Questions tagged [vpn]

This tag is applied to questions related to various VPN types such as PPTP or IPSec.

126 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
4 votes
1 answer
1k views

OpenVPN Key Size 1024 vs 2048 and Eavesdrop vs Access?

OpenVPN recommends using a 2048 RSA key size for greater security, however, the hardware I'm using is somewhat weak and defaults to using a 1024 RSA key size. I'm trying to determine if it's worth ...
user avatar
4 votes
0 answers
433 views

Some http requests are not send encrypted by vpn! Why?

I subscribed to a VPN service recently, and installed wireshark to take a look at the traffic sent from my computer. Practically all of it goes through UDP protocol, encrypted. But there are two HTTP ...
user avatar
4 votes
0 answers
117 views

What's The Easiest Way To Maintain Remote Users Access to a Webapp

Here is a real world case: A chain of high schools (several hundreds) has many websites (~ 3x number of Schools) that are content driven by users (the students). Every school maintains about 2-4 ...
user avatar
4 votes
2 answers
601 views

Websocket VPN and MitM Gateways

A number of solutions are available for tunnelling IP over Websockets to masquerade a VPN as browser traffic. How well are these connections isolated though? Specifically, if the browser happens to ...
user avatar
  • 141
3 votes
1 answer
215 views

Difference between different proxy types

While using VPN handler apps I have come across terms such as real host dual real host reverse proxy These terms appear under the proxy type tab. What is the difference between them and what is ...
user avatar
  • 133
3 votes
0 answers
1k views

How do i know when IPSEC Phase 2 Has completed with Openswan?

When I bring up a connection using openswan I get the following output but I don't see any ESP traffic through ports 50, 500 or 4500. # ipsec auto --up globacom-vpn 104 "globacom-vpn" #44: ...
user avatar
3 votes
0 answers
573 views

How do nested vpns through VM work?

Let's say I have 2 different VPN services (vpn1 and vpn2) both using OpenVPN and a Linux host running a guest VM. Now let's suppose I connect from the Linux host to vpn1. Then I connect from the ...
user avatar
3 votes
0 answers
599 views

Configure icefloor to prevent leaks when VPN connected

I am trying to configure the icefloor firewall on OS X 10.9 so as to make sure all traffic will go through VPN. I recently notified that even with "Route all traffic through VPN" option in ...
user avatar
  • 650
2 votes
0 answers
177 views

Best way to avoid DPI/tunnel detection?

guys, I live in Russia and that pretty much says it all. I was using a standard self-hosted VPN on a DO droplet, but now I'm afraid that since VPN usage in Russia started to spread like a wildfire ...
user avatar
2 votes
0 answers
183 views

Split tunneling to speed up Windows update

We have almost 10 years worth of Win7 updates that need to be done and the amount of bandwith can't be handled by our VPN. Are the security risks of enabling split-tunnel a lot smaller when its just ...
user avatar
  • 21
2 votes
0 answers
131 views

Loosing internet connection while connected to specific VPN server?

I have noticed a strange behaviour earlier today on my VPN on a specific server. When I run a trace route command while connected to VPN (on a specific countries server) my internet will not work for ...
user avatar
  • 21
2 votes
0 answers
177 views

Hacked Raspberry-pi server

My internet provider doesn't let me open my ports, it's an optional service, and even when they finally said over the phone that I was allowed to open the ports I was still not able to. So I was ...
user avatar
2 votes
0 answers
2k views

OpenVPN cipher mode of operation: CFB vs CFB1 vs CFB8

I'm trying to understand the possible settings for the cipher in OpenVPN and somehow rank them security wise. Right now I'm stuck at differentiating the modes of operation CFB, CFB1 and CFB8. How do ...
user avatar
2 votes
0 answers
685 views

DirectAccess and PCI DSS

Has anyone came across the situation if you disable TLS 1.0 to make the server PCI DSS compliance according the 3.1 specification DirectAccess breaks, it seems to only communicate with TLS 1.0 enabled....
user avatar
2 votes
0 answers
192 views

Is a NAS vulnerable when VPN'd through dedicated server?

I'm concerned about the security of part of my home setup, but I'm quite unfamiliar with a lot of this so I thought I'd start out by saying what I'm trying to do, in case my solution is a poor one in ...
user avatar
  • 21
2 votes
0 answers
624 views

VPN Server + Anonymity + Adblock for mobile Devices

In order to improve private security and anonymity while browsing the web on my mobile devices I wanted to tunnel all traffic to my own server via VPN and use a proxy software to filter unwanted (...
user avatar
  • 121
1 vote
1 answer
55 views

Does opening an IPsec tunnel compromise the rest of my VPN?

