Tag Info

Hot answers tagged

15

From reading the disclosure, it seems what happens is that the open port isn't actually just a random port, but rather it is a port where a certain internal service that had never been designed to be exposed directly to the external world was listening on. If there is a vulnerability in that internal service, that might have allowed a possible attacker to ...


11

Those messages get a D- for technical content and accuracy. The most likely explanation is that these packets arrived late and failed the ESTABLISHED,RELATED check because the connection was already closed. Somewhat less likely is that they actually had the CONNECT flag set in the TCP header, and your firewall is either dropping all incoming connections or ...


5

There are lots of information about this topic on the internet and on this site, so it does not make sense to repeat everything: a short introduction on how this works you'll find at http://www.zdnet.com/article/how-the-nsa-and-your-boss-can-intercept-and-break-ssl/ and a discussion of the associated problems at What security risks are posed by software ...


3

It is not "secret", but it is "tamperproof". That may not meet your definition of "secure". Your data is no longer confidential if only AH is used - anyone capturing packets can read your data because it is not encrypted. It is protected against modification, however; AH ensures that data tampering will be detected and discarded. AH does not "inherently ...


2

I usually look firstly at the network diagrams and how the network is or should be configured. This will give me an idea of where is the perimeter, the internal networks, the functional segments and so on. I then look at what are the devices - brand, model - used to manage the environment, whether they are enterprise class and have functionality to unify the ...


2

According to the man page, firewalk looks to need the following flags in order to properly scan when you are one hop from your gateway (as seen in your pretty Gliffy picture). firewalk -d 49152 -r 192.168.1.2 192.168.3.11


2

Your organization is most likely using a man-in-the-middle ssl cert. They have a program or proxy setup to authenticate your certificate as valid then submit another certificate to the website on your behalf. This is common for companies that must rely on pci or hipaa compliance. Unfortunately, when this is done then your passwords are exposed by this ...


1

Check out these two guides for more info: http://blog.ipredator.se/howto/openwrt/configuring-openvpn-on-openwrt.html http://tokyobreeze.wordpress.com/2015/01/15/install-openvpn-in-a-router-with-4mb-flash/ The basic idea is to create 3 separate zones, use zone forwarding from LAN to VPN, and turn on Masquerading and MSS clamping on the VPN zone. Be sure to ...


1

Q1: As far as you only block the panel ports (you are not filtering the ssh port by error, for instance). As far as you still can ssh in, and don't forget how to and reenable the panel, it shouldn't lock you out of the panel. Q2 & Q3: You are reducing the exposure surface, so yes you will improve your security. If everything works as it should, you ...


1

Whereas Jari's answer correctly states measures against some MITM attacks, ARP spoofing is a specific MITM attack which is not prevented by enabling DHCP snooping or port-security, (which protect against DHCP race and CAM table attacks respectively). ARP spoofing in particular can be protected against by setting static ARP values deploying dynamic ARP ...



Only top voted, non community-wiki answers of a minimum length are eligible