Questions tagged [firewalls]

Concerned with software or hardware firewalls

89 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
1
vote
0answers
185 views

Web/search engine spider on local network?

I was setting up a test webserver on my local network earlier, and whilst sorting out the firewall I noticed the following in the log (/var/log/ufw.log - I'm using UFW on Ubuntu 14.04): Jul 9 14:17:...
1
vote
0answers
295 views

Firewall requirements for SaaS service providers

I have not had much success compiling a workable overview on the topic of firewalls and application service providers, despite making a rather extensive contribution to Google's workload this month. I'...
1
vote
0answers
641 views

How should I configure my Tor-dedicated firewall for optimum security?

I'm setting up a Tor-based isolating proxy using the 'Anonymizing Middlebox' iptables rules specified here: https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy i.e. iptables -t nat -...
1
vote
0answers
123 views

API deployment infrastructure

We are going to deploy our service, it's drupal based with some additional REST APIs. The drupal servers will be (loadbalanced) put in the DMZ. We think to deploy the REST APIs on an app server in ...
1
vote
0answers
819 views

Proxy via pfSense and exclusions for DNS

I have posted this to NetworkEngineering.SE, as that seems the more suitable audience for this question. I will leave this question open here but am happy to see it closed. I just did not want to ...
1
vote
0answers
107 views

Pf rules configuration

Do these rules appear to be an adequate start? _interface="en1" _linode="66.228.57.75" #lish-atlanta.linode.com _ssh=" { 74.207.224.182 66.175.210.225 } " set block-policy drop set skip on lo0 ...
1
vote
0answers
532 views

Throttling DropBox behind a firewall

Our office network bandwidth gets choked when an employee copies a large file into her DropBox, since it gets downloaded on several machines (of other employees). LAN Sync is an option, but needs to ...
1
vote
1answer
295 views

How to disable/block Microsoft Store on Windows 10 Pro by firewall?

I want to block Microsoft Store on Windows 10 pro in a corporate environment. Having read relevant articles about this matter and tested on my machine, I see that Windows 10 Pro does not support this ...
0
votes
0answers
45 views

Is there any Windows HIPS software that supports file and registry access control?

I Have been using COMODO Firewall and HIPS for many years, which can block writes and executes but not reads. My threat model has changed to include spyware with trusted digital signature, which by ...
0
votes
0answers
27 views

Its there any built in protection against deceptive app names in Android or that make app listings trustable?

Some functionalities rely on app names and icons for proper use. Like firewall, installed apps list, memory usage statistics. I wonder if there is anything fobidding an app to appear with deceptive ...
0
votes
0answers
22 views

Circumventing inbound traffic rule by faking reply traffic

My question is about security groups/firewalls and protecting a virtual private cloud from the external world. Here is a description of VPC default policy for inbound/outbound traffic (on AWS): ...
0
votes
0answers
25 views

What are the use case to host services on tier 2 firewall?

We have a tier 1 and tier 2 firewall What are the use case to host services on tier 2 firewall? e.g. is connection from field enineers/remote workers one of those? What security risks and controls ...
0
votes
0answers
131 views

Why does bettercap not capture any traffic and why is its web UI just a blank page?

I'm running Debian10/KDE with the nftables firewall enabled on my host machine and would like to test my phone. In the virtual machine I'm running Kali Linux with bettercap and am trying to sniff ...
0
votes
0answers
44 views

Disable mdns-publisher on Linux?

I just installed a firewall and other security-related software on my Linux machine (Ubuntu 18.04), and after reading about them, decided to disable two services that I did't need with: sudo ...
0
votes
2answers
76 views

How to avoid leaking your public IP to installed applications like browsers when using a vpn?

What is the easiest setup to hide your public IP from installed applications and prevent things like WebRTC leaks on a common Linux distro?
0
votes
0answers
66 views

Is it a Bad Idea™ to open all IPv6 ports for devices in an isolated guest network?

At home I have a dual-stack IPv4/IPv6 broadband connection, and I also have a wireless access point. The access point currently bridges all traffic into my LAN, which is not segmented in any way, so ...
0
votes
0answers
57 views

Is it possible to gather information about a destination-nat host?

Let's say that I'm connected to a network where the ISP has setup a dst-nat from an IP they don't control to an IP that they control,like so: 1- Their DNS server resolves example.xyz to 1.1.1.1 (the ...
0
votes
1answer
61 views

Whats The Point of GeoBlocking if the Firewall Has An Implicit Deny?

