Questions tagged [firewalls]

Concerned with software or hardware firewalls

Filter by
Sorted by
Tagged with
0
votes
0answers
43 views

Firewall issues

Background I have an Android device (Minix M5) that I handed to a customer The device only does outbound connections, so no inbound traffic The customer confirmed that s/he opened up the ports ...
0
votes
2answers
146 views

Security devices other than firewall and IDS [closed]

I was just studying about firewalls and IDS/IPS and had a doubt. Are these the only two major security devices that a company invests in? or are there other equipment and security controls?
0
votes
1answer
454 views

Firewall log entry: need help in interpretation

I recently setup an Hardware UTM Firewall. The firewall log shows the this entry every 20 seconds: /var/log/packetfilter/2014/09/packetfilter-2014-09-30.log.gz:2014:09:30-12:06:15 utm ulogd[11342]: ...
0
votes
1answer
235 views

If I port scan a server on the outside of a firewall will this also tell me the ports the firewall is blocking?

Theoretically I was thinking a firewall inspects the TCP header and looks at the destination port and discards/forwards based on its firewall rules. So could I port scan an external server to the ...
0
votes
1answer
115 views

firewall settings for VPN

In my firewall settings there are options for "Allow VPN connections via PPTP" and "Allow VPN connections via L2tp-IPsec". All of my internet traffic goes through a VPN. Should I have these settings ...
0
votes
0answers
137 views

What are some real world examples of screened subnet firewall architecture? [duplicate]

Possible Duplicate: Public DMZ network architecture screened subnet firewall architecture has a DMZ the outisde world doesnt know about the inside network beyond DMZ and inside doesnt know about ...
0
votes
2answers
134 views

Firewall and VPN

Let's suppose i work in a small office and i can't use my workstation to navigate in Facebook because the external firewall forbids it. But i still can use a VPN to bypass the firewall. I read that ...
0
votes
1answer
655 views

Can firewalls detect and block outgoing by protocol [duplicate]

Or specifically, what can be done to detect or block the following (other than closing port 443)? If this is something that can or cannot be done based on the specific hardware used, please provide ...
0
votes
1answer
59 views

Does firewall count as a subnetwork? [closed]

I need to design a network based on IP 10.1.1.0/24. I have three different subnetworks and a firewall. Does firewall count as a subnetwork? Do I need to assign some IP values to it?
0
votes
3answers
1k views

explorer.exe outbound (Unexplained TCP Connections)

So I've already disabled SSDP Discovery in Windows Services. I'm also not conducting any searches. I also have file indexing disabled on my system. I noticed a number of outbound connections coming ...
-1
votes
4answers
7k views

why Windows Firewall in XP cannot block outbound connections [closed]

wikipedia say: XP's Windows Firewall cannot block outbound connections; it is only capable of blocking inbound ones. another article says: XP defends you with your traffic coming from the web but ...
-1
votes
2answers
192 views

Linux: Blocking outside attempts at attacking computer

in the past when I wanted to block outsiders from attempting to start connections with my Linux machine's various TCP services, what I was told to do was to add this line to /etc/hosts.deny: ALL:...
-1
votes
1answer
80 views

Would a firewall contain an explicit allow rule at the top?

Someone in an interview today told me every firewall has two rules: explicit allow at the top and explicit block at the bottom. Form the way I've always understood things firewalls are normally set to ...
-1
votes
1answer
43 views

Infection of malware

Lets say, My firewall is configured to block any incoming connections My browser doesnt allow any traces and scripts I have vpn on My browser always asks before downloading files My browser doesn't ...
-1
votes
1answer
517 views

Does Windows firewall stop attack use bandwidth?

