Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [firewalls]

Concerned with software or hardware firewalls

0
votes
0answers
13 views

IPv6 firewall problem with ps4 [migrated]

I'm experiencing a problem with my router cisco d3928 and codww2 online. I opened all the ports needed to play codww2 online and nothing worked, but if i disable ipv6 firewall i can play normally. ...
1
vote
0answers
42 views

Weak ciphers in TLS VPN

We have a firewall out of our firm network and administrators connect to this firewall by VPN over TLS. Scanning this firewall, the vulnerability scanner get us some warning as the 443 port allow weak ...
-1
votes
1answer
45 views

How do I open port 443 or HTTPS in Windows Server and Ubuntu Server? [on hold]

I am trying to open port 443 on Windows Server 2012 R2 and Ubuntu Server 18.04. I am scanning both of these in zenmap to see if port 443 is opened and it is closed on both of them. I would like for it ...
3
votes
1answer
54 views

Block Outbound Connections by Country

We want to reduce the number of phishing sites that our users can get to. Would it be useful or more problematic to block outbound connections by geo IP? We already block many inbound connections by ...
0
votes
1answer
40 views

Can Snort or Suricata *edit* packet on the fly?

I know that they can detect traffic by rules, but can they modify packets on the go? For example, not only detecting HTTP GET but also adding headers to the GET packet. If they can't, is there an ...
2
votes
0answers
32 views

Beginner UFW question about destination any

I'm learning about UFW with a Raspberry Pi and I don't a couple of things when it comes to UFW rules. Can anyone help me suss a couple things out? My first question is about the destination any. If I ...
1
vote
1answer
20 views

Providing access to Git repo behind a Firewall using Certs/Keys for Authentication

We have git repo sitting behind a firewall. As I see, there are two ways of authenticating/accessing the git repo Add a Reverse HTTP Proxy in the DMZ that communicates with the git repo. This will ...
0
votes
1answer
18 views

In what situations / with what nodes should a node ping / not ping?

I was recently looking at a network in which the client-machines that accessed a webservice endpoint, but which could not ping the webservice endpoint. And there are other machines that can ping the ...
0
votes
0answers
68 views

Filter/Block OpenVPN clients' access to a specific website

As stated in the title I would like to restrict VPN clients' access to specific websites. More specifically, I push the route for 5 websites to the clients via the server config. However, I would ...
0
votes
2answers
91 views

Why should I bother having a firewall on servers?

In the case of a server, the only applications that are running there are the ones that I've setup, so you don't just have random users downloading & running malware. The only ports that are open ...
0
votes
1answer
74 views

Country Blocking

I use a Meraki firewall and want to block outside attack attempts. Is there a list of countries that are known to be malicious? I want to load them into the system and GEO block them. I know that some ...
0
votes
0answers
43 views

PHP socks proxy with no port opening

let's say i have file apache file access on a webserver, but due to firewall rules etc, i can't connect to ssh and can't open a port. Is there a way to do this exactly this : create a socks proxy on ...
1
vote
1answer
73 views

Fortigate Creating Millions of DNS events to standard domains

I am trying to tune our SIEM and noticed that we are receiving millions of DNS records every day from the same domains. These are: update.microsoft.com swscan.apple.com softwareupdate.vmware.com ...
0
votes
1answer
70 views

Secure onion router setup [closed]

I would like to setup a Raspberry Pi as an onion router, but I have some questions about it. At home I am using a Fritz!Box to connect to the outer world (to the net of my ISP). Would it make any ...
0
votes
0answers
12 views

Why Does Windows Server Block ICMP By Default? [duplicate]

I am conducting a OpenVAS vulnerability scan on a Windows Server 2012 box and it came back empty. It turns out that the scanner checks to see if the host is alive by sending it a ping request--if it ...
0
votes
0answers
29 views

Distributed network with one host behind dmz and the other without

Context: This a question from my homework assignment. There is a company with two sites A and B. B is behind DMZ (firewall - proxy mail server - firewall) and A is just behind a firewall Network A ...
0
votes
1answer
33 views

IPsec down with unusual SNMP traffic [closed]

Time to time IPSec tunnel status become down, with unusual SNMP Traffic. when I disable and enable port manually, it become normal. I am using 200E fortigate firewall. Have you any idea or previous ...
0
votes
1answer
62 views

