Questions tagged [lan]
The lan tag has no usage guidance.
53
questions
5
votes
2
answers
1k
views
How did I obtain a wildcard SSL certificate without port 80 opened for a challenge?
I wanted to secure my apps running in a private subnet with SSL. Albeit not necessary, it is very nice to have.
Because of my constant changes, I opted for a wildcard ssl certificate through my DNS ...
1
vote
1
answer
29
views
LAN and external website [closed]
Consider a situation such as:
private LAN <-> firewall A <-> DMZ <-> firewall B <-> internet
(https://forum.huawei.com/enterprise/en/dmz-and-reverse-proxy/thread/...
- 11
0
votes
0
answers
38
views
Does Vault (or basically any other system) require TLS when it only connects to a host on the LAN? [duplicate]
I'm trying to understand where TLS is required. I've heard that TLS encrypts data when a client communicates with a server through HTTP by verifying the server and passing encryption keys. This ...
0
votes
1
answer
109
views
Malicious actors on LAN
I was reading this security advise, which says:
The neovim process binds itself to 127.0.0.1, so malicious actors on your LAN should be unable to interact with either your webextension or your neovim ...
- 529
0
votes
1
answer
115
views
How can I detect secondary internet connections?
I have a LAN. Is there a way, without installing any agent in each computer, to detect if any computer is accessing the internet without going through the LAN? For instance, via dongle, Wifi hotspot?
- 133
1
vote
1
answer
222
views
Malware infection to wifi router from android phone
Suppose a wifi router has strong admin password, updated firmware and no vulnurability then -
Is the router safe from malware infection from android phones connected to it?
Can malware from an ...
- 41
0
votes
1
answer
3k
views
Port 53 on my home router opened, why?
I couldn't find anything online so I'm here to ask experts. I've nmapped my public ip and I noticed all ports are closed but the 53. In the router's options upnp is disabled and the NAT rules are ...
- 1
3
votes
2
answers
4k
views
Intrusion detection in a small home network
The number of devices in my home network keeps growing: Apart from my gaming PC and our home office notebooks, we have the kids' tablets, all our smart phones, a smart TV stick, some WLAN peripherals, ...
- 3,788
0
votes
0
answers
127
views
Router network seperation when an (unknown) device is connected via LAN?
I share a router (Asus RT-AX58U) with my flat mate. Because the rooms are on different floors it is of no use for him to use the wireless network (he doens't have the password).
He bought his own ...
- 1
0
votes
2
answers
279
views
Securely access server via FTP through SSH tunnel
Is it right to assume, that when i build up a tunnel with ssh -D from outside my LAN and then access my only locally exposed server via FTP, it can be called 'safe'? Tunnel is established on the same ...
1
vote
2
answers
413
views
How to block personal devices on corporate network
Currently we are working to secure our internal LAN and due to this we are planning to stop mobile devices (such as personal laptops and mobile phones) to connect on corporate network. Our key area of ...
- 11
0
votes
0
answers
918
views
Block all windows system outgoing internet connections but allow LAN on Private and VPN on Public
I have several windows PC connected to my mikrotik. I use basic features: file sharing, playing games with friends on home LAN and want to connect internet only through VPN (openVPN client).
But I am ...
- 1
-2
votes
2
answers
497
views
Can a connection stay hidden from Wireshark?
I'm monitoring my home network with Wireshark, since I believe my computer is being actively hacked. I looked up a LOT of IP addresses, but didn't find any suspicious ones.
Can a connection be hidden ...
- 39
1
vote
1
answer
262
views
Comparing two ways to access home network remotely
I go from location to location sometimes and I want to be able to access my resources from my home network like SMB shares or my ProxMox server. Obviously, since these services are on my LAN, I cannot ...
- 11
0
votes
2
answers
862
views
Can devices in a WAN view/connect to devices in a LAN?
I live in an apartment building that provides cable internet via an ethernet cable that reaches my place. I connect this cable to my WAN port and distribute it internally via wifi through my password-...
- 653
0
votes
1
answer
3k
views
Do I need to create SSL for HTTPs over a local network?
I have a server that is accessed only via local network in my VPS, as it is local it does not have a domain, it is accessed only via IP (ex.: http://localhost/routine.php).
This server will only be ...
- 174
0
votes
1
answer
1k
views
HDMI with Ethernet: Network Security Risk?