If I block all the international traffic except an IP range and an attacker starts a DDoS attack on my IP, will it effect on my bandwidth?
-1
votes
1answer
858 views

Is there a way to get OS X to start a VPN connection before allowing network traffic? [closed]

I'm running OS X 10.8 and have Tunnelblick set up so I can connect to my OpenVPN server at home. I've also used this at $WORK in the past. When I'm out and about and want to jump on a public network, ...
-1
votes
1answer
1k views

Linux tools to choose suitable Cisco ASA 5500

I have a linux webhosting server which affects a high DDOS. I want to use Cisco ASA 5500 Series Adaptive Security Appliances to protect the linux server from this DDOS. I know there are many factors ...
-1
votes
1answer
82 views

Firewall logs with Local IP contacting local IP over the internet [closed]

I noticed some wierd behavior in our firewall logs: a computer in our subnet 192.168.1.0/24 sending UDP packets in port 161 to an IP in subnet 192.168.20.0 (we don't have a subnet like that), and the ...
-1
votes
2answers
554 views

What is and how good is an ISP-provided antivirus?

Today I had my Internet provider to install Internet Fiber at my place. I've been asked whether I wanted the antivirus service. I am aware you can (and should) install an antivirus on your computer. ...
-1
votes
1answer
42 views

How to connect to external address as other outgoing port number without proxy [closed]

Is it possible to (mask / define) outgoing port locally on network without using a proxy? default (outgoing protocol) [address] [port] set to (outgoing protocol) [address] [selected port] There ...
-1
votes
2answers
116 views

Determining Firewall settings (Ports, etc) for specific applications

How can we identify the network or network firewall requirements for a Desktop or Web application. Meaning what ports are required by the applications. How the Cloud and non Cloud networks communicate ...
-1
votes
1answer
209 views

Is it okay to have a blank root password for MySQL if port 3306 is not forwarded?

I'm running a PHP server that will use the root account to access the database. However, the server is behind a router and port 3306 is not port forwarded. Is it okay to have a blank password for the ...
-1
votes
2answers
103 views

Intrusion detection system and firewalling

I have a website and hosted some data and MySQL files on it. Is it possible for me to install an intrusion detection system on it, or can IDSs only be installed on my internal network where I have a ...
-1
votes
1answer
344 views

What do current generation firewalls lack?

Are current generation firewalls ( both commercial and open source) good enough to combat current generation attacks (of course when properly configured) ? By large , what do current generation ...
-1
votes
1answer
157 views

Detecting and blocking TCP VPN connections that bypasses existing VPN detection software

I help manage a small college campus network and students are not allowed to visit certain sites and download using torrents. Currently I'm able to block UDP VPN connections, but TCP VPN connections ...
-1
votes
1answer
130 views

What is the meaning of “me” in ipfw rules?

ipfw is an IP firewall and traffic shaper control program. The term "me" appears on ipfw statements like below: ipfw add 02050 allow tcp from me to any out I would like to know exactly what "me" ...
-1
votes
1answer
604 views

How can adding a line to your hosts file bypass a server side firewall?

In this SQLi blog the author says that to bypass a firewall at the server side you should add this line to your /etc/hosts file: 54.165.170.2 www.example.com But doing so will only block my ...
-1
votes
2answers
850 views

How to limit source port for accessing blocked website?

My country has a firewall which blocks sites like Facebook, whatsApp etc. However, they use some kind of port blocking, so some important websites for me like Chegg is also getting blocked I think due ...
-1
votes
2answers
3k views

Allow embedded videos while keeping youtube blocked [closed]

Our organization has launched a training program for employees. the hosting server(internal), has YouTube videos embedded. we have YouTube blocked, and employees access the internet via proxy. How can ...
-1
votes
1answer
2k views

How to bypass firewall protection to hack windows server 2003? [closed]

I am trying to hack windows server 2003 sp2, i can see a lot of services running on target, there is also a lot of backdoors listing on ports like netbus, remote-everything .... But Firewall (as i ...
-1
votes
1answer
52 views

threat intelligence gateway [closed]

A TOG (threat intelligence gateway) is a hardware piece that sits between the router and the firewall. The TIG uses the threat intelligence and filters out the malicious urls and IPs before reaching ...
-1
votes
1answer
369 views

How to safely expose a computer to the Internet with a public IP

Our LAN is configured behind a load balancing router, in turn connected to a modem assigning public IPs to connected devices. I am required to randomly test the connection effective throughput, ...
-1
votes
1answer
358 views

What are the Pros & Cons of VPN server behind or in front of firewall? [closed]

What are the pros and cons of a VPN server behind or in front of the firewall? There seems to be no right or wrong in either option. An example of the VPN server in front of the firewall:
-1
votes
2answers
97 views

Secure access to an aplication from internet [closed]

I have an application wich needs to connect to the main database. I want this application to be accessible from outside the enterprise network. I think that the best way is to install the app in a SQL ...
-1
votes
1answer
138 views

How does PeerBlock generate range descriptions?

