Questions tagged [firewalls]

Concerned with software or hardware firewalls

Filter by
Sorted by
Tagged with
0
votes
0answers
3 views

How does Cloudflare firewall work?

How does Coudflare web firewall work? When someone tries to enter a website, he first goes trough the server of cloudflare and than if a captcha is sloved he can see the content of the website. So ...
1
vote
2answers
43 views

Block SYN,ACK response with iptables

I have a virtual environment and I am making a SYN flood attack to a Ubuntu Server's port 53 using Kali 2020. I realized that a countermeasure for this attack is to limit or block the responses to ...
0
votes
1answer
44 views

VPN as a firewall in a public network

My configuration is: allow only OpenVpn traffic and block any other (income/outcome) traffic with UFW on my ubuntu laptop. unreal scenario: let’s say i have ubuntu with chrome version 50 [2016] on ...
3
votes
3answers
331 views

Web Application Firewall using web app source code analysis

I read this page: Category:OWASP Best Practices: Use of Web Application Firewalls, and I found that WAF cannot generally detect logical attacks. We know each web application has a number of input ...
-1
votes
2answers
98 views

How to block VPNs using tcp port 443?

I have a firewall (pfsense) acting as a gateway for my network users. All user traffic is going through this firewall. I need to block HotspotShield VPN traffic on this firewall. As known, this VPN ...
-1
votes
1answer
19 views

When are the stateful table entries for the stateful firewall created? [closed]

We know the TCP 3-way handshake: C->SYN->S C<-SYN-ACK<-S C->ACK->S we also know stateful firewall. When a stateful filter entry(source ip, source port, dest ip, dest port) create? ...
0
votes
0answers
53 views

Is it a Bad Idea™ to open all IPv6 ports for devices in an isolated guest network?

At home I have a dual-stack IPv4/IPv6 broadband connection, and I also have a wireless access point. The access point currently bridges all traffic into my LAN, which is not segmented in any way, so ...
0
votes
0answers
4 views

Does having only the Public firewal turned on in Windows 7 while using the Home/Private Network mode mean no firewall is active? [migrated]

My Windows 7 computer uses the Home/Private network profile and has only the Public firewall turned on. I am wondering if the fact that the firewall profile and the network profile aren't the same ...
0
votes
0answers
50 views

Is it possible to gather information about a destination-nat host?

Let's say that I'm connected to a network where the ISP has setup a dst-nat from an IP they don't control to an IP that they control,like so: 1- Their DNS server resolves example.xyz to 1.1.1.1 (the ...
1
vote
1answer
87 views

How to disable/block Microsoft Store on Windows 10 Pro by firewall?

I want to block Microsoft Store on Windows 10 pro in a corporate environment. Having read relevant articles about this matter and tested on my machine, I see that Windows 10 Pro does not support this ...
1
vote
1answer
74 views

What is the difference between a bastion host and a dual homed host?

From what I read, I understood that both the bastion host and the dual homed host are special computers that act as a link between the local network and the internet, so what is the difference between ...
0
votes
1answer
46 views

Whats The Point of GeoBlocking if the Firewall Has An Implicit Deny?

What is the point of geoblocking IP addresses with cisco firepower or a similar service if the firewall would block the request anyway? For example, We only do business in the USA but see source IP's ...
1
vote
1answer
40 views

firewalking output rules

Scenario is as follows: In a vulnhub lab, I got limited shell. By means of attacker> nc -lvp 1234 victim> nc _attacker_ip 1234 I found out that ubuntu's ufw is limiting outgoing traffic. ...
35
votes
6answers
119k views

How to bypass tcpwrapped with nmap scan

I'd a scan task and I faced following result Host is up (0.032s latency). Scanned at 2012-10-25 16:06:38 AST for 856s PORT STATE SERVICE VERSION 1/tcp open tcpwrapped 3/tcp open ...
0
votes
0answers
45 views

Insecurity through all the security. (Questions on infrastructure set up)

I've got an issue with a proposed infrastructure set up so I come to you for some enlightenment. The flow is: client --> fw--> waf--> api gw--> applications. Clients will communicate with us using ...
1
vote
1answer
57 views

Best Firewall Zone Settings for Security Gli-net Routers

I believe many will benefit from this as there is not clear answer online and I keep making my policies too strong and locking myself out from accessing the LAN admin panel. What would be the ...
8
votes
1answer
34k views

