Routing is the process of moving packets across a network from one host to a another. It is usually performed by dedicated devices called routers.

learn more… | top users | synonyms

0
votes
3answers
62 views

Does a WAN to LAN Route Conversion Through a Router Adds Security?

Use of a Router is the first solution for adding a security layer to any LAN with N machines, connected to the internet (through its firewall settings). My question is does the WAN to LAN conversion ...
0
votes
0answers
19 views

Variant of OSX.pirrit

Today while working with a customer, Someone came in with a peculiar problem. They could only access websites through https, and nothing through http. I tried the regular gauntlet of fixes for network ...
2
votes
2answers
113 views

Is a router without inbound firewall a security issue across the internet?

Imagine this scenario: Alice has a private subnet (192.168.1.0/24) connected to a router which is also connected to local network B. Alice's router performs NAT (only using MASQUERADE; outbound ...
9
votes
4answers
8k views

How is Tor secure despite being open source?

If Tor is open source (and thus its process of concealing your IP is known), then how does it keep anything secure? Couldn't someone look at the source code and figure out how to reverse the routing ...
-4
votes
1answer
64 views

Is it possible to Use someone public IP? [closed]

I am quite aware of the networking. But I have a confusion which I am searching over internet but did not come to any solution. Can we assign any specific IP to our PC or any device. Like I want to ...
0
votes
0answers
72 views

Gargoyle (OpenWRT) firewall routing for VPN

At present I have Gargoyle setup on my WNDR3700 to connection to a VPN provider in order to provide a little privacy. However this prevents me from connecting remotely to my home network. Previously I ...
1
vote
1answer
74 views

is it possible to intercept network packets outside lan?

User A is in a different country than user B and they have different IP ranges and ISPs. Is it possible for A to intercept B's communication sent to a third party, without using techniques like ...
3
votes
7answers
61k views

How to bypass restrictive mac address filtering on home network (not malicious)

Background A short sketch of my situation before I formulate my question: I am on a large home network, which is privately administered by a couple of admins. The network consists of a lan and a ...
1
vote
1answer
140 views

Traffic anonymization through routing - software and algorithms

I stumbled upon an interview with "the grugq" in which he is talking about how hackers anonymize their traffic, i.e. hide their original ip address (- this is also what I will mean by "anonymizing" in ...
3
votes
0answers
279 views

Routing Protocol Encryption

As far as I know 'newer' versions of routing protocols support authentication between routers. What about encryption and integrity checks? Some implementations like this one from Cisco use MD5, which ...
0
votes
0answers
48 views

I can't get the honeyd to run in loopback interface

I've been working on honeyd for two day and am struggling with it. What I'd like to do is that I'd want to run it on my own localhost (i.e. loopback interface). But I'm keep getting the following ...
29
votes
3answers
14k views

How can a webpage get the MAC address?

I was logged on to my router and filling out some information. I clicked a button and a field was automatically filled in with my computer's MAC address. How is this possible? Does it present a ...
7
votes
1answer
271 views

Vulnerabilities of pure NAT without firewall

Following some of the comments on this question, I was curious about the security vulnerabilities of NAT. There are similar threads here and here but they discuss router vulnerabilities rather than ...
7
votes
3answers
1k views

Out-of-the-box Network Intrusion Appliance for non-Power User

First, let me apologize if any of this question is naive or beneath the scope of this board. Bear in mind the context and that I'm asking as an attempt to exhaust all resources. Also, I understand if ...
5
votes
3answers
2k views

Encryption of headers in IPsec tunnel mode

I am learning about IPsec's transport and tunnel modes. I understand that transport mode encrypts only the payload of an IP packet and is used for communication between two entities that both ...
13
votes
1answer
1k views

Attackers of Google DNS hijacking

As we know Google DNS server (8.8.8.8) in 14th and 15th March was hijacked in Sao Paulo. And subsequent to this event, BGPmon.org announced an alert. Now, In a course assignment, we are asked to ...
5
votes
1answer
1k views

Is my ISP BGP/DNS hijacking?

