Routing is the process of moving packets across a network from one host to a another. It is usually performed by dedicated devices called routers.

learn more… | top users | synonyms

3
votes
1answer
336 views

Security of Openflow/SDN network

Openflow/SDN networks give a remote controller the ability to manage the behavior of network devices i.e. configurations. They can forward instruction sets to dynamically change network configuration. ...
2
votes
6answers
30k views

How to bypass restrictive mac address filtering on home network (not malicious)

Background A short sketch of my situation before I formulate my question: I am on a large home network, which is privately administered by a couple of admins. The network consists of a lan and a ...
2
votes
2answers
232 views

Indirectly relaying intranet server to outside world

I have an internal network of IP network cameras. The feeds from these cameras are ingested by a single server and presented from a unified web interface both internally and to the outside world (both ...
10
votes
3answers
10k views

How to best set up public WiFi without giving access to the rest of my network?

For reference, this is just for my home network. Anyway, I have quite a few of my neighbors ask me to share my internet with them. I'd really like to eliminate this "here's the password" portion ...
8
votes
2answers
183 views

Why does Tor use a new route every few minutes

As far as I know, Tor selects three new nodes every few minutes. What is the advantage of this? The only thing I came up with was to prevent "Bad exit nodes" from viewing too much of your (hopefully ...
13
votes
5answers
2k views

Access to a router's GUI

During a recent visit to a coffee shop, I noticed that they hadn't bothered changing their default user name and password for their router. I realise that someone could log on and be annoying to ...
18
votes
12answers
29k views

Public DMZ network architecture

Years ago, when I was a student, a network security professor taught me in a class what a DMZ is. The architecture he used in his slides was similar to this one: Now that I got employed, my boss, a ...
2
votes
1answer
373 views

Is my ISP BGP/DNS hijacking?

I've noticed some very suspicious activity from my ISP. Sometimes I would notice that when I ping google.com it would resolve to an IP which is owned by my ISP. I currently don't have an example ...
1
vote
0answers
54 views

Traffic anonymization through routing - software and algorithms

I stumbled upon an interview with "the grugq" in which he is talking about how hackers anonymize their traffic, i.e. hide their original ip address (- this is also what I will mean by "anonymizing" in ...
2
votes
5answers
2k views

Is dd-wrt generally more secure than manufacturer's firmware?

I have been advised to use dd-wrt, for richness of features and heightened security. The argument about security is that major manufacturers don't care much about the firmware, release with a lot of ...
26
votes
2answers
5k views

How can a webpage get the MAC address?

I was logged on to my router and filling out some information. I clicked a button and a field was automatically filled in with my computer's MAC address. How is this possible? Does it present a ...
0
votes
1answer
57 views

How to turn of telnet and FTP on Thomson 789vn router? [closed]

I have run a port scan against a Thomson 789vn router and have noticed to my surprise that its HTTP as well as telnet and FTP ports are open. How can one turn off telnet (also FTP) using the router's ...
0
votes
1answer
63 views

unfamiliar IP when logging into ssh server

I just noticed something today, and Now I am curious... I was on my shell server, an i was wondering who was on, so I gave the command $w and saw this: j0h@server:~$ w 22:06:02 up 18 days, 7:02, ...
1
vote
1answer
5k views

Router detecting port scan and ack flood attack

Over the past few days, I'm noticing that the log of my wireless router is showing an ACK flood attack from various IP addresses. I use a D-Link DIR-600L. I've searched through the internet, also ...
2
votes
1answer
152 views

What features boost security for a home edge router?

I want to hide my home network behind a router and not worry about firewalls on internet-facing devices. Furthermore, one PC is going to be hosting some services, so I guess I need port forwarding as ...
0
votes
2answers
122 views

Solution for traffic capturing from router

i'm a newbie and i'm having a problem that i can't find it by google. I'm researching abbout DDoS detecting method now. As we can see that nowadays people often analyze networking traffic from router ...
1
vote
2answers
116 views

Using HTTPS, can the target domain be seen?