How do I access a firewall log (Windows 10 w. Windows Defender) [closed]

I am going through some event logs (in event viewer), and noticed I can't seem to find any firewall logs. Windows Defender provides the firewall. How do I get to the firewall logs that should be ...
0
votes
0answers
49 views

Changing the default forward policy to accept (VPN/NAT)

I came across something that seems counter-intuitive while reading a tutorial associated with a very popular hosting provider showing people how to install their own Debian-based OpenVPN server. ...
1
vote
1answer
119 views

Block WireGuard clients' access to specific websites

I have installed a WireGuard VPN server on a Raspberry Pi (running Raspbian) using PiVPN and I would like to either block the VPN clients to access specific websites (i.e. block them access https://...
104
votes
5answers
161k views

Is it a bad idea for a firewall to block ICMP?

This question was inspired by this answer which states in part: The generic firewall manifest file finishes off by dropping everything I didn't otherwise allow (besides ICMP. Don't turn off ICMP). ...
1
vote
1answer
53 views

In what situations / with what nodes should a node ping / not ping?

I was recently looking at a network in which the client-machines that accessed a webservice endpoint, but which could not ping the webservice endpoint. And there are other machines that can ping the ...
0
votes
1answer
83 views

Should the Router or Firewall Come First?

Network scenario.... I have a typical enterprise network meaning ISP>>>>Edge Router>>>>>Firewall|DMZ>>>>Switch>>>LAN. I know there are several debates on the internet about what device comes first ...
-1
votes
1answer
87 views

Does this iptables entry indicate someone's trying to break in?

Two days ago I built a Debian 10 server in the United States for use as a file server for my web application. When I created the server, I installed the fail2ban package and configured a basic, ...
1
vote
1answer
64 views

Looking to take a hotspot that is shared and create my own hotspot that can be firewalled

What is the best way to take a wireless hotspot that is owned by someone else, create my own hotspot or VLAN to be able to Firewall / Not allow my devices to view the other individuals' devices? I ...
1
vote
1answer
133 views

Alternative to Qubes OS network domain for a server

I know that Qubes Os is not suitable for a server use, but some of its features are quite interesting for that. In fact, all the network drivers are contained in a VM that run a different Linux based ...
2
votes
3answers
130 views

Does it make sense to put a firewall within a LAN to protect sensitive information from the rest of the LAN & Internet?

I may not be using the appropriate jargon, but I'll try to explain in my own words. My understanding is that usually a firewall is facing the internet, but my question is about a differnet setup. I'm ...
0
votes
1answer
65 views

What's the point of using a firewall to filter ports if they are closed by default? [duplicate]

I'm just learning most of this stuff so bare with me; Using a firewall service such as iptables, is there a point in filtering/blocking a port that is not in use meaning it's closed by default?
1
vote
0answers
58 views

Is it possible to bypass .htacess protection?

So, I was involving in one of projects where client site and admin panel/dashboard was hosted on different sites. Not like a lot of CRM`s do or 90% of common sites (just in /admin or other URL ...
1
vote
1answer
94 views

Pfsense security issues?

I have used pfsense before as the main gateway, load balancer, traffic shaping, proxy, firewall, virus/malware protection, enterprise wifi solution for an entire office of 50+ users. Yet I have ...
1
vote
0answers
75 views

Left port 80 exposed, several IPs accessed phpmyadmin

A few days ago while messing around with a web server, I put my server into a DMZ via my router and forgot to disable it. I opened port 80 and 3306 on the server's firewall (Windows Server) to access ...
1
vote
3answers
687 views

VPN Client - Addtional Security Layer or a Useless Feature

I have a corporate web portal which is used for staff collaboration including a web-based mail interface connected to MySQL Database, corporate calendar, file storage, customer contacts data with ...
1
vote
2answers
177 views

Fortigate Creating Millions of DNS events to standard domains [closed]

I am trying to tune our SIEM and noticed that we are receiving millions of DNS records every day from the same domains. These are: update.microsoft.com swscan.apple.com softwareupdate.vmware.com ...
1
vote
1answer
88 views

Why is a bind shell sometimes blocked when a reverse shell is not?

