Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [port-forwarding]

The tag has no usage guidance.

1
vote
1answer
33 views

How secure is it to use port forwarding for VNC?

I am following this tutorial that explains how to use a VNC client to logon to an Amazon EC2 instance. After a few steps, it asks me to login to the instance using port forwarding using this command: ...
0
votes
0answers
21 views

Firewalld masquerade mode is preventing tcp websocket connection on port 60069? What to do?

I have configured firewalld for most http, https, ftp, etc sites. We predominately use it to access the internet from a secure network, for patches, Google lookups, etc. My problem now is that I ...
0
votes
1answer
150 views

Port forwarding to ip address in LAN that is not available

Consider the following situation: In a LAN the router is configured to forward one incoming port from the WAN to a specific local ip-address/port. My question is, how is the security in this ...
0
votes
0answers
28 views

Nessus scan over particular forwarded ports with metepreter

During a penetration lab, I have access to a Windows XP machine that allows me to forward ports locally using meterpreter. Example: portfwd add -L 127.0.0.1 -l 8022 -r 10.0.0.125 -p 7022 Can I ...
0
votes
0answers
186 views

What is an internet-facing system?

I have a home server with access to the Internet. It runs a TeamSpeak server service. On my router, ports 30033 and 10011 are forwarded to the server to allow TeamSpeak to properly run from the ...
1
vote
2answers
263 views

Server Side request forgery (SSRF) explanation

I am looking to gain a better understanding of the SSRF vulnerability. I have googled and watched YouTube tutorials but they all show advanced techniques that are difficult to understand. I am ...
1
vote
2answers
135 views

Dealing with the dangers of self-hosting a webserver?

Assuming for a self-hosted webserver: the webserver only hosts a static html website iptables is used to reject every IP except a few known ones only Port 443 is forwarded and the website requires ...
0
votes
0answers
293 views

Port forwarding mysql when it's bound to localhost

I am a pentesting n00b, working my way through vulnhub VMs. I am stuck trying to figure out how to make portforwarding work with a mysql instance bound to address of 127.0.0.1. Can someone give me ...
1
vote
3answers
1k views

Port forwarding for reverse tcp

I am using metasploit to create a payload for Android phone (for educational purposes). If my target and my computer are on the same network it works fine. But when my target is outside connected to ...
1
vote
2answers
220 views

My ISP blocks incoming ports so I can't even run webserver let alone 'reverse shell', any ideas? [closed]

I'm looking for ideas on how to run lab environment from "victim" test PC at work and "attacker" - my home PC. Both are on separate ISPs, but it seems that my ISP at home blocks anyone trying to ...
0
votes
1answer
210 views

How could a bind shell open a port on a firewall in front of the target?

Is it possible for a software to open port in the router for my local device without permissions to access router setup page? If it's not possible then how does a bind shell work?
0
votes
3answers
123 views

Can an attacker with MitM privileges perform denial of service and other attacks besides interception on local LAN?

I would like to better understand what an attacker who has MitM control on a LAN can do to the victim. I understand that basically a MitM attack means you intercept traffic and can see the data [and ...
2
votes
1answer
744 views

Port-forwarding to a web server on Raspberry Pi

I've recently created a relatively simple smart Christmas tree which is a Raspberry PI Zero W powered LED strip. In order to control it via IFTTT webhooks, I've started a lightweight flask server on ...
8
votes
2answers
1k views

Why is forwarding port 80 more insecure than the others?

I'm doing an internship in a very little company and I need to configure the network. They have a Cisco router. I couldn't find the logs to login so I called their internet provider. Apparently they ...
-2
votes
1answer
772 views

Port forwarding when the ISP blocks it [closed]

I am working on establishing penetration testing service in our startup. The issue is that our ISPs is somehow blocking port forwarding. I tried to contact them in order to allow port forwarding, but ...
2
votes
1answer
2k views

LPORT question - I seem to not understand some concepts

I am trying to build a payload for inserting as an obfuscated code into a Word document, which will create a listener on the attacked machine and will allow me to execute some commands (not through ....
2
votes
3answers
521 views

Is there any risk to having many “unused” ports open through firewalls and routers [duplicate]

I have a server I am using to host public internet services where I want to start and stop many instances, lets say up to 50 per physical server. The architecture of the software means each instance ...
0
votes
1answer
354 views

What are the risks of having a port forward through a NAT gateway to an unused IP?

