Questions tagged [firewalls]
Concerned with software or hardware firewalls
0
votes
1answer
33 views
Types of firewalls to implement to reduce DoS attacks in POS systems
Would you need an internal, external and a host-resident firewall for each POS client?
-1
votes
1answer
82 views
How to safely expose a computer to the Internet with a public IP
Our LAN is configured behind a load balancing router, in turn connected to a modem assigning public IPs to connected devices.
I am required to randomly test the connection effective throughput, ...
-5
votes
0answers
37 views
Logging visited domains [on hold]
I have a Fortigate firewall and I want it to give me a report for visited websites by the clients.
For example: host 10.1.100.22 visited www.google.com
Then I want on the report appear as it ...
0
votes
1answer
53 views
How do I configure a home router to block traffic to and from specific geographic regions? [closed]
My mom keeps typing in wrong URLs with typos and getting sent to Chinese typosquatting malware or fraud sites, so I want to configure my home router to block all traffic to and from China as much as ...
1
vote
1answer
87 views
Do I need two firewalls or is one enough?
We have a bunch of company devices (servers, desktops, laptops, company-issue phones, etc). All of these devices are company devices, every employee uses them just for business. All devices should ...
0
votes
1answer
50 views
Understanding port scanning with firewall enabled
My objective is to do a port scanner in windows and find the ports which are open. Suppose, I run an application which opens up a port 8000. Now I create a new inbound rule to block all incoming ...
0
votes
2answers
75 views
Do I have to block UDP ports when I launch my own server with a public IP?
I am trying to give better security to my Raspberry sever. When I installed UFW, I allowed just port 80/tcp and my own high port for SSH communication, and by default are all others ports "deny".
...
3
votes
1answer
104 views
Firewall Showing 1,000's Of Strange GET Parameters Being Sent To Login Page?
So I woke up today, and checked my Firewall Events on CloudFlare for my website like I do normally. Most of the time I'll just see thousands of failed SQL injection attempts, but this morning I was ...
1
vote
0answers
25 views
health check to test haproxy — request deny with 200. good idea?
I have been working on a multi-provider redundant load balancing solution using HAProxy, AWS, and Cloudflare. I have a solution, and I believe it will be secure, but I am looking for further ...
0
votes
1answer
70 views
What is the thought process behind, Endpoint protection is better than firewalls?
I keep reading about, and seeing people post and recommend in the oddest places, that strong endpoint protection is better than having a in-service/supported/receiving security updates firewall.
What ...
3
votes
0answers
95 views
How can Nmap bypass Windows Server firewall rules?
I need to block all communication (inbound/outbound) from server A to server B (all ports/all protocols). Server A should communicate with every machine except server B. I can't place firewall rules ...
-1
votes
1answer
42 views
Infection of malware
Lets say,
My firewall is configured to block any incoming connections
My browser doesnt allow any traces and scripts
I have vpn on
My browser always asks before downloading files
My browser doesn't ...
1
vote
0answers
37 views
UFW (Uncomplicated Firewall) Question
I was wondering if there's any benefit of adding following rules to a Raspberry-Pi directly exposed to the internet:
sudo ufw deny to 0.0.0.0/8 &&
sudo ufw deny to 169.254.0.0/16 &&
...
0
votes
0answers
40 views
Anonymous configuration for racoon
My firewall alerted me of a connection attempt via racoon, the IKE key management daemon to set up an IPSec tunnel. It was clear that when I looked up the IP address 122.228.10.51 this was suspicious. ...
0
votes
1answer
82 views
IDS and IPS placement in network? [duplicate]
What is the good practice for the placement of IDS (NIDS) and IPS? Before the firewall or after the firewall? and why?
0
votes
0answers
20 views
Gateway firewall basics & managing multiple elastic IPs to non-http services
I've been trying to make sense of this for months now. If this is too broad, or more appropriate for another forum please say so. I would appreciate at least a lead to documentation, as I simply ...
2
votes
2answers
101 views
How are stateless firewalls useful in public cloud platforms?
I'm trying to understand the value of stateless firewalls in public cloud platforms like Network Access Control Lists (NACL) in Amazon Web Services (AWS). I think I know a few ways I can use them, but ...
