Network Security - securing network infrastructure and connections

learn more… | top users | synonyms

1
vote
0answers
6 views

Secure point to point remote access to NAS drive

This question is very similar but also distinctly different (How do I ensure data encryption on Samba transmission on *NIX systems?) I'm looking to set up remote access to a NAS unit locally sharing ...
4
votes
4answers
36k views

IP address of an iPhone

Recently I logged on to my bank account via the Chase app on my iPhone. I received a message that another device was currently logged on to my account and "would I like to end the session"? Of course, ...
2
votes
2answers
85 views

Is VPN the best solution against man-in-the-middle attack? [on hold]

I'm looking for the best way to protect my enterprise against man in the middle attacks, because a lot of people connect to the same network. So I was thinking of creating a VPN. Is this really the ...
2
votes
1answer
40 views

Understanding OpenWRT LuCI Firewall Routing with VPN

I'm still fairly new to networking, and I'm having a little trouble grasping some concepts of the proper firewall rules I need to implement for my desired setup. I'm setting up a router with OpenWRT ...
1
vote
1answer
339 views

OpenVPN and firewall configuration in LuCI

I'm trying to find the best (most secure) configuration for the firewall in OpenWRT. I'm using LuCi to configure all the stuff. I have successfully created a VPN (OpenVPN). It is supposed the best ...
-2
votes
0answers
35 views

Software company possibly spying [on hold]

recently I decided to check my network on task manager and have had some weird remote addresses from bandicam.com. I uninstalled it, deleted all registery keys of it and it still appears.
2
votes
1answer
295 views

802.11 Authentication/Association and WPA/WPA2 authentication (Four-way handshake)

So I have read that 802.11 standard requires stations and APs to go through the authentication and association before communication can take place. I also know that WPA/WPA2 has its own authentication ...
0
votes
1answer
52 views

Does VPN remote port forwarding compromise the anonymity of the VPN user?

An anonymous VPN service will typically assign the same public IP address to many VPN users. This procedure ensures that a connection cannot be traced back to the VPN subscriber: behind the veil of ...
1
vote
0answers
24 views

How to design a right VPN connection for an organisation (Interconnected MPLS link or Individual FW)

Thanks in advance for your advice We have to implement VPN connection for nearly 7 countries Option 1 : As we have private MPLS link to all 7 countries. It is been outsourced Third party. They ...
11
votes
4answers
3k views

How to prevent network administrators from accessing USB drive

How can I prevent network administrators from accessing, mapping to etc. a USB drive that's in a PC on their network? I'm mainly concerned about files being edited or deleted.
-1
votes
0answers
9 views

Know username who is working on remote desktop [migrated]

We are a team of 20 people we have a machine that is used by everyone. We take remote desktop of that machine to work on. so if somebody is working and i want to take that i have to ask everyone in ...
0
votes
0answers
13 views

Port mirroring with A LOT of Drops Tx on a 5406zl [closed]

It seems hard to find info about this specific problem so ANY related input is appreciated (I tried HP-forum and stackoverflow but no luck). Question #1. I've set up port mirroring this way on my HP ...
3
votes
0answers
36 views

Security risk: Digitally sign communications for SMB

I have a computer (Windows) on a network where an industrial process is controlled. There is an option in Local Security Policy >> Local Policies >> Security Options >> "Microsoft network client: ...
-1
votes
0answers
51 views

How can I tell if someone is intercepting my cell phone signal using mobile signal tracking software?

I've been having many issues with my cellphone such as bad signal, dropped calls, spoofing, jamming, battery temperature over 115℉, can't make calls, not receiving or being received calls, and more. ...
8
votes
3answers
10k views

How can I keep a roommate from seeing my web activity?

I have a roommate who is a network security engineer and I think he hacked our home network and now knows what sites I am visiting and what I am doing online. Although he is not stealing anything I ...
1
vote
1answer
177 views

secure use of psexec?

