tunneling refers to a mechanism in which one network protocol encapsulates a different payload protocol.

learn more… | top users | synonyms

0
votes
2answers
95 views

Are VPN tunnels really completely private? [duplicate]

I've been considering a VPN tunnel, specifically PIA. These types of companies make bold claims of complete anonymity and privacy, with no one in the world (ISP's, governments, school or corporate ...
2
votes
0answers
751 views

Can SSH tunneling over DNS tunnel work in China to use free WiFi at airport?

I have followed a tutorial here: http://ebnj.net/sshoverdns/ This tutorial tells us how to carry all internet traffic via DNS tunnel if your airport enables no-limit outgoing DNS. This guides us to ...
1
vote
1answer
58 views

SSH Tunnels for Securing IoT Sensor-to-Server Connections (Many to One)

All, How bad (or good) an idea would it be to utilize SSH tunnels from my sensor gathering remote computers (imagine an "industrial" Raspberry Pi-like device w/ Linux) to my centralized server (also ...
0
votes
1answer
78 views

X windows security: VNC and X server vs xpra

I have a CentOS server that currently has no X server on it. It will be used for doing statistical crunching and providing other services (probably via a web interface). The main security for the ...
1
vote
4answers
215 views

How to know if accessing to a VPN service is safe and won't steal my data

I want to know if a VPN service is safe or not. If the VPN server itself can catch or sneak peek my data? Or as long as it is a VPN service, then the security is protected by the algorithm itself? ...
0
votes
1answer
66 views

Captive portal DNS tunneling

I recently had a meeting with a security researcher who told me about tunnelling over a captive portal using DNS. I have done some research into this but I was wondering what is the simplest way to ...
1
vote
1answer
94 views

How would a SSL tunnel be exploited?

I am looking at our CI (Bamboo) Server initiating an outbound connection to setup a SSL tunnel to an agent running on an AWS ec2 instance. As per the documentation: All traffic sent between the ...
0
votes
0answers
84 views

Establish dynamic port forward/proxy-chain through compromised Windows host

The scenario Attacker IP (public): 1.2.3.4 Compromised Windows Workstation IP (internal): 4.5.6.7 Setup: Firewall between workstation and attacker IP, permits outbound connections on port 21. ...
0
votes
1answer
86 views

Transfer of packets in a VPN connection

I am trying to figure out how a computer communicates with a website when using a VPN connection (specifically, how packets are transferred) as compared to a computer that's not using a VPN connection....
1
vote
0answers
38 views

TLS in slow/unstable mobile/wireless networks [closed]

We have this rather old VPN tunnel software that is running in various wireless/mobile networks (from 2G mobile and upwards). It is currently running WTLS, as this software is from the old days when ...
-1
votes
1answer
49 views

when router get's ipsec packet does it look into crypto map acl

So I have a question about IPSec. For example, we have an extended ACL with one line 10.10.10.0/24 10.20.20.0/24 on one side (R1) and 10.20.20.0/24 10.10.10.0/24 on the other (R2). When we see ...
5
votes
1answer
250 views

Does a VPN provide any security benefits over sshuttle or a vanilla ssh tunnel?

I use sshuttle to tunnel my traffic through one of my remote boxes whenever I'm in a cafe or connected to an insecure network. Does a VPN provide any additional security benefit over this kind of ...
12
votes
5answers
2k views

How does a network admin block the reverse SSH in company?

Given firewall inbound: all are blocked outbound: allow port 80, 443 Problem colleagues are still able to ssh to home device by port 80/443, and establish a reverse ssh tunnel from company to ...
2
votes
1answer
192 views

How should I tunnel arbitrary protocol traffic over HTTPS?

I'm posting this question from a moving train! (Ok, maybe that's not so impressive.) This train has an annoying WiFi - it's low-throughput, high-latency, tends to lose packets, and blocks most kinds ...
1
vote
1answer
105 views

What is the proper setup procedure for SSL Tunnel certificates?

I am a systems integrator using a system designed for bringing HVAC data up to a common interface; this system/software platform is called Niagara AX. The combination of the customer's network setup ...
2
votes
1answer
486 views

Using RSA for Web Application Authentication

I have a network that is only accessible through bastion servers over ssh. In it, I am developing web applications that are exposed to end users via GUI's served up over websockets. All traffic into ...
3
votes
3answers
251 views

Should traffic between two hosts in the same data center be encrypted?