Types of firewalls to implement to reduce DoS attacks in POS systems

Would you need an internal, external and a host-resident firewall for each POS client?
-1
votes
1answer
102 views

How to safely expose a computer to the Internet with a public IP

Our LAN is configured behind a load balancing router, in turn connected to a modem assigning public IPs to connected devices. I am required to randomly test the connection effective throughput, ...
0
votes
1answer
64 views

How do I configure a home router to block traffic to and from specific geographic regions? [closed]

My mom keeps typing in wrong URLs with typos and getting sent to Chinese typosquatting malware or fraud sites, so I want to configure my home router to block all traffic to and from China as much as ...
1
vote
1answer
111 views

Do I need two firewalls or is one enough?

We have a bunch of company devices (servers, desktops, laptops, company-issue phones, etc). All of these devices are company devices, every employee uses them just for business. All devices should ...
1
vote
1answer
73 views

Understanding port scanning with firewall enabled

My objective is to do a port scanner in windows and find the ports which are open. Suppose, I run an application which opens up a port 8000. Now I create a new inbound rule to block all incoming ...
0
votes
2answers
157 views

Do I have to block UDP ports when I launch my own server with a public IP?

I am trying to give better security to my Raspberry sever. When I installed UFW, I allowed just port 80/tcp and my own high port for SSH communication, and by default are all others ports "deny". ...
3
votes
1answer
109 views

Firewall Showing 1,000's Of Strange GET Parameters Being Sent To Login Page?

So I woke up today, and checked my Firewall Events on CloudFlare for my website like I do normally. Most of the time I'll just see thousands of failed SQL injection attempts, but this morning I was ...
1
vote
0answers
36 views

health check to test haproxy — request deny with 200. good idea?

I have been working on a multi-provider redundant load balancing solution using HAProxy, AWS, and Cloudflare. I have a solution, and I believe it will be secure, but I am looking for further ...
0
votes
2answers
95 views

What is the thought process behind, Endpoint protection is better than firewalls?

I keep reading about, and seeing people post and recommend in the oddest places, that strong endpoint protection is better than having a in-service/supported/receiving security updates firewall. What ...
3
votes
0answers
140 views

How can Nmap bypass Windows Server firewall rules?

I need to block all communication (inbound/outbound) from server A to server B (all ports/all protocols). Server A should communicate with every machine except server B. I can't place firewall rules ...
-1
votes
1answer
42 views

Infection of malware

Lets say, My firewall is configured to block any incoming connections My browser doesnt allow any traces and scripts I have vpn on My browser always asks before downloading files My browser doesn't ...
1
vote
0answers
53 views

UFW (Uncomplicated Firewall) Question

I was wondering if there's any benefit of adding following rules to a Raspberry-Pi directly exposed to the internet: sudo ufw deny to 0.0.0.0/8 && sudo ufw deny to 169.254.0.0/16 && ...
0
votes
1answer
232 views

IDS and IPS placement in network? [duplicate]

What is the good practice for the placement of IDS (NIDS) and IPS? Before the firewall or after the firewall? and why?
2
votes
2answers
127 views

How are stateless firewalls useful in public cloud platforms?

I'm trying to understand the value of stateless firewalls in public cloud platforms like Network Access Control Lists (NACL) in Amazon Web Services (AWS). I think I know a few ways I can use them, but ...
3
votes
2answers
188 views

How IDS and Firewall Logs are aggregated and feed aggregated log to SIEM?

I am studying SIEM tools. Firewall logs will be different from IDS logs and even from Antivirus logs. How can log aggregation take place?
1
vote
2answers
110 views

Can an ISP limit what security software (firewall) that will work?

My ISP (JCOM) says that McAfee is the only security software that will work with them. Is that true? The system is running Windows 7 Home Premium Japanese Version. The McAfee system is provided by ...
1
vote
1answer
98 views

Being connected to a trusted VPN, do I still need personal firewall, and if so, why?

Background Hardware: Dell Inspiron 15 Gaming 7577-92774 with recent BIOS (16-Aug-2018) Operating System: Windows 10 Pro, version 1803 (Build 17134.285) Antivirus / Firewall: ESET Smart Security ...
0
votes
2answers
105 views

Have firewall and VPN already, should I buy a mini router to protect my laptop?

