Network Security - securing network infrastructure and connections

learn more… | top users | synonyms

1
vote
1answer
629 views

Does a network behind a NAT\modem firewall need a firewall?

Would it be justified for a business that is behind a SOHO router\WIFI to run a firewall such as PFSense, or is the firewalling capabilities in the router "good enough". For the most part the router ...
0
votes
1answer
379 views

Preferred access list (WPA2 rogue AP)

For the following scenario in which victim has a WIFI access point at home (AP-HOME) through which he surfs the net and a client (CLI1) connected to "AP-HOME" via WPA2. The victim also has "FREE-AP" ...
0
votes
1answer
309 views

My WIFI (with my own password) is connected to our office network. Is it secure? More details

Is there a possibility that they can see my browsing history, media transfers, Skype sessions and even FaceTime? Please tell me.
0
votes
2answers
190 views

Why do browsers leak their version info to the webserver?

The question surmises it all. If my firefox browser puts something like "..Gecko/xxyy Firefox/nn.mm.." in the USER_AGENT attribute, then from security point-of-view, isn't it an open invitation to the ...
3
votes
3answers
227 views

Are local firewalls necessary

Is having local firewalls enabled on machines actually necessary if you run hardware based firewalls like pfsense or a netgear fvs338 and use that to control in/out bound connections? I personally do ...
2
votes
3answers
8k views

Access router if you don't know password

At home I have a wireless cisco router. Unfortunately I wasn't smart to change its ip or passwords. So anyone who is connected to it can access 192.168.0.1 and log in as admin using password admin and ...
8
votes
3answers
409 views

Is secure Caller ID possible for SIP / VOIP?

Is there any way (standard, proposed or draft) that will allow for secure Caller ID over SIP / VOIP networks? I have constantly heard that Caller ID is insecure when used over these services. Can ...
2
votes
3answers
259 views

If a MITM has your public key and you are SSH-ing through the MITM, what is the maximum attack it can perpetrate?

Firstly, let me start by saying that I am not attempting to hack anyone or anything (not that I would know how or where to begin, if I were). For illustration purposes, let's call the primary key ...
2
votes
2answers
302 views

Is it possible to block url using manageable switch

I want to block some specific Urls and DNS addresses. I am thinking if i buy a manageable switch (More specific would be TLSF1024D) what can i do to block some sites, and specific urls like ...
1
vote
1answer
420 views

Isolate a Virtualbox VM from local network [closed]

I have the need to isolate a virtual machine created with Virtualbox from the local network but I need to provide internet access to that machine. It is the first time that I face this kind of ...
-1
votes
1answer
70 views

No advanced settings option in router [closed]

How can I configure NAT Settings when my router doesn't have advanced settings option.
5
votes
4answers
6k views

Pros/cons of using a private DNS vs. a public DNS

I was wondering why a company should use a private DNS. In comparison with a public DNS, which advantages does a private one have, and which issues can a public DNS create for a company? I'm new at ...
-1
votes
1answer
83 views

Network Security Design Resources [closed]

I am looking for respected resources that state guidelines on how to design my network from scratch in a secure way, including different positioning scenarios for different network/security appliances ...
-4
votes
1answer
243 views

How to prevent malware infection and file accessibility through a wireless router? [duplicate]

The answer suggested in the 'duplicate' is about a different issue. But since my original wording of the question seems to have not been clear - here's a second attempt: Is there any danger of any of ...
4
votes
3answers
5k views

How does “traceroute over TCP” work, what are the risks, and how can it be mitigated?

There is a utility called tcptraceroute, and this enhancement called intrace that is used just like a standard traceroute, but it works over TCP. How is the syn flag in TCP used to achieve ...
3
votes
2answers
439 views

possible exploits through avahi daemon

It is always recommended to disable Avahi daemon, for security reasons, when not in use. So, by what ways it is possible to exploit a system which has avahi daemon service running? And how can we ...
2
votes
3answers
869 views

Is there an alternative to TCP/IP that encrypts end-to-end?

