Questions tagged [vpn]
This tag is applied to questions related to various VPN types such as PPTP or IPSec.
1,301
questions
1
vote
1
answer
675
views
SNORT rule for detecting/preventing unauthorized VPN or encrypted traffic
Here's my not so theoretical scenario: A day-one Trojan horse attack where the attacker sets up a secure connection back to himself using a well known trusted port, such as 80 21 443. Or for instance, ...
- 11
2
votes
2
answers
873
views
Is it safe to set up your firewall to allow localhost to accept incoming connections?
I have set up a VPN client and I'm using iptables to block all connections not tunneled through the VPN. An example of the iptables rules I am using can be found here.
Unfortunately with this ...
- 485
1
vote
1
answer
163
views
Am I exposed to WebRTC leaks if my IP resulting from WebRTC is the IP of my VPN server with the last digit augmented by one?
I am connecting to the website of ExpressVPN that checks for WebRTC IP leaks.
My IP as resulting from that website is the same IP of the VPN server I am connected to but with the last digit augmented ...
- 485
2
votes
0
answers
22
views
Setting up VPN tunnel: what are the possible ways by which my true IP address could leak? [duplicate]
I bought a subscription to a VPN service and I set up the VPN tunnel using openvpn.
In order to avoid DNS leaks, I am using the DNS servers provided by my VPN provider by manually enforcing /etc/...
- 485
1
vote
2
answers
773
views
Using iptables to set up a killswitch for openvpn: DNS requests are blocked but they shouldn't
I bought a subscription to a VPN service and I am using the openvpn 2.5.1 client to connect to it. I am using Ubuntu 20.10.
I now want to emulate the "kill switch" feature of most ...
- 485
1
vote
1
answer
332
views
Does Windscribe VPN keep logs even when disconnected?
I am using (have installed) this VPN on an Android Smart TV.
Does Windscribe (or generally any VPN service) keep traffic logs even when they are disconnected? (Disconnected here means when the 'power-...
- 121
0
votes
1
answer
143
views
Is IPsec VPN still necessary when already using HTTPS protocol? [duplicate]
There are 2 sets of API each hosted in 2 different organisations: my client's organisation and her partner's organisation. The servers from the 2 organisations communicate between each other through ...
- 355
0
votes
0
answers
122
views
How can I forcibly block all the Internet traffic that doesn't go through a VPN to prevent accidental IP leak?
I need to block all the Internet connections that don't go through a VPN server before they even get the chance to happen. How can I achieve this on Mac OS Big Sur? Mac OS doesn't seem to have any ...
0
votes
1
answer
232
views
public MySQL via XAMPP - security - whitelisting IP's versus VPN
I'm working on app that uses MySQL database on XAMPP Control Panel on Windows.
I am concerned about security part.
I received advice about connecting to MySQL through VPN so it won't be accessible so ...
0
votes
1
answer
78
views
Client VPN, inside a corp network
We have a set of people who need to do a proof of concept for 9 weeks. To do that, they need to VPN to a well known IT company environment.
However, they want to be able to install the IT company's ...
1
vote
0
answers
224
views
Virustotal alerts for Surfshark VPN [closed]
Virustotal is giving some alerts for the Windows installation of Surfshark VPN. I am sure they are false positives, I just wanted to hear what other users say about this...
- 11
0
votes
1
answer
89
views
Considering the open ports, is it more insecure to use Outline then buying a VPN from a provider? [closed]
OS: Lubuntu When using Outline Manager from Alphabet, it asks to allow incoming TCP connections on ports ranging from 1024 to 65535. Could this be a security flow, more exploitable, than buying a VPN ...
- 103
1
vote
4
answers
269
views
Is there any good security reason to add a VPN tunnel to encapsulate an existing HTTPS traffic between an IoT device and a web server?
The company X is selling its home made IoT device.
Each IoT device is only communicating over Internet with a web server of the X company, using HTTPS (with state-of-the art configuration : latest TLS ...
- 123
2
votes
1
answer
147
views
How to prevent mobile data from being viewed when leaving VPN server?
Please correct me if i'm wrong. As far as i know, when we use vpn service, our datas are only encrypted from us to vpn server. After leaving the server to intended recipient, our data is decrypted and ...
- 21
0
votes
2
answers
304
views
Staying anonymous vs a Five Eyes adversary?
If you were in a Five Eyes country and you wanted to contact someone else anonymously, without this person or the government finding out who you are or your location, how would you do it?
The person ...
1
vote
1
answer
579
views
How to send emails with Thunderbird without revealing my internal and external IP address?
I have noticed this issue while using Google's Gmail with Thunderbird. When I send an email from Gmail's web front end at https://mail.google.com/ my internal and external IP address are not included ...