I understood the difference between them. The problem is I am not sure when to use each. I mean, if a firewall will block my connection to the target when I use bind shell, why the connection will not ...
6
votes
3answers
286 views

Safely use old windows XP machine in business network

I have a client that has a couple of machines that are build to cut kitchen tables. These machines still run on Windows XP and are connected to the internet. Now I need to find a way that these ...
0
votes
1answer
76 views

How to make VPS more secure with UFW?

I have 3 VPS based on Ubuntu 18.04 server OS and would like to open particular ports on each servers. The ports, that I would like to open are: Then let's take a look on the environment: As you ...
0
votes
1answer
105 views

Configure Windows Firewall Inbound Rule for Program Not Installed on Server

How can I configure an inbound rule on a Windows Server 2016 firewall to allow access from a program which is not installed on the server? When searching for a program browse is only offered for ...
1
vote
3answers
127 views

Understanding firewalls [duplicate]

I would like to understand how firewalls work in details, and understand the attack surface. TCP and UDP I understand that TCP and UDP are easy to filter. Programs on a computer need to ask the OS ...
0
votes
1answer
140 views

Why is Zone Alarm Blocking VMWare Virtual Network Editor?

I have version 15 of VMWare running on my Windows 10 computer. When I open the Virtual Network Editor and try to add a bridged connection, I get an error saying: Cannot change network to bridged: ...
0
votes
2answers
88 views

Is a firewall needed on a small office that simply needs internet access?

I'm planning on porting all of my office's software needs to cloud services that I can access via internet. It's a simple LAN that has a NAT gateway pointing to the open internet. Would a firewall ...
2
votes
1answer
157 views

Non-upgradable usb device against badUSB

Lot of posts about badUSB (here and there) suggest to use a PS/2 connector for mouse and keyboard or to whitelisted USB devices or even use a hardware firewall that only allows whitelisted commands. ...
0
votes
4answers
92 views

Disable Encrypted Protocols Through Firewall

In my company, we have two internal domains with a firewall between them. When requesting firewall rules for an application with components on domain A and domain B, I was told that encrypted ...
6
votes
2answers
202 views

How does a CDN actually prevent DDoS attacks, when an origin server accepts direct connections?

I am trying to understand how a CDN (like Cloudflare e.g) does protect against a DDoS attack. I would think that the internet traffic is routed through a CDN's reverse proxy, then filtered. This ...
0
votes
1answer
64 views

Modifying host file versus firewall

I am trying to protect a macOS computer. Specifically, I want to prevent the machine from making unwanted connections over the internet. I am aware of firewalls of course. But I stumbled upon the idea ...
6
votes
1answer
238 views

firewall with cloud based malware analysis risks

Palo Alto, and probably others firewalls will offer it too, has a feature to do malware analysis in a separate (cloud-based) process that does not impact stream processing. What I would like which ...
1
vote
0answers
56 views

Avoiding WAF with DirBuster

I am curious as to how bug hunters / pen testers use DirBuster and GoBuster without getting their IPs banned all the time (which is why I am asking)?
0
votes
1answer
103 views

Types of firewalls to implement to reduce DoS attacks in POS systems

Would you need an internal, external and a host-resident firewall for each POS client?
0
votes
2answers
1k views

Fortigate “WebRTC.Local.IP.Addresses.Disclosure” Event

We have a Fortigate perimeter firewall, and today I detected this event. What should I do to improve protection? How can someone obtain local IP address through a firewall? The following alert was ...
2
votes
2answers
100 views

Secure AWS instance metadata against potential SSRF

I am running a Windows instance on AWS. The instance has an IIS service running on it. The IIS service has a user associated to it and it has no need to access the AWS instance metadata. I was ...
1
vote
1answer
516 views

Why won't ossec block SSH connections when it seems to be configured correctly?

Why won't ossec block connections from another server? I installed ossec version 2.9.3 on Ubuntu 16.04. In the ossec.conf file I have these lines where x.x.x.x is the IP address of a second Linux ...
0
votes
1answer
388 views

Differentiating between IKEv2 and OpenVPN Traffic

There is a WiFi network that I regularly use, and it seems to be blocking all VPN traffic other than IKEv2. I tested this by downloading many of the free/freemium VPN apps from the Google Play Store ...

1
2 3 4 5
21