Questions tagged [vpn]
This tag is applied to questions related to various VPN types such as PPTP or IPSec.
1,302
questions
1
vote
1
answer
115
views
How to know which IP address is used for my DNS queries on macOS?
I'm not an expert, only have basic knowledge about all this but I'd like to understand what's going on so please bear with me.
I'm currently using a VPN (IKEv2 protocol) on a macOS system and I can ...
1
vote
2
answers
498
views
How is Tor's exit node safe?
If I use Tor over VPN (User -> VPN -> Tor -> Destination), then VPN first encrypts my data and hides my original IP address, and then it goes to Tor's Entry Node. So that Tor's Entry Node can'...
- 33
0
votes
0
answers
140
views
Azure VPN through Wireguard VPN - 'Name Not Resolved'
I have setup a wireguard (WG) vpn server on a raspberry pi that connects to my home internet and I connect to this with my work laptop through a VPN router.
On my work laptop, I get access to several ...
0
votes
0
answers
84
views
Can we double encrypt VPN traffic with a custom certificate?
I want to forward VPN traffic to an Internal Proxy that uses client certificates to authenticate users. Can we add this second encryption at the VPN Configuration file for example? Or what is the best ...
0
votes
0
answers
219
views
Windows / OpenVPN "kill switch" via firewall
First, not sure if this is the appropriate site or if it would be better suited for a different one, but there isn't a networking or Windows one, so this appears to be the best place. And I'm posting ...
- 1
0
votes
1
answer
120
views
How compromised will I be by allowing location services while using a VM that is connected to a VPN?
I'm currently using a browser in my virtual machine. My host machine (laptop) is connected to a VPN. I've just been prompted by a website to allow location services in order to use the site. Would the ...
0
votes
1
answer
88
views
Trying to understand transport-mode IPSec and VPNs
Disclaimer: My understanding of the types of VPNs and IPSec is limited.
What I am struggling to understand is the fact that the IP header is not encrypted in transport-mode IPSec.
My understanding of ...
- 103
0
votes
1
answer
330
views
Risks of using custom DNS instead of my VPN DNS
If I use a custom DNS like NextDNS instead of my VPN service's DNS (NordVPN), where DNS queries go through the tunnel, will there be a privacy risk or some major disadvantages?
- 1
0
votes
1
answer
121
views
What information is sent through companies VPNs?
I'm currently working at home. My employer provides me a VPN access to the company resources: intranet, ssh access to computers, etc. I was wondering what exactly means to use a VPN, and what type of ...
- 101
0
votes
0
answers
22
views
MITM attack on public wi-fi and ISP wired connection [duplicate]
I know how MITM attacks work (theory/videos on the subject etc), but I am a bit confused and not sure what are the worst-case scenarios that can happen.
If I'm using a public VPN and someone is indeed ...
-1
votes
1
answer
247
views
Company VPN on personal PC
So the people at my new work set up a vpn on my personal pc today, windows style, so now when I go into network tab I can pick their company connection. What they don't know is that I have another ...
0
votes
0
answers
93
views
Will pulling firewall from router into separate device in front of the router increase security?
To secure a router available at a public static IP address from various vulnerabilities discovered and exploited from time to time (or other examples), would it help to separate its firewall and/or ...
- 115
1
vote
1
answer
459
views
Difference between tor over VPN and VPN over tor
I saw many posts here saying that tor over VPN is different from VPN over tor, and one is better than other, but I was unable to find any explanation over it. There were some speculations that you ...
- 13
0
votes
1
answer
145
views
Submitting password over untrusted VPN
Hi，I do not work in IT security and hence am asking some general questions here.
I read https://security.stackexchange.com/a/172821/266785 and have questions that would appreciate answers.
Is my ...
0
votes
1
answer
91
views
Can I use a VPN to access services only available to a specific network? [closed]
I am a member of a library which has access to online databases that I use for work. The databases can only be accessed when you are on library's WIFI network. If I try to use the same databases from ...
- 1
0
votes
2
answers
138
views
What data can a VPN provider get when analyzing HTTPS traffic without hacking?
What can VPN providers see without hacking when I access an email site (ex. mail.yahoo.com) with HTTPS via their service? Can they see only not critical data like source and destination IP's, ...
- 3
3
votes
2
answers
281
views
Can VPN steal ssh password?
Is it possible leak ssh password while using vpn ?
I mean not ssh key but password!
Is it secure to connect via ssh(with plain password) while using vpn (like protonVPN or NordVPN).
