Network Security - securing network infrastructure and connections
1
vote
2answers
25 views
Bridge Exploit of Network Multi-function Print/Fax Devices
I performed a recent security audit and was wondering if anyone has heard or run across any known exploits against any commercial multi-function print/scan device whereby you can bridge the incoming ...
-2
votes
3answers
79 views
If a hacker is on the same Wifi Network as I am, what can he do?
Ok so when a hacker has the wifi network's password and gets on the network, he can do things like monitor traffic, catch passwords, even access PCs, etc.
But what I'm interested of knowing is what ...
-4
votes
1answer
107 views
Am I part of a botnet or hack? [closed]
(FYI: my network has been hacked before...see other thread).
I have 2 routers daisy-chained. Router #1 hosts Windows PCs and a VOIP box on subnet 172. Its LAN4 goes to WAN of Router#2, which serves ...
-2
votes
0answers
80 views
History of RAT + Strange networking recently… was I hacked again? [closed]
(FYI, my PCs were infected and remote accessed in the past by a friend/stalker, & I’ve reinstalled the network few times already. Recently added Router#2 to double-NAT).
My network has 2 routers ...
-6
votes
1answer
76 views
Hack a LAN with low security [closed]
In our university users have to use VPN to connect to internet.But for local works(like login to university website,checking their university accounts) VPN is not needed.And as I know we have ...
4
votes
4answers
111 views
Block unauthorized user from getting access to intranet
What's the common way to block users from accessing intranet?
Right now, whoever plugs in a cable can access any intranet server freely. I want to change this behavior. But given that we run not only ...
4
votes
2answers
119 views
Security test lab setup [closed]
I want to setup a testing lab in my basement for penetration/vulnerability testing & offensive/defensive security skills. I believe I have all the equipment that I need, and if I'll need something ...
0
votes
1answer
73 views
Securing my firewall (both dedicated and iptables-based) [closed]
I have an ASA-5510, but I also intend to maintain strict IP tables on my server (Ubuntu 12.04.2), so that there are two layers of "protection".
My iptables look like this:
*filter
# Allows all ...
-5
votes
0answers
44 views
Looking for a software that will help me set security policy on my network [closed]
I'm looking for a software that will help me set security policy on my network.
Can anyone please recommend me on some network monitoring & management tool/s that will:
Allow me to block ...
-6
votes
0answers
20 views
vpn connectivity issue with windows XP [closed]
I want to establish a VPN connection, I am getting IP address etc but unable to connect with my Windows 8 Pro but working fine with Windows XP.
2
votes
2answers
842 views
How to set up a user-friendly NAS encryption?
We recently installed one NAS drive (Buffalo LinkStation Pro Duo, LS-WVL, running the most recent Firmware version 1.6 to be precise) in our (small) company network. Currently, there is no encryption ...
1
vote
2answers
493 views
How to check if a port can be accessed from the outside
I want to be sure that the firewall protecting the intranet is effectively rejecting/granting access to a port. I have no access to the firewall nor any other external machine.
Is that possible at ...
-8
votes
1answer
101 views
How IP address are traced [closed]
Let say I have done something harmful to some computer .
I am on wifi at my hostel, so for that session I have some IP assigned. Now,
since tomorrow I will connect again to wifi and get a new IP ...
5
votes
1answer
47 views
User Account Control and outside processes
I was using TeamViewer (a remote desktop client) to log in to a remote computer running Windows 7.
While logged in, the Java updater prompted me for administrator access to run an update check. Out ...
1
vote
2answers
58 views
any reason not to run tmux/wemux on a bastion host?
Is there any reason to worry about running tmux/wemux on a bastion host? It seems to me that it would open up vectors to have your terminal sessions hijacked by some locally exploited account on the ...
1
vote
1answer
51 views
Securing Downloadable Files on Website Per User
I have an ASP.NET website serving up private PDF documents. The PDFs are stored unencrypted on a share on the internal network. The user logs in and navigates to the download page. The web server ...
23
votes
3answers
14k views
What is the difference between SSL vs SSH? Which is more secure?
