Tag Info

New answers tagged

1

It Certainly would reduce the exposure and increase the obscurity of the connection to narrow the possible connections to a small sub group of specific IP addresses. What would be a safer approach is to have your users connect to a VPN endpoint and then connect to that system from there, This obfuscates the traffic with encryption and makes it un-viewable ...


6

I'd say that there can be a benefit from using static IP addresses. Essentially if at the firewall you can say "only allow traffic to this port from these specific IP addresses" then there are a number of effects. An attacker scanning the Internet for vulnerable hosts is unlikely to detect the service and therefore be able to attack it An attacker who is ...


1

Sounds a lot like SYN Cookies. This is a method to prevent TCP SYN DoS attacks. Basically, when the server receives a TCP SYN packet, it creates a "cookie" with a hash of the values (specifically the source and sequence number), and then sends the ACK but does not create a "half open" connection. When the server receives a SYNC ACK, it uses the ...


0

I'm not convinced of the advantages of such a system but with regards to implementing it: You want a proxy application listening on the mentioned port so when requests for your web application come in, they go to the proxy first. The proxy analyses the request and employs your pattern matching logic. The proxy then forwards the request to the webapp (or ...



Top 50 recent answers are included