
votes
1answer
3k views

OpenVPN Tap vs Tun Mode [closed]

I would like to know practical difference between TAP and TUN mode when use with OpenVPN. When to use TAP and When to use TUN ? What types of traffic will pass with both mode ?
1
vote
2answers
106 views

Home network website tracking [duplicate]

Can my Website history be tracked by my work IT team if I am using my own home network with my work tablet?
-1
votes
1answer
50 views

Network and data security for small online businesses? [closed]

What is the most efficient way of protecting small online business from outside threats. Everything too much expensive is not a solution. I've been looking for good web application firewall and at ...
1
vote
3answers
235 views

Best practice for accessing management port of firewall

I'm in the process of setting up a bunch of servers at the other end of the world (well, 8 hours travel time) in a colocation place. The servers and firewall all have a remote management port (KVM, ...
0
votes
1answer
89 views

Are there any Layer 2 Wifi RFC proposals that isolate each connection from each other? (like a switch)

It's my understanding that everyone on the same Wifi protocol has full access to each other host that it is connected to. Is there any Wifi technology that allows for partitioning and isolation of ...
2
votes
2answers
629 views

How to detect NAT - network address translation?

How to detect if NAT is used in network or not ? I know if you have private address and you are able to connect public network or internet then there must be NAT. But How can I detect that NAT is ...
0
votes
2answers
137 views

How to detect authenticity Of Client and Server Certificate?

How its possible to detect authenticity Of Client and Server Certificate. For example, If server A has certificate and someone C stolen its certificate and send it to B then How we decide that it's ...
0
votes
2answers
361 views

Digital Certificate “Signature and Fingerprint”

What's the difference between Digital certificate's signature and fingerprint (thumbprint) ? I know that Signature: The actual signature to verify that it came from the issuer. and Thumbprint ...
3
votes
2answers
289 views

Why don’t SMTP servers just require all senders to be authenticated before accepting mail?

Why don’t SMTP servers just require all senders to be authenticated before accepting mail?
2
votes
1answer
257 views

Why am I unable to connect to an address spoofed with arpspoof?

I wanted to see how many combinations of websites and browsers are still vulnerable to a tls stripping attack (like, by implementing HSTS or disabling cleartext HTTP altogether). To do it I wanted to ...
9
votes
2answers
428 views

How were weak passwords brute forced in github?

Github faced a brute force password-guessing attack recently that involved "nearly 40K unique IP addresses". Passwords were also "stored properly" using bcrypt, (salt + hashed). Given that bcrypt ...
0
votes
1answer
92 views

How to investigate this anomaly?

According to the IT managers, this problem is neither at the server nor at the client but is suspected to be somewhere inbetween e.g. some DNS server that has been infected. Do you recognize this ...
1
vote
1answer
474 views

What details does my iPhone reveal about the user (if any) when I connect to a wifi network?

I accidentally used my work's wifi to look at porn using my iPhone. I refreshed a tab I had open from a session when I wasn't at work. Now I'm worried my firm will find out. The network is ...
3
votes
2answers
680 views

What is the difference between SSH and IPsec?

There seems to be similar encryption going into both. They both use asymmetric (RSA, elliptic curves, etc) for the initial key exchange, then go to some symmetric (AES, Blowfish, etc) protocol. I'm ...
2
votes
1answer
194 views

How can I secure IP Multicast traffic?

I'm interested in securing IP Multicast traffic for content that will be sent globally with several low bandwidth receivers. I understand that simplified Broadcast encryption takes N public keys ...
0
votes
1answer
69 views

Why do I get all of these bad header checksum messages?

Every time I open my browser, I get tons of these bad header reports. What does this stem from?
2
votes
3answers
249 views

Suspicious VMWare connections that bypass firewall

I'm running VMWare 5 and I have found that when I start up VMWare I see two connections: TCP 10.100.100.161:55555->as-40816.engx.vmware.com:https (ESTABLISHED) TCP ...
1
vote
4answers
272 views

Can Your ISP use a Packet Sniffer? [closed]

Can ISPs presumably use packet sniffing applications such as wireshark and monitor my unencrypted data? Are they "allowed" to do so?
3
votes
2answers
278 views

Using only a firewall, how do I protect a database server from be exposed?

If I had two firewalls, I could put a web server within a DMZ and then with the second firewall restrict the access to the DB server. However, If I only have one firewall, how could I accomplish ...
0
votes
1answer
313 views

What utilities can be used for Ping of death attack?

