Questions tagged [vpn]
This tag is applied to questions related to various VPN types such as PPTP or IPSec.
126
questions with no upvoted or accepted answers
4
votes
1
answer
1k
views
OpenVPN Key Size 1024 vs 2048 and Eavesdrop vs Access?
OpenVPN recommends using a 2048 RSA key size for greater security, however, the hardware I'm using is somewhat weak and defaults to using a 1024 RSA key size. I'm trying to determine if it's worth ...
- 283
4
votes
0
answers
433
views
Some http requests are not send encrypted by vpn! Why?
I subscribed to a VPN service recently, and installed wireshark to take a look at the traffic sent from my computer.
Practically all of it goes through UDP protocol, encrypted. But there are two HTTP ...
user53437
4
votes
0
answers
117
views
What's The Easiest Way To Maintain Remote Users Access to a Webapp
Here is a real world case:
A chain of high schools (several hundreds) has many websites (~ 3x number of Schools) that are content driven by users (the students).
Every school maintains about 2-4 ...
- 141
4
votes
2
answers
601
views
Websocket VPN and MitM Gateways
A number of solutions are available for tunnelling IP over
Websockets to masquerade a VPN as browser traffic. How well
are these connections isolated though? Specifically, if the
browser happens to ...
- 141
3
votes
1
answer
215
views
Difference between different proxy types
While using VPN handler apps I have come across terms such as
real host
dual real host
reverse proxy
These terms appear under the proxy type tab. What is the difference between them and what is ...
- 133
3
votes
0
answers
1k
views
How do i know when IPSEC Phase 2 Has completed with Openswan?
When I bring up a connection using openswan I get the following output but I don't see any ESP traffic through ports 50, 500 or 4500.
# ipsec auto --up globacom-vpn
104 "globacom-vpn" #44: ...
- 131
3
votes
0
answers
573
views
How do nested vpns through VM work?
Let's say I have 2 different VPN services (vpn1 and vpn2) both using OpenVPN and a Linux host running a guest VM.
Now let's suppose I connect from the Linux host to vpn1. Then I connect from the ...
- 31
3
votes
0
answers
599
views
Configure icefloor to prevent leaks when VPN connected
I am trying to configure the icefloor firewall on OS X 10.9 so as to make sure all traffic will go through VPN.
I recently notified that even with "Route all traffic through VPN" option in ...
- 650
2
votes
0
answers
177
views
Best way to avoid DPI/tunnel detection?
guys, I live in Russia and that pretty much says it all.
I was using a standard self-hosted VPN on a DO droplet, but now I'm afraid that since VPN usage in Russia started to spread like a wildfire ...
2
votes
0
answers
183
views
Split tunneling to speed up Windows update
We have almost 10 years worth of Win7 updates that need to be done and the amount of bandwith can't be handled by our VPN. Are the security risks of enabling split-tunnel a lot smaller when its just ...
- 21
2
votes
0
answers
131
views
Loosing internet connection while connected to specific VPN server?
I have noticed a strange behaviour earlier today on my VPN on a specific server.
When I run a trace route command while connected to VPN (on a specific countries server) my internet will not work for ...
- 21
2
votes
0
answers
177
views
Hacked Raspberry-pi server
My internet provider doesn't let me open my ports, it's an optional service, and even when they finally said over the phone that I was allowed to open the ports I was still not able to. So I was ...
- 21
2
votes
0
answers
2k
views
OpenVPN cipher mode of operation: CFB vs CFB1 vs CFB8
I'm trying to understand the possible settings for the cipher in OpenVPN and somehow rank them security wise.
Right now I'm stuck at differentiating the modes of operation CFB, CFB1 and CFB8. How do ...
- 255
2
votes
0
answers
685
views
DirectAccess and PCI DSS
Has anyone came across the situation if you disable TLS 1.0 to make the server PCI DSS compliance according the 3.1 specification DirectAccess breaks, it seems to only communicate with TLS 1.0 enabled....
- 21
2
votes
0
answers
192
views
Is a NAS vulnerable when VPN'd through dedicated server?
I'm concerned about the security of part of my home setup, but I'm quite unfamiliar with a lot of this so I thought I'd start out by saying what I'm trying to do, in case my solution is a poor one in ...
- 21
2
votes
0
answers
624
views
VPN Server + Anonymity + Adblock for mobile Devices
In order to improve private security and anonymity while browsing the web on my mobile devices I wanted to tunnel all traffic to my own server via VPN and use a proxy software to filter unwanted (...
- 121
1
vote
1
answer
55
views
Does opening an IPsec tunnel compromise the rest of my VPN?
