Questions tagged [routing]
Routing is the process of moving packets across a network from one host to another. It is usually performed by dedicated devices called routers.
150
questions
9
votes
1
answer
4k
views
Vulnerabilities of pure NAT without firewall
Following some of the comments on this question, I was curious about the security vulnerabilities of NAT. There are similar threads here and here but they discuss router vulnerabilities rather than ...
- 446
6
votes
3
answers
7k
views
How to track back a dynamic IP address?
Is there a way to trace back who was using a public dynamic IP address previously?
Would it be possible to find out the MAC address of the host using the IP address at a given time? (e.g., can you ...
- 2,617
1
vote
0
answers
272
views
SDN Security - why not attack the controller itself?
I have been looking into SDN (Software Defined Networking) and one advantage of using this is to be able to redirect traffic to stop DDoS attacks. The traffic is ultimately thrown away. My question ...
- 143
1
vote
2
answers
167
views
Safety of routing a network to a firewall
I am studying for my CompTIA Security+ qualification and have come across the following question.
Question :
You are implementing a testing environment for a development team. They use several ...
27
votes
5
answers
10k
views
How secure is binding to localhost in order to prevent remote connections?
Let's say we're running a service that's bound to localhost (127.0.0.1), and the goal is to only allow local clients (i.e. from the same machine only)
What techniques might be used to break this ...
- 541
7
votes
1
answer
23k
views
Understanding OpenWRT LuCI Firewall Routing with VPN
I'm still fairly new to networking, and I'm having a little trouble grasping some concepts of the proper firewall rules I need to implement for my desired setup. I'm setting up a router with OpenWRT ...
- 93
14
votes
1
answer
2k
views
Attackers of Google DNS hijacking
As we know Google DNS server (8.8.8.8) in 14th and 15th March was hijacked in Sao Paulo. And subsequent to this event, BGPmon.org announced an alert.
Now, In a course assignment, we are asked to find ...
- 265
5
votes
2
answers
11k
views
How can I obtain the internal IP of a computer behind NAT but reachable via certain TCP port?
I want to obtain internal IP of a remote computer behind a NAT that I can reach by using some port, say myhost.farfar.away port 11122TCP:
C:\>telnet myhost.farfar.away 11122
SSH-2.0-OpenSSH_6.6....
8
votes
2
answers
567
views
Why does Tor use a new route every few minutes
As far as I know, Tor selects three new nodes every few minutes. What is the advantage of this?
The only thing I came up with was to prevent "Bad exit nodes" from viewing too much of your (hopefully ...
- 535
1
vote
1
answer
414
views
Traffic anonymization through routing - software and algorithms
I stumbled upon an interview with "the grugq" in which he is talking about how hackers anonymize their traffic, i.e. hide their original ip address (- this is also what I will mean by "anonymizing" in ...
- 365
0
votes
1
answer
868
views
How to turn of telnet and FTP on Thomson 789vn router? [closed]
I have run a port scan against a Thomson 789vn router and have noticed to my surprise that its HTTP as well as telnet and FTP ports are open.
How can one turn off telnet (also FTP) using the router's ...
- 391
0
votes
1
answer
150
views
unfamiliar IP when logging into ssh server
I just noticed something today, and Now I am curious...
I was on my shell server, an i was wondering who was on, so I gave the command $w
and saw this:
j0h@server:~$ w
22:06:02 up 18 days, 7:02, ...
- 301
39
votes
3
answers
69k
views
How can a webpage get the MAC address?
I was logged on to my router and filling out some information. I clicked a button and a field was automatically filled in with my computer's MAC address. How is this possible? Does it present a ...
- 10.1k
0
votes
2
answers
452
views
Solution for traffic capturing from router
i'm a newbie and i'm having a problem that i can't find it by google.
I'm researching abbout DDoS detecting method now. As we can see that nowadays people often analyze networking traffic from router ...
3
votes
2
answers
518
views
Using HTTPS, can the target domain be seen?
If I go to https://google.com/q=test_query with from my browser, what traffic can be seen on the router?
Can the domain name (google.com) be seen?
If so, can I block all of the traffic to a web page ...
user47400
1
vote
0
answers
777
views
How should I configure my Tor-dedicated firewall for optimum security?
I'm setting up a Tor-based isolating proxy using the 'Anonymizing Middlebox' iptables rules specified here: https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy
i.e.
iptables -t nat -...
