Questions tagged [vpn]

This tag is applied to questions related to various VPN types such as PPTP or IPSec.

Filter by
Sorted by
Tagged with
1 vote
1 answer
675 views

SNORT rule for detecting/preventing unauthorized VPN or encrypted traffic

Here's my not so theoretical scenario: A day-one Trojan horse attack where the attacker sets up a secure connection back to himself using a well known trusted port, such as 80 21 443. Or for instance, ...
user avatar
2 votes
2 answers
873 views

Is it safe to set up your firewall to allow localhost to accept incoming connections?

I have set up a VPN client and I'm using iptables to block all connections not tunneled through the VPN. An example of the iptables rules I am using can be found here. Unfortunately with this ...
user avatar
1 vote
1 answer
163 views

Am I exposed to WebRTC leaks if my IP resulting from WebRTC is the IP of my VPN server with the last digit augmented by one?

I am connecting to the website of ExpressVPN that checks for WebRTC IP leaks. My IP as resulting from that website is the same IP of the VPN server I am connected to but with the last digit augmented ...
user avatar
2 votes
0 answers
22 views

Setting up VPN tunnel: what are the possible ways by which my true IP address could leak? [duplicate]

I bought a subscription to a VPN service and I set up the VPN tunnel using openvpn. In order to avoid DNS leaks, I am using the DNS servers provided by my VPN provider by manually enforcing /etc/...
user avatar
1 vote
2 answers
773 views

Using iptables to set up a killswitch for openvpn: DNS requests are blocked but they shouldn't

I bought a subscription to a VPN service and I am using the openvpn 2.5.1 client to connect to it. I am using Ubuntu 20.10. I now want to emulate the "kill switch" feature of most ...
user avatar
1 vote
1 answer
332 views

Does Windscribe VPN keep logs even when disconnected?

I am using (have installed) this VPN on an Android Smart TV. Does Windscribe (or generally any VPN service) keep traffic logs even when they are disconnected? (Disconnected here means when the 'power-...
user avatar
  • 121
0 votes
1 answer
143 views

Is IPsec VPN still necessary when already using HTTPS protocol? [duplicate]

There are 2 sets of API each hosted in 2 different organisations: my client's organisation and her partner's organisation. The servers from the 2 organisations communicate between each other through ...
user avatar
  • 355
0 votes
0 answers
122 views

How can I forcibly block all the Internet traffic that doesn't go through a VPN to prevent accidental IP leak?

I need to block all the Internet connections that don't go through a VPN server before they even get the chance to happen. How can I achieve this on Mac OS Big Sur? Mac OS doesn't seem to have any ...
user avatar
0 votes
1 answer
232 views

public MySQL via XAMPP - security - whitelisting IP's versus VPN

I'm working on app that uses MySQL database on XAMPP Control Panel on Windows. I am concerned about security part. I received advice about connecting to MySQL through VPN so it won't be accessible so ...
user avatar
0 votes
1 answer
78 views

Client VPN, inside a corp network

We have a set of people who need to do a proof of concept for 9 weeks. To do that, they need to VPN to a well known IT company environment. However, they want to be able to install the IT company's ...
user avatar
1 vote
0 answers
224 views

Virustotal alerts for Surfshark VPN [closed]

Virustotal is giving some alerts for the Windows installation of Surfshark VPN. I am sure they are false positives, I just wanted to hear what other users say about this...
user avatar
  • 11
0 votes
1 answer
89 views

Considering the open ports, is it more insecure to use Outline then buying a VPN from a provider? [closed]

OS: Lubuntu When using Outline Manager from Alphabet, it asks to allow incoming TCP connections on ports ranging from 1024 to 65535. Could this be a security flow, more exploitable, than buying a VPN ...
user avatar
  • 103
1 vote
4 answers
269 views

Is there any good security reason to add a VPN tunnel to encapsulate an existing HTTPS traffic between an IoT device and a web server?

The company X is selling its home made IoT device. Each IoT device is only communicating over Internet with a web server of the X company, using HTTPS (with state-of-the art configuration : latest TLS ...
user avatar
  • 123
2 votes
1 answer
147 views

How to prevent mobile data from being viewed when leaving VPN server?

Please correct me if i'm wrong. As far as i know, when we use vpn service, our datas are only encrypted from us to vpn server. After leaving the server to intended recipient, our data is decrypted and ...
user avatar
0 votes
2 answers
304 views

Staying anonymous vs a Five Eyes adversary?

If you were in a Five Eyes country and you wanted to contact someone else anonymously, without this person or the government finding out who you are or your location, how would you do it? The person ...
user avatar
1 vote
1 answer
579 views

How to send emails with Thunderbird without revealing my internal and external IP address?