How does PeerBlock generate the range that it displays? I thought it was through some DNS lookup, but when I do the lookup I get LeaseWeb Content Delivery Network for the attached screenshot. Instead ...
-1
votes
1answer
431 views

Benefit of having strict ACLs [closed]

My company uses strict ACLs for the connection between two boxes. What are the benefits of these?
-1
votes
1answer
4k views

How to find IP Addresses that have been attacking my Computer Ports ? [closed]

I am a newbie at Info Sec, and wanted to know which IP addresses are sources of attack traffic. Can I also find out which ports are being attacked? Can this information be found in windows firewall? ...
-1
votes
0answers
71 views

Minimum (safest) firewall holes to create to connect to public WiFi networks and use a web browser?

What are the minimum (safest) Windows Firewall holes to make to permit Windows 7-10 computers to connect to public (secured or open) WiFi networks and browse the web with any modern web browser? ...
-2
votes
2answers
253 views

Why is DDOS is one of the most common Cyber-Attack? [closed]

Based on some articles and some research DDOS is one of the most common cyber-attack. There are tonnes of articles out there about the DDOS subject, including describing, mitigating, the question "...
-2
votes
2answers
122 views

Finding websites protected by Web Application Firewalls

I've been doing research on web application firewalls. But of course, finding the firewalls is the hardest part of this so far. Is there a simple way (like a list or something) to finding a website ...
-2
votes
1answer
41k views

How to run any application through a proxy with PUTTY? [closed]

Maybe I did not search for it the right way but I could not find the solution. Maybe I am misinformed but if I understand correctly I could use PUTTY to run any Windows applications through a proxy ...
-2
votes
4answers
135 views

Zero-day malware protection [closed]

What is the best approach in defending your company against zero-day malware? Is there a firewall/system to do that? Is it good to run every file in a sandbox and to track activity of the sandbox?
-2
votes
2answers
242 views

Why can't home internet users communicate with their peers? [closed]

As a home internet user, why does my ISP block my communication with any other client on the same subnet as mine? It is done for security obviously, but what is the risk? Update: as clarified by ...
-2
votes
1answer
56 views

WAF or Firewall [closed]

I am looking into putting a Firewall in front of our web servers. But we just recently implemented new next-gen firewalls. Does it make sense to put a WAF in front of our web servers as well?
-2
votes
1answer
105 views

Firewall can detect suspicious file over HTTPS [duplicate]

A firewall/router can intercept HTTPS traffic, analyse it and detect suspicious file download for example. From my understanding, it is acting as a proxy and/or a MITM device. If it is capable of ...
-2
votes
1answer
84 views

Trying to detect a firewall

I have some HTML that was detected by one of my scripts firewall detections, it looks like this: <!--- HTTP 1.1 Status Code: 403 HTTP Headers: {'Content-Length': '1233', 'X-Powered-By': 'ASP.NET', ...
-3
votes
1answer
2k views

Web GUI for Snort + ModSecurity [closed]

I'm trying to find a suitable (or easily modifiable) web GUI for snort + modsecurity logs. As far as I know, Splunk can do that by installing the snort and modsecurity plugins. Is there any other ...
-3
votes
2answers
995 views

Why is it a bad idea to allow all inbound / outbound traffic?

I have an AWS server. I didn't want to spend too much time configuring the Security Group and allowed all inbound and all outbound traffic. Is this OK or is it a bad idea?
-3
votes
1answer
3k views

Difference - Firewall Vs IDS (Intrusion Detection System)? [duplicate]

How firewalls differ from IDS ( Intrusion Detection System ) ? What are the differences between them ?
-3
votes
1answer
746 views

Bypassing firewall and exploit the target [closed]

I have a victim which is vulnerable to the RPC-DCOM vulnerability (MS03_26). The victim OS is Windows Server 2003, and It has Kaspersky Antivirus. When I try to exploit via Metasploit it exploited ...