Questions tagged [firewalls]
Concerned with software or hardware firewalls
1,094
questions
-2
votes
0answers
47 views
how to get rid of a chrome firewall [closed]
how do I get rid of a firewall.
somebody was able to geuss my password and able to hack into my chrome and they created a firewall and now I cant really get to any of my important sites
0
votes
2answers
57 views
In a network do we need both TLS and Firewall?
I need to set up a small network as shown below. Is it really required that the "switch should also host a firewall" when all the communication between the "computers" is over TLS?
0
votes
0answers
34 views
OCSP hosts. How to tell Malicious OCSP hosts apart
Learning abit about allowed OCSP hosts on Windows 10:
I've picked up OCSP requests carried out by CryptSvc pointing towards an OCSP server in Japan. Referring to Microsoft's Win10 Non-enterprise ...
0
votes
1answer
53 views
Apps like Twitch asking for Firewall exceptions: are we at risk of having our computer hacked?
I am installing the Twitch app, and a firewall warning popped up asking that I give permissions to use the app via private and/or public networks.
I am a security newbie but a bit paranoid and wonder ...
0
votes
0answers
27 views
How to create icmpv6 ping of death packet using scapy? [closed]
I need to send ICMPv6 echo request with payload of size greater than 65535 bytes. To test ping of death attack.
I tried below scapy codes but got errors
pkt=IPv6(src=src1, dst=dst1)/IPv6ExtHdrHopByHop(...
0
votes
1answer
63 views
Risks posed by a wireguard connection to a compromised server
I am trying to understand the risks posed by having a wireguard connection under a very specific and narrow set of circumstances.
I have a desktop at home that is behind a router/firewall and is not ...
0
votes
0answers
2 views
How to Block an IP Address on Android [migrated]
There's an IP address keeping ICMP my network every minute.
I've already blocked the IP on my router, I'd like to know how to configure traffic control on Android if possible.
Please tell me if there'...
0
votes
3answers
114 views
Why would a legitimate application run on a non-standard port?
Among the many "threats", I see on my SIEM, a non-standard port is a top one. It's always been a false positive, but I don't understand why this happens frequently?
0
votes
0answers
36 views
Understanding Windows Firewall question ("Windows defender firewall has blocked some features")
Sometimes I get the Windows Firewall dialog popping up, which offers me to allow an app to communicate in
Local networks
Workplace networks
Public networks (not recommended)
Is this choice about the ...
1
vote
1answer
97 views
Firewall is blocking OCSP (Online Certificate Status Protocol) check
I have a certificate issued by lets encrypt and one of the certificate in the path has this information:
[1]CRL Distribution Point
Distribution Point Name:
Full Name:
URL=...
0
votes
0answers
52 views
Windows / OpenVPN "kill switch" via firewall
First, not sure if this is the appropriate site or if it would be better suited for a different one, but there isn't a networking or Windows one, so this appears to be the best place. And I'm posting ...
21
votes
6answers
4k views
Do machines without any listening services need a firewall to block incoming connections?
Let's assume we have an example machine connected to the internet. This machine is typically a client one, and it has no services like ssh running on. Does this kind of machines need any firewall to ...
0
votes
1answer
81 views
Is an IP based whitelist practical for controlling internet use?
I have to set up internet controls for our schools study hall/testing center. The idea is that computers on that network should only be able to access the school's webportal and learning platform ...
0
votes
1answer
244 views
Using Github's Public IP Address as Remote URL
My company distributes software that runs on locally installed Ubuntu Virtual Machines. To update the software, we pull our latest code down from Github.
Some IT departments have github blocked on ...
0
votes
0answers
43 views
CIS MDBR blocking major libraries (jQuery, gstatic)
The organization I work for uses Malicious Domain Blocking and Reporting (MDBR), which is a service provided by Center for Internet Security (CIS). MDBR technology prevents IT systems from connecting ...
0
votes
0answers
56 views
Will pulling firewall from router into separate device in front of the router increase security?
To secure a router available at a public static IP address from various vulnerabilities discovered and exploited from time to time (or other examples), would it help to separate its firewall and/or ...