If there was a communication protocol that encrypts at the very low-level, this would solve the problem of wiretapping entirely and for all.
14
votes
4answers
1k views

Can I avoid DNS spoofing by typing the IP address?

The question is in the title. I have been reading about DNS spoofing. What if I were to save the IP addresses of websites I consider sensitive and then just enter the IP address when I am using a ...
2
votes
3answers
309 views

How could an iPhone be transmitting abnormal loads of data without apparently running anything?

My iPhone has sent/received 900MB in 15 days from "com.busuu.japanese.a" I got this information from Onavo, which 'compresses' my data. I have never heard of Busuu until today. It is a language ...
4
votes
1answer
501 views

Stealing WiFi Internet connection

I received a mail about illegally sharing copyright-protected material on the Internet; I never did it. I checked my router's configuration and noticed that the MAC address of one of the connected ...
0
votes
1answer
2k views

Which IP address in email headers is the sender's? [closed]

I have the headers from some emails I've received. There are several IP addresses in these headers. Which one belongs to the sender? Is the address in the headers reliable? Example 1: Delivered-To: ...
3
votes
3answers
282 views

How to diagnose and handle unexplained open network connections?

I was using Wireshark in order to check the activity of an unknown client in my home network, and to my surprise, I found some strange connections established by my own computer. I disconnected all ...
3
votes
5answers
2k views

Encrypting All Network Traffic

For a corporate network, is there a way to possibly encrypt all network traffic on the local network? I would like to ensure that there is nothing left for chance to be packet sniffed. Not even ...
4
votes
2answers
90 views

Securing an appliance

Scenario: We are in the position to offer a local appliance to run a version of our proprietary software, which is normally provided as SaaS. Question: What steps can be taken to mitigate trivial ...
-5
votes
4answers
352 views

How can I use linux and disguise myself as a windows computer over a LAN? [closed]

My computer is currently running windows XP on a LAN Network. I'd like to use linux but I want to hide myself. I don't want to be the only linux system on a network full of windows XP computers. Is ...
4
votes
2answers
510 views

Event monitoring for a home network

I'd like to utilise some of the free SIEM type products out there to increase the chances that I will detect attacks and compromises of any of the devices on my home network. Most of my home devices ...
6
votes
1answer
362 views

AWS VPC - should connections between instances be over SSL?

Say I have a few EC2 instances in an AWS VPC network, each assigned its own private address for the subnet at creation. Say one of them is a DB, and another one some kind of web app talking to the DB. ...
-3
votes
2answers
2k views

Why is secureserver.net (GoDaddy) showing up blacklisted from my domain blacklist checker thingy? [closed]

I have my business website through GoDaddy and there has been some weird stuff happening within my business over the past year costing me a lot of money and all of my free time trying to figure out ...
-1
votes
1answer
72 views

What steps are performed when a serious event reaches an Intrusion Detection System? [closed]

For example, you are using Snort and you just got a serious event, which states that a certain service is attacked. What do you do with the threat source IP? What are the steps that network event ...
8
votes
1answer
429 views

Is it possible to recognise and prevent MitM attacks on devices which use self-signed SSL certs?

I use both Linux and Windows at work on a large enterprise LAN. The majority of the network configuration is out of my reach. Certain SaaS applications that are hosted locally on the enterprise LAN, ...
2
votes
3answers
193 views

How to manage known infected network

If you have large distributed network that is known as being infected with viruses and etc.. and you cannot format the computers becuase its large scale. What are the best ways to handle this ...
7
votes
1answer
324 views

different portscan tools give different results

I have different results as of my open TCP ports. When using nmap -sS 127.0.0.1, I get some 5 usual open ports, but when using osx built-in tool as stroke, I get those 5 ports plus 5 extra ports. How ...
0
votes
2answers
106 views

Allow or Deny Access to a Network Based on Client Hardware [duplicate]

We have to build a product that will have a network. Users will be able to connect to this network by downloading a client. However, before allowing them to access the network we want to check if ...
2
votes
1answer
1k views

How can I get the IP address for a ToR Hidden Service (HSP) with a .onion address?