3
votes
2answers
124 views
How IDS and Firewall Logs are aggregated and feed aggregated log to SIEM?
I am studying SIEM tools.
Firewall logs will be different from IDS logs and even from Antivirus logs.
How can log aggregation take place?
1
vote
2answers
102 views
Can an ISP limit what security software (firewall) that will work?
My ISP (JCOM) says that McAfee is the only security software that will work with them. Is that true? The system is running Windows 7 Home Premium Japanese Version.
The McAfee system is provided by ...
1
vote
1answer
93 views
Being connected to a trusted VPN, do I still need personal firewall, and if so, why?
Background
Hardware: Dell Inspiron 15 Gaming 7577-92774 with recent BIOS (16-Aug-2018)
Operating System: Windows 10 Pro, version 1803 (Build 17134.285)
Antivirus / Firewall: ESET Smart Security ...
0
votes
2answers
103 views
Have firewall and VPN already, should I buy a mini router to protect my laptop?
I often travel for business and use hotel wifi. I have installed Little Snitch and VPN-Outline for internet security. Should I buy a mini router? Will it keep my computer safer？ Otherwise，with or ...
68
votes
5answers
10k views
Advised to block all traffic to/from specific IP addresses
My CFO received an email from a director at a financial institution advising that all traffic (inbound and outbound) from certain IP addresses should be blocked at the firewall. The director at the ...
-1
votes
1answer
169 views
What are the Pros & Cons of VPN server behind or in front of firewall? [closed]
What are the pros and cons of a VPN server behind or in front of the firewall? There seems to be no right or wrong in either option.
An example of the VPN server in front of the firewall:
0
votes
1answer
119 views
Is it advisable to accept STUN server connections?
My firewall reports outgoing connection attempts via com.apple.WebKit.Networking to a number of STUN servers (namely, stun.nas.net, stun.node4.co.uk, stun.voxox.com and stun.wwdl.net). This is ...
0
votes
0answers
68 views
Azure SQL Database and corporate networks
I have question around DLP from a corporate network.
I have a Virtual Machine on a corporate network. The VM can access an Azure SQL DB in the cloud: aaa.database.windows.net
However, I don't want ...
-2
votes
2answers
218 views
Why is DDOS is one of the most common Cyber-Attack? [closed]
Based on some articles and some research DDOS is one of the most common cyber-attack.
There are tonnes of articles out there about the DDOS subject, including describing, mitigating, the question "...
1
vote
2answers
50 views
Do I need Gateway Firewall for IoT network? [closed]
Do I need a gateway firewall to prevent attacks like DoS, if my IoT network can only talk to cloud using IPsec?
Even if there is need that can be implemented at cloud. Is there any need for it to ...
1
vote
2answers
118 views
Am I being Hacked? So many defferent ip's in router firewall logs [duplicate]
My router dsl light was not stable; It keept disconnecting and connecting..So I logged into Router Homepage to check whats wrong and found there were so many different ip's in Router firewall logs I ...
0
votes
3answers
177 views
Is It More Secure to Use Firewalls from Two Different Vendors?
The topic is "Is It More Secure to Use Firewalls from Two Different Vendors "
Is not much safer using a multi-vendor firewall because "More than 95% of firewall breaches are caused by firewall ...
1
vote
1answer
169 views
The role of Machine Learning In Cybersecurity Defense [closed]
Hackers and malware are one step ahead of cybersecurity experts, and every time technology is released to the market, vulnerabilities will be quickly discovered and exploited.
How effective can ...
0
votes
1answer
91 views
Root CA or Intermediate CA in firewall trust store
I am implementing a PKI for a test environment and have everything just about configured. The architecture consists of a Root CA, two issuing (intermediate CAs), and clients. Client certificates and ...
2
votes
2answers
52 views
Network provider blocking URL, even though connection made to IP
I came across an interesting case today, which with my limited knowledge I'm unable to understand the working of.
I was trying to access a bit.ly link, but it is blocked by my University.
Knowing ...
0
votes
1answer
38 views
Telling the difference between firewall block or external problem with Page Cannot be Displayed (IE) [closed]
In our organization, when users run up against the firewall in Internet Explorer, this is what they see:
The classic IE "Page Cannot Be Displayed".