I've noticed some very suspicious activity from my ISP. Sometimes I would notice that when I ping google.com it would resolve to an IP which is owned by my ISP. I currently don't have an example ...
4
votes
3answers
634 views

How to track back a dynamic IP address?

Is there a way to trace back who was using a public dynamic IP address previously? Would it be possible to find out the MAC address of the host using the IP address at a given time? (e.g., can you ...
0
votes
0answers
112 views

SDN Security - why not attack the controller itself?

I have been looking into SDN (Software Defined Networking) and one advantage of using this is to be able to redirect traffic to stop DDoS attacks. The traffic is ultimately thrown away. My question ...
1
vote
2answers
83 views

Safety of routing a network to a firewall

I am studying for my CompTIA Security+ qualification and have come across the following question. Question : You are implementing a testing environment for a development team. They use several ...
1
vote
2answers
375 views

Which information does a standard router see?

I currently use the WLAN of my neighbours (with their accordance). It uses WPA2 and the DSL router is a Fritz!Box 7170 (see English manual). Which information can a user with an admin account of this ...
2
votes
4answers
3k views

Can anyone tell if a wireless router is plugged into an Ethernet port (without actually seeing it)

In a large network if there is an Ethernet port in the wall, is it possible to tell if a switch or wireless adapter is plugged into it? (I'm talking about the cheap home routers - with the built in ...
18
votes
5answers
2k views

How secure is binding to localhost in order to prevent remote connections?

Let's say we're running a service that's bound to localhost (127.0.0.1), and the goal is to only allow local clients (i.e. from the same machine only) What techniques might be used to break this ...
2
votes
1answer
5k views

Understanding OpenWRT LuCI Firewall Routing with VPN

I'm still fairly new to networking, and I'm having a little trouble grasping some concepts of the proper firewall rules I need to implement for my desired setup. I'm setting up a router with OpenWRT ...
2
votes
1answer
20k views

Router detecting port scan and ack flood attack

Over the past few days, I'm noticing that the log of my wireless router is showing an ACK flood attack from various IP addresses. I use a D-Link DIR-600L. I've searched through the internet, also ...
2
votes
2answers
33k views

Access router if you don't know password

At home I have a wireless cisco router. Unfortunately I wasn't smart to change its ip or passwords. So anyone who is connected to it can access 192.168.0.1 and log in as admin using password admin and ...
4
votes
2answers
1k views

How can I obtain the internal IP of a computer behind NAT but reachable via certain TCP port?

I want to obtain internal IP of a remote computer behind a NAT that I can reach by using some port, say myhost.farfar.away port 11122TCP: C:\>telnet myhost.farfar.away 11122 ...
10
votes
1answer
6k views

How can I stop this DOS attack?

I have this entry appearing constantly in my router logs: [DOS Attack] : 5 [RST Scan] packets detected in last 20 seconds, source ip [xx.xx.xx.xx] They just never stop. It doesn't seem to affect ...
3
votes
1answer
400 views

Security of Openflow/SDN network

Openflow/SDN networks give a remote controller the ability to manage the behavior of network devices i.e. configurations. They can forward instruction sets to dynamically change network configuration. ...
2
votes
2answers
297 views

Indirectly relaying intranet server to outside world

I have an internal network of IP network cameras. The feeds from these cameras are ingested by a single server and presented from a unified web interface both internally and to the outside world (both ...
10
votes
3answers
13k views

How to best set up public WiFi without giving access to the rest of my network?

For reference, this is just for my home network. Anyway, I have quite a few of my neighbors ask me to share my internet with them. I'd really like to eliminate this "here's the password" portion ...
8
votes
2answers
259 views

Why does Tor use a new route every few minutes

As far as I know, Tor selects three new nodes every few minutes. What is the advantage of this? The only thing I came up with was to prevent "Bad exit nodes" from viewing too much of your (hopefully ...
14
votes
5answers
3k views

Access to a router's GUI

During a recent visit to a coffee shop, I noticed that they hadn't bothered changing their default user name and password for their router. I realise that someone could log on and be annoying to ...
21
votes
12answers
47k views

Public DMZ network architecture

Years ago, when I was a student, a network security professor taught me in a class what a DMZ is. The architecture he used in his slides was similar to this one: Now that I got employed, my boss, a ...
7
votes
5answers
8k views

Is dd-wrt generally more secure than manufacturer's firmware?