We have two hosts, theoretically in the same data center. The two machines are hosted at Online.net. We're having a bit of a debate: should the traffic between the two hosts be encrypted. The traffic ...
1
vote
1answer
45 views

Can I use transport mode in IPsec if I tunnel via UDP?

Can I use tranport mode (instead of tunnel mode) in IPsec if I tunnel a VPN via UDP? I don't see why the header (that sets the protocol and port) needs to be encrypted in my case (I suspect it would ...
1
vote
1answer
46 views

Does GRE Tunneling support the Websocket Protocol?

Just curious because I am going to use a GRE Tunnel that has a ddos filtered ip, then tunnel it to my main gameserver. My gameserver uses HTML 5 Websockets and port 9300.
0
votes
1answer
319 views

Does GRE Tunneling “really” hide your main IP?

As we all know, setting up a GRE Tunnel is nice to hide your main ip under a dedicated server. My question is, is it really hidden? Is there a way a malicious user could somehow find your main ip ...
2
votes
0answers
189 views

Does enabling VPN on our router increase the risk of our network being exposed to the outside network? [closed]

We are thinking about using VPN to connect our remote office and the main office and also support developers working from home. To do this, we are planning to purchase 2 CISCO (or similar) routers to ...
0
votes
1answer
347 views

Security of access to local network via VNC over SSH tunnel

I've just set up a Raspberry Pi 2 with the latest raspbian and installed some services. For remote access I've installed tightvnc server which I set up to only allow connections from localhost. I can ...
2
votes
3answers
96 views

Secure tunnel set up in an office environment

Suppose I am a rogue employee and I want to syphon some sensitive data out of the office and I only have office internet access for this. My office internet access needs to go through a proxy server, ...
-1
votes
2answers
230 views

SSL tunneling and how it is used to attack targets

How can SSL tunneling be used to attack a target, and how can I prevent such thing from happening? Does modern network/appliction firewalls have the capability to detect SSL tunneling? thanks Update: ...
1
vote
1answer
75 views

Limits of deep packet inspection wrt tunnels?

Multitun is a tunnel that encrypts connections and sends them bulk over a web socket, which is a web standard. So firewalls that ensure the expected protocol is running on the allowed port, will just ...
3
votes
1answer
506 views

L2TP/IPSec: Mutual authentication BEFORE user can access VPN

I came across a question You are the network administrator for your company. You have deployed Windows Server 2008 on all server computers in your company. You have deployed the Network ...
9
votes
1answer
399 views

Maximum number of nodes with IPSec?

From my understanding, for incoming packets over IPSec, the Security Association (SA) is identified by the SPI field of the ESP header. Then let's say I have a bunch of nodes where each node wants to ...
2
votes
2answers
3k views

Squid proxy and VPN software

I have some questions about squid proxies, we set a squid proxy server to block certain web sites for users. and some users only can access one website that related to our work.but after install some ...
0
votes
1answer
603 views

How secure is split tunneling on a VPN?

What protocols get encrypted and go through the VPN? Is it just port 80 and DNS traffic that does not go through the VPN? Does this impose any security risks by running a split tunnel? Making the ...
1
vote
0answers
94 views

Pwn Plug like tunneling suite

Is there some sort of a (free) SSH tunneling suite like the one on the Pwnie Express' Pwn Plug (R2)? It has SSH over HTTP, DNS, ICMP, and other covert tunneling options and uses BackTrack 5 as a SSH ...
-3
votes
1answer
460 views

How could an attacker have gained remote access to my laptop? [closed]

I have a 15 yr old daughter who's become not only a certified Microsoft Expert, but by pure accident, it came to my attention she'd long ago created a SPLIT network connection on our internet, HIDDEN ...
-1
votes
1answer
3k views

Open ports and SSH Tunneling to shared hosting

I know your time is valuable so I'm not waiting for specific answers to my situation. I don't mind reading documentation, so pointers to something that converges would be greatly appreciated. I don't ...
2
votes
1answer
226 views

How does tunneling actually work?