I have noticed this issue while using Google's Gmail with Thunderbird. When I send an email from Gmail's web front end at https://mail.google.com/ my internal and external IP address are not included ...
user avatar
  • 31
1 vote
1 answer
201 views

Protect IP Address and location from Twitter

Is there a way to protect IP Address and location from Twitter after having logged in ? All I want Twitter to know is my email and password and nothing else. No IP Address, no location. Is that ...
user avatar
  • 11
0 votes
0 answers
98 views

Can a host be accessed when using a VM on a network?

If I use a VM on a laptop which is connected to a work or public wifi, can the host machine be accessed by anyone also connected to wifi? I'm thinking along the lines of if I were to use my laptop on ...
user avatar
  • 111
0 votes
2 answers
248 views

Hiding client IP from a VPN server

VPNs can often be useful for obscuring personably identifying information (IP, geolocation, etc.) from remote destination servers. Traffic is routed through a VPN server and forwarded to the ...
user avatar
  • 1,639
0 votes
1 answer
106 views

Attacking VPN server's outgoing connections

Due to increasing concerns about privacy online I recently started researching technologies that are supposed to hide our activities from unwanted watchers. I've been learning about workings of VPN ...
user avatar
1 vote
2 answers
790 views

What does using a VPN offers over HTTPS + DoH in terms of protection?

What are the security risks that someone using HTTPS (everywhere) + DoH is vulnerable to, comparing to someone using a "trusted" VPN?
user avatar
0 votes
0 answers
83 views

What are reasonable level of security for a interal-use organization application hosted on the cloud?

I'm working on an small web application (Flask). The application is only for distributed internal usage, e.g. only users with credentials created by the organization will have access to the services ...
user avatar
  • 103
2 votes
1 answer
162 views

What are the threat models that using a VPN for mobile data can mitigate?

Some VPN providers offer to encrypt mobile data. This goes beyond the typical Wifi hotspot mitigation paradigm. So what exactly are the benefits of VPN over mobile data? What threat models can this ...
user avatar
  • 23
1 vote
0 answers
157 views

Seeking Advice/Guidance on configuring VPN to Ubiquiti USG behind Cisco Meraki [closed]

Abstract: Access the USG network via VPN, through a Meraki MX84. Summary: I am currently working on setting up some new hardware and re-configuring a network that I am responsible for. The objective ...
user avatar
  • 33
0 votes
2 answers
207 views

If i connect to a VPN server using cicso anyconnect or PPTP protocol which has invalid certificate, can they sniff my HTTPS data?

Lets say i have connected to a VPN server using Linux with the help of Cisco anyconnect protocol or PPTP protocol. now when i try to connect to it, it says : The certificate may be invalid or ...
user avatar
0 votes
0 answers
203 views

Why does my IP being leaked with system-wide proxy through webTRC, but it doesn't happen when I use system-wide VPN

WebRTC manages to leak my IP when I use proxy, but when I use VPN it only shows VPN server's IP (both proxy and VPN were system-wide). What's the key difference? Google Chrome was used in both tests (...
user avatar
0 votes
1 answer
177 views

expose home applications to the internet

I have some web applications (for example jupyter notebook) running on my home pc (ubuntu) that sometimes I would like to access remotely. What would be an efficient and safe method to do it? I don't ...
user avatar
  • 159
0 votes
2 answers
103 views

Securely Connect Employee PC to Business Private Network

I've recently become the "tech guy" at a startup, and am tasked with standardizing our hardware infrastructure. Further more, I choose how employees working from home will connect to ...
user avatar
0 votes
1 answer
116 views

Does HTTPS mean that packets can't be read by intermediaries (like listeners at a VPN node, for instance)? [duplicate]

Say I'm using a VPN to talk with a server, and Bob is eavesdropping for packets at the VPN. Basically a special kind of man-in-the-middle attack. If I'm using HTTPS, how clever would Bob have to be to ...
user avatar
  • 101
0 votes
1 answer
243 views

Mixing VPN Protocols

Is there any benefit to mixing vpn protocols as far as obfuscating your traffic. Would a multiple hop setup like (openvpn(server1) + wireguard(server2)) be better or is (openvpn(server1) + openvpn(...
user avatar
4 votes
2 answers
597 views

Privacy implications of static IP addresses (for home connections)

All the other questions I have seen here focus on the security implications of IP addresses. I'm interested about the privacy implications. In my opinion, static IP addresses for home connections (...
user avatar
  • 15.4k
0 votes
0 answers
139 views

Routing a site-to-site VPN through my regular VPN service

currently engaged in live competitive red vs blue team exercises in an enterprise style Windows AD environment. My device runs a modern Debian Linux OS. cscotun0 We typically connect to the lab/domain ...
user avatar
  • 1,639
0 votes
1 answer
101 views

VPN access real location issue [duplicate]

I'm using a VPN which works fine, unless when on Firefox a website asks if they can access my location and I click 'Yes' then it reveals my real location. How is that possible? Is there any way to ...
user avatar
0 votes
1 answer
157 views

How can I access a website without it being able to identify me as a previous visitor?