I recently found out that HDMI cables (v1.4 and over) have ethernet capabilities for higher res output, so I want to know one thing:
Say I have a PC/laptop connected to the internet, and a monitor (...
- 1
0
votes
2
answers
250
views
Is every packet in a home Wi-Fi which has say, AES password for connection, encrypted using the same password?
If there is an intruder in a LAN who knows the encryption type and password, will he be able to monitor all the packets which are in the LAN? Suppose someone on the LAN is visiting HTTP sites, which ...
1
vote
2
answers
1k
views
Does VNC need hardening when inside LAN (home network)?
This is a very newbie question, but I would just like to make sure that I'm not missing anything: If I connect via VNC protocol to my various servers etc. inside my own LAN (home network), then should ...
- 21
0
votes
0
answers
406
views
Avast Remote Access Shield is blocking unknown remote access attempts to my computer (Win10) coming from a MacBook device on my LAN. [Confused]
I need help understanding what is happening on my LAN and determine if a malicious attack is taking place.
The "attacks" started to occur for the first time last night. This morning, I open ...
- 101
4
votes
2
answers
867
views
How is my school blocking new Internet traffic after midnight?
My school supposedly cuts everyone's connection at exactly 12:00am. Although the network is still there, Windows shows the "no internet" sign when connecting to the network.
However, the ...
- 479
0
votes
0
answers
145
views
Is SSL Always Required When Communicating With Internal Client/Servers?
I'm in the planning/design stages of a project which will incorporate an internal server that communicates with internal clients. A quick summary of how this server will behave is as follows: end-...
- 1
3
votes
0
answers
3k
views
Unknown device on my home's local network. What to do about it?
My home router's configuration interface shows a device I don't know, connected via WiFi to my local network. According to the router's history, that device connected to it several days ago. It is ...
- 1,945
0
votes
2
answers
708
views
Is a LAN to LAN with different subnet configuration secure?
I plan to implement the following network configuration :
Internet [(cable A)]
Router A
(192.168.0.x)[(WAN:cable A)(LAN1:cable B)(LAN2:)(LAN3:)(LAN4:)]
Router B
(192.168.1.x)[(WAN:)(LAN1:cable B)(LAN2:...
- 201
0
votes
0
answers
148
views
Risks of running network services on a LAN hardware firewall
I am planning to set up a dedicated hardware firewall like Protectli and run a pfsense on it. I already know that:
it is a good practice NOT to have a wireless adapter on the firewall unit
it is ok ...
- 121
0
votes
0
answers
110
views
Is it possible to make a remote server part of VPN so that only machines within a domain network can access the server?
First, let me describe the problem I am trying to solve.
I have a domain-based network. My Source Control server resides on
this network. This meant only devices connected to the network (part
of ...
- 101
0
votes
1
answer
125
views
Using a WLAN router to create an access point
Would the local network administrator in my dorm be able to figure out that I'm using a WLAN router to access their wired internet connection? Assuming I'm not broadcasting the SSID.
- 103
0
votes
1
answer
1k
views
Unknown Google Account Signed into Browser
An unknown Google account is signed into Firefox on my Arch Linux machine. The computer is in my apartment (where I live alone) and I lock the screen when I leave.
Some observations:
The unknown ...
- 9
0
votes
1
answer
252
views
What do people mean when they talk about "hackers gaining access to our network" (at home)?
Have I fundamentally missed something between the time when I sat with my 486 IBM PC in the house, fully offline, and today? Do normal people actually set up complex local networks in their homes ...
- 11
0
votes
0
answers
770
views
How to encrypt data on local LAN (without Internet)? [duplicate]
I'm wondering what is the bank-grade encryption for traffic between a client (say, Windows app) and a server, both on local network. It looks like to use ssl encryption, they must have Internet access ...
- 101
2
votes
1
answer
203
views
End-2-End and server to server encryption over home network
I am setting up a private home management system containing several daemons/servers and a few clients to connect from.
I am trying to achieve end-to-end encryption with the most monitoring and health ...
- 23
2
votes
1
answer
126
views
Considerations for securing a computer on an open LAN? [closed]
Im about to move to a serviced office where they have an open LAN. Eg. no VLANs for individual companies. The room itself is locked so the main treats would be from cyber security, rather than ...
- 566
1
vote
1
answer
187
views
Local area network multi-device network communication protocol
I am planning to build a local area network that will have one Master device and multiple Slave devices. The communication should be able to handle only ON/OFF functionality of the devices (devices ...