0
votes
1answer
80 views
Getting reverse shell from firewalled target
Suppose this scenario:
You are already inside a corporate network. Suppose to find out a RCE in a X service. The machine that hosts that service is behind a network-based firewall, ingress rules and ...
0
votes
0answers
239 views
Sending traffic to cloud proxy with GRE vs. IPSec
Taking a look at several cloud proxy/CASB vendors, they all seem to have the same recommendation of primarily using a tunnel to deliver internal traffic to them -- either GRE, or IPSec.
IPSec ...
0
votes
1answer
69 views
Why is the -L (list) option of iptables not available to non-root users?
Many tools in Linux allow for checking things as a non-root user. For example, at any time, I can check whether a service is running:
$ systemctl status ntp
However, the iptables needs to be used as ...
0
votes
1answer
84 views
From a modular development standpoint, should a "firewall" do anything else than filtering ports?
From a modular development standpoint, should a "firewall" do anything else than filtering ports?
This leads me to further ask, have there been attempts to reform the terminology from "...
0
votes
1answer
94 views
Should you set up firewall rules with a vpn?
I am using a vpn and trying different firewall rules to keep as secure as possible. But the VPN company itself tells me not to use a firewall. Does that seem reasonable?
They write:
"As we've ...
4
votes
4answers
285 views
Is it good practice to disable firewall rules for vulnerability scanners?
I've been asked to ensure that our vulnerability scanning tools (like Qualys, Nexpose) are able to reach all of our AWS EC2 instances, on all ports and protocols.
Today they are limited by the current ...
0
votes
1answer
123 views
Suspicious visits to one URL from same user-agent but from unique IPs
For the past few weeks, I am observing a lots of visits from a specific user-agent - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.135 Safari/537.36 ...
0
votes
1answer
327 views
Can a firewall appliance block http requests? [closed]
Is it possible to use a firewall appliance as WAF? To make it more clear, lets think of a model like this:
Internet > router > Firewall > webserver
Can the firewall act as a WAF and block ...
0
votes
0answers
62 views
Whitelisting our app to prevent connection blocking?
We publish a Windows desktop app, and while I've run VirusTotal on all of our files with no hits, some security software blocks incoming connections on ports we use, leading to frequent user support ...
0
votes
0answers
53 views
Management Network Architecture
I've recently taken a job that has me more involved in network architecture than I ever have been, so please offer me some patience.
I am standing up a network at a new office location. So far I have ...
0
votes
0answers
355 views
Only allowing WhatsApp traffic through firewalls
Problem:
On our client's ship, we have an expensive backup internet connection. We want the backup connection to only allow WhatsApp traffic. This way we won't be greeted with an extreme bill because ...
0
votes
0answers
18 views
A bastion host is a firewall? [duplicate]
I don't understand the difference between a bastion host and a firewall. I think it could be related to the different level of ISO/OSI they work on: a bastion host works on application level (with ...
3
votes
2answers
488 views
Is it safe to set up your firewall to allow localhost to accept incoming connections?
I have set up a VPN client and I'm using iptables to block all connections not tunneled through the VPN. An example of the iptables rules I am using can be found here.
Unfortunately with this ...
1
vote
1answer
137 views
MacOS Firewall Needed or Unnecessary?
Coming from Windows to macOS, I was surprised that the firewall was off by default. I immediately turned this feature on. Would this be necessary? Are there some cons to having the firewall on that I ...
0
votes
1answer
97 views
Are firewalls based on linux secure?
I recently set up a local server on my home network to host some files and personal webapps. In an attempt to improve security, I bought a pfsense-based firewall. I know some basics of networking but ...
0
votes
0answers
66 views
The incoming traffic was allowed on my home network for two days. How to assess the damage?
My router's firewall was set to accept incoming traffic for about 48 hours. Misconfiguration from a user, apparently.
I have few devices on the network (two Windows PC, Freenas, printer, chromecast TV)...
0
votes
0answers
336 views
OpenWrt firewall mystery
I have my home network divided into multiple VLANs, with a main router running OpenWrt forwarding between VLANs, where each VLAN equals a firewall zone. Zone wan hosts the Internet router.
Firewall ...
1
vote
1answer
77 views
Custom response for Web Application Firewall (WAF)
What should be the custom response code when WAF blocks a request due to matched rules or policy violation.