Let's assume: I allow all of my VPN users to connect to various internal services (VPN's IP is allow listed) My VPN will be connected to a 3rd party network via IPSec Site-2-Site Tunnel. The purpose ...
user avatar
1 vote
1 answer
78 views

Comparing two ways to access home network remotely

I go from location to location sometimes and I want to be able to access my resources from my home network like SMB shares or my ProxMox server. Obviously, since these services are on my LAN, I cannot ...
user avatar
1 vote
0 answers
116 views

IPSec MTU DDos attack

I have this configuration: HOST-A <---> GAT-A <---> MiTM <---> GAT-B <---> HOST-B I'm doing a security project on MTU-IPsec vulnerabilities and following this guide of Hal-...
user avatar
  • 23
1 vote
2 answers
479 views

Is it possible for someone to location spoof (such as a VPN or other) to not be flagged when logging into personal accounts (for example Facebook)?

I just logged into my FB account from a different location as usual and received a message that my account was locked down due to that attempt from an unknown location. This spiked my curiosity, and I'...
user avatar
1 vote
1 answer
675 views

SNORT rule for detecting/preventing unauthorized VPN or encrypted traffic

Here's my not so theoretical scenario: A day-one Trojan horse attack where the attacker sets up a secure connection back to himself using a well known trusted port, such as 80 21 443. Or for instance, ...
user avatar
1 vote
0 answers
1k views

Wireguard is blocked in Iran , what can I do?

Brief description : I think Wireguard is blocked from special datacenters like Hetzner. How can I bypass the government firewall? Is there a way, for example, a plugin or something to mix it with ...
user avatar
  • 111
1 vote
0 answers
89 views

Security Best Practice - Monitoring a Site-to-Site VPN Tunnel

if a customer wants to monitor an IPSec-based site-to-site VPN and basically no incoming traffic is needed, would you recommend: a) setting up a permanent tunnel that can be monitored all the time and ...
user avatar
1 vote
0 answers
93 views

Plausible reason for a VPN to point to a country different to the one you are connected to?

I am using NordVPN, but I believe this applies to VPNs in general. For some time now, I have been worried about the reliability of my VPN provider, especially because information that shows up when ...
user avatar
1 vote
0 answers
81 views

Certificate for SSTP VPN server

I'm trying to set up an SSTP VPN on Windows Server 2019 Essentials (I was originally going to use L2TP/IPSec, but the company which manages our network infrastructure doesn't support it). I'm new to ...
user avatar
1 vote
0 answers
155 views

When using VPN, why do LAN IPv6 Addresses disappear in router LAN status?

My DSL/WiFi router lists the IPv6 GU- and LL- Address for each connected device, alongside the device's MAC address. When a device uses VPN, these addresses disappear from the LAN status listing. ...
user avatar
  • 121
1 vote
1 answer
503 views

VirtualBox + VPN with Win10 Host - how secure is it?

I got a notebook running Windows 10 from my company which I am officially allowed to use privately. I have to travel a lot. I don't want to carry a second notebook. Since the admins have access to ...
user avatar
1 vote
0 answers
418 views

A VPN Server On Router Versus A Conventional Computer?

So we have an OpenVPN Server running on a Synology File Server. We have SSH into the Synology to have custom certificate keys and a password for two factor authentication. This is working well, and ...
user avatar
1 vote
0 answers
126 views

Reasonable security for RDP over VPN

An organisation I work with requires that employees be able to connect to machines on their network and log on to them from machines that are not on the network and not joined to the domain. They ...
user avatar
  • 111
1 vote
0 answers
125 views

Does a mobile VPN provide anonymity when using apps?

When employing a system-wide VPN on a smartphone, I understand that all web traffic is routed through that VPN. Browsing to a webpage in incognito mode would provide some degree of anonymity, but I'm ...
user avatar
  • 713
1 vote
0 answers
251 views

Decrypt DTLS traffic when using the Cisco AnyConnect Client

I am using the Cisco AnyConnect Client 4.7 to connect to a VPN. I need to decrypt the traffic to examine the packets and understand how VPN works. I have read about providing the PSK to Wireshark, but ...
user avatar
1 vote
0 answers
102 views

Is a VPN + Firewall + Authorization Redundant?

I am creating a simple application so a distributed team can access sensitive data. This application will have a database that will be inaccessible to the public internet inside a VPC with my cloud ...
user avatar
1 vote
1 answer
221 views

What would running a VPN client over a VPN router actually do?

Just curious.. would it add any additional layer of security to use something like Private Tunnel VPN or another while connected to a VPN router? Or would it just be overkill and slow things down for ...
user avatar
  • 11
1 vote
0 answers
136 views

VPN as a temporary layer of security?

