Routing is the process of moving packets across a network from one host to a another. It is usually performed by dedicated devices called routers.

learn more… | top users | synonyms

4
votes
2answers
267 views

Provider can access my local network?

I recently talked with my ISP about many things, basically related to my (little) company security, this guy is a networking guru to me, but he did a strange thing that worries me. Basically I have a ...
1
vote
0answers
524 views

Proxy via pfSense and exclusions for DNS

I have posted this to NetworkEngineering.SE, as that seems the more suitable audience for this question. I will leave this question open here but am happy to see it closed. I just did not want to ...
7
votes
1answer
1k views

DSL Modem Compromised?

Just found out that the primary & secondary DNS servers have been changed to 95.211.156.101 & 5.45.75.11. I had the following setup in place. MAC filtering and WPA2 for WiFi. ...
2
votes
0answers
173 views

Verizon wireless router is pinging my web server - is this ok or bad? [closed]

So I'm working from a local cafe, doing some web development, and need to see something in my Apache's access log. And to my surprise, in the log I see, every 30 seconds or so, a request for my root ...
1
vote
3answers
6k views

For security reasons, can I block ping response on my router without disabling my network?

I seem to have a serious problem of being attacked and after looking up the attack source, 99% come from China, then Korea, Hong Kong etc. Here is a fraction of the report from my Router, which is a ...
0
votes
1answer
1k views

Netgear WNDR4000 open port 53

Why is port 53 open on the WAN side of the router? And more importantly how do I close it? Port 53 is not one of my forwarded ports. Discovered by doing nmap -pT:1-64 <my-external-IP> -Pn ...
0
votes
1answer
663 views

What are the Security Risks of Disabling Reverse Path Filtering

Reverse Path Filters are generally used to disable asymmetric routing where an application has a different incoming and outgoing routes. So idea is to prevent packet entering from one interface ...
9
votes
2answers
20k views

Is NAT Loopback on my router a security problem?

Some DSL routers prevent NAT loopback. Security is sometimes cited as the reason. Is NAT loopback really a security issue? And if so, how is this exploited? NAT loopback... where a machine on the LAN ...
6
votes
1answer
10k views

What is packet drop, packet loss and how Packet drop attack works?

I confused with the three terms: Packet drop. Packet loss. Packet drop attack.
23
votes
3answers
3k views

What does the email header-line “message opened by mailclient” mean?

Today a Belgian MP claimed (backed up by a security expert) that her email headers show that her email was read during routing (text in Dutch). The published screenshot of the headers highlights the ...
0
votes
2answers
1k views

Could my computer be infiltrated if someone knows my external IP? [closed]

Could my computer be compromised if someone knew my external IP? I know that when you type that in it just goes into the router page, but my computer is connected to said router. If so, what is the ...
3
votes
1answer
841 views

How is a Tor hidden service immune to exit node attacks?

Let me explain with a nifty diagram: IP/RP <-> bunch of Tor clients/node (Tor circuit) <-> Tor hidden service Wouldn't the last Tor client in the circuit knows that the message is for the Tor ...
1
vote
1answer
102 views

Set Gateway for our LAN

I am new to Networking. In our organization we try to setup gateway for security purpose so that we can block certain harmful websites. All I know is gateway is a device. What we have is the LAN setup,...
1
vote
2answers
139 views

non-MiTM Reverse SSL

Do non-MiTM Reverse SSL Proxies exist? Or do all proxies that do SSL-SSL mappings decode and then re-encode HTTPS traffic? If this is the case and I want to map https://mypublicdomain.com -> https://...
-1
votes
1answer
904 views

The Pirate Bay's new Hosting Architecture [closed]

I read this article a moment ago: http://www.geek.com/news/the-pirate-bay-is-now-hosted-anonymously-in-the-cloud-1522725/ But it was very light on details. Is an architecture as described in this ...
1
vote
1answer
445 views

Security w/ Router Behind a Router?

