New answers tagged

2

It depends on what you want to protect, and when. If your server hosts a number of services, or a number of websites, then you would want the control closest to the target so as to not deny the IP from the other services/sites. If your server hosts a website and an email server, and someone pentesting you rightly triggers a block, you don't want them ...


1

Depending on what kind of service you are running you might want to do it in different places. The advantage of iptables is that it runs on linux kernel and prevents data from ever reaching your processes. Meaning that if something like heartbleed or shell shock ever happens again, attacker will never be able to reach vulnerable application. It is very ...


3

OSI layers do not care where the check happens, but at which layer the information used in the check reside. If the check is doing whitelisting by IP address only it does not matter where the check is configured, because the decision is always purely based on the IP address, i.e. OSI layer 3. But, depending on the setup and the validation code the check ...


0

The Ethernet Layer or Layer 2 is not encrypted, since it's needed in order to deliver the packets using the media access. Take a closer look at : Encrypting layers of OSI WPA2-PSK doesn't completely encrypt layer 2 information. Management frames are unencrypted (except in cases where management frame protection is implemented). As you can see, only ...



Top 50 recent answers are included