tunneling refers to a mechanism in which one network protocol encapsulates a different payload protocol.
2
votes
2answers
437 views
How safe is Tor from MITM/snooping attacks?
I am behind an HTTP proxy, and I frequently tunnel out via an ssh -D SOCKS proxy (I have access to a couple of outside servers which I can tunnel to) when the HTTP proxy causes problems1.
Now, this ...
3
votes
3answers
198 views
Using /usr/bin/passwd as login shell
I have a requirement to set up a SSH tunnel between two hosts. SSH server runs on a Linux host, and the SSH client (PuTTY) runs on a Windows host.
I have set up a separate user account (say 'tunnel') ...
-1
votes
1answer
66 views
No data going through IPsec Tunnel [closed]
I encountered the question below in an exam, which I'm trying to understand, kindly help me out to decipher this.
Question: An IPSec tunnel between two firewalls has been set up. However, no data is ...
5
votes
2answers
191 views
How can I tunnel through an SSH server for HTTP(s) requests?
Are there client programs that allow me to "tunnel" through my SSH enabled server for normal Internet requests such as http/https?
If so what are they and can someone point me in the right direction?
...
1
vote
4answers
260 views
Connections through Firewalls explained
I'm looking for a good explanation of how connections work through firewalls.
I've got the idea of packaging(encapsulating) some protocol inside another one as its payload when tunneling.
But what I ...
3
votes
1answer
265 views
How can I tell if a PPTP tunnel is secure?
PPTP has been demonstrated to be broken in many ways, and most installations are insecure. But it is also theoretically not broken if configured correctly.
As an end-user, is there a simple way for ...
4
votes
2answers
101 views
If two endpoints establish a mutual authenticated connection (TLSv1.0) is the medium between the endpoints a concern?
What are the vulnerable areas when two endpoint connect via TLS? Does the physical layer or data link layer a factor of security concern between the two endpoints? Does it matter in terms of security, ...
4
votes
3answers
90 views
Can the root of a system access to unencrypted data when using a double tunnel?
I connect to a DMZ gateway system (B) which is not secured. From this machine (B) I can connect to the final destination (C).
A-->B-->C
I created a ssh tunnel from A to B and forwarding the port 22 ...
2
votes
3answers
2k views
How to create ssh tunnel using netcat?
I want to create reverse connection between two machines, but these is a firewall in the middle preventing all connections, except ssh. I want to create ssh tunnel using netcat, could you please tell ...
5
votes
3answers
403 views
Why is tunneling so important in pen testing?
I am curious why tunneling is so important in pen testing.
If one has control of one machine in a network, then using that machine, one can run nmap and web apps and try to find out vulnerabilities..
...
0
votes
2answers
279 views
Enabling firewall for the IPv6 tunnel on Windows 2008 64-bit
I am currently on a IPv4 network. The IPv4 network is accessed by a router, which gives my machines IPv4 addresses via NAT.
On one of the machines, a Windows 2008 64-bit machine, I have set up a IPv6 ...
4
votes
2answers
566 views
Security Concerns with X11 Forwarding
What are some of the security concerns and reasons either for or against allowing X11 Forwarding. I have generally taken an approach of not allowing it under the blanket guise of security. Recently, ...
0
votes
2answers
285 views
How to build a secure socks tunnel?
I was using a socks proxy to access websites blocked by my ISP, now it don't work any more in an strange way. Using the proxy is same as not using it! (i.e. I can access open sites but filtered sites ...
3
votes
2answers
458 views
What are the security implications of SSH tunneling?
We have an internal lan (not connected to internet, all internal ip addresses, behind a firewall, no routing to outside), we also have a machine that sits on the edge of our lan (two nics, one on the ...
2
votes
2answers
3k views
How to force ALL programs to use my Proxy?
I have a local proxy on my PC. (localhost:8888)
But unfortunately there are many programs which are not able to go through this proxy.
So how can I force all my programs to go through my local proxy ...
5
votes
1answer
818 views
How to deal with tunnel applications such as TeamViewer on the corporate network
Our IT department uses TeamViewer to provide support to users at remote locations. More recently we've noticed that users are using TeamViewer to get support for their lab equipment from vendors.
...
5
votes
3answers
389 views
What is the difference between encrypted data and data sent through an encrypted tunnel
I am looking at different VPN protocols.
[1] L2TP does not provide encryption so require IPSec to encrypt the data
[2] IPSec tunnel provide encryption to the tunnel
What is the difference in terms ...
6
votes
4answers
627 views
How to tunnel all network communication?
I'm looking for a way to tunnel all network communication from my laptop through another computer. I can control the software on both the laptop and the computer. The connection between them should be ...
13
votes
5answers
4k views
Do you detect/react to DNS tunnelling?
I've just seen a talk about tunnelling TCP/IP over DNS requests, because port 53 UDP is usually open and unfiltered. What techniques exist to detect and block such tunnels, and have you ever seen that ...
6
votes
5answers
569 views
Creating tunnel with most ports closed?
How can I create a proxy tunnel from a network that has all ports but port 80 closed? I guess I'd have to bind SSH on my server to port 80, but would that introduce problems to my home network since ...