As of March 7, 2014 PsExec now "encrypts all communication between local and remote systems, including the transmission of command information such as the user name and password under which the remote ...
1
vote
2answers
190 views

Persistent Connection Attempts By Akamai Technologies

I have seen this question asked in different places, but have never seen a satisfactory answer: On different computer builds, ASUS/GIGABYTE/MSI, I constantly have outgoing connections to ...
-2
votes
0answers
40 views

What is the mechanism used by the ISP to avoid DoS attacks? [duplicate]

What is the mechanism used in the public networks or home networks to avoid DDoS or DoS attacks? How secure they are maintained by their ISP's.
5
votes
3answers
780 views

3G Femtocell at home: can anybody connect, and is all traffic encrypted?

At our office we have bad reception for 3G. We bought a Femtocell device that provides a 3G connection for one specific mobile provider. This device is connected to our network via ethernet. I cannot ...
1
vote
1answer
78 views

User Binding Request with credentials in Lync Dump

I've dumped a call between two lync clients and saw that there were some UDP packets that look like this: Server -> Client 1132 14.495362000 <serverip> <clientip> STUN 146 ...
-4
votes
2answers
41 views

How to hide my surfing history [closed]

I am on work network, installed and am using chrome without admin rights. how can i hide my surfing from netadmin, and if not then how can i link my home pc with work access and surf without any care? ...
0
votes
4answers
158 views

Help understanding VPN

I've been reading about VPNs lately, and I'm struggling to understand what they do and how they're essential components to upholding anonymity online. The basic idea I have is that a VPN allows two ...
1
vote
2answers
97 views

How to secure Epson Beamer?

I work in a school and we have several Epson Beamers but some of our students have download an application for their mobile (with infra-red and WiFi connection) and they now have remote control and ...
-1
votes
2answers
33 views

How can I detect mode interface of other machine is promiscuous [closed]

I have a project that is to protect my box from attack man in the middle arp poison. I should detect if interface mode of other machine is promiscuous. I must write script python or command linux.
1
vote
1answer
90 views

How to sniff [possibly encrypted] TDS protocol data from the host the client application is installed on?

Let's say, there is an .NET application on a windows 7 host where I have administrator's access rights. The application works with remote MS-SQL server which I don't control, it also seems that the ...
9
votes
3answers
660 views

Would publishing a network diagram make the network less secure?

I have found some social networking sites that focus on sharing architecture (network maps and diagrams) and configuration. Does sharing this type of information decrease the security of my network? ...
18
votes
5answers
16k views

Can I detect a MITM attack?

Based on this question here: Are "man in the middle" attacks extremely rare? Is it possible to detect man-in-the-middle attacks, and if so, how would one go about it? In addition, what if ...
0
votes
0answers
10 views

Impact on Network printers which the SSL certificates are expired? [duplicate]

Any one please help me on what is the impact of network printers which the SSL certificate is expired also need to know whether we can remotely renew the certificate from another location??
0
votes
1answer
89 views

Router detecting constant ack flood attacks and port scans

I first noticed this yesterday in my logs - while I was configuring the router settings, so I don't know how long it's been going on. What should I do? I reconfigured my router with more secure ...
4
votes
1answer
126 views

Why does my web server receive so many TCP resets from some clients?

I run a web server and log connections that are dropped. Occasionally, I get a burst of TCP RST packets from some of my clients, like this: Feb 11 11:56:29 SRC=1.2.3.4 TTL=57 SPT=38383 DPT=80 ...
1
vote
0answers
41 views

How can I launch DHCP starvation attack in WLAN?

In WLAN, due to MAC association on Access Point (AP), I can't send the DHCPDISCOVER messages using random MAC addresses. But if I keep my original MAC address as the source ethernet MAC a and random ...
22
votes
3answers
20k views

Should SSL be terminated at a load balancer?

When hosting a cluster of web application servers it’s common to have a reverse proxy (HAProxy, Nginx, F5, etc.) in between the cluster and the public internet to load balance traffic among app ...
21
votes
2answers
62k views

What is the real function and use of a DMZ on a network?

