Last call to make your voice heard! Our 2022 Developer Survey closes in less than a week. Take survey.

Questions tagged [firewalls]

Concerned with software or hardware firewalls

Filter by
Sorted by
Tagged with
0 votes
1 answer
25 views

A personal user software solution providing both firewall + vpn features

I am completely new to the site, So please suggest me in comments, if the question to be improved in any way possible. For personal use, What are the good software/solution out there which gives a ...
user avatar
  • 101
0 votes
0 answers
40 views

A Continuous Flood of Kernel Warnings. Am I under attack?

I have a Linksys WRT1200AC with DD-WRT v3.0-r48865 std. It's connected to the Internet through the ISP's modem in bridge mode. My syslog reports continuously, many times per second stuff like this: ...
user avatar
0 votes
2 answers
111 views

Are country IP address blocks officially standardised and can they be reliably used for access control?

I was setting up firewalld on an enterprise server and came across their concept of firewall zones. I figured I can easily use them and their source property to restrict access to SSH to only the ...
user avatar
0 votes
0 answers
68 views

How are scam call centers cctv stream easily hacked by scam baiters

Recently i have been seeing the videos of fake call centers being busted by scam baiters like Mark Rober In all of these videos the scam baiters are easily able to hack into the the network camera ...
user avatar
0 votes
1 answer
60 views

Are there security implications of allowing Discord through Windows Firewall?

I just installed Discord (downloaded from the official Discord website) and after the install a Windows Firewall pop-up appears asking me if I want to allow Discord through Windows Firewall. I don't ...
user avatar
2 votes
1 answer
108 views

I am still receiving ssh-bruteforce on my VPS

I have a server in Oracle Cloud Infrastructure Ashburn. I am using Tailscale to SSH my servers and closed Port 22 in public. I closed Port 22 on the VCN and left Port 22 open on the server. But no one ...
user avatar
0 votes
0 answers
36 views

How to detect a firewall used

I was scanning a network with Nmap. I'm looking for advanced commands for detecting firewalls.
user avatar
0 votes
0 answers
24 views

Network Segmentation - Single Firewall VM vs Multiple

I am currently implementing a new network with different segments. The separation of those segments is achieved using VLANs. To enable some segments to communicate with each other and to be reached ...
user avatar
2 votes
0 answers
51 views

No root firewall vs any spyware / malware

I am wondering about the effectiveness of no root firewalls as a solution against any type of spyware / malware. Particularly on an android device. No root firewalls like this one here (aptly named) ...
user avatar
0 votes
0 answers
30 views

Writing effective UFW & IpTable rules

I am quite new to UFW and IpTables and I am trying to understand what kind of rules we should look to implement to keep a web-application secure. The current scenario I am testing myself in is that I ...
user avatar
  • 197
0 votes
1 answer
94 views

UFW vs IpTables for web application security

I am trying to better understand measures that can be used to protect a web-application. I'm trying to determine which would be more effective, implementing a UFW or using IpTables. From my ...
user avatar
  • 197
0 votes
1 answer
55 views

The router (that my PC is connected to) is continuously attempting to connect through TCP80. What would be the reasons?

I have no access to the router nor do I have any administrative access to this local network. But every 5 minutes the router attempts to connect to my PC through port 80/tcp, and it attempts exactly 4 ...
user avatar
1 vote
1 answer
71 views

How much network noise is normal? [closed]

on my Ubuntu VPS I am getting a lot of requests and portscans from foreign sources. They are all blocked by UFW. However my question is, if this much "network noise" is normal or is my ...
user avatar
0 votes
0 answers
225 views

Couldn't validate TLS certificate - Nord VPN

I received this notification from Nord randomly. Should I be worried? Is there something I can do? Am I being hacked? P.S. clicked Don't trust EDIT: I tried connecting from mobile data and am ...
user avatar
1 vote
1 answer
190 views

How can malware or a hacker penetrate a firewall from external perimeter?

How can malware or a hacker penetrate a firewall in a router/AP or a dedicated firewall without "help from the inside" (running malicious script on a computer, forgotten open ports with port ...
user avatar
  • 33
1 vote
1 answer
93 views

Decrypting WhatsApp traffic and blocking file uploads possible using a firewall ssl decryption policy?

