Questions tagged [firewalls]
Concerned with software or hardware firewalls
1,118
questions
0
votes
1
answer
25
views
A personal user software solution providing both firewall + vpn features
I am completely new to the site, So please suggest me in comments, if the question to be improved in any way possible.
For personal use, What are the good software/solution out there which gives a ...
- 101
0
votes
0
answers
40
views
A Continuous Flood of Kernel Warnings. Am I under attack?
I have a Linksys WRT1200AC with DD-WRT v3.0-r48865 std. It's connected to the Internet through the ISP's modem in bridge mode.
My syslog reports continuously, many times per second stuff like this:
...
- 1
0
votes
2
answers
111
views
Are country IP address blocks officially standardised and can they be reliably used for access control?
I was setting up firewalld on an enterprise server and came across their concept of firewall zones. I figured I can easily use them and their source property to restrict access to SSH to only the ...
- 184
0
votes
0
answers
68
views
How are scam call centers cctv stream easily hacked by scam baiters
Recently i have been seeing the videos of fake call centers being busted by scam baiters like Mark Rober
In all of these videos the scam baiters are easily able to hack into the the network camera ...
- 1
0
votes
1
answer
60
views
Are there security implications of allowing Discord through Windows Firewall?
I just installed Discord (downloaded from the official Discord website) and after the install a Windows Firewall pop-up appears asking me if I want to allow Discord through Windows Firewall.
I don't ...
2
votes
1
answer
108
views
I am still receiving ssh-bruteforce on my VPS
I have a server in Oracle Cloud Infrastructure Ashburn. I am using Tailscale to SSH my servers and closed Port 22 in public.
I closed Port 22 on the VCN and left Port 22 open on the server. But no one ...
- 25
0
votes
0
answers
36
views
How to detect a firewall used
I was scanning a network with Nmap.
I'm looking for advanced commands for detecting firewalls.
0
votes
0
answers
24
views
Network Segmentation - Single Firewall VM vs Multiple
I am currently implementing a new network with different segments. The separation of those segments is achieved using VLANs. To enable some segments to communicate with each other and to be reached ...
- 1
2
votes
0
answers
51
views
No root firewall vs any spyware / malware
I am wondering about the effectiveness of no root firewalls as a solution against any type of spyware / malware. Particularly on an android device.
No root firewalls like this one here (aptly named) ...
- 21
0
votes
0
answers
30
views
Writing effective UFW & IpTable rules
I am quite new to UFW and IpTables and I am trying to understand what kind of rules we should look to implement to keep a web-application secure. The current scenario I am testing myself in is that I ...
- 197
0
votes
1
answer
94
views
UFW vs IpTables for web application security
I am trying to better understand measures that can be used to protect a web-application. I'm trying to determine which would be more effective, implementing a UFW or using IpTables.
From my ...
- 197
0
votes
1
answer
55
views
The router (that my PC is connected to) is continuously attempting to connect through TCP80. What would be the reasons?
I have no access to the router nor do I have any administrative access to this local network. But every 5 minutes the router attempts to connect to my PC through port 80/tcp, and it attempts exactly 4 ...
- 1
1
vote
1
answer
71
views
How much network noise is normal? [closed]
on my Ubuntu VPS I am getting a lot of requests and portscans from foreign sources. They are all blocked by UFW. However my question is, if this much "network noise" is normal or is my ...
- 11
0
votes
0
answers
225
views
Couldn't validate TLS certificate - Nord VPN
I received this notification from Nord randomly. Should I be worried? Is there something I can do? Am I being hacked?
P.S. clicked Don't trust
EDIT: I tried connecting from mobile data and am ...
1
vote
1
answer
190
views
How can malware or a hacker penetrate a firewall from external perimeter?
How can malware or a hacker penetrate a firewall in a router/AP or a dedicated firewall without "help from the inside" (running malicious script on a computer, forgotten open ports with port ...
- 33
1
vote
1
answer
93
views
Decrypting WhatsApp traffic and blocking file uploads possible using a firewall ssl decryption policy?
So we want to block file uploads on WhatsApp but since it's encrypted, I doubt this can be done, however, can PANOS decrypt WhatsApp??
I ask because WhatsApp doesn't exactly use SSL right, it's more ...
- 11
1
vote
1
answer
84
views
Possible rogue admin monitoring my online activities
I teleworked for a medium-sized software company. We had a network architect who offered me a firewall to install so I could securely access on-premises resources and play around with some ...