I'd like to find out the IP address of a given .onion address. Is it possible for me to simply assign an exit node (that I control) to my client and just monitor it to determine what IP address ...
2
votes
1answer
3k views

House owner can see who's connected to WiFi; what more can he see?

I live in a rental house, and use the house-owner's wireless network to connect to the internet. The owner can see who is connected to his wireless network and I had a few questions regarding this ...
0
votes
2answers
1k views

What would a hacker do if he got your router password over the internet? [duplicate]

I was wondering!! I like configuring my router so that I can access it over the Internet even when am not home. What are the most critical risks if a hacker got my router password?
16
votes
2answers
953 views

Hosting an “IP Rental” address. Is this common, safe?

I have a supposed opportunity to get in with an individual with advertising and a side business of his, renting IP addresses. He has asked me to set a dedicated DSL account at my house. Is there any ...
1
vote
1answer
79 views

VM Guest network security with NAT?

Supposing I have an untrusted guest VM (e.g. I'm running a cloud data centre). If I set the network connection up to use NAT, the guest can still access the internet. But what's to stop them accessing ...
0
votes
1answer
391 views

Man-in-the-middle attack over an encrypted channel

I learned recently about man-in-the-middle attacks and came up with this question. Let's say we have two computers who try to communicate over the network. Each computer has an encryptor and a ...
2
votes
1answer
280 views

Protect an application that uses internet from packet sniffing

I developed a stand alone application such a way that, application use a remote service (using SOAP/REST) which available WWW. I am using HTTPS though out the application calls. It was perfectly ...
2
votes
3answers
6k views

Can viruses transfer from phone to computer over the network?

I don't know if this is the right place to ask but I heard that adult websites (porn) had viruses. I used to look up porn on my iPhone (I won't anymore) and I understand that there aren't viruses for ...
-3
votes
1answer
251 views

How to convert some packets in a readable format [closed]

I am looking for a tool for osx, that can convert this raw data in some readable format. Testing my wifi network, I began sniffing my packets, and ran tcpflow -i en1 -c I want to get the sniffed ...
1
vote
1answer
3k views

Totally different IP addresses assigned when using the same router

For some time I have observed a strange behaviour when connecting to the internet through my WLAN. Depending on the computer I use on my network, the ISP assigns me totally different external IP ...
2
votes
1answer
180 views

How are IaaS Virtual Machines Isolated?

I am currently examining Hypervisor firewalls for my graduate thesis, but I unfortunately don't have a lot of experience with IaaS environments. How are IaaS Virtual Machines network isolated from ...
4
votes
2answers
282 views

Can botnets be injected through open wifi to smartphones?

I have read this paper, which is answers part of the question. It answers, 'open wifi will help increase the spread speed and impact' but what I want to know is, can you 'plant' an open wifi access ...
0
votes
2answers
4k views

How can I monitor traffic of devices on my WiFi? [closed]

I have my kids cell phones attached to my router. What can I install to view what they are browsing and the media they have? I want to make sure my kids are safe
2
votes
1answer
237 views

Reassemble sniffed packets [closed]

I am attempting to analyse my WiFi network with on Mac OS X, is there a tool to reassemble TCP stream from Wireshark capture. I would like to see the entire HTML pages that are passing through the ...
2
votes
2answers
1k views

hide dhcp/ip request, traffic under lan router

I have a question on the following scenario: Lets say, we have a normal LAN network with 192.168.1.1/24 gateway, DNS, DHCP servers all running on 192.168.1.1 ; There is only one client: ...
-3
votes
2answers
538 views

What is the better way to share files between a server in DMZ and a server in the internal network? [closed]

I have to implement a solution to share some xml files between a frontend server in a DMZ and his backend in an internal network. Both servers are Solaris 10 boxes. What is the better way regarding ...
1
vote
2answers
234 views

Bridge Exploit of Network Multi-function Print/Fax Devices

I performed a recent security audit and was wondering if anyone has heard or run across any known exploits against any commercial multi-function print/scan device whereby you can bridge the incoming ...