Let's assume:
I allow all of my VPN users to connect to various internal services (VPN's IP is allow listed)
My VPN will be connected to a 3rd party network via IPSec Site-2-Site Tunnel. The purpose ...
- 163
1
vote
1
answer
78
views
Comparing two ways to access home network remotely
I go from location to location sometimes and I want to be able to access my resources from my home network like SMB shares or my ProxMox server. Obviously, since these services are on my LAN, I cannot ...
- 11
1
vote
0
answers
116
views
IPSec MTU DDos attack
I have this configuration:
HOST-A <---> GAT-A <---> MiTM <---> GAT-B <---> HOST-B
I'm doing a security project on MTU-IPsec vulnerabilities and following this guide of Hal-...
- 23
1
vote
2
answers
479
views
Is it possible for someone to location spoof (such as a VPN or other) to not be flagged when logging into personal accounts (for example Facebook)?
I just logged into my FB account from a different location as usual and received a message that my account was locked down due to that attempt from an unknown location. This spiked my curiosity, and I'...
1
vote
1
answer
675
views
SNORT rule for detecting/preventing unauthorized VPN or encrypted traffic
Here's my not so theoretical scenario: A day-one Trojan horse attack where the attacker sets up a secure connection back to himself using a well known trusted port, such as 80 21 443. Or for instance, ...
- 11
1
vote
0
answers
1k
views
Wireguard is blocked in Iran , what can I do?
Brief description :
I think Wireguard is blocked from special datacenters like Hetzner.
How can I bypass the government firewall?
Is there a way, for example, a plugin or something to mix it with ...
- 111
1
vote
0
answers
89
views
Security Best Practice - Monitoring a Site-to-Site VPN Tunnel
if a customer wants to monitor an IPSec-based site-to-site VPN and basically no incoming traffic is needed, would you recommend:
a) setting up a permanent tunnel that can be monitored all the time and ...
- 21
1
vote
0
answers
93
views
Plausible reason for a VPN to point to a country different to the one you are connected to?
I am using NordVPN, but I believe this applies to VPNs in general.
For some time now, I have been worried about the reliability of my VPN provider, especially because information that shows up when ...
- 111
1
vote
0
answers
81
views
Certificate for SSTP VPN server
I'm trying to set up an SSTP VPN on Windows Server 2019 Essentials (I was originally going to use L2TP/IPSec, but the company which manages our network infrastructure doesn't support it). I'm new to ...
1
vote
0
answers
155
views
When using VPN, why do LAN IPv6 Addresses disappear in router LAN status?
My DSL/WiFi router lists the IPv6 GU- and LL- Address for each connected device, alongside the device's MAC address. When a device uses VPN, these addresses disappear from the LAN status listing.
...
- 121
1
vote
1
answer
503
views
VirtualBox + VPN with Win10 Host - how secure is it?
I got a notebook running Windows 10 from my company which I am officially allowed to use privately. I have to travel a lot. I don't want to carry a second notebook.
Since the admins have access to ...
1
vote
0
answers
418
views
A VPN Server On Router Versus A Conventional Computer?
So we have an OpenVPN Server running on a Synology File Server. We have SSH into the Synology to have custom certificate keys and a password for two factor authentication.
This is working well, and ...
- 111
1
vote
0
answers
126
views
Reasonable security for RDP over VPN
An organisation I work with requires that employees be able to connect to machines on their network and log on to them from machines that are not on the network and not joined to the domain.
They ...
- 111
1
vote
0
answers
125
views
Does a mobile VPN provide anonymity when using apps?
When employing a system-wide VPN on a smartphone, I understand that all web traffic is routed through that VPN. Browsing to a webpage in incognito mode would provide some degree of anonymity, but I'm ...
- 713
1
vote
0
answers
251
views
Decrypt DTLS traffic when using the Cisco AnyConnect Client
I am using the Cisco AnyConnect Client 4.7 to connect to a VPN. I need to decrypt the traffic to examine the packets and understand how VPN works. I have read about providing the PSK to Wireshark, but ...
1
vote
0
answers
102
views
Is a VPN + Firewall + Authorization Redundant?
I am creating a simple application so a distributed team can access sensitive data. This application will have a database that will be inaccessible to the public internet inside a VPC with my cloud ...
- 111
1
vote
1
answer
221
views
What would running a VPN client over a VPN router actually do?
Just curious.. would it add any additional layer of security to use something like Private Tunnel VPN or another while connected to a VPN router? Or would it just be overkill and slow things down for ...