- 113
2
votes
2
answers
211
views
Is using a network sniffer for host discovery a viable option?
Would a packet sniffer like tcpdump be effective for network host discovery and if so how effective is it compared to more active methods such as the infamous network mapper nmap?
- 23
1
vote
0
answers
2k
views
Need to encrypt RTSP over LAN
I tried googling everywhere, but got no help with what I needed specifically.
Let's say I have several IP cameras on a local area network. This LAN will NOT be connected to the Internet. The IP ...
-2
votes
3
answers
1k
views
How can I stay anonymous in a LAN without Internet access?
I need to perform attacks (SQL injection) on a server. I thought of using a proxy to be anonymous, but the topology is a LAN without Internet access. I have no idea of the protocols used in the ...
2
votes
2
answers
425
views
If two servers are in the same private network, is it better for them to talk to each other through HTTP or HTTPS?
Is anyone kind enough to tell me what actual companies do about the matter? This is assuming the company doesn't run the risk of having insiders sniffing the packets.
- 23
1
vote
0
answers
511
views
Securing connections to a web server hosted on a LAN
I am hosting the same website in two locations:
A public location https://mysite.com (AWS hosted)
A location on a LAN with local DNS https://mysite.local.
mysite.com is a service which targets ...
- 131
2
votes
2
answers
450
views
How safe is it to allow key-based SSH access within LAN?
So this is my setup:
We have a few machines in a LAN, used for computation, which me and my colleagues access from the outside with SSH.
All our accounts on the LAN machines are managed and shared ...
- 135
0
votes
1
answer
238
views
Are Routers Liken to a Firewall? [closed]
When my ISP came to set up my fiber internet, I told the technician I didn't want a router included within my wired network. He successfully managed setting up the ONT(Optical Network Terminal) ...
- 33
2
votes
2
answers
2k
views
Threat of a Windows XP machine connected to a local network via WIFI (today in 2018)
After seeing this question I am wondering what could actually happen if a Windows XP machine was connected to a local network via WIFI. Imagine the machine will be used to browse the internet, read ...
- 15.9k
3
votes
4
answers
1k
views
I started to learn about MITM attacks, and I can't figure out few things
I just started to learn about MITM attacks, and I can't figure out few things.
I have few questions and appreciate all the answers.
If the attacker is already in my LAN why does he need to trp to arp ...
- 31
3
votes
2
answers
7k
views
Why is NAT referred to as "the poor man's firewall"? [duplicate]
How exactly does NAT protect a network? How does it relate to a firewall?
- 249
-1
votes
2
answers
986
views
Can an infected device within the LAN still be a threat if turned off?
Scenario
An attacker successfully infiltrates the LAN and infects a device that acts as a future bridge. Once inside, the infected device can communicate with a malicious source outside of the local ...
7
votes
1
answer
2k
views
Second router setup for secure subnet
I have a BT Smart Hub as my router which has no guest network functionality, I also have a Netgear Nighthawk D7000.
Initially I attempted to use only the D7000 and take advantage of the guest wifi ...
- 71
0
votes
1
answer
250
views
E2E Encryption in a LAN
I'm looking to protect data in transit around the LAN from file servers both Linux and Windows based. I think the correct solution is IPSEC as I want a blanket solution for both types of operating ...
- 13
0
votes
1
answer
133
views
Process of finding device hostnames on LAN
Is there a reliable way to retrieve hostnames from LAN devices without having to install extra software or performing nmap-style OS fingerprinting?
I'm ideally looking for either a protocol that has ...
- 2,617
1
vote
0
answers
118
views
Spoofing an IP/MAC address to avoid ICMP Destination Unreachable being sent back [duplicate]
As far as I understand UDP flooding the idea is to send UDP packets across all ports from e.g. Alice to Bob, and get Bob's machine to check who listens to certain ports and generate many ICMP ...
- 111
1
vote
1
answer
571
views
IP Address leak on LAN scan
I am using VPN and encrypting my web traffic through them. However, When I do Lan Scan I can see my real ip address. All other websites, IPleak.net, WebRTC leaks, DNS leak, Email Leak and IPv6 leak do ...
- 19
2
votes
4
answers
6k
views
How exactly do you protect against ARP spoofing in large LANs?
No matter how much I google I can't get a definitive answer.
Static ARP entries:
Static ARP addresses prevent only simple attacks and do not scale on a
large network, since the mapping has to ...
- 23