Phone is rooted Basically I want to be able to access a website without it being able to determine any of the things it dermined about me (my device, ip address etc) when I accessed it last, no matter ...
user avatar
  • 101
1 vote
2 answers
142 views

Does it make senss for a company to have a VPN, if all its infrastructure is in the cloud?

If all the applications, virtual machines and services we use at our company are hosted in different clouds and assuming all these services are accessed through encrypted layers (https/TLS/ssl ...). ...
user avatar
  • 149
15 votes
2 answers
5k views

HTTPS vs VPN - which is more secure

I understand that end-to-end VPNs (such as SurfShark and NordVPN) hide the domains I visit whereas HTTPS does not However, are they any attacks that an HTTPS website would be subject to, that could be ...
user avatar
  • 809
3 votes
2 answers
316 views

How is my school blocking new Internet traffic after midnight?

My school supposedly cuts everyone's connection at exactly 12:00am. Although the network is still there, Windows shows the "no internet" sign when connecting to the network. However, the ...
user avatar
  • 469
0 votes
1 answer
524 views

Hiding ip address when using coinomi wallet

How do I hide my ip address if I use a wallet as coinomi? Do I have to use Orbot? If yes, what exactly should I do? (I'm using it from an android) I just want to have privacy when I log into the ...
user avatar
0 votes
0 answers
132 views

How to prevent my ISP from seeing what sites I visit without a VPN

I use opera browser, and while the built-in VPN has been working relatively well it's been preventing me from joining discord voice calls and using omegle. Is there a way to hide my activity from my ...
user avatar
2 votes
1 answer
510 views

Attack scenario when using split tunnel VPN

Background As many others I am working from home and we use a VPN to access services from the company intranet (SMB fileshares, git repo, project management etc). To improve things like video calls I ...
user avatar
  • 121
0 votes
0 answers
71 views

Most secure way to authenticate VPN via script for connection from remote server to home network?

What is the most secure way to automatically connect my remote server via OpenVPN to my home network for running a script? The plan is I want to automatically backup some folders to my Synology NAS at ...
user avatar
  • 11
0 votes
1 answer
230 views

MAC address of router changes when i connect to VPN

If I connect to my VPN and then run arp -a the MAC address of my router changes to 00:00:00:00:00:02. Is this normal behaviour? What is the reasoning behind this? Furthermore a MAC address spoofing is ...
user avatar
  • 15
1 vote
0 answers
106 views

Identify user with a VPN connection within the network [closed]

I know of a user within my network who initiated a VPN connection within my network. What are ways I'll be able to find out the identity of user, searching port numbers? specific protocol established? ...
user avatar
  • 11
0 votes
0 answers
22 views

Found out that a paid VPN service emails plaintext passwords [duplicate]

I recently found out that a VPN service does not hash their customer passwords and I need professional insight on how to deal with this. Here's how I found out: Bought a subscription on the wrong ...
user avatar
1 vote
0 answers
1k views

Wireguard is blocked in Iran , what can I do?

Brief description : I think Wireguard is blocked from special datacenters like Hetzner. How can I bypass the government firewall? Is there a way, for example, a plugin or something to mix it with ...
user avatar
  • 111
0 votes
1 answer
111 views

Resume VPN after hibernation (sleeping mode) vs real IP detection

Imagine I am using VPN service app on my PC and I am logged into a website. Then the PC enters sleep mode. Disconnection sequence of sleep mode I suppose: first browser, second VPN. And for re-start ...
user avatar
0 votes
1 answer
114 views

How can I see ISAKMP packets via Wireshark on a client computer?

I am trying to learn more about the IPSec and VPN. I am using TunnelBear on Firefox. When I start VPN service, I only see TLS connections on Wireshark but not the ISAKMP or other IPSec related packets....
user avatar
  • 3
1 vote
1 answer
96 views

Direct VPN access to DBs - government guidelines (DBAs at home COVID)

We have DBAs who want to access SQL DBs over DirectAccess (DA). The ask is to open port TCP 1530 over DA. At the moment, we have 6,000 people using DA, we can't filter on a specific group of DBAs. ...
user avatar
  • 71
0 votes
2 answers
226 views

Can I trust opera browser free VPN?

When traffic leaves the VPN, the operator of the VPN server can see the websites I'm accessing. Opera browser has a free VPN. Can I trust this VPN? https://www.opera.com/features/free-vpn
user avatar
  • 401
0 votes
1 answer
96 views

Risks with setting up a authentication-less public VPN

I'm in the process of setting up an authentication-less public VPN. To prevent against DoS attacks, I'm going to set up some sort of IP address based rate limiting. The VPN is port-bound, i.e., it ...
user avatar

1 2
3
4 5
27