We should kept the response code as 403 or 200 when WAF returns a response against a blocked ...
0
votes
1answer
123 views
How to monitor and manage ALL internet network activity [closed]
Is there a way to monitor and manage (block, unblock, log) all internet activity (mainly outoing traffic) from my computer?
For example, in my android phone I've installed a VPN tool called "...
1
vote
2answers
87 views
Which firewalls filters should I consider applying to my company's website?
Context
The company I work in is starting to have a more dynamic website, which can process sensitive user information. With so, we want to improve our security. We are a healthcare company from ...
5
votes
1answer
485 views
Can DPI block websites with ESNI?
I live in a country with censorship and was wondering if it's possible to bypass DPI by just enabling ESNI, DNS over HTTPS and Always HTTPS? If not, what else should I enable to bypass DPI firewall ...
1
vote
1answer
2k views
Logging into remote server via SSH using VPN (Wireguard). Is it foolproof?
I have a remote server into which I login via ssh. On this server I have setup a Wireguard VPN to which my host connects. The ssh server (ssh daemon) listens on a private IP interface (the server's ...
0
votes
1answer
84 views
How to know if the response is from the CDN and not the origin?
I am doing some bug hunting. I inserted a malicious payload into a request. But I am not sure if the response is from CloudFlare or the origin. Are there special headers which help me to distinguish ...
1
vote
2answers
217 views
I found an unknown UFW rule on my ubuntu server - have I been compromised?
The server is running the Kubuntu Desktop variant of Ubuntu (I transformed it into a server, I had things configured that would have been a pain to transfer to another installation.).
One day I ...
2
votes
1answer
410 views
scan forwarded ports with OpenVAS/GVM?
I'm currently learning about network security and came across a problem, maybe I'm just missing something obvious but I'll try to explain my environment:
I have a Kali Linux VM connected to the WAN ...
22
votes
5answers
5k views
Unidirectional continuous data transfer to an air-gapped computer
What would be a way to transfer files in one direction from internet-facing computerA => air-gapped computerB to protect the files on computerB from unauthorised disclosure, short of using an ...
0
votes
2answers
73 views
Securely Connect Employee PC to Business Private Network
I've recently become the "tech guy" at a startup, and am tasked with standardizing our hardware infrastructure. Further more, I choose how employees working from home will connect to ...
0
votes
0answers
42 views
Firewall rule such that I can only acess a website with VPN
I want to create a firewall rule such that I can only access a Website with VPN enabled. But I can't seem to find an option in windows firewall to say if my protocoll is not openvpn I can't access the ...
0
votes
1answer
74 views
Windows Firewall allows the connection to more than one user who shares the same external IP address
I wrote a stand-alone anticheat. When the client anticheat connects to its server, the server creates a firewall rule allowing the game client to gain access to the server.
The problem is the firewall ...
1
vote
1answer
107 views
Is opening all ports on a router safe if it is simply redirection to a VPN server at 192.168.1.2:51820?
The motive for doing this is that I want to open other ports so that I can evade firewalls which block VPN connections. Instead of redirecting eg. port 53 or 123, I could simply set up a destination ...
0
votes
1answer
100 views
Possible ways to intrigue IP blockage on practical websites
Assume that I share the same IP address with others. Then if I can do something bad to intrigue practical websites, such as Google, Amazon, or jQuery to block me, then all other users will also be ...
-1
votes
1answer
57 views
Whitelisting only domain not IP [closed]
Is it possible to whitelist only 1 domain name but not IP?
For example:
On some "Doogle" hosting is IP 1.1.1.1 and have multiple domain resolution for this IP: dog.com, cat.com
cat.com ...
1
vote
0answers
64 views
How to Prevent Attacker from Abusing IPv4-embedded IPv6 to Bypass Security Mechanism?
Section 5.3 of RFC6052 explained how an attacker could abuse the NAT64 translation mechanism to bypass security mechanism such as firewall or IDS/IPS if those devices only have an IPv4 blacklist. The ...
2
votes
2answers
964 views
How can I block hits to Youtube using iptables?
I want to prevent my daughter from accessing YouTube while she's attending school. So I was thinking to add protections in iptables. Unfortunately, when she goes to YouTube, the DNS resolves to IP ...