- 11
1
vote
0
answers
136
views
VPN as a temporary layer of security?
I have a startup working on Django app, that will be processing sensitive personal and financial information. We're just finalizing a prototype of the product (no paying clients, no investors), so we'...
- 11
1
vote
0
answers
199
views
How to check if "data packet head" is encrypted by VPN?
I found here:
Deep Packet Inspection (DPI) allows ISPs to identify the source of data via inference based on the data packet head. A good VPN will protect against this, so even the data packet head ...
- 11
1
vote
0
answers
98
views
Secure API access with mobile apps in restricted environments
In our current project, IT rules prohibit anything that is not PROD to be publicly accessible from the Internet. Access to development and review environments must be severely restricted. That said, ...
- 143
1
vote
0
answers
260
views
Weak ciphers in TLS VPN
We have a firewall out of our firm network and administrators connect to this firewall by VPN over TLS.
Scanning this firewall, the vulnerability scanner get us some warning as the 443 port allow weak ...
- 562
1
vote
1
answer
1k
views
How to sniff VPN traffic using Snort?
Here's what I want to do:
I want to use a VPN client on my PC (like TunnelBear).
Then I want to use Snort to sniff traffic before it's encrypted and after it's decrypted by VPN.
So basically I want ...
- 11
1
vote
0
answers
1k
views
OpenVPN use auth-user-pass with a file and authenticator
I have an open vpn configuration with the lines
auth-user-pass my-login-creds.conf
static-challenge "Enter Google Authenticator Code" 1
in it. When I try to connect with openvpn my-config.ovpn I ...
- 113
1
vote
0
answers
66
views
OpenVPN Invalid Logins lock with PAM
We are getting dinged on a federal audit because OpenVPN does not appear to support invalid login restrictions (i.e., only 3 before the account is locked).
Has anyone else experienced this? We are ...
- 41
1
vote
0
answers
307
views
What traffic should be present in a Wireshark Capture when using a VPN?
To start I am a full on novice at this so I am sure many on here can answer this simply. On my home network I am running a WRT router that is Flashed with Espress VPN, and the laptop I am running ...
- 11
1
vote
0
answers
2k
views
VPN connection through VPN connection using Virtual Machine
I read online that there is such thing as DoubleVPN what basically means
PC -> vpn1 -> vpn2 -> internet
However, its stated here:
https://www.bestvpn.com/privacy-news/chaining-vpn-servers-double-...
1
vote
0
answers
139
views
Why should I encrypt data at rest if the data sever is behind vpn?
If the server is behind a vpn anyway, wouldn't it be secure?
I'm looking at aws's encryption at rest feature, and trying to understand why I would use it. If someone manages to get through my vpn, ...
- 111
1
vote
0
answers
174
views
What is a KEA certificate and how it is used?
I'm currently studying IKE and IPsec in the context of VPN applications and I know that a X.509 certificate is used to provide server's public key to the client (and vice-versa in case of mutual ...
1
vote
0
answers
172
views
Regarding IKE and IPSEC SA
Can anyone explain why Phase 1 is bidirectional and Phase 2 is unidirectional in IPSEC VPN.
I read in one book that Phase 1 uses shared symmetric key generated by DH and both peers uses same key hence ...
- 41
1
vote
0
answers
95
views
What is Amazon's S3 template and can it be exploited?
I'm trying to make a vpn on CloudFormation following this guide. It's telling me to use the template given here. I'm not familar with what an S3 template does and whether if I should trust this guide ...
- 113
1
vote
0
answers
103
views
Are there vulnerabilities/advantages associated with a VPN service that uses only an account number, no password for authentication
The VPN service mullvad has an interesting (let's call it that) form of authentication, namely that all you receive is an account number, which you can pay for to receive a certain amount of time to ...
- 111
1
vote
0
answers
891
views
Self-signed Certificate not working under win 7, works on win 10
We're using self-created certificates for an SSTP VPN connection: A 'CA' certificate and, signed with it, customer specific certificates with the customers information: Address etc. However, there ...
- 11
1
vote
0
answers
422
views
Setup a meterpreter session trough a vpn
this is my first post here.
I was trying to start a meterpreter session from a mac to my kali Linux machine trough a vpn but it isn't working.
I downloaded openVPN config files from vpnbook.com and ...
- 111
1
vote
0
answers
366
views
Digest algorithm for the PRNG in OpenVPN
Considering the following OpenVPN (2.4) option from the manual:
--prng alg [nsl]
(Advanced) For PRNG (Pseudo-random number generator), use digest algorithm alg (default=sha1), and set nsl (default=16)...
- 255