Of course, this is also what you see when it's ...
1
vote
0answers
34 views
Are parts of my system susceptible to IP based malicious attack even with effective IPtables rules?
Yesterday I installed Cent OS 6 and had to flush the default IPtables rules (IPtables -F) in order to access a web app via my browser.
Having very little experience with Linux/Network security this ...
0
votes
1answer
103 views
Differentiating between IKEv2 and OpenVPN Traffic
There is a WiFi network that I regularly use, and it seems to be blocking all VPN traffic other than IKEv2. I tested this by downloading many of the free/freemium VPN apps from the Google Play Store ...
0
votes
1answer
64 views
Would it be possible for a malicious user to change the LAN IP address of an uncompromised device?
I have a local network and an IPCam (with its own storage) in it. Due to some practical limitations, I cannot use technologies such as AP isolation or VLAN to isolate low-integrity and high-integrity ...
1
vote
1answer
126 views
Could an attacker spoof a whitelisted IP to access the network?
There is a network that is protected with a firewall and only one IP is whitelisted.
Assuming the attacker knows the whitelisted IP, what would prevent an attacker from sending traffic via a spoofed ...
0
votes
2answers
154 views
Is an ACL Sufficient for business firewall?
I am a relatively new IT specialist for a small company (about 30 employees, 100 more seasonal.) Most of our systems have been outsourced to an IT company long ago, that handles licensing, VDI, PBX, ...
1
vote
1answer
81 views
Refusal to 'open' up corporate network?
I am working a project which requires access to a service running on a remote server, over a single TCP port (>1024). This service runs on a machine located within an existing network, and the project ...
2
votes
3answers
88 views
Whitelisting DNS vs. Packet filtering Firewall
I am an information security intern for a MSP.
The company is set up to work remotely a few days a week. As I was gathering information for the assessment, I found out that one of the employees does ...
0
votes
2answers
2k views
Can a hacker hack into port 80?
We normally say port 80 is firewall friendly.
But can a hacker just hack into port 80 via TCP or UDP?
Or is Port 80 by default not always open?
It waits for the host to initiate a connection via ...
1
vote
2answers
983 views
Should I allow communication on public networks?
I apologize if this is a newb question. Reading this prompt, it appears that I should check Private Networks and uncheck Public Networks. However, Windows defaults to the opposite being checked.
Am I ...
3
votes
1answer
2k views
Is it dangerous to disable the IPv6 firewall built into many home routers?
The router that my ISP has delivered contains an IPv6 firewall. The only configuration option is whether it is on or off. Apparently, this firewall simply denies all incoming connections.
I ...
0
votes
1answer
415 views
Comparison between WAF and IPS/IDS
I would like to know the difference between WAF and IPS/IDS?
Can IPS/IDS handle an attack on a web application?
If there are differences functionally between the two applications, how they work ...
0
votes
3answers
460 views
How did EternalBlue bypass firewalls?
I've tried recently to run the EternalBlue exploit via metasploit (on VirtualBox lan), and I've spotted that if the victim PC uses the most naive windows-firewall than the attack would fail. That got ...
0
votes
3answers
371 views
Are there any feasible ways to block the stunnel utility at the network level?
The stunnel utility written by Michał Trojnara allows, if I understand correctly, to "wrap" non-SSL protocols (such as ssh) in an SSL connection.
For example, imagine that all network ports on a ...
5
votes
1answer
168 views
How to eradicate and recover a compromised network
I have a somewhat broad question related to a specific, ongoing threat that I am trying to define and defend against.
Right now, I need to rebuild a secure access point for my mobile devices and ...
4
votes
3answers
182 views
Should network firewall rules be secret?
At my workplace only the security team have access to see the rules on the server network firewalls.
Developers and system engineers don't have any visibility, so they just deploy applications to ...
0
votes
1answer
420 views
Firewall doesn't support TLS 1.2
I have an ASA 5550 firewall that doesn't support TLS 1.2.
What impact would we have when the older protocols are disabled? Will this affect the servers at all?
0
votes
1answer
48 views
Limited remote access to a web application [closed]
I would like to set up a very simple node.js web application on raspberry pi and access it remotely, from outside the LAN.
There are no other hosts in that LAN with the Raspberry. I only need to ...