I have a SMB (small-to-medium-business) router (router x) that my workstations run off of in my small business. I wanted to offer my customers wireless internet while they wait for service so I ...
0
votes
3answers
2k views

very secure router and advice to prevent intrusion

I suspect that my home router was been hacked (with firmware upgrade), so that I would like to build and buy a new router enough secure. Something that can prevent not authorized firmware upgrade. I ...
-1
votes
1answer
204 views

No advanced settings option in router [closed]

How can I configure NAT Settings when my router doesn't have advanced settings option.
14
votes
3answers
29k views

How does “traceroute over TCP” work, what are the risks, and how can it be mitigated?

There is a utility called tcptraceroute, and this enhancement called intrace that is used just like a standard traceroute, but it works over TCP. How is the syn flag in TCP used to achieve ...
7
votes
1answer
20k views

Firewall defined Akamai IP Range [closed]

With obvious dangers of opening up a wide range of ips, does anyone know how I can get a source of IP ranges for Akamai? When talking to Akamai they say 'not possible' which I find surprising. I ...
18
votes
2answers
23k views

What are the security implications of enabling UPnP in my home router?

I found port forwarding entries in home router that I haven't manually configured. Is that because of UPnP? Are applications simply able to tell the router to forward ports on their own? Are there ...
2
votes
3answers
805 views

Attaching hotspot to existing network - can it be secured?

I used to work for a company that did wireless hotspots, and this is the challenge that was given to me one day. I don't believe there is a secure solution to it, but it still bugs me for some reason....
-1
votes
1answer
1k views

Routable Domain for DC?

What is the impact of having a routable domain name in windows network infrastucture ? Having example.com in place of exemple.local as domain name have an critical impact ? if yes what should I keep ...
3
votes
1answer
318 views

What are the requirements to sniff UDP packets in a Wireless Ad-Hoc network?

In a wireless Ad-Hoc network, I have two computers which communicates in UDP together from 192.168.1.3 to 192.168.1.5 I have a third computer (192.168.1.6) which wants to listen to the packets which ...
3
votes
2answers
892 views

How actually is Tor hidden service hidden from public?

Let's suppose I have a web server X, listening on port N for instance and configured as a Tor hidden service. How and where is implemented its' hiddenness from public access?
2
votes
1answer
292 views

find hardware and OS specs on routers

How do you determine the model and IOS version of a Cisco router, if you have its IP address remotely, but have no physical access. For example, I run nmap -sP and can see the router's IP, but all ...
3
votes
2answers
2k views

Does “loose source and record route” drop the source address?

Is the source IPv4 address lost when a person uses "loose source and record route" and the destination address is put before the end of the list of addresses through which routing should occur? It ...
4
votes
2answers
6k views

do different subnet masks on home network provide any security?

So I have two routers on my home network: one is provided by my ISP, and the other is my private router. Router A- ISP router: 192.168.1.x router B- private router: 192.168.2.x Clients on my ...
0
votes
1answer
1k views

How to conduct a disguised LSA attack against OSPF?

I want to do disguised LSA attacks on OSPF network and be able to more analyze, so I do not know how it works in practice. This is a penetration test. The attack is described in the address [+]. I ...
1
vote
1answer
529 views

What is the fight-back mechanism in OSPF?

I want to know more about the fight-back security mechanism in OSPF routing protocol. When is the mechanism activated and how does it work? I found the source description of OSPF fight-back, but the ...
2
votes
1answer
1k views

Loki How to crack the password hash OSPF?

I have created for myself a lab of routers in GNS3 . Routing protocol between routers is OSPF. Now,by Loki penetration testing, I found that routers are the feature authentication. Using wireshark, I ...
1
vote
3answers
2k views

What devices support the permanent addition of an ARP table entry? What tools are available to manage this?

I would like to improve wireless security and certain other on-net security scenarios with a permanent ARP table entry. The idea being that someone on the same subnet or WiFi network will have a more ...
5
votes
3answers
2k views

Two SSIDs on same Access point- not good?

