Tag Info

Hot answers tagged

6

Using the OSI model of layers is often a good way to spread confusion; it was not initially meant for TCP/IP, and TCP/IP always had trouble fitting in it. When data is encrypted, it can no longer be understood by whoever does not know the decryption key. However, firewalls don't look at all the data, and encryption does not encrypt everything, because the ...


4

It isn't a game of magic ports used by hackers. If there isn't a service running on the port, it's unlikely in the extreme to result in a compromise, but it's nonetheless a good idea to use a strong firewall, especially on windows where lots and lots of services are running by default. That said, if someone is going to compromise your web server, they will ...


2

ISP will routinely do the following for their customers: Block incoming connections on some well-known ports (e.g. port 139, the classic port for Windows file sharing). Block spam, virus and other malware sent over email. "Block" some sites by removing the DNS mappings (the customer can still access them, but the ISP DNS server will not resolve the names). ...


2

Thoughts around this: There are numeral factors that matter in such an enviroment. How much are you willing to spend on 'proper' firewalls and/or IT-security in general? Some hardware for an opensource firewall is not so much compared what can be expensive if some information gets exposed. Firewalls in general does not need to be expensive, have a look at ...


2

This is going to vary depending on your specific situation, policies you are trying to enforce, and regulatory compliance requirements. Generally, a web-app has a front-end and a back end. The front-end is responsible for handling user traffic, display/presentation of data, and authentication. The back-end is usually a database of some sort that handles ...


2

One example where source port with TCP is necessary is active ftp. In this case the client (inside the firewall) listens on a kind of random port on the client for the data connection and notifies the server about this addr+port using the PORT command. The server then connects from port 20 - and this is the only restriction you can set if you need to allow ...


1

It can be useful for anything where you want the box to be able to connect to itself but not allow other boxes to connect. A good example would be a web server running Wordpress and MySQL. You don't want anyone on the web to be able to connect to the SQL server but you want to point Wordpress at 127.0.0.1 for SQL. There may be some obscure side channel ...


1

The source port is usually randomly selected, however applications do have the option to specify a source port. It's within the realm of possibility that someone would want to filter on a specific source port, although it is extremely rare. In the past I've seen source port rules used in order to permit audio and video streaming when the firewall's H.323 ...


1

what about running virtualbox on your windows machine, and in a new virtual machine you run something more secure like debian linux, and run apache web server on that ? then you can use the iptables on linux and the general security that comes with linux. or simply install linux directly on the host. I am sorry but if you want a secure system, running a ...


1

Right now my main concern is privacy, so I may ignore advice on other security issues. You are exposing at the very least your IP address, which can be mapped to a specific location, so that sounds like minus points for privacy. The firewall's purpose is to limit access to services. It does not prevent "bad" traffic on port 80 which then installs ...


1

Many routers - even in the consumer-segment - have basic network filtering capabilities based on protocol, port and IP, which means that they can also be used as a basic firewall. Dedicated firewall appliances often offer additional features, like deep-packet inspection to detect certain known threats on the protocol-level or automatic attack detection based ...


1

Yes! If your server is a recursive server, block ALL queries from unknown/untrusted sources, regardless of source port. You should also block queries, even from trusted sources, with a source port of 53. If your server is an authoritative server, yes, you should still block queries with a source port of 53. In fact, you should block queries with any ...


1

It appears to be the name they're using for their content filtering system. I think they provide enough information to establish that, once you understand that ISPs are trying to get out ahead of legal regulation. The main indicator to me is the fact that it's on by default, which is exactly what Cameron demanded. If you know what Sky broadband had before ...



Only top voted, non community-wiki answers of a minimum length are eligible