- 11
1
vote
1
answer
1k
views
Outbound Port 443 Open but Not Allowing SSH [closed]
My college wireless network has a firewall blocking all outbound ports except 443 and 80. The wired network, however, has none of these restrictions.
I can connect to HTTPS sites (obviously). On my ...
- 135
4
votes
0
answers
67
views
How does BGP filtering work to prevent routing hijacking? [duplicate]
I've been reading for a while but yet do not properly understand how is BGP filtering used to prevent "attacks" such the recent Indosat's problem.
Do not copy&paste Cisco's site, I have read all ...
user15194
3
votes
1
answer
53k
views
Router detecting port scan and ack flood attack
Over the past few days, I'm noticing that the log of my wireless router is showing an ACK flood attack from various IP addresses. I use a D-Link DIR-600L. I've searched through the internet, also ...
- 81
6
votes
1
answer
3k
views
Recent Fritz Box exploit
Background info:
About 50% of the ADSL and cable internet access in Germany (and presumably parts of the EU) goes over AVM Fritz routers, either verbatim or rebranded as e.g. "1&1 Home Server" or ...
- 5,201
1
vote
0
answers
882
views
Proxy via pfSense and exclusions for DNS
I have posted this to NetworkEngineering.SE, as that seems the more suitable audience for this question.
I will leave this question open here but am happy to see it closed. I just did not want to ...
- 537
5
votes
2
answers
1k
views
Provider can access my local network?
I recently talked with my ISP about many things, basically related to my (little) company security, this guy is a networking guru to me, but he did a strange thing that worries me. Basically I have a ...
- 179
9
votes
5
answers
24k
views
Is dd-wrt generally more secure than manufacturer's firmware?
I have been advised to use dd-wrt, for richness of features and heightened security.
The argument about security is that major manufacturers don't care much about the firmware, release with a lot of ...
- 1,917
2
votes
1
answer
376
views
What features boost security for a home edge router?
I want to hide my home network behind a router and not worry about firewalls on internet-facing devices. Furthermore, one PC is going to be hosting some services, so I guess I need port forwarding as ...
- 1,917
3
votes
2
answers
422
views
Indirectly relaying intranet server to outside world
I have an internal network of IP network cameras. The feeds from these cameras are ingested by a single server and presented from a unified web interface both internally and to the outside world (both ...
8
votes
1
answer
3k
views
Is my ISP BGP/DNS hijacking?
I've noticed some very suspicious activity from my ISP.
Sometimes I would notice that when I ping google.com it would resolve to an IP which is owned by my ISP. I currently don't have an example ...
- 81
2
votes
3
answers
12k
views
For security reasons, can I block ping response on my router without disabling my network?
I seem to have a serious problem of being attacked and after looking up the attack source, 99% come from China, then Korea, Hong Kong etc. Here is a fraction of the report from my Router, which is a ...
- 131
0
votes
1
answer
2k
views
Netgear WNDR4000 open port 53
Why is port 53 open on the WAN side of the router? And more importantly how do I close it?
Port 53 is not one of my forwarded ports.
Discovered by doing
nmap -pT:1-64 <my-external-IP> -Pn
...
- 111
1
vote
1
answer
3k
views
What are the Security Risks of Disabling Reverse Path Filtering
Reverse Path Filters are generally used to disable asymmetric routing where an application has a different incoming and outgoing routes. So idea is to prevent packet entering from one interface ...
- 4,834
2
votes
0
answers
233
views
Verizon wireless router is pinging my web server - is this ok or bad? [closed]
So I'm working from a local cafe, doing some web development, and need to see something in my Apache's access log. And to my surprise, in the log I see, every 30 seconds or so, a request for my root ...
- 21
7
votes
1
answer
2k
views
DSL Modem Compromised?
Just found out that the primary & secondary DNS servers have been changed to 95.211.156.101 & 5.45.75.11.
I had the following setup in place.
MAC filtering and WPA2 for WiFi.
...
- 73
25
votes
3
answers
3k
views
What does the email header-line "message opened by mailclient" mean?
Today a Belgian MP claimed (backed up by a security expert) that her email headers show that her email was read during routing (text in Dutch).
The published screenshot of the headers highlights the ...
- 541
0
votes
2
answers
2k
views
Could my computer be infiltrated if someone knows my external IP? [closed]
Could my computer be compromised if someone knew my external IP? I know that when you type that in it just goes into the router page, but my computer is connected to said router.
If so, what is the ...