What is the point of geoblocking IP addresses with cisco firepower or a similar service if the firewall would block the request anyway? For example, We only do business in the USA but see source IP's ...
0
votes
0answers
46 views

Insecurity through all the security. (Questions on infrastructure set up)

I've got an issue with a proposed infrastructure set up so I come to you for some enlightenment. The flow is: client --> fw--> waf--> api gw--> applications. Clients will communicate with us using ...
0
votes
0answers
58 views

Changing the default forward policy to accept (VPN/NAT)

I came across something that seems counter-intuitive while reading a tutorial associated with a very popular hosting provider showing people how to install their own Debian-based OpenVPN server. ...
0
votes
0answers
87 views

Method to bypass \n in WAF (\n vulnerability)

I have this application that has an input box where the data is going to be sent in a JSON format. The JSON payload might look like this {“message”: “hello\nmy name is andi”} But the problem is the ...
0
votes
1answer
206 views

Thought process behind firewall design

I'm preparing for an introductory information security examination in university and this is one of the tutorial questions on Firewall design. My concerns for the provided solution is how to define ...
0
votes
0answers
47 views

End to End Encrypted Traffic - Web Application Firewall needed?

Background We have a Java Spring Server, MongoDB and an Angular Frontend. Some Application Security Configs: TLS Basic Authentication (Password Strength Policy) XSS Protection (Content Security ...
0
votes
0answers
40 views

Actions after identifying exploitation attempts on servers or applications

I am seeing regular exploitation attempts (like remote code execution, sql injection, etc.) on our DMZ server or applications and these are being dropped by the firewall. However, our SIEM is raising ...
0
votes
0answers
35 views

How can I give a network load balancer (of any type) access to a port on a machine without opening that port to an entire VPC?

Is it possible to make an AWS load balancer for a non-HTTP port allowed to access a specific port on a host without opening that port open to the entire VPC's subnet? I seem to remember reading that ...
0
votes
1answer
166 views

Configure Windows Firewall Inbound Rule for Program Not Installed on Server

How can I configure an inbound rule on a Windows Server 2016 firewall to allow access from a program which is not installed on the server? When searching for a program browse is only offered for ...
0
votes
0answers
63 views

Web Site Access - Port Whitelisting

I am able to access a certain website https://buzzlightyear.acme.com:68080 from within a corporate network (Obviously the default https port 443 has been allowed in the windows firewall of the machine ...
0
votes
0answers
78 views

IP Encryptor and Firewall

Firewalls implement IPsec VPN and perform packet filtering. IP Encryptor, on the other hand implements IPsec VPN and achieve security goals (confidentiality, integrity and authentication). What are ...
0
votes
1answer
164 views

Why is Zone Alarm Blocking VMWare Virtual Network Editor?

I have version 15 of VMWare running on my Windows 10 computer. When I open the Virtual Network Editor and try to add a bridged connection, I get an error saying: Cannot change network to bridged: ...
0
votes
0answers
35 views

standards reference to perimeter security

I have the following problematic that I am currently dealing with. I have two zones/perimeters that need to be interconnected, some standards protocols have to be whitelisted such as HTTP, FTP, SSH ...
0
votes
0answers
682 views

Windows Firewall blocking local access to SQL Server?

I have an AWS virtual machine running a web application on IIS that connects to a SQL Server database (on the same machine). Recently, I have noticed that there are a plethora of failed login attempts ...
0
votes
0answers
109 views

Windows Firewall - How do I know that I have completely blocked a program?

I have a specific software that I cannot let out to the internet but it is crucial that it has access to the local network. I can create an inbound and an outbound Block rule for the main application'...
0
votes
0answers
449 views

Filter/Block OpenVPN clients' access to a specific website

As stated in the title I would like to restrict VPN clients' access to specific websites. More specifically, I push the route for 5 websites to the clients via the server config. However, I would ...
0
votes
1answer
421 views

Differentiating between IKEv2 and OpenVPN Traffic

There is a WiFi network that I regularly use, and it seems to be blocking all VPN traffic other than IKEv2. I tested this by downloading many of the free/freemium VPN apps from the Google Play Store ...
0
votes
0answers
95 views

How should firewall be configured to allow using an image scanner over WiFi to avoid jeopardizing security?

I'm having a dilemma if I should post this here or on superuser, finally I decided it's more security related so I post it here, if it's wrong please move. The situation: There is an Epson all-in-one ...
0
votes
0answers
72 views

sshd login obfuscation by prompting for a password although password login is disabled?

The sshd.config and fail2ban both work by blocking authentication requests over a specified path, thus notifying the attacker about the protection measures in place. Wouldn't it be more desirable to ...
0
votes
0answers
43 views

Firewall issues

Background I have an Android device (Minix M5) that I handed to a customer The device only does outbound connections, so no inbound traffic The customer confirmed that s/he opened up the ports ...
-1
votes
1answer
92 views

Does this iptables entry indicate someone's trying to break in?

Two days ago I built a Debian 10 server in the United States for use as a file server for my web application. When I created the server, I installed the fail2ban package and configured a basic, ...
-2
votes
1answer
90 views

Trying to detect a firewall

I have some HTML that was detected by one of my scripts firewall detections, it looks like this: <!--- HTTP 1.1 Status Code: 403 HTTP Headers: {'Content-Length': '1233', 'X-Powered-By': 'ASP.NET', ...

1
2