Tag Info

New answers tagged

0

The ASA-5505 is a security appliance, aka firewall/router with basic packet inspection. Base is a unit limited to an internal network, a DMZ, WAN and 10 internal devices using it to access the external WAN. The price goes up with each added feature whether it's more users, unrestricted internal networks or added security plugin card. The difference in price ...


0

A firewall only protects against direct scanning from outside. If you set up a web server and manage to get some user inside the firewall to visit your site you can use this to do limited scans from inside with the help of the browser and some Javascript. See https://defuse.ca/in-browser-port-scanning.htm for an example or search for more examples. Note ...


1

A port scanner, like nmap, connects to a port and analyzes the traffic being returned. A firewall's most basic function is to block access to a port. This means that there is no way to scan a port that is being blocked by a firewall. With some exceptions... Some firewalls will allow traffic to a port unless it determines that the traffic is malicious (like ...


0

You can try to use something as the -T2 option to slow down the scan since many firewall drop packets sent too fast. There's a list of option that can help you with IDS\firewall evasion: https://nmap.org/book/man-bypass-firewalls-ids.html


3

"Legal" means that it depends on the jurisdiction, so you will get at least one answer per country, and in some cases (e.g. federal states like the USA) many distinct answers for a single country. Usually, in a business context, employees have a right, and an expectation, of privacy, meaning that spying upon their activities is not legal; employers cannot ...


1

I would recommend u block alle UDP-Ports 1-65535, also all TCP-Ports except one which brings you further to your squid-proxy running with filters and ACLs to undertake more filtering options. uTorrent wont have a chance to connect!


-1

No, firewall is not subnetwork. The only point is firewall should have on one (or more than one) network interface IP from each subnet. Otherwise will be not possible to serve those subnets For example if you have networks: 10.1.1.0/25 10.1.1.128/26 10.1.1.192/26 you should assign to firewall (for example) 10.1.1.1, 10.1.1.129 and 10.1.1.192


0

Power friendly and powerful are hard to come by in cheap packages. It really depends on traffic workload. You may easily get away with some high end router (say ~$100) with OpenWRT. Check OpenWRT page for what models are supported. Get one with USB if you want to store more data on board or have a NAS handy. The other option has already been mentioned - ...


0

You might want to check for Endian firewall community version, which as know is free and can be run in virtual machine.



Top 50 recent answers are included