I recently saw a question in which someone implied that tunneling could foil MITM even if it were implemented while an MITM was taking place. My understanding of tunneling is that it is only capable ...
0
votes
1answer
698 views

NAT traversal for IPsec AH protocol

Wherever I looked I only saw the description of NAT traversal for ESP protocol (for example: http://pic.dhe.ibm.com/infocenter/iseries/v6r1m0/index.jsp?topic=/rzaja/rzajaudpencap.htm) It's looks that ...
7
votes
4answers
4k views

Computer sending unstopped ICMP echo request to an IP

I noticed while hanging in Microsoft Network Monitor that my computer is sending ICMP echo request to an arbitrary IP address 202.39.253.11. I looked for the owner of this IP and I found it is owned ...
4
votes
1answer
615 views

ISP and ssh tunneling

I have a question about ssh tunneling. Is it possible for the ISP to realize the destination server which I want to connect it via ssh tunneling? I mean the destination website which I want to visit ...
9
votes
4answers
554 views

Should I tunnel multiple TCP connections through a TLS/SSL tunnel or use TLS/SSL for each connection?

I am developing an application that runs on Windows PCs. The application is able to connect to some kind of devices within a LAN. It can create multiple TCP-connections to the device it is connected ...
3
votes
1answer
3k views

How can I detect if someone is using an ssh tunnel as a proxy to connect to a VPN?

I've got an SSH server setup in a remote location, which I use to tunnel traffic from an android tablet. On the tablet, I have the Cisco AnyConnect app to connect to my company's VPN. We want to be ...
12
votes
4answers
4k views

How to use public WiFi safely?

The Dangers of Open Wi-Fi How does one go about sending valuable information (for example inputting email username and password) over a free password-less public WiFi network? The only option that I ...
1
vote
1answer
1k views

What is the difference between an HTTPS traffic setup with Stunnel and a SSL-VPN

We have a scenario where we cannot connect to our stunnel server running on port 443 on our network, which only allows access to Internet via a proxy server. On the contrary, when we tried a SSL VPN ...
10
votes
2answers
6k views

How safe is Tor from MITM/snooping attacks?

I am behind an HTTP proxy, and I frequently tunnel out via an ssh -D SOCKS proxy (I have access to a couple of outside servers which I can tunnel to) when the HTTP proxy causes problems1. Now, this ...
3
votes
3answers
2k views

Using /usr/bin/passwd as login shell

I have a requirement to set up a SSH tunnel between two hosts. SSH server runs on a Linux host, and the SSH client (PuTTY) runs on a Windows host. I have set up a separate user account (say 'tunnel') ...
23
votes
2answers
40k views

How can I tunnel through an SSH server for application layer protocols such as HTTP/s and FTP?

Are there client programs that allow me to "tunnel" through my SSH enabled server for normal Internet requests such as HTTP(s)? If so what are they and can someone point me in the right direction? ...
1
vote
4answers
3k views

Connections through Firewalls explained

I'm looking for a good explanation of how connections work through firewalls. I've got the idea of packaging(encapsulating) some protocol inside another one as its payload when tunneling. But what I ...
7
votes
1answer
16k views

How can I tell if a PPTP tunnel is secure?

PPTP has been demonstrated to be broken in many ways, and most installations are insecure. But it is also theoretically not broken if configured correctly. As an end-user, is there a simple way for ...
5
votes
2answers
230 views

If two endpoints establish a mutual authenticated connection (TLSv1.0) is the medium between the endpoints a concern?

What are the vulnerable areas when two endpoint connect via TLS? Does the physical layer or data link layer a factor of security concern between the two endpoints? Does it matter in terms of security, ...
3
votes
3answers
144 views

Can the root of a system access to unencrypted data when using a double tunnel?

I connect to a DMZ gateway system (B) which is not secured. From this machine (B) I can connect to the final destination (C). A-->B-->C I created a ssh tunnel from A to B and forwarding the port 22 ...
4
votes
3answers
14k views

How to create ssh tunnel using netcat?

I want to create reverse connection between two machines, but these is a firewall in the middle preventing all connections, except ssh. I want to create ssh tunnel using netcat, could you please tell ...
6
votes
3answers
1k views

Why is tunneling so important in pen testing?

I am curious why tunneling is so important in pen testing. If one has control of one machine in a network, then using that machine, one can run nmap and web apps and try to find out vulnerabilities.. ...
0
votes
2answers
1k views

Enabling firewall for the IPv6 tunnel on Windows 2008 64-bit

I am currently on a IPv4 network. The IPv4 network is accessed by a router, which gives my machines IPv4 addresses via NAT. On one of the machines, a Windows 2008 64-bit machine, I have set up a IPv6 ...