If I go to https://google.com/q=test_query with from my browser, what traffic can be seen on the router? Can the domain name (google.com) be seen? If so, can I block all of the traffic to a web page ...
0
votes
0answers
101 views

How should I configure my Tor-dedicated firewall for optimum security?

I'm setting up a Tor-based isolating proxy using the 'Anonymizing Middlebox' iptables rules specified here: https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy i.e. iptables -t nat ...
15
votes
4answers
7k views

Can home routers get infected?

I am behind a router(linksys that runs dd wrt on it) and I was infected with sality. I'm curious, can my router get infected too? If yes, how can I remove the infection? I used the search bar but ...
0
votes
1answer
283 views

Detect possible router attack attemp

I have huge problem with my router: Sagem F@st 3202. Here are some Security log events: Inbound Traffic | Blocked - Default policy | TCP XX.XX.XX.XXX:80->XX.X.XX.XX:51707 on ppp0 ...
0
votes
1answer
196 views

Outbound Port 443 Open but Not Allowing SSH [closed]

My college wireless network has a firewall blocking all outbound ports except 443 and 80. The wired network, however, has none of these restrictions. I can connect to HTTPS sites (obviously). On my ...
4
votes
0answers
37 views

How does BGP filtering work to prevent routing hijacking? [duplicate]

I've been reading for a while but yet do not properly understand how is BGP filtering used to prevent "attacks" such the recent Indosat's problem. Do not copy&paste Cisco's site, I have read all ...
1
vote
3answers
779 views

Wireless LAN router fingerprinting

Does anyone know of a database that lists the range of MAC addresses that are assigned to each particular brand of router? I would like to use this information for fingerprinting. I know I can find ...
5
votes
5answers
15k views

Multiple VPN clients in parallel

If I were to run more than one VPN clients on my machine, simultaneously, what risks would be involved? E.g. are there technical conflicts, such that it wouldn't work right? Could there be ...
5
votes
1answer
1k views

Recent Fritz Box exploit

Background info: About 50% of the ADSL and cable internet access in Germany (and presumably parts of the EU) goes over AVM Fritz routers, either verbatim or rebranded as e.g. "1&1 Home Server" or ...
3
votes
2answers
146 views

Provider can access my local network?

I recently talked with my ISP about many things, basically related to my (little) company security, this guy is a networking guru to me, but he did a strange thing that worries me. Basically I have a ...
1
vote
0answers
228 views

Proxy via pfSense and exclusions for DNS

I have posted this to NetworkEngineering.SE, as that seems the more suitable audience for this question. I will leave this question open here but am happy to see it closed. I just did not want to ...
6
votes
1answer
1k views

DSL Modem Compromised?

Just found out that the primary & secondary DNS servers have been changed to 95.211.156.101 & 5.45.75.11. I had the following setup in place. MAC filtering and WPA2 for WiFi. ...
2
votes
0answers
135 views

Verizon wireless router is pinging my web server - is this ok or bad? [closed]

So I'm working from a local cafe, doing some web development, and need to see something in my Apache's access log. And to my surprise, in the log I see, every 30 seconds or so, a request for my root ...
0
votes
3answers
2k views

For security reasons, can I block ping response on my router without disabling my network?

I seem to have a serious problem of being attacked and after looking up the attack source, 99% come from China, then Korea, Hong Kong etc. Here is a fraction of the report from my Router, which is a ...
0
votes
1answer
454 views

Netgear WNDR4000 open port 53

Why is port 53 open on the WAN side of the router? And more importantly how do I close it? Port 53 is not one of my forwarded ports. Discovered by doing nmap -pT:1-64 <my-external-IP> -Pn ...
0
votes
1answer
126 views

What are the Security Risks of Disabling Reverse Path Filtering

Reverse Path Filters are generally used to disable asymmetric routing where an application has a different incoming and outgoing routes. So idea is to prevent packet entering from one interface ...
6
votes
2answers
10k views

Is NAT Loopback on my router a security problem?

Some DSL routers prevent NAT loopback. Security is sometimes cited as the reason. Is NAT loopback really a security issue? And if so, how is this exploited? NAT loopback... where a machine on the LAN ...
8
votes
1answer
4k views

How can I stop this DOS attack?