I often travel for business and use hotel wifi. I have installed Little Snitch and VPN-Outline for internet security. Should I buy a mini router? Will it keep my computer safer? Otherwise,with or ...
68
votes
5answers
10k views

Advised to block all traffic to/from specific IP addresses

My CFO received an email from a director at a financial institution advising that all traffic (inbound and outbound) from certain IP addresses should be blocked at the firewall. The director at the ...
-1
votes
1answer
206 views

What are the Pros & Cons of VPN server behind or in front of firewall? [closed]

What are the pros and cons of a VPN server behind or in front of the firewall? There seems to be no right or wrong in either option. An example of the VPN server in front of the firewall:
0
votes
1answer
217 views

Is it advisable to accept STUN server connections?

My firewall reports outgoing connection attempts via com.apple.WebKit.Networking to a number of STUN servers (namely, stun.nas.net, stun.node4.co.uk, stun.voxox.com and stun.wwdl.net). This is ...
-2
votes
2answers
225 views

Why is DDOS is one of the most common Cyber-Attack? [closed]

Based on some articles and some research DDOS is one of the most common cyber-attack. There are tonnes of articles out there about the DDOS subject, including describing, mitigating, the question "...
1
vote
2answers
52 views

Do I need Gateway Firewall for IoT network? [closed]

Do I need a gateway firewall to prevent attacks like DoS, if my IoT network can only talk to cloud using IPsec? Even if there is need that can be implemented at cloud. Is there any need for it to ...
1
vote
2answers
125 views

Am I being Hacked? So many defferent ip's in router firewall logs [duplicate]

My router dsl light was not stable; It keept disconnecting and connecting..So I logged into Router Homepage to check whats wrong and found there were so many different ip's in Router firewall logs I ...
0
votes
3answers
241 views

Is It More Secure to Use Firewalls from Two Different Vendors?

The topic is "Is It More Secure to Use Firewalls from Two Different Vendors " Is not much safer using a multi-vendor firewall because "More than 95% of firewall breaches are caused by firewall ...
1
vote
1answer
171 views

The role of Machine Learning In Cybersecurity Defense [closed]

Hackers and malware are one step ahead of cybersecurity experts, and every time technology is released to the market, vulnerabilities will be quickly discovered and exploited. How effective can ...
0
votes
1answer
122 views

Root CA or Intermediate CA in firewall trust store

I am implementing a PKI for a test environment and have everything just about configured. The architecture consists of a Root CA, two issuing (intermediate CAs), and clients. Client certificates and ...
2
votes
2answers
58 views

Network provider blocking URL, even though connection made to IP

I came across an interesting case today, which with my limited knowledge I'm unable to understand the working of. I was trying to access a bit.ly link, but it is blocked by my University. Knowing ...
0
votes
1answer
41 views

Telling the difference between firewall block or external problem with Page Cannot be Displayed (IE) [closed]

In our organization, when users run up against the firewall in Internet Explorer, this is what they see: The classic IE "Page Cannot Be Displayed". Of course, this is also what you see when it's ...
1
vote
0answers
36 views

Are parts of my system susceptible to IP based malicious attack even with effective IPtables rules?

Yesterday I installed Cent OS 6 and had to flush the default IPtables rules (IPtables -F) in order to access a web app via my browser. Having very little experience with Linux/Network security this ...
0
votes
1answer
140 views

Differentiating between IKEv2 and OpenVPN Traffic

There is a WiFi network that I regularly use, and it seems to be blocking all VPN traffic other than IKEv2. I tested this by downloading many of the free/freemium VPN apps from the Google Play Store ...
0
votes
1answer
67 views

Would it be possible for a malicious user to change the LAN IP address of an uncompromised device?

I have a local network and an IPCam (with its own storage) in it. Due to some practical limitations, I cannot use technologies such as AP isolation or VLAN to isolate low-integrity and high-integrity ...
1
vote
1answer
177 views

Could an attacker spoof a whitelisted IP to access the network?

There is a network that is protected with a firewall and only one IP is whitelisted. Assuming the attacker knows the whitelisted IP, what would prevent an attacker from sending traffic via a spoofed ...