- 773
6
votes
0
answers
137
views
Why am seeing all these Chinese proxy domains? [closed]
Through a casual Google search I came to this Stack Overflow result. I clicked it absent-mindedly, could not connect through the server and saw that he domain was some Chinese government proxy server. ...
- 161
-2
votes
1
answer
87
views
Difference between 22 and 22/tcp rule in firewall
I have those two rules in UFW, but no idea what is the difference between [1] and [2]?
To Action From
-- ------ ----
[ 1] 22 ...
0
votes
1
answer
56
views
Does such kind of privacy proxy exist?
Imagine a typical web service. A client accesses it through a load balancer, which forwards the request to a backend server which will fetch data from a database, create the result and send it back to ...
- 61
0
votes
0
answers
47
views
If all ports are closed except for port 5001 and all internet traffic is blocked except for traffic to/from 1 remote server, can we still be hacked?
We have closed all ports via our hardware firewall except for port 5001 which is open to allow our trading platform software (which does not have any publicly known software vulnerabilities) to ...
- 1
0
votes
1
answer
29
views
Recommended secure option for uploading files to web server from a dynamic IP?
I need the best way to access a webserver to upload/modify a PHP script. The website contains very sensitive information, gaining unauthorized access to this server and modifying files would lead to ...
- 111
0
votes
1
answer
47
views
If I close all ports via our firewall except for the single port used by our forex broker can I still be hacked by the broker or someone else?
we have closed all ports on our firewall except for port 5011 which is the only port that is required to be open on our server so that our server can receive price data and send buy and sell orders to ...
- 1
0
votes
3
answers
156
views
Best practices for securing SSH access? Is certificate-based VPN server a good solution?
I run a server on a hosting. I want to harden it, but ssh access is giving me a bit of concerns.
I usually access from home most of the times. I have a provider subscription with the usual DHCP setup ...
- 417
0
votes
0
answers
22
views
Firewall IP-Filtered Pinhole Risks
To facilitate consulting work, a client has suggested that they allow me to connect directly to an in-house remote desktop server, via a firewall pinhole which allows connection from my IP address ...
- 101
0
votes
0
answers
30
views
Weird Problem with Virtual Machine and Comodo
I am new to this forum and I have the following issue:
Some days ago, I clicked on a pop up-window in my Linux-VM that said I need to Update some features or so ... after I clicked "Okay", ...
- 1
0
votes
1
answer
185
views
What would be the best way to mitigate Azure Application Gateway WAF False Positive?
We have a Web API which uses the REST semantics and is protected using the Azure's Application Gateway using a Web Application Firewall. The Web App consuming this API can send in any type of data in ...
- 228
0
votes
2
answers
89
views
How does my HTTPS POST get blocked based on XML content?
There's a web application on a server which I have full access to which accepts POST requests on a REST endpoint. The request payload is expected to be an XML document. For request routing and load ...
- 121
4
votes
1
answer
348
views
What is the need for firewall to be in "stealth mode"?
There is a firewall deployment case called "transparent mode", when the firewall does its job without routing and having IPv4 addresses, i.e. it is invisible.
"Stealth mode" is ...
- 141
0
votes
1
answer
890
views
Is enabling software flow-offloading in OpenWRT's firewall settings dangerous?
First of all, I did ask this on OpenWrt Forums already, I thought maybe someone here knows this.
I noticed that my internet speed gets limited when this feature is not enabled, this feature is also ...
- 1,326
0
votes
1
answer
164
views
Should we enable UFW for EC2 (Ubuntu Server) instance with Nginx?
I just finished installing Nginx on my EC2 Ubuntu Server (AWS) and everything looks normal.
I tested it on my browser by accessing my EC2 public IP. I can see Nginx's welcome message.
It's not a big ...
0
votes
1
answer
78
views
Block inbound TCP segments with ACK=0 vs Block inbound TCP segments with SYN=1, how are they same?
Blocking inbound TCP segments with ACK=0
Blocking inbound TCP segments with SYN=1
Both prevent external clients from making TCP connections to internal clients, but allow internal clients to connect ...
- 1
0
votes
2
answers
120
views
In a network do we need both TLS and Firewall?
I need to set up a small network as shown below. Is it really required that the "switch should also host a firewall" when all the communication between the "computers" is over TLS?
