-1
votes
2answers
37 views

Multiple non-http services, 1 static IP

I have an issue where we have several non-http(s) services which we would like to access from across the WAN. SSH is a primary protocol we'd be using, FTP as well. Here's how things are laid out. We ...
26
votes
3answers
2k views

Is it safe to reboot a server open to the internet?

Specifically I have an iptables ruleset defined on a server running CentOS. Am I guaranteed / can I guarantee / how can I guarantee that when networking comes online (either at machine boot, or after ...
0
votes
1answer
62 views

Installing VirtualBox and restricting NAT and Bridged Network Adapters for Corporate Security

I work as a developer in a security heavy finanical services company. As a group we are finding that our Windows 7 workstation security policy is preventing us from performing our jobs. We do not ...
-1
votes
1answer
65 views

How should I properly block outgoing http traffic with iptables

I'm experimenting with iptables, and I'm trying to allow all outgoing requests for HTTPS, but to block HTTP. I have the code below; Chain INPUT (policy ACCEPT) target prot opt source ...
-3
votes
1answer
49 views

Keeping your server safe [closed]

I have a typical vps server with some custom sites on it running on port 80, a mail server, I don't have a DNS server and it is a default ubuntu 12.04. I don't have any admin panel, I am doing all the ...
0
votes
1answer
100 views

What is the workaround for WMI remote connection failure with Access Denied error when client runs with Local System account?

What is the workaround for WMI remote connection failure with Access Denied error when client runs with Local System account? I tried to run script under local system account on the client which ...
0
votes
0answers
27 views

Private, secure network between web nodes

I need to create small network of vps (linux) servers. Their main puropse is to server some data over http to clients. Each server is going to be located elsewhere in the world. I want those servers ...
1
vote
0answers
100 views

Is there any Microsoft NAP alternative? [closed]

With Windows Server 2008 Microsoft introduced NAP (Network Access Protection): http://searchconsumerization.techtarget.com/definition/network-access-protection-NAP In short it is a technology, that ...
0
votes
1answer
99 views

IIS Webserver hosting intranet and public sites in DMZ

We have a webserver (VM) hosting several sites. One of the applications has a part intranet and a part public. (archiving/docflow = intranet, customer invoices = public) This webserver is currently ...
2
votes
2answers
184 views

Designing a computer network of > 100 devices, dividing server responsibilities

I am designing a computer network for a public high school and came up with the following division of responsibilities between the servers: In the LAN: Active Directory Domain Controller. The DC ...
3
votes
1answer
468 views

802.1x certificates, EAP-TLS, RADIUS and Windows machines

When using 802.1x certificate-based authentication on Windows machines, should I use different certificate for each machine? There is RADIUS server running in the network, the machines use EAP-TLS to ...
9
votes
2answers
991 views

linux command to prevent dos attack by using netstat and iptables

I want to DROP more than 200 requests per ip to prevent ddos attack. this is command that i used to detect requests count per ip : netstat -alpn | grep :80 | awk '{print $5}' |awk -F: '{print ...
1
vote
1answer
58 views

TCP echo server security [closed]

I am setting up a Linux server similar to a TCP echo server and am wondering about security issues I should be concerned about. This will be a bare bones Centos/KDE server with no additional files ...
0
votes
1answer
64 views

what would happen when macchanger to gateway mac address? [closed]

I thought arpspoof GATEWAY_IP -t VICTIM_IP can be prevented by add a static arp entry on victim side, i.e. arp -s GATEWAY_IP GATEWAY_MAC I read ...
0
votes
3answers
106 views

Is it a good idea to only allows connections to be established in the LAN->DMZ direction?

I'm trying to setup the usual thing, with a DMZ containing servers that can be accessed from the internet, and a LAN that should be as secure as possible. I happen to also have total freedom on the ...
7
votes
1answer
146 views

what is the usefulness of logging of martians packet

Most of the time when I perform any search on hardening of a linux box etc, in the list there is always a section of log of Martian packet(IP) without any further explanation. ...
0
votes
1answer
70 views

What are the security benefits of using a proxy server?

In Wikipedia is written: Security: the proxy server is an additional layer of defense and can protect against some OS and Web Server specific attacks. However, it does not provide any protection ...
0
votes
1answer
43 views

What are the recommended internet security measures to take? [closed]

I have built a speical-purpose server, the only purpose of this server is to download some data from a remote(internet) data feeder and do some data processing in the server as well. The only ...
2
votes
3answers
574 views

How can I delay sshd login after bad password

How can I delay the retry response from SSH when a bad password is tried or unsuccessful login attempt. I wanted the delay to be 2-3 second more that usual. I could not find any option in ...
0
votes
2answers
98 views

Is mac address based security for single user Web Application a good idea?

I made my first web application dedicated to a single user. Being a system administrator it would be simpler for me to lockdown security on the operating system side rather than on the session side. ...
5