- 908
8
votes
1
answer
1k
views
Routing Protocol Encryption
As far as I know 'newer' versions of routing protocols support authentication between routers.
What about encryption and integrity checks? Some implementations like this one from Cisco use MD5, which ...
- 2,871
3
votes
1
answer
2k
views
How is a Tor hidden service immune to exit node attacks?
Let me explain with a nifty diagram:
IP/RP <-> bunch of Tor clients/node (Tor circuit) <-> Tor hidden service
Wouldn't the last Tor client in the circuit knows that the message is for the Tor ...
- 133
1
vote
1
answer
167
views
Set Gateway for our LAN
I am new to Networking. In our organization we try to setup gateway for security purpose so that we can block certain harmful websites. All I know is gateway is a device. What we have is the LAN setup,...
- 111
1
vote
2
answers
233
views
non-MiTM Reverse SSL
Do non-MiTM Reverse SSL Proxies exist? Or do all proxies that do SSL-SSL mappings decode and then re-encode HTTPS traffic?
If this is the case and I want to map https://mypublicdomain.com -> https://...
- 155
1
vote
2
answers
3k
views
What information does a standard router see?
I currently use my neighbours' WLAN (with their permission). It uses WPA2 and the DSL router is a Fritz!Box 7170 (see English manual).
What information can a router admin user possibly see without ...
- 3,916
-1
votes
1
answer
1k
views
The Pirate Bay's new Hosting Architecture [closed]
I read this article a moment ago: http://www.geek.com/news/the-pirate-bay-is-now-hosted-anonymously-in-the-cloud-1522725/
But it was very light on details. Is an architecture as described in this ...
- 11
1
vote
1
answer
1k
views
Security w/ Router Behind a Router?
I have a SMB (small-to-medium-business) router (router x) that my workstations run off of in my small business. I wanted to offer my customers wireless internet while they wait for service so I ...
- 221
2
votes
4
answers
9k
views
Can anyone tell if a wireless router is plugged into an Ethernet port (without actually seeing it)
In a large network if there is an Ethernet port in the wall, is it possible to tell if a switch or wireless adapter is plugged into it? (I'm talking about the cheap home routers - with the built in ...
- 10.1k
4
votes
2
answers
40k
views
Access router if you don't know password
At home I have a wireless cisco router. Unfortunately I wasn't smart to change its ip or passwords. So anyone who is connected to it can access 192.168.0.1 and log in as admin using password admin and ...
- 1,134
1
vote
3
answers
3k
views
very secure router and advice to prevent intrusion
I suspect that my home router was been hacked (with firmware upgrade), so that I would like to build and buy a new router enough secure. Something that can prevent not authorized firmware upgrade. I ...
- 121
-1
votes
1
answer
1k
views
No advanced settings option in router [closed]
How can I configure NAT Settings when my router doesn't have advanced settings option.
- 121
29
votes
3
answers
64k
views
How does "traceroute over TCP" work, what are the risks, and how can it be mitigated?
There is a utility called tcptraceroute, and this enhancement called intrace that is used just like a standard traceroute, but it works over TCP.
How is the syn flag in TCP used to achieve traceroute ...
- 50.7k
12
votes
1
answer
39k
views
Firewall defined Akamai IP Range [closed]
With obvious dangers of opening up a wide range of ips, does anyone know how I can get a source of IP ranges for Akamai?
When talking to Akamai they say 'not possible' which I find surprising.
I ...
- 239
38
votes
2
answers
50k
views
What are the security implications of enabling UPnP in my home router?
I found port forwarding entries in home router that I haven't manually configured. Is that because of UPnP?
Are applications simply able to tell the router to forward ports on their own? Are there ...
- 507
3
votes
1
answer
636
views
What are the requirements to sniff UDP packets in a Wireless Ad-Hoc network?
In a wireless Ad-Hoc network, I have two computers which communicates in UDP together from 192.168.1.3 to 192.168.1.5
I have a third computer (192.168.1.6) which wants to listen to the packets which ...
- 907
23
votes
4
answers
21k
views
Router password vs MAC filtering?
I just bought a Galaxy S4, and it didn't connect to the WIFI in my house (I have a 14$ router). After a bit of testing, I've decided to leave my connection open without a password, but added the ...
- 813
3
votes
2
answers
2k
views
How actually is Tor hidden service hidden from public?
Let's suppose I have a web server X, listening on port N for instance and configured as a Tor hidden service.
How and where is implemented its' hiddenness from public access?
- 133