Thanks.
- 131
1
vote
1
answer
116
views
Switching location frequently on VPN
Correct me in my assumptions/understandings in any of the following.
A common tool to reduce fingerprinting when on the internet is browser/user agent spoofing. Now, I've read you don't really want to ...
- 13
0
votes
0
answers
108
views
VPN + GPS spoofing: better on Wifi or Mobile Data?
I have asked related questions here and here.
I would like to follow up with another related question: suppose I am running VPN + GPS spoofing to hide my phone location. Will third-party apps find it ...
user257646
-1
votes
1
answer
152
views
IP hiding attempts are detected [closed]
So I am using Tor and I try to log into a certain web site. It gives me a message saying that my IP address was used for spamming and does not let me log in. I think ok, probably the exit node is ...
- 99
2
votes
2
answers
412
views
Why do governments block services while they still can be used via VPN for example?
I can open any blocked service in the country I live in via Virtual Private Network (VPN) or proxy servers,so why do governments block services?
edit: I think governments do so to make it harder to ...
- 1,169
5
votes
1
answer
521
views
How do VPN kill switches in mobile apps actually work?
From my understanding, a VPN kill switch modifies routing to make sure that all traffic must be sent through the VPN's tunnel interface, and otherwise internet access is restricted. On desktop ...
- 99
2
votes
2
answers
557
views
What does VPN provide that HTTPS(TLS) does not?
We have cloud based digital platform at work and we have the ability to connect to our cloud based ERP system. The ERP provider has given 2 options to connect - 1) a connector which uses HTTPS or VPN.
...
- 631
1
vote
2
answers
265
views
Why do site operators block legal VPNs?
I use OpenWrt and by default all outgoing traffic is tunneled through Wireguard VPN endpoint (provider from the list of privacytools.io recommendations).
Often I get an "Access Denied" or ...
- 1,409
1
vote
2
answers
187
views
A 3rd party supplier is asking us to install their VPN client onto our corporate machines to enable access to their environment, is this a good idea?
As per the question what are the risks?
if we did go ahead with this and some of our users installed a supplier's VPN client on to our corporate machines, once the connection is establish can a threat ...
- 631
2
votes
3
answers
229
views
Does the use of Cisco AnyConnect Secure Mobility Client cause additional privacy and security risks over operating system VPN?
During the pandemic I work from home on my own devices via the employer’s VPN. I am aware of the usual privacy risks this represents for me.
My employer used to provide a Server Address, Account Name, ...
- 123
0
votes
1
answer
283
views
Will GPS spoofing + VPN on mobile hide location?
Suppose I turn on "developer" mode on my Android mobile phone and install a professional GPS spoofing app and a professional VPN app. Developer mode will allow the GPS spoofing app to ...
user257646
0
votes
1
answer
134
views
Should you set up firewall rules with a vpn?
I am using a vpn and trying different firewall rules to keep as secure as possible. But the VPN company itself tells me not to use a firewall. Does that seem reasonable?
They write:
"As we've ...
- 1
1
vote
2
answers
191
views
Can app / service provider konw when its user using (selfhost) VPN server?
Let's say I setup openVPN at home, then I go out.
I connect my ios with openVPN server at home, then I download Netflix app. then I turn off location and any necessary tracking feature on ios. I ...
- 11
0
votes
3
answers
1k
views
Nmap shows different results when connected to VPN [closed]
I am trying to determine why nmap would show different results when I am connected to a VPN service.
When I am connected to Nord VPN, it shows two additional ports which do not seem to be open.
No VPN
...
- 101
1
vote
1
answer
277
views
Will VPN on a mobile device hide location?
I have installed a VPN on my phone from a reputable VPN provider (paid VPN service, publicly rated as top 10 globally),
Can my phone location (longitude & latitude) still be traced by third-party ...
user257646
0
votes
0
answers
436
views
OpenVPN client suddenly refuses to connect to my self-hosted VPN
It's been working fine for years, but now suddenly I'm getting a strange error. Does anyone know what problem this points to?
OpenVPN Connect Version 3.0.2 (598), error logs:
[REDACTED IPs]
5/16/2021,...
- 121
0
votes
2
answers
94
views
Definition of what is log data in context of VPN
Does it make any sense that a VPN provider (in this case VyprVPN, but this does not matter I am asking how to understand privacy claims in general, and what is considered as "log" data) ...