So we want to block file uploads on WhatsApp but since it's encrypted, I doubt this can be done, however, can PANOS decrypt WhatsApp?? I ask because WhatsApp doesn't exactly use SSL right, it's more ...
user avatar
1 vote
1 answer
84 views

Possible rogue admin monitoring my online activities

I teleworked for a medium-sized software company. We had a network architect who offered me a firewall to install so I could securely access on-premises resources and play around with some ...
user avatar
6 votes
0 answers
137 views

Why am seeing all these Chinese proxy domains? [closed]

Through a casual Google search I came to this Stack Overflow result. I clicked it absent-mindedly, could not connect through the server and saw that he domain was some Chinese government proxy server. ...
user avatar
  • 161
-2 votes
1 answer
87 views

Difference between 22 and 22/tcp rule in firewall

I have those two rules in UFW, but no idea what is the difference between [1] and [2]? To Action From -- ------ ---- [ 1] 22 ...
user avatar
0 votes
1 answer
56 views

Does such kind of privacy proxy exist?

Imagine a typical web service. A client accesses it through a load balancer, which forwards the request to a backend server which will fetch data from a database, create the result and send it back to ...
user avatar
  • 61
0 votes
0 answers
47 views

If all ports are closed except for port 5001 and all internet traffic is blocked except for traffic to/from 1 remote server, can we still be hacked?

We have closed all ports via our hardware firewall except for port 5001 which is open to allow our trading platform software (which does not have any publicly known software vulnerabilities) to ...
user avatar
0 votes
1 answer
29 views

Recommended secure option for uploading files to web server from a dynamic IP?

I need the best way to access a webserver to upload/modify a PHP script. The website contains very sensitive information, gaining unauthorized access to this server and modifying files would lead to ...
user avatar
0 votes
1 answer
47 views

If I close all ports via our firewall except for the single port used by our forex broker can I still be hacked by the broker or someone else?

we have closed all ports on our firewall except for port 5011 which is the only port that is required to be open on our server so that our server can receive price data and send buy and sell orders to ...
user avatar
0 votes
3 answers
156 views

Best practices for securing SSH access? Is certificate-based VPN server a good solution?

I run a server on a hosting. I want to harden it, but ssh access is giving me a bit of concerns. I usually access from home most of the times. I have a provider subscription with the usual DHCP setup ...
user avatar
0 votes
0 answers
22 views

Firewall IP-Filtered Pinhole Risks

To facilitate consulting work, a client has suggested that they allow me to connect directly to an in-house remote desktop server, via a firewall pinhole which allows connection from my IP address ...
user avatar
  • 101
0 votes
0 answers
30 views

Weird Problem with Virtual Machine and Comodo

I am new to this forum and I have the following issue: Some days ago, I clicked on a pop up-window in my Linux-VM that said I need to Update some features or so ... after I clicked "Okay", ...
user avatar
  • 1
0 votes
1 answer
185 views

What would be the best way to mitigate Azure Application Gateway WAF False Positive?

We have a Web API which uses the REST semantics and is protected using the Azure's Application Gateway using a Web Application Firewall. The Web App consuming this API can send in any type of data in ...
user avatar
0 votes
2 answers
89 views

How does my HTTPS POST get blocked based on XML content?

There's a web application on a server which I have full access to which accepts POST requests on a REST endpoint. The request payload is expected to be an XML document. For request routing and load ...
user avatar
  • 121
4 votes
1 answer
348 views

What is the need for firewall to be in "stealth mode"?

There is a firewall deployment case called "transparent mode", when the firewall does its job without routing and having IPv4 addresses, i.e. it is invisible. "Stealth mode" is ...
user avatar
  • 141
0 votes
1 answer
890 views

Is enabling software flow-offloading in OpenWRT's firewall settings dangerous?

First of all, I did ask this on OpenWrt Forums already, I thought maybe someone here knows this. I noticed that my internet speed gets limited when this feature is not enabled, this feature is also ...
user avatar
0 votes
1 answer
164 views

Should we enable UFW for EC2 (Ubuntu Server) instance with Nginx?

I just finished installing Nginx on my EC2 Ubuntu Server (AWS) and everything looks normal. I tested it on my browser by accessing my EC2 public IP. I can see Nginx's welcome message. It's not a big ...
user avatar
0 votes
1 answer
78 views

Block inbound TCP segments with ACK=0 vs Block inbound TCP segments with SYN=1, how are they same?

Blocking inbound TCP segments with ACK=0 Blocking inbound TCP segments with SYN=1 Both prevent external clients from making TCP connections to internal clients, but allow internal clients to connect ...
user avatar
  • 1
0 votes
2 answers
120 views

In a network do we need both TLS and Firewall?