I'm trying to determine if having a port forward on my NAT gateway to an unused IP address exposes me to any security risks. Obviously if a device ends up at the IP address then there is a potential ...
1
vote
2answers
513 views

Port forwarding and port blocking security concerns

I am highly concerned about RDP security and about multiple occasions of ransomware infections through RDP, so now I am inspecting possibilities for self-defense against these threats. What interests ...
1
vote
1answer
249 views

How vulnerable are devices on my home WiFi?

My wife and I got into a discussion about the security of our home WiFi the other day, so I have come to this discussion board to see if I am wrong about how secure I/we feel. We have your normal ...
0
votes
1answer
504 views

Network isolation for a single device

I'm planning to set up a local server (Minecraft) accessible by only one other person connecting from a static IP. It's on a dedicated machine that I can easily wipe (Raspberry Pi). I'm looking to ...
0
votes
0answers
590 views

How to redirect traffic to gateway after it has been redirect to another port?

I programmed an arpspoof program in Python which is working fine. I can see all the traffic from my other pc (lets call it the "victim") on my pc using Wireshark. Now what I'm trying to do is redirect ...
5
votes
1answer
415 views

Hardening/Security considerations for torrent clients

I am running Synology's DSM torrent client on a NAS. As I have to (?) open and forward one UDP port for DHT and another one (UDP/TCP) for data transmission I am exposing myself to threats originating ...
3
votes
0answers
153 views

How safe is it to host my own HTTP server on port 80? [closed]

I've recently finished programming my own HTTP server to host a simple static website. As of now its functionality is limited to sending a single response to the first GET request which asks for the ...
1
vote
0answers
453 views

Port forwarding and DMZ not working

Am trying to run a tor-relay on my raspberry-pi. I have a static IP configured on my pi and enabled the tor service. But when I tried to do port forwarding for my pi's static ip on my ORport, it is ...
1
vote
0answers
132 views

Bypassing Client firewall restrictions

Lets suppose we have 2 parties A(me) and B(participant). I want to communicate with B but B's firewall restrictions are not allowing me to communicate with him. Is there any way that I can bypass B's ...
1
vote
3answers
366 views

How to secure my network and system setup? [closed]

I have 2 severs and 12 systems (All having UBUNTU) connected to each other over LAN. The 12 systems use multiple databases (Redis/Postgres etc.) hosted on the 2 servers using LAN. Now, I need to ...
1
vote
1answer
88 views

Is a hard-to-brute password necessary in this configuration?

All my hardware devices are physically secure. They access the internet via this same or similar Bell Canada home device known as the "Home Hub 2000" via a WiFi network with encryption and a hard-to-...
1
vote
0answers
1k views

How do I access my webservice on port 443 using https? [closed]

I am trying to run a webservice via https on port 443 via self-signed certificate. Here is what I did first: Forwarded port 8080 Create self-signed certificate with openssl Add certificate to trusted ...
0
votes
0answers
298 views

udp port 1194 forward through from gateway to LAN server through DMZ

my iptables rules don't seem to work, I do not understand what's wrong. could somebody be kind enough to give me a hint ? thanks in advance iptables -t nat -A PREROUTING -d $INET_IP -p udp --dport ...
2
votes
1answer
179 views

Eavesdropping on a specific port of machine in the WLAN from a different machine, possible? (using arpspoof)

I'm using netcat -l 555 option to communicate between two computers(Linux) on port 555, is there any way I can eavesdrop to whats going on in that conversation from a 3rd computer? After the second ...
0
votes
3answers
1k views

Is leaving a web server port open on my router a security compromise?