I have a startup working on Django app, that will be processing sensitive personal and financial information. We're just finalizing a prototype of the product (no paying clients, no investors), so we'...
user avatar
  • 11
1 vote
0 answers
199 views

How to check if "data packet head" is encrypted by VPN?

I found here: Deep Packet Inspection (DPI) allows ISPs to identify the source of data via inference based on the data packet head. A good VPN will protect against this, so even the data packet head ...
user avatar
1 vote
0 answers
98 views

Secure API access with mobile apps in restricted environments

In our current project, IT rules prohibit anything that is not PROD to be publicly accessible from the Internet. Access to development and review environments must be severely restricted. That said, ...
user avatar
1 vote
0 answers
260 views

Weak ciphers in TLS VPN

We have a firewall out of our firm network and administrators connect to this firewall by VPN over TLS. Scanning this firewall, the vulnerability scanner get us some warning as the 443 port allow weak ...
user avatar
1 vote
1 answer
1k views

How to sniff VPN traffic using Snort?

Here's what I want to do: I want to use a VPN client on my PC (like TunnelBear). Then I want to use Snort to sniff traffic before it's encrypted and after it's decrypted by VPN. So basically I want ...
user avatar
  • 11
1 vote
0 answers
1k views

OpenVPN use auth-user-pass with a file and authenticator

I have an open vpn configuration with the lines auth-user-pass my-login-creds.conf static-challenge "Enter Google Authenticator Code" 1 in it. When I try to connect with openvpn my-config.ovpn I ...
user avatar
  • 113
1 vote
0 answers
66 views

OpenVPN Invalid Logins lock with PAM

We are getting dinged on a federal audit because OpenVPN does not appear to support invalid login restrictions (i.e., only 3 before the account is locked). Has anyone else experienced this? We are ...
user avatar
  • 41
1 vote
0 answers
307 views

What traffic should be present in a Wireshark Capture when using a VPN?

To start I am a full on novice at this so I am sure many on here can answer this simply. On my home network I am running a WRT router that is Flashed with Espress VPN, and the laptop I am running ...
user avatar
1 vote
0 answers
2k views

VPN connection through VPN connection using Virtual Machine

I read online that there is such thing as DoubleVPN what basically means PC -> vpn1 -> vpn2 -> internet However, its stated here: https://www.bestvpn.com/privacy-news/chaining-vpn-servers-double-...
user avatar
1 vote
0 answers
139 views

Why should I encrypt data at rest if the data sever is behind vpn?

If the server is behind a vpn anyway, wouldn't it be secure? I'm looking at aws's encryption at rest feature, and trying to understand why I would use it. If someone manages to get through my vpn, ...
user avatar
  • 111
1 vote
0 answers
174 views

What is a KEA certificate and how it is used?

I'm currently studying IKE and IPsec in the context of VPN applications and I know that a X.509 certificate is used to provide server's public key to the client (and vice-versa in case of mutual ...
user avatar
1 vote
0 answers
172 views

Regarding IKE and IPSEC SA

Can anyone explain why Phase 1 is bidirectional and Phase 2 is unidirectional in IPSEC VPN. I read in one book that Phase 1 uses shared symmetric key generated by DH and both peers uses same key hence ...
user avatar
1 vote
0 answers
95 views

What is Amazon's S3 template and can it be exploited?

I'm trying to make a vpn on CloudFormation following this guide. It's telling me to use the template given here. I'm not familar with what an S3 template does and whether if I should trust this guide ...
user avatar
  • 113
1 vote
0 answers
103 views

Are there vulnerabilities/advantages associated with a VPN service that uses only an account number, no password for authentication

The VPN service mullvad has an interesting (let's call it that) form of authentication, namely that all you receive is an account number, which you can pay for to receive a certain amount of time to ...
user avatar
  • 111
1 vote
0 answers
891 views

Self-signed Certificate not working under win 7, works on win 10

We're using self-created certificates for an SSTP VPN connection: A 'CA' certificate and, signed with it, customer specific certificates with the customers information: Address etc. However, there ...
user avatar
  • 11
1 vote
0 answers
422 views

Setup a meterpreter session trough a vpn

this is my first post here. I was trying to start a meterpreter session from a mac to my kali Linux machine trough a vpn but it isn't working. I downloaded openVPN config files from vpnbook.com and ...
user avatar
  • 111
1 vote
0 answers
366 views

Digest algorithm for the PRNG in OpenVPN

Considering the following OpenVPN (2.4) option from the manual: --prng alg [nsl] (Advanced) For PRNG (Pseudo-random number generator), use digest algorithm alg (default=sha1), and set nsl (default=16)...
user avatar