- 230
0
votes
1
answer
1k
views
Can I hide my location whilst using mine and my company's VPN? [closed]
My laptop must be connected to my company's VPN (Global Protect) before I can be able to work at home. I try to connect my Express VPN at the same time to stop my company's VPN from "seeing"...
- 1
0
votes
1
answer
101
views
Any security value in limiting time of day for VPN?
A friend of mine who is a night owl mentioned she frequently has to stop working because her company's VPN shuts down at a certain time every night and comes back on in the morning. She was told this ...
- 253
1
vote
0
answers
116
views
IPSec MTU DDos attack
I have this configuration:
HOST-A <---> GAT-A <---> MiTM <---> GAT-B <---> HOST-B
I'm doing a security project on MTU-IPsec vulnerabilities and following this guide of Hal-...
- 23
0
votes
3
answers
155
views
Can a compromized browser know your ISP's IP even if using a VPN?
Let's say you use a reliable VPN like ProtonVPN to browse the Internet. In theory, can a compromized browser betray you? Does it has access to your ISP's IP?
As a bigger picture, if you want to upload ...
- 1
0
votes
1
answer
655
views
Are my DNS requests encrypted when I use VPN and DNS of Google or others?
When I use my ISP's DNS servers and I am connected via OpenVPN the DNS trafic will not bounce through the VPN tunnel.
When I use others' DNS servers will my DNS traffic bounce through the VPN ...
- 193
4
votes
2
answers
1k
views
Compression and Encryption against security issues
I'm having a hard time knowing whether the following setup is vulnerable to CRIME/BREACH type attacks (which target HTTPS).
I am running a Wireguard VPN that tunnels VXLAN protocol, using ChachaPoly20 ...
- 143
1
vote
1
answer
139
views
Can wifi network administrators see if you are using a proxy?
A friend of mine wants to use a Proxy on his home computer because his parents have blocked many games and social media services. My question is, if he is using a Proxy, will his parents be able to ...
- 11
17
votes
2
answers
3k
views
Can my ISP see which VPN protocol I am using?
I know that my ISP can detect when I am using a VPN, but can it see which protocol I am using?
- 171
0
votes
1
answer
122
views
Company VPN (tunnelblick), https, root CA and privacy
My company provided me with a MacBook for work. I was the one that took the laptop out of the sealed box and I was the one to set it up. I only had to install the tunnelblick VPN client and use the ...
1
vote
0
answers
154
views
You are in charge of the security of a very small company. What steps would you follow to achieve a good security level? [closed]
first of all, I would like to admit that I belong to the offensive side of security (Penetration Testing) and this is not my common area of expertise.
Last week I was thinking about how the market ...
- 550
-1
votes
1
answer
137
views
What stops a nation state starting a "VPN service" to view its customers' logs? [closed]
I was reading about whether you should trust a VPN any more than your ISP, and I see that some VPN providers claim they do not log users, when they do indeed log users: UFO VPN claims zero-logs policy,...
- 1,214
0
votes
0
answers
31
views
Will VPN help to restrict Meterpreter session? [duplicate]
I'm a victim of Meterpreter attack. I'm now using VPN in all the devices. My question is, will it help me to restrict meterpreter attack?
If not, what is the way out to get rid of meterpreter attack?
0
votes
1
answer
147
views
Could an OS or app store and send my old IP after I start using a VPN?
If I connect to a VPN, go to some websites, post something or browse something, is it possible for my OS (Windows 10) in this case to:
Store my IP before I connected to the VPN, say "old IP"...
- 101
1
vote
2
answers
481
views
Is it possible for someone to location spoof (such as a VPN or other) to not be flagged when logging into personal accounts (for example Facebook)?
I just logged into my FB account from a different location as usual and received a message that my account was locked down due to that attempt from an unknown location. This spiked my curiosity, and I'...
3
votes
1
answer
165
views
VPN doubt about "encrypting" an IP address
According to Kaspersky
Encryption of your IP address: The primary job of a VPN is to hide
your IP address from your ISP and other third parties. This allows you
to send and receive information online ...
- 41
0
votes
1
answer
139
views
Person tried to login in my website with non-existent username, but not a VPN nor Tor
I am managing a WordPress website.
I have installed the plugin "Limit Login Attempts Reloaded".
This plugin sent me an email saying that A.B.C.D has tried to login with the non-existent ...
- 485
0
votes
1
answer
122
views
VPN data encryption from VPN server to destination
When we connect to a VPN server, all data that we send and receive are in encrypted form. But when data is sent from the VPN server to the destination, is the data encrypted?
If not then any hacker ...
- 1