I read the article on Wikipedia describing what a DMZ (demilitarized zone) is on a network, but am still failing to grasp both how it is set up (ie: is it within the main network or sequestered away?) ...
10
votes
7answers
2k views

Alternative to VPN

We have a network that is completely closed to the outside world. It needs to be. Problem is we need to remote into a server on this network once in a blue moon for diagnostics. We've discussed ways ...
1
vote
1answer
41 views

Segregating a Printer in my Enterprise Network

I have a EAP-TLS network at home which I've managed for some time now. I just got a new Brother HL-5470 printer so I can finally print things at home, which is really nice. The only problem is that ...
1
vote
1answer
126 views

How to configure Kismet to redetect same BSSIDs in a loop?

So I am working on a tool to detect any wifi device using Kismet. When I use Kismet, it works fine, but my problem is, it detects a device once, and until the MAC changes, it wont detect it again. ...
1
vote
1answer
83 views

Is End to End encryption possible for all servers across the whole infrastructure?

Running into a possible situation where a client I am working with is requesting that all data that leaves the servers should be encrypted and here, we are talking of hundreds of Linux servers ...
7
votes
6answers
2k views

How to bypass Nmap blockage?

I rent a server, and my provider seems to be blocking nmap. Is there any other tools I could use to test my home network from the outside? Also, does blocking nmap on a network provide any security? ...
3
votes
3answers
124 views

Such a thing as too much network segregation?

One of the biggest points of friction I see between networking teams, security teams, and users is around the idea of network segregation. For instance, the network team wants to isolate everyone ...
1
vote
1answer
62 views

How to properly test that an OpenVPN connection is secured?

I have a router (ASUS RT-AC66U) with an embedded OpenVPN server. I'm able to successfully connect to the OpenVPN on the router, as well as, access internal services in my home network; However, ...
2
votes
1answer
87 views

Is it common for all hard / USB drives to be accessible to everyone on a network?

Every PC can map to any other PC's hard drive(s) / USB drive(s) on the network where I work. When I realized this I thought it was odd. All one needs to do is access the (Start) button then type ...
2
votes
0answers
92 views

Performing an airport scan on my Mac for available WiFi networks pulls up multiple SSID with different mac address. What's going on?

I performed the following command to search for available WiFi networks in my apartment complex: /System/Library/PrivateFrameworks/Apple80211.framework/Versions/A/Resources/airport scan | grep OBC I ...
13
votes
1answer
2k views

Is it even possible to hack a television channel?

In spite of all the hacking news in the recent few years I never heard of someone who managed to hack a TV channel. What makes them so secure?
0
votes
1answer
34 views

Is it possible to bypass sniffing when using port mirroring?

INTERNET <-A-> ROUTER <-B-> PC Let's theoretically think we mirror the port on a ROUTER to a file. So the full network traffic on it. Question: is it possible to still have ...
0
votes
1answer
134 views

WLCTL protocol detected by sniffer in an Android tablet

I detected that my rooted Android tablet had a slow connection. Trying to find what is taking the bandwith, I installed a firewall (DroidWall) and I blocked all the applications thinking that one of ...
1
vote
0answers
61 views

Why would home routers accept incoming DNS traffic?

I stumbled upon an interesting paper (PDF Link) where researchers found out that more than 58% of the DNS open resolvers that are blamed in DDoS attacks are in fact home routers distributed by ISPs to ...
0
votes
3answers
2k views

How to track down an IP spoofer?

We just installed a SonicWALL NSA 3500 and I've noticed a few times per day there will be an alert entry like this: Time: 01/02/2013 9:00:41.000 Priority: Alert Category: Intrusion Prevention ...
0
votes
2answers
50 views

Place database in the DMZ and in the internal network

Is it sufficient to have single database inside the DMZ which the webservers in the DMZ receives their data from. Or if setup with two databases is a better solution, that would be to have a ...
1
vote
1answer
93 views

What precautions I can take to secure software against user?

I want to build a client that connects to my server and uses server API. You can consider this as a banking application because data security is the most important thing. Since the users or hackers ...
1
vote
2answers
113 views

Possible to detect an/or shut off CryptoLocker by limiting total network bytes transferred?

Since a virus infected PC has to download (encrypt) reupload the entire file (to a file server), and repeat the process for every network drive, is is possible to detect this unusually high bandwidth ...