I have been advised to use dd-wrt, for richness of features and heightened security. The argument about security is that major manufacturers don't care much about the firmware, release with a lot of ...
0
votes
1answer
298 views

How to turn of telnet and FTP on Thomson 789vn router? [closed]

I have run a port scan against a Thomson 789vn router and have noticed to my surprise that its HTTP as well as telnet and FTP ports are open. How can one turn off telnet (also FTP) using the router's ...
0
votes
1answer
87 views

unfamiliar IP when logging into ssh server

I just noticed something today, and Now I am curious... I was on my shell server, an i was wondering who was on, so I gave the command $w and saw this: j0h@server:~$ w 22:06:02 up 18 days, 7:02, ...
2
votes
1answer
264 views

What features boost security for a home edge router?

I want to hide my home network behind a router and not worry about firewalls on internet-facing devices. Furthermore, one PC is going to be hosting some services, so I guess I need port forwarding as ...
0
votes
2answers
267 views

Solution for traffic capturing from router

i'm a newbie and i'm having a problem that i can't find it by google. I'm researching abbout DDoS detecting method now. As we can see that nowadays people often analyze networking traffic from router ...
3
votes
2answers
297 views

Using HTTPS, can the target domain be seen?

If I go to https://google.com/q=test_query with from my browser, what traffic can be seen on the router? Can the domain name (google.com) be seen? If so, can I block all of the traffic to a web page ...
1
vote
0answers
306 views

How should I configure my Tor-dedicated firewall for optimum security?

I'm setting up a Tor-based isolating proxy using the 'Anonymizing Middlebox' iptables rules specified here: https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy i.e. iptables -t nat ...
18
votes
4answers
14k views

Can home routers get infected?

I am behind a router(linksys that runs dd wrt on it) and I was infected with sality. I'm curious, can my router get infected too? If yes, how can I remove the infection? I used the search bar but ...
0
votes
1answer
958 views

Detect possible router attack attemp

I have huge problem with my router: Sagem F@st 3202. Here are some Security log events: Inbound Traffic | Blocked - Default policy | TCP XX.XX.XX.XXX:80->XX.X.XX.XX:51707 on ppp0 ...
0
votes
1answer
469 views

Outbound Port 443 Open but Not Allowing SSH [closed]

My college wireless network has a firewall blocking all outbound ports except 443 and 80. The wired network, however, has none of these restrictions. I can connect to HTTPS sites (obviously). On my ...
4
votes
0answers
44 views

How does BGP filtering work to prevent routing hijacking? [duplicate]

I've been reading for a while but yet do not properly understand how is BGP filtering used to prevent "attacks" such the recent Indosat's problem. Do not copy&paste Cisco's site, I have read all ...
1
vote
3answers
1k views

Wireless LAN router fingerprinting

Does anyone know of a database that lists the range of MAC addresses that are assigned to each particular brand of router? I would like to use this information for fingerprinting. I know I can find ...
10
votes
5answers
29k views

Multiple VPN clients in parallel

If I were to run more than one VPN clients on my machine, simultaneously, what risks would be involved? E.g. are there technical conflicts, such that it wouldn't work right? Could there be ...
6
votes
1answer
2k views

Recent Fritz Box exploit

Background info: About 50% of the ADSL and cable internet access in Germany (and presumably parts of the EU) goes over AVM Fritz routers, either verbatim or rebranded as e.g. "1&1 Home Server" or ...
4
votes
2answers
257 views

Provider can access my local network?

I recently talked with my ISP about many things, basically related to my (little) company security, this guy is a networking guru to me, but he did a strange thing that worries me. Basically I have a ...
1
vote
0answers
511 views

Proxy via pfSense and exclusions for DNS

I have posted this to NetworkEngineering.SE, as that seems the more suitable audience for this question. I will leave this question open here but am happy to see it closed. I just did not want to ...