I need to set up a small network as shown below. Is it really required that the "switch should also host a firewall" when all the communication between the "computers" is over TLS?
user avatar
0 votes
0 answers
84 views

OCSP hosts. How to tell Malicious OCSP hosts apart

Learning abit about allowed OCSP hosts on Windows 10: I've picked up OCSP requests carried out by CryptSvc pointing towards an OCSP server in Japan. Referring to Microsoft's Win10 Non-enterprise ...
user avatar
  • 41
0 votes
1 answer
96 views

Apps like Twitch asking for Firewall exceptions: are we at risk of having our computer hacked?

I am installing the Twitch app, and a firewall warning popped up asking that I give permissions to use the app via private and/or public networks. I am a security newbie but a bit paranoid and wonder ...
user avatar
  • 385
0 votes
1 answer
179 views

Risks posed by a wireguard connection to a compromised server

I am trying to understand the risks posed by having a wireguard connection under a very specific and narrow set of circumstances. I have a desktop at home that is behind a router/firewall and is not ...
user avatar
  • 3
0 votes
3 answers
173 views

Why would a legitimate application run on a non-standard port?

Among the many "threats", I see on my SIEM, a non-standard port is a top one. It's always been a false positive, but I don't understand why this happens frequently?
user avatar
0 votes
0 answers
97 views

Understanding Windows Firewall question ("Windows defender firewall has blocked some features")

Sometimes I get the Windows Firewall dialog popping up, which offers me to allow an app to communicate in Local networks Workplace networks Public networks (not recommended) Is this choice about the ...
user avatar
  • 1
1 vote
1 answer
280 views

Firewall is blocking OCSP (Online Certificate Status Protocol) check

I have a certificate issued by lets encrypt and one of the certificate in the path has this information: [1]CRL Distribution Point Distribution Point Name: Full Name: URL=...
user avatar
0 votes
0 answers
153 views

Windows / OpenVPN "kill switch" via firewall

First, not sure if this is the appropriate site or if it would be better suited for a different one, but there isn't a networking or Windows one, so this appears to be the best place. And I'm posting ...
user avatar
21 votes
6 answers
4k views

Do machines without any listening services need a firewall to block incoming connections?

Let's assume we have an example machine connected to the internet. This machine is typically a client one, and it has no services like ssh running on. Does this kind of machines need any firewall to ...
user avatar
0 votes
1 answer
119 views

Is an IP based whitelist practical for controlling internet use?

I have to set up internet controls for our schools study hall/testing center. The idea is that computers on that network should only be able to access the school's webportal and learning platform ...
user avatar
  • 113
0 votes
1 answer
837 views

Using Github's Public IP Address as Remote URL

My company distributes software that runs on locally installed Ubuntu Virtual Machines. To update the software, we pull our latest code down from Github. Some IT departments have github blocked on ...
user avatar
0 votes
0 answers
73 views

CIS MDBR blocking major libraries (jQuery, gstatic)

The organization I work for uses Malicious Domain Blocking and Reporting (MDBR), which is a service provided by Center for Internet Security (CIS). MDBR technology prevents IT systems from connecting ...
user avatar
  • 101
0 votes
0 answers
88 views

Will pulling firewall from router into separate device in front of the router increase security?

To secure a router available at a public static IP address from various vulnerabilities discovered and exploited from time to time (or other examples), would it help to separate its firewall and/or ...
user avatar
  • 115
0 votes
1 answer
160 views

Getting reverse shell from firewalled target

Suppose this scenario: You are already inside a corporate network. Suppose to find out a RCE in a X service. The machine that hosts that service is behind a network-based firewall, ingress rules and ...
user avatar
  • 13
0 votes
0 answers
286 views

Sending traffic to cloud proxy with GRE vs. IPSec

Taking a look at several cloud proxy/CASB vendors, they all seem to have the same recommendation of primarily using a tunnel to deliver internal traffic to them -- either GRE, or IPSec. IPSec ...
user avatar
0 votes
1 answer
104 views

Why is the -L (list) option of iptables not available to non-root users?

Many tools in Linux allow for checking things as a non-root user. For example, at any time, I can check whether a service is running: $ systemctl status ntp However, the iptables needs to be used as ...
user avatar
0 votes
1 answer
115 views

From a modular development standpoint, should a "firewall" do anything else than filtering ports?

From a modular development standpoint, should a "firewall" do anything else than filtering ports? This leads me to further ask, have there been attempts to reform the terminology from "...
user avatar
0 votes
1 answer
130 views

Should you set up firewall rules with a vpn?

I am using a vpn and trying different firewall rules to keep as secure as possible. But the VPN company itself tells me not to use a firewall. Does that seem reasonable? They write: "As we've ...
user avatar
  • 1

1
2 3 4 5
23