I was wondering if I were to open port 80 on my router and forwards it to port 80 on my Apache web server would create a security compromise to the rest of my network. I was reading that open ports ...
-3
votes
1answer
1k views

Protect against DDoS attacks? [closed]

I am going to make a game server which involves port forwarding, I also heard that people can DDoS attack. When they DDoS attack, what is it that they attack, the internet or the computer? Also, what ...
1
vote
2answers
599 views

Port-Forwarding insecure? [closed]

I was going to do port-forwarding to create a gaming server with an old PC. I the found out that it makes more things visible to the internet. Is port-forwarding a bad choice considering its ...
1
vote
2answers
495 views

Isolate Raspberry Pi Server

I am thinking about using a raspberry pi, or some other SBC, to open a simple node.js based web server and a ssh server. I know that when opening ports there are always security vulnerabilities ...
3
votes
2answers
11k views

Is there a way to forward ports through VPN?

My ISP seems to have filtered all ports. I have found a few decent free VPN services with open ports. Is there a way to forward those open ports to my network address? Or is there any other free VPN ...
1
vote
1answer
3k views

NMAP port scan on home router looks strange to me

Today I was playing around with Nmap on Ubuntu Linux. I performed a port scan on our home router with nmap -sV 192.168.1.1 The results were as follows: **Starting Nmap 7.01 ( https://nmap.org ) at ...
1
vote
1answer
565 views

Browser Autopwn2 Unable to Exploit “Victim” on Separate Network

Am using VMWare Workstation 10 Player. Kali Linux OS is Nat Windows XP is bridge That means both are on separate networks. I am trying to make Kali Exploit the XP box. Remote Windows is 192.168.1.9 ...
1
vote
1answer
439 views

PCI and SSH Port forwarding

I am trying to convert a widows jump server to a Linux jump server. There are a few windows boxes behind this jumpserver, and I was wondering if I can just enable port forwarding over ssh with a ...
4
votes
0answers
382 views

What vulnerabilities are associated with port triggering?

Background To address a VoIP voice lag issue, my provider added port triggering rules for over 42,000 ports on my router, which seemed sloppy. And as I understand it, port triggering should only be ...
4
votes
1answer
4k views

Question about IPv6, NAT, firewall, port forwarding, upnp and security

In the next months/years my ISP might give me IPv6 for my home connection. But what are the security implications? Will local network servers/embedded devices be accessible from the whole internet? ...
-2
votes
1answer
370 views

SSH and Port Forwarding - what are the possible attacks and how to avoid them? [closed]

What are possible attacks when using SSH and Local or Remote Port Forwarding? What are the threats? I understand that there are many, but what are they? And also, how could they be avoided?
1
vote
1answer
582 views

ssh tunneling /port forwarding/access different subnet

Hi I need some good pointer or any recommendation any docs about this below stated scenario. During in my recent pentesting : My ip is 192.168.x.1(kali) By some how I managed to get root shell on ...
5
votes
2answers
2k views

Port forwarding with 0.0.0.0, any threat?

I set up on our company's firewall (fortigate100d) a port forwarding to one of our Internal services. As we don't have a static public IP I used 0.0.0.0 as an external IP so the remote users can ...
-1
votes
1answer
205 views

Is it okay to have a blank root password for MySQL if port 3306 is not forwarded?

I'm running a PHP server that will use the root account to access the database. However, the server is behind a router and port 3306 is not port forwarded. Is it okay to have a blank password for the ...
2
votes
0answers
413 views

Programmatically open router ports via port triggering

I'm getting many brute force attacks on my home computer which is behind a DSL modem (very old D-Link, has only web interface), so I decided to protect SSH this way: Every time I want an SSH ...
1
vote
1answer
183 views

Port forwarding with VPN

EDIT: My VPN has port forwarded a 5-digit tcp/udp port for me. What kind of attacks am I opening the computer to with VPN port forwarding?
1
vote
1answer
790 views

Which method of an port forwarding is more secure?

I am at the design stage of an embedded system which requires an incoming connection to be forwarded through a consumer-grade router. This will carry an encrypted connection eventually. I see three ...
1
vote
1answer
108 views

Would the authorities in my college be able to see what websites I accessed through tunneling(SSH)?

I study at a college where most social networking sites are banned(Including this one) and if someone is found using them somehow is heavily fined.I just want to know what all can the network admin ...
1
vote
1answer
1k views

Does VPN remote port forwarding compromise the anonymity of the VPN user?

An anonymous VPN service will typically assign the same public IP address to many VPN users. This procedure ensures that a connection cannot be traced back to the VPN subscriber: behind the veil of ...