0
votes
0
answers
84
views
OCSP hosts. How to tell Malicious OCSP hosts apart
Learning abit about allowed OCSP hosts on Windows 10:
I've picked up OCSP requests carried out by CryptSvc pointing towards an OCSP server in Japan. Referring to Microsoft's Win10 Non-enterprise ...
- 41
0
votes
1
answer
96
views
Apps like Twitch asking for Firewall exceptions: are we at risk of having our computer hacked?
I am installing the Twitch app, and a firewall warning popped up asking that I give permissions to use the app via private and/or public networks.
I am a security newbie but a bit paranoid and wonder ...
- 385
0
votes
1
answer
179
views
Risks posed by a wireguard connection to a compromised server
I am trying to understand the risks posed by having a wireguard connection under a very specific and narrow set of circumstances.
I have a desktop at home that is behind a router/firewall and is not ...
- 3
0
votes
3
answers
173
views
Why would a legitimate application run on a non-standard port?
Among the many "threats", I see on my SIEM, a non-standard port is a top one. It's always been a false positive, but I don't understand why this happens frequently?
0
votes
0
answers
97
views
Understanding Windows Firewall question ("Windows defender firewall has blocked some features")
Sometimes I get the Windows Firewall dialog popping up, which offers me to allow an app to communicate in
Local networks
Workplace networks
Public networks (not recommended)
Is this choice about the ...
- 1
1
vote
1
answer
280
views
Firewall is blocking OCSP (Online Certificate Status Protocol) check
I have a certificate issued by lets encrypt and one of the certificate in the path has this information:
[1]CRL Distribution Point
Distribution Point Name:
Full Name:
URL=...
- 2,167
0
votes
0
answers
153
views
Windows / OpenVPN "kill switch" via firewall
First, not sure if this is the appropriate site or if it would be better suited for a different one, but there isn't a networking or Windows one, so this appears to be the best place. And I'm posting ...
- 1
21
votes
6
answers
4k
views
Do machines without any listening services need a firewall to block incoming connections?
Let's assume we have an example machine connected to the internet. This machine is typically a client one, and it has no services like ssh running on. Does this kind of machines need any firewall to ...
- 563
0
votes
1
answer
119
views
Is an IP based whitelist practical for controlling internet use?
I have to set up internet controls for our schools study hall/testing center. The idea is that computers on that network should only be able to access the school's webportal and learning platform ...
- 113
0
votes
1
answer
837
views
Using Github's Public IP Address as Remote URL
My company distributes software that runs on locally installed Ubuntu Virtual Machines. To update the software, we pull our latest code down from Github.
Some IT departments have github blocked on ...
- 111
0
votes
0
answers
73
views
CIS MDBR blocking major libraries (jQuery, gstatic)
The organization I work for uses Malicious Domain Blocking and Reporting (MDBR), which is a service provided by Center for Internet Security (CIS). MDBR technology prevents IT systems from connecting ...
- 101
0
votes
0
answers
88
views
Will pulling firewall from router into separate device in front of the router increase security?
To secure a router available at a public static IP address from various vulnerabilities discovered and exploited from time to time (or other examples), would it help to separate its firewall and/or ...
- 115
0
votes
1
answer
160
views
Getting reverse shell from firewalled target
Suppose this scenario:
You are already inside a corporate network. Suppose to find out a RCE in a X service. The machine that hosts that service is behind a network-based firewall, ingress rules and ...
- 13
0
votes
0
answers
286
views
Sending traffic to cloud proxy with GRE vs. IPSec
Taking a look at several cloud proxy/CASB vendors, they all seem to have the same recommendation of primarily using a tunnel to deliver internal traffic to them -- either GRE, or IPSec.
IPSec ...
0
votes
1
answer
104
views
Why is the -L (list) option of iptables not available to non-root users?
Many tools in Linux allow for checking things as a non-root user. For example, at any time, I can check whether a service is running:
$ systemctl status ntp
However, the iptables needs to be used as ...
- 872
0
votes
1
answer
115
views
From a modular development standpoint, should a "firewall" do anything else than filtering ports?
From a modular development standpoint, should a "firewall" do anything else than filtering ports?
This leads me to further ask, have there been attempts to reform the terminology from "...
0
votes
1
answer
130
views
Should you set up firewall rules with a vpn?
I am using a vpn and trying different firewall rules to keep as secure as possible. But the VPN company itself tells me not to use a firewall. Does that seem reasonable?
They write:
"As we've ...
- 1