I have this entry appearing constantly in my router logs: [DOS Attack] : 5 [RST Scan] packets detected in last 20 seconds, source ip [xx.xx.xx.xx] They just never stop. It doesn't seem to affect ...
6
votes
1answer
5k views

What is packet drop, packet loss and how Packet drop attack works?

I confused with the three terms: Packet drop. Packet loss. Packet drop attack.
22
votes
3answers
3k views

What does the email header-line “message opened by mailclient” mean?

Today a Belgian MP claimed (backed up by a security expert) that her email headers show that her email was read during routing (text in Dutch). The published screenshot of the headers highlights the ...
0
votes
2answers
786 views

Could my computer be infiltrated if someone knows my external IP? [closed]

Could my computer be compromised if someone knew my external IP? I know that when you type that in it just goes into the router page, but my computer is connected to said router. If so, what is the ...
1
vote
0answers
159 views

Routing Protocol Encryption

As far as I know 'newer' versions of routing protocols support authentication between routers. What about encryption and integrity checks? Some implementations like this one from Cisco use MD5, which ...
3
votes
1answer
436 views

How is a Tor hidden service immune to exit node attacks?

Let me explain with a nifty diagram: IP/RP <-> bunch of Tor clients/node (Tor circuit) <-> Tor hidden service Wouldn't the last Tor client in the circuit knows that the message is for the Tor ...
1
vote
1answer
87 views

Set Gateway for our LAN

I am new to Networking. In our organization we try to setup gateway for security purpose so that we can block certain harmful websites. All I know is gateway is a device. What we have is the LAN ...
1
vote
2answers
98 views

non-MiTM Reverse SSL

Do non-MiTM Reverse SSL Proxies exist? Or do all proxies that do SSL-SSL mappings decode and then re-encode HTTPS traffic? If this is the case and I want to map https://mypublicdomain.com -> ...
1
vote
2answers
203 views

Which information does a standard router see?

I currently use the WLAN of my neighbours (with their accordance). It uses WPA2 and the DSL router is a Fritz!Box 7170 (see English manual). Which information can a user with an admin account of this ...
-1
votes
1answer
495 views

The Pirate Bay's new Hosting Architecture [closed]

I read this article a moment ago: http://www.geek.com/news/the-pirate-bay-is-now-hosted-anonymously-in-the-cloud-1522725/ But it was very light on details. Is an architecture as described in this ...
1
vote
1answer
226 views

Security w/ Router Behind a Router?

I have a SMB (small-to-medium-business) router (router x) that my workstations run off of in my small business. I wanted to offer my customers wireless internet while they wait for service so I ...
1
vote
2answers
1k views

Can anyone tell if a wireless router is plugged into an Ethernet port (without actually seeing it)

In a large network if there is an Ethernet port in the wall, is it possible to tell if a switch or wireless adapter is plugged into it? (I'm talking about the cheap home routers - with the built in ...
0
votes
3answers
1k views

very secure router and advice to prevent intrusion

I suspect that my home router was been hacked (with firmware upgrade), so that I would like to build and buy a new router enough secure. Something that can prevent not authorized firmware upgrade. I ...
6
votes
3answers
351 views

Out-of-the-box Network Intrusion Appliance for non-Power User

First, let me apologize if any of this question is naive or beneath the scope of this board. Bear in mind the context and that I'm asking as an attempt to exhaust all resources. Also, I understand if ...
2
votes
3answers
18k views

Access router if you don't know password

At home I have a wireless cisco router. Unfortunately I wasn't smart to change its ip or passwords. So anyone who is connected to it can access 192.168.0.1 and log in as admin using password admin and ...
-1
votes
1answer
85 views

No advanced settings option in router [closed]

How can I configure NAT Settings when my router doesn't have advanced settings option.
7
votes
3answers
10k views

How does “traceroute over TCP” work, what are the risks, and how can it be mitigated?

There is a utility called tcptraceroute, and this enhancement called intrace that is used just like a standard traceroute, but it works over TCP. How is the syn flag in TCP used to achieve ...