Can somebody tell me what program can mess with pockets and enlarge them for Ping of death attack? (i need it for lab) Is there anywhere step-by-step instructions of this attack? I'm not a hacker ...
1
vote
2answers
769 views

How do worms spread over LAN? [duplicate]

I've been researching LAN recently, and I came across a post talking about viruses spreading over LAN, and I was wondering, how is this possible? Would it not be a huge security issue to allow files ...
4
votes
4answers
603 views

Security provided through MAC filtering: Wired vs. Wireless Networks

My question refers to the following article on Wikipedia: MAC Filtering. The article states: MAC filtering is not effective control in wireless network as attackers can eavesdrop on wireless ...
0
votes
2answers
404 views

Could my computer be infiltrated if someone knows my external IP? [closed]

Could my computer be compromised if someone knew my external IP? I know that when you type that in it just goes into the router page, but my computer is connected to said router. If so, what is the ...
2
votes
1answer
107 views

Security implications for two applications communicating with TCP/IP on localhost

Considering this for the local loopback connection: - It is implemented entirely within the operating system's networking software and passes no packets to any network interface controller. If ...
0
votes
2answers
257 views

Is it possible to detect when a device has been MAC filtered on a Wi-Fi network?

Is it possible to detect when a device has been MAC filtered on a Wi-Fi network? I don't know if it's in the 802.11 standard, or if it's just implemented by ignoring the client network packets.
0
votes
1answer
706 views

Cable modem/router hidden internal ISP network?

I was querying my router(Thomson TCW750-4) over the SNMP and stumbled upon some interesting information. I see that the router actually has five separate network configurations operational: ...
3
votes
2answers
122 views

Is it possible to assign MAC-address-specific passphrases for a WiFi network?

Private network access security can be defined by a unique WPA2 passphrase to grant access to devices and MAC address filtering to control authorized devices. Nowadays mobile devices are legion, so if ...
0
votes
1answer
167 views

What can't a packet sniffer troubleshoot [closed]

This might seem like a really vague question however I am studying a networking course. One of the many aspects requires the use of a packet sniffer software - in this case I chose Wireshark, which I ...
1
vote
3answers
794 views

What are the main differences between the network-level and the application-level regarding information security?

I'm fresh new to the field of security, so I'm sorry if this question seems stupid to you. What are the main differences between the network-level and the application-level regarding information ...
2
votes
1answer
293 views

How is a Tor hidden service immune to exit node attacks?

Let me explain with a nifty diagram: IP/RP <-> bunch of Tor clients/node (Tor circuit) <-> Tor hidden service Wouldn't the last Tor client in the circuit knows that the message is for the Tor ...
3
votes
3answers
2k views

with IPv6 do we need to use NAT any more ?

I'm wondering how to use NAT with IPv6 ...seems that you don't even need it any more. So what exactly is the concept behind firewall configurations in IPv6 environments?
0
votes
1answer
112 views

SIEM v/s Network Forensic

when SIEM is already implemented in a enterprise network; does it not do all tasks and report like network forensic investigation? Or can we do away with SIEM and have only Network Forensic tools ...
1
vote
1answer
191 views

Disabling Ping/ICMP Requests [duplicate]

Are there any benefits from disabling Ping/ICMP requests on servers? I've read where people say to do it but I can't seem to find any real benefits with it. Only more likely to cause more problems. ...
2
votes
2answers
392 views

What order is best for nesting VPNs?

if anyone is available to give me advice on a VPN situation I'd appreciate it. So the story is, I have one Swedish VPN which I trust not to log, and which I've connected to with my real IP, and I've ...
1
vote
2answers
135 views

Does this show the need for a two-factor authentication?

I need some help for my understanding while reading through this authentication scheme in WEP. In a WEP authentication scheme, the station first sends a request for authentication. However, this ...
0
votes
1answer
866 views

How to secure my network, laptop, ipad and email accounts which are possibly hacked?

Background Last month I noticed lots of failed emails in my inbox and after few minutes I lost my access to my Yahoo Mail. My friends informed me that they have received spam emails from me. So I ...
1
vote
3answers
294 views

Remote IP scan detected

I would appreciate if you take some time to go over issue I am facing. On my laptop I have windows 7 installed, I am using ESET Smart Security 5.2.9.1. As I work 9 hours day online I am seeing a ...
1
vote
1answer
547 views

Open source video conferencing software with encryption [closed]

A couple of friends and I are looking for an open source video conferencing software. We'd like to run the server on a Debian box, but the clients are Windows machines. Most importantly, it should ...
-1
votes
1answer
72 views

Benefit of having strict ACLs [closed]

My company uses strict ACLs for the connection between two boxes. What are the benefits of these?
1
vote
1answer
80 views

Set Gateway for our LAN

I am new to Networking. In our organization we try to setup gateway for security purpose so that we can block certain harmful websites. All I know is gateway is a device. What we have is the LAN ...
0
votes
1answer
107 views

TCP IN connection from another user in my home network. Is it safe?

I'm using Comodo Firewall and I noticed that sometimes I'm getting TCP IN connection from another IP address in my home network (only one router and few wireless users): TCP IN | 192.168.1.50 | ...