- 31
1
vote
1
answer
201
views
Protect IP Address and location from Twitter
Is there a way to protect IP Address and location from Twitter after having logged in ? All I want Twitter to know is my email and password and nothing else. No IP Address, no location. Is that ...
- 11
0
votes
0
answers
98
views
Can a host be accessed when using a VM on a network?
If I use a VM on a laptop which is connected to a work or public wifi, can the host machine be accessed by anyone also connected to wifi?
I'm thinking along the lines of if I were to use my laptop on ...
- 111
0
votes
2
answers
248
views
Hiding client IP from a VPN server
VPNs can often be useful for obscuring personably identifying information (IP, geolocation, etc.) from remote destination servers.
Traffic is routed through a VPN server and forwarded to the ...
- 1,639
0
votes
1
answer
106
views
Attacking VPN server's outgoing connections
Due to increasing concerns about privacy online I recently started researching technologies that are supposed to hide our activities from unwanted watchers.
I've been learning about workings of VPN ...
1
vote
2
answers
790
views
What does using a VPN offers over HTTPS + DoH in terms of protection?
What are the security risks that someone using HTTPS (everywhere) + DoH is vulnerable to, comparing to someone using a "trusted" VPN?
0
votes
0
answers
83
views
What are reasonable level of security for a interal-use organization application hosted on the cloud?
I'm working on an small web application (Flask). The application is only for distributed internal usage, e.g. only users with credentials created by the organization will have access to the services ...
- 103
2
votes
1
answer
162
views
What are the threat models that using a VPN for mobile data can mitigate?
Some VPN providers offer to encrypt mobile data. This goes beyond the typical Wifi hotspot mitigation paradigm.
So what exactly are the benefits of VPN over mobile data? What threat models can this ...
- 23
1
vote
0
answers
157
views
Seeking Advice/Guidance on configuring VPN to Ubiquiti USG behind Cisco Meraki [closed]
Abstract:
Access the USG network via VPN, through a Meraki MX84.
Summary:
I am currently working on setting up some new hardware and re-configuring a network that I am responsible for.
The objective ...
- 33
0
votes
2
answers
207
views
If i connect to a VPN server using cicso anyconnect or PPTP protocol which has invalid certificate, can they sniff my HTTPS data?
Lets say i have connected to a VPN server using Linux with the help of Cisco anyconnect protocol or PPTP protocol.
now when i try to connect to it, it says :
The certificate may be invalid or ...
- 378
0
votes
0
answers
203
views
Why does my IP being leaked with system-wide proxy through webTRC, but it doesn't happen when I use system-wide VPN
WebRTC manages to leak my IP when I use proxy, but when I use VPN it only shows VPN server's IP (both proxy and VPN were system-wide). What's the key difference? Google Chrome was used in both tests (...
0
votes
1
answer
177
views
expose home applications to the internet
I have some web applications (for example jupyter notebook) running on my home pc (ubuntu) that sometimes I would like to access remotely.
What would be an efficient and safe method to do it?
I don't ...
- 159
0
votes
2
answers
103
views
Securely Connect Employee PC to Business Private Network
I've recently become the "tech guy" at a startup, and am tasked with standardizing our hardware infrastructure. Further more, I choose how employees working from home will connect to ...
0
votes
1
answer
116
views
Does HTTPS mean that packets can't be read by intermediaries (like listeners at a VPN node, for instance)? [duplicate]
Say I'm using a VPN to talk with a server, and Bob is eavesdropping for packets at the VPN.
Basically a special kind of man-in-the-middle attack.
If I'm using HTTPS, how clever would Bob have to be to ...
- 101
0
votes
1
answer
243
views
Mixing VPN Protocols
Is there any benefit to mixing vpn protocols as far as obfuscating your traffic. Would a multiple hop setup like (openvpn(server1) + wireguard(server2)) be better or is (openvpn(server1) + openvpn(...
4
votes
2
answers
597
views
Privacy implications of static IP addresses (for home connections)
All the other questions I have seen here focus on the security implications of IP addresses. I'm interested about the privacy implications.
In my opinion, static IP addresses for home connections (...
- 15.4k
0
votes
0
answers
139
views
Routing a site-to-site VPN through my regular VPN service
currently engaged in live competitive red vs blue team exercises in an enterprise style Windows AD environment. My device runs a modern Debian Linux OS.
cscotun0
We typically connect to the lab/domain ...
- 1,639
0
votes
1
answer
101
views
VPN access real location issue [duplicate]
I'm using a VPN which works fine, unless when on Firefox a website asks if they can access my location and I click 'Yes' then it reveals my real location.