If I were to offer two networks (one for trusted users and one to visitors) on one physical access point, is this dangerous because a visitor could compromise the trusted network across via the ...
1
vote
1answer
462 views

Any safety with private IP addresses? [duplicate]

Possible Duplicate: How can someone hack my PC if I am connecting to the internet through NAT? Private IP addresses (172., 192. etc.) are not routable addresses, and not visible to the outside ...
1
vote
1answer
145 views

Is there a router that acts as a VPN to get into the network but also sends traffic out through a VPN?

I have several servers that I want to lock down so they're only assessable from inside the network so I need a router that allows me to VPN in. On top of that I want certain ports(22,8022) from my ...
2
votes
4answers
572 views

Securing private IP space

As we all know, routers that you buy from the store come preset to hand out IP addresses using DHCP, generally on one of three networks: 10.0.1.1/24, 172.16.0.1/24, and 192.168.1.1/24. I personally ...
0
votes
1answer
162 views

Tracing The Source Of IDS/IPS Alerts

This may be more of a routing question than a security one but I am asking for the reason of security. I monitor an IPS on a remote network and there have been high alerts triggered recently that ...
3
votes
2answers
616 views

1 PIX firewall, 2 routers, 2 switches. Please answer a couple questions about hack lab

I bought a bunch of cisco equipment for a project and I got 1 PIX firewall 2 switches and 2 routers This is my plan for a topology but I am new at this so I need help. I am basing this off the ...
5
votes
3answers
406 views

Forensics on a SOHO router

I am interested in how reliable the information determined from doing forensics on a SOHO router is. Most of these routers don't seem to be very advanced, so I question if it would be possible to ...
1
vote
3answers
11k views

PING BLOCKING: How to do? How to break?

I can access each page of a site through the browser (firefox). I can also see the ip and port address in firebug, but when I open cmd->ping site ->it says "request timeout". I also tried traceroute. ...
0
votes
1answer
236 views

Best practice for selective opening of ports on network gateway

Our network is currently isolated from the outside by a Linux box, running iptables and Squid to control web access. By default we deny all outgoing traffic from all IP's, to force Web traffic ...
1
vote
3answers
190 views

How to reverse the communication for security

I have the following use case - There are two networks - internal network where the application server is deployed and has no internet access and external network that is accessible from internet but ...
7
votes
3answers
11k views

Why do I need a firewall on my router?

I just bought a new router, and as usual the router manufacturer make a big deal out of the firewall. I have never understood why the firewall is needed, sure, stopping dos attacks (such as syn-...
0
votes
3answers
787 views

How to rewrite config files using SNMP?

I scanned a router and found that the community string is public. The write access is also enabled. Now I want to change the configuration of the router. Can anybody tell me about tools and tutorials ...
2
votes
3answers
2k views

Use a Common Firewall for two Different Subnets

I want to implement a security scheme in a new network configuration. There are two buildings for the client: Office Building 1 (OB1) with address 10.0.0.0 / 255.255.255.0, Gateway 10.0.0.1 ( ...
6
votes
2answers
4k views

Strange STP traffic in my network, possible MitM attack?

I live at a student dorm, where we are connected to a student network. The administrators of this network have forgotten to disable STP broadcast on non-infrastructure ports. Periodically, I lose my ...
3
votes
2answers
223 views

Software suggestions on building a “passive” and “active” WAN simulation and fuzzing device?

I want to build a more-or-less self-contained box that I can plug two or more endpoints into (routers, mainly) that will simulate a WAN. I want to be able to mess up traffic in all sorts of ways, both ...
2
votes
4answers
2k views

Best way to push data to a client without being blocked by firewall

I'm asking this question here since I think people on this forum probably have the best knowledge of firewalls and routers. Say I'm designing a multi-player game and I want to push data to the client ...
3
votes
4answers
439 views

What does a switched network protect us from? What does it not protect us from?

There seems to be some misconceptions regarding what a switched network will protect us from, and what technologies/precautions a secure environment requires when segmenting trusted users from hostile ...
0
votes
1answer
3k views

Is OpenVPN secure in this way?

I'm familiar with OpenVPN because my home router has a builtin OpenVPN server. I would like to use OpenVPN all the time, but how do I deal with situations where I don't own the routers? ex.: in a ...