What is the difference between SSH and SSL? Which one is more secure, if you can compare them together?
Which has more potential vulnerabilities?
2
votes
2answers
82 views
What's the difference between an application-level and circuit-level gateway?
From Wikipedia, I understand that circuit level gateways look at TCP handshakes to filter illegitimate traffic and that application level gateways somehow filter application specific traffic.
But I ...
-1
votes
1answer
58 views
Information Security career guidance? [closed]
I will be completing my BE (Bachelor's Degree) soon. I want to learn security or ethical hacking. One of the options is going for a CEH (Certified Ethical Hacker) certificate and other is course by ...
4
votes
2answers
850 views
Does Java applets reveal the real IP address, even when using proxy or vpn?
Can a Java applet reveal the original client IP address, when browsing through a proxy or a VPN? Why?
8
votes
2answers
200 views
Do any DNS registrars support multi factor authentication?
I am looking for a DNS registrar that supports strong multi-factor authentication.
Does any DNS registrar support multi-factor?
Is this a legitimate need?
10
votes
5answers
355 views
Alternative to VPN
We have a network that is completely closed to the outside world. It needs to be.
Problem is we need to remote into a server on this network once in a blue moon for diagnostics.
We've discussed ways ...
1
vote
1answer
56 views
IPSec, hubs, crypto maps
I thought hubs were layer 1 devices, and so would have no active role in IPSec. I am reading to understand crypto maps,
Dynamic crypto map policies are used in site-to-site VPNs when an unknown ...
3
votes
3answers
96 views
Securing a network attached storage on the internet
I recently purchased a network attached storage for personal file storage and would like my family members to store files on the device from their computers as a remote backup.
I'd like to secure ...
5
votes
2answers
644 views
How eavesdropping will be performed how can I prevent from eavesdropping
I believe that eavesdropping in a man in middle attack and the message is passing from the client to server the man sitting at ISP or network hackers can look at what message I am sending. Heard that ...
1
vote
1answer
184 views
Snort/IDS detect and alert on possible DoS/DDoS attack?
As per the title, I'm attempting to configure Snort to detect and alert on a incoming Denial of Service attack.
Looking at the rulesets, which are primarily signature based rules, I can't see a ...
4
votes
4answers
156 views
How to make sandbox-only internet access?
How can I set up my Windows PC and/or network, so that none of the programs on my actual PC have internet access, but i have a sandbox/VM, with a browser, which has internet access, but has no access ...
3
votes
5answers
136 views
Blocking network access to host(s) at the kernel level in Linux?
Getting it out of the way: Not iptables!
What I'd like to do is block network access to certain IPs, subnets, and/or hostnames at the Linux kernel level, such that no user, including root, could ...
24
votes
1answer
968 views
What's the risk if I accidently type my password into a username field (Windows logon)?
I'm used to logging into my personal Mac which is a password-only field (like waking from sleep mode). Sometimes I have to use a Windows network on which I have an account, but of course I have to ...
1
vote
2answers
117 views
Is IP Forwarding a risk by itself?
A coworker claims that merely enabling IP_forwarding on a single homed Linux machine poses a security risk as he says it could then be used as a proxy.
I can't think of how this would work, except ...
1
vote
2answers
81 views
Open DNS Dynamic and Static IP
I want to block adult sites not torrents and other.
Currently i am using "OpenDNS Home free". i set those free DNS
208.67.222.222 and 208.67.220.220 in router DNS fields and also i have "OpenDNS ...
13
votes
7answers
13k views
How secure is TeamViewer for simple remote support?
I'm deploying a web-based ERP system for a customer, such that both the server and the client machines will be inside the customer's intranet. I was advised in another question not to use TeamViewer ...
9
votes
2answers
366 views
How does the Copyright Alert System work? Who has implemented it?
Some ISPs are participating in a Copyright Alert System that notifies content authors of violations of their copyright.
I'm concerned how this oversight relates to my private traffic, and what laws ...
1
vote
3answers
149 views
How to remote monitor a computer network traffic?