How is that possible? Is there any way to ...
0
votes
1
answer
157
views
How can I access a website without it being able to identify me as a previous visitor?
Phone is rooted
Basically I want to be able to access a website without it being able to determine any of the things it dermined about me (my device, ip address etc) when I accessed it last, no matter ...
- 101
1
vote
2
answers
142
views
Does it make senss for a company to have a VPN, if all its infrastructure is in the cloud?
If all the applications, virtual machines and services we use at our company are hosted in different clouds and assuming all these services are accessed through encrypted layers (https/TLS/ssl ...).
...
- 149
15
votes
2
answers
5k
views
HTTPS vs VPN - which is more secure
I understand that end-to-end VPNs (such as SurfShark and NordVPN) hide the domains I visit whereas HTTPS does not
However, are they any attacks that an HTTPS website would be subject to, that could be ...
- 809
3
votes
2
answers
316
views
How is my school blocking new Internet traffic after midnight?
My school supposedly cuts everyone's connection at exactly 12:00am. Although the network is still there, Windows shows the "no internet" sign when connecting to the network.
However, the ...
- 469
0
votes
1
answer
524
views
Hiding ip address when using coinomi wallet
How do I hide my ip address if I use a wallet as coinomi? Do I have to use Orbot? If yes, what exactly should I do? (I'm using it from an android) I just want to have privacy when I log into the ...
0
votes
0
answers
132
views
How to prevent my ISP from seeing what sites I visit without a VPN
I use opera browser, and while the built-in VPN has been working relatively well it's been preventing me from joining discord voice calls and using omegle. Is there a way to hide my activity from my ...
- 1
2
votes
1
answer
510
views
Attack scenario when using split tunnel VPN
Background
As many others I am working from home and we use a VPN to access services from the company intranet (SMB fileshares, git repo, project management etc).
To improve things like video calls I ...
- 121
0
votes
0
answers
71
views
Most secure way to authenticate VPN via script for connection from remote server to home network?
What is the most secure way to automatically connect my remote server via OpenVPN to my home network for running a script?
The plan is I want to automatically backup some folders to my Synology NAS at ...
- 11
0
votes
1
answer
230
views
MAC address of router changes when i connect to VPN
If I connect to my VPN and then run arp -a the MAC address of my router changes to 00:00:00:00:00:02. Is this normal behaviour? What is the reasoning behind this?
Furthermore a MAC address spoofing is ...
- 15
1
vote
0
answers
106
views
Identify user with a VPN connection within the network [closed]
I know of a user within my network who initiated a VPN connection within my network. What are ways I'll be able to find out the identity of user, searching port numbers? specific protocol established?
...
- 11
0
votes
0
answers
22
views
Found out that a paid VPN service emails plaintext passwords [duplicate]
I recently found out that a VPN service does not hash their customer passwords and I need professional insight on how to deal with this.
Here's how I found out:
Bought a subscription on the wrong ...
1
vote
0
answers
1k
views
Wireguard is blocked in Iran , what can I do?
Brief description :
I think Wireguard is blocked from special datacenters like Hetzner.
How can I bypass the government firewall?
Is there a way, for example, a plugin or something to mix it with ...
- 111
0
votes
1
answer
111
views
Resume VPN after hibernation (sleeping mode) vs real IP detection
Imagine I am using VPN service app on my PC and I am logged into a website. Then the PC enters sleep mode.
Disconnection sequence of sleep mode I suppose: first browser, second VPN. And for re-start ...
0
votes
1
answer
114
views
How can I see ISAKMP packets via Wireshark on a client computer?
I am trying to learn more about the IPSec and VPN. I am using TunnelBear on Firefox. When I start VPN service, I only see TLS connections on Wireshark but not the ISAKMP or other IPSec related packets....
- 3
1
vote
1
answer
96
views
Direct VPN access to DBs - government guidelines (DBAs at home COVID)
We have DBAs who want to access SQL DBs over DirectAccess (DA). The ask is to open port TCP 1530 over DA. At the moment, we have 6,000 people using DA, we can't filter on a specific group of DBAs. ...
- 71
0
votes
2
answers
226
views
Can I trust opera browser free VPN?
When traffic leaves the VPN, the operator of the VPN server can see the websites I'm accessing. Opera browser has a free VPN. Can I trust this VPN?
https://www.opera.com/features/free-vpn
- 401
0
votes
1
answer
96
views
Risks with setting up a authentication-less public VPN
I'm in the process of setting up an authentication-less public VPN. To prevent against DoS attacks, I'm going to set up some sort of IP address based rate limiting. The VPN is port-bound, i.e., it ...
