Tag Info

Hot answers tagged

13

This is normal and expected behavior for windows system. The IP you mentioned resolves to sinwns2012412.wns.windows.com. The Windows Push Notification Services (WNS) enables third-party developers to send toast, tile, badge, and raw updates from their own cloud service. This provides a mechanism to deliver new updates to your users in a power-efficient and ...


5

You mention two distinct technologies: an access portal and client isolation. In comments you say you are not talking about the access portal part, but rather client isolation. Most consumer and corporate access points and wireless controllers I have touched have this feature. It is simply built-in to the hardware you are working with, usually a checkbox ...


3

Hi I'm the developer who wrote VyprVPN for Mac. It looks like you've still got one of our software components installed. Macintosh applications that needs to alter your system, including VyprVPN, uses something called a "privileged helper tool” aka a system daemon. We install a helper tool with the user's permission, using the appropriate Apple API for this ...


2

It's a bad idea to host a database server on your internet facing webserver. If the underlying OS of your web/DB server, or webserver platform itself contains any vulnerabilities that can be exploited then your database will be compromised. I won't be broadcasting the IP address of my database because I won't be sending calls to it, which makes my ...


2

Is this kind of activity normal in VPN providers? they are legally registered company, claim that respect privacy... That the domain names begin on dl. (short for "download") sounds like they are checking for updates, configuration files or whatever. That they do it every seconds seems like a waste with Resources, but I Think they do it that way ...


2

You have a unique requirement. But your basis may be off. I'll use an incident I ran into this week as an example. I discovered an attack from 50 IP addresses from a block of IPs managed by a hosting company in Hong Kong. It would make sense, then, to block all IPs from this hosting company, at least temporarily. I believe this is similar to the scenario ...


1

I think you need to approach this issue from a different direction. There are a number of problems with your proposed solution It is a maintenance nightmare. It is a reactive rather than proactive solution. You will only add blocked IPs once the IPs have tried to break in. This could be too late It ignores the problem that many IPs are assigned ...


1

How to detect if you are behind a PNAT: nping --ec "public" -c 1 echo.nmap.org (CAPT-labelled packet gives away the PNAT address) If you test the external side of the firewall, you could use the bnat modules from the Metasploit Framework in order to route traffic through the broken implementation of NAT. There is also a vulnerability in some firewalls ...


1

The NAT software running on the Firewall system is going to block all inward traffic that doesn't match a current egress session or a port forwarding rule. If no port forwarding rules are in place, then the server behind the NAT is as good as invisible, barring compromises to the firewall.


1

Its totally depends on the security level of the NAT. 64 packets per 0.1 seconds means 640 packets are hitting on Symmetric NAT (640 ports? as you are sending to random ports). Now say like connection established after 5 seconds that means you are hitting from PRC to SYMM around 3250 packets on Symmetric NAT (3250 ports?). Seems like most of the NAT will ...


1

Think of the scenarios of compromise. If you host the database on the same system as the web service, then a compromise of the web service results in immediate compromise of the database. So, this is minimally secure. If you host the database on an "internal" server that the web service can access (via an internally facing network interface or special ...


1

Is this the type of behavior you are referring to? What is a VAP? Every VAP appears as an independent AP to the client. The VAPs emulate the operations of a physical AP at the MAC level. All wireless management traffic that would be transmitted by one physical AP is also transmitted by the VAP. For example, a single physical AP might ...


1

You can use a Simple Batch File. Open Notepad and copy/paste the script below into a blank document. Save the file as BLOCKALL.BAT. Now copy that file to the same directory as the EXEs you want to block and double click it. It will add outbound rules to advanced Windows Firewall settings blocking all EXEs in that folder and sub-folders as well. I tested ...



Only top voted, non community-wiki answers of a minimum length are eligible