I would like to know if it is possible to remote monitor the incoming and outcoming network traffic of a specific IP from my network. I need to log the time, ip numbers and port that contact the ...
2
votes
1answer
2k views
How does pfsense block torrent traffic?
I know that pfsense is a very effective tool for restricting bit torrent traffic. I was wondering how it actually manages to do that ? There's not much information available on this. The more ...
2
votes
2answers
128 views
How can I find the source of traffic allegedly originating from my IP address?
I have a problem that has been going on for at least 6 weeks.
I have Time Warner for my Internet provider and some websites hosted at GoDaddy.
From what GoDaddy tells me the reason I can not view ...
0
votes
0answers
19 views
Is the GTK or MIC in the unencrypted portion of a WPA protected frame?
In order to decrypt traffic you must have all 4 portions of the WPA Handshake. In WPA protected data frames, is there an unencrypted portion of that frame that has some sort of identifiable value to ...
0
votes
1answer
37 views
How to specify a Snort rule connection duration?
Is it even possible to specify into a snort rule the duration of a connection?
For example: in this format Hour, Minute, Second
H, M, S = 0, 2, 1
If a connection that has the duration of 2 minutes ...
4
votes
3answers
648 views
Opensource NetFlow generator
Cisco routers are able to generate NetFlow flows that can be captured and then analyzed in order to manage what is going on on your network. Unfortunately, I don't have a Cisco router in my toolbox so ...
7
votes
3answers
420 views
Secure PXE network OS installation
How can one make sure that when PXE is being used to boot a remote operating system, that the data being sent is encrypted (or at the very least that integrity is maintained)?
Would it be possible to ...
2
votes
1answer
87 views
How to add wildcards to snort rule ip address?
Is it possible to add wildcards or something that would function like them to a snort rule IP address?
For example:
If I'd like to detect source-ip of: 192.168.*.9
where the third octet can be ...
4
votes
3answers
3k views
What do the UDP entries in my netstat output stand for?
I ran netstat -a under windows.
what is the meaning of this line UDP [::]:57427 *:* ?
Proto Local Address Foreign Address State
UDP [::]:5355 *:*
UDP ...
2
votes
1answer
72 views
IPSec AH + ESP used together
When ESP and AH are used together (ESP transport, AH transport) on the same packet does ESP encrypt the AH's hash, or is the hash left in the clear?
If the hash isn't encrypted, there are obviously ...
13
votes
5answers
4k views
Do you detect/react to DNS tunnelling?
I've just seen a talk about tunnelling TCP/IP over DNS requests, because port 53 UDP is usually open and unfiltered. What techniques exist to detect and block such tunnels, and have you ever seen that ...
-1
votes
2answers
107 views
How to Block a url not a website
I want to block a single url. I am using OpenDNS now and it is working fine with website blocking on my network but the problem is that i want to block a url like ...
20
votes
7answers
4k views
Why block outgoing network traffic with a firewall?
In terms of a home network, is there any reason to set up a router firewall so that all outgoing ports are blocked, and then open specific ports for things such as HTTP, HTTPS, etc. Given that every ...
3
votes
2answers
118 views
Organization like OWASP for network security?
Is there something like OWASP for Network Security ? Or have anyone of you come across a testing guide for network security, as to how to start an audit and then the minimum number of tests to run ...
7
votes
1answer
108 views
Using / finding covert channels in inter-process communication
I've got a class exercise that involves a virtual game of Werewolves/Mafia. We're not really taught how to do anything in this class, which makes it hard for everyone to do the labs.
The idea is that ...
4
votes
3answers
543 views
Can Skype chat be protected from snooping? Are there safe alternatives?
I use Skype a lot. With all of my clients, staff, contractors and friends, however, the acquisition by Microsoft worries me, as two of my clients are direct MS competitors, and I often work on long ...
1
vote
0answers
72 views
Automatic router admin password change [closed]
I feel that this is definitely a hack of some sort and an interesting one.
I am using a Beetel 450TC1 ADSL2+ modem router and here is what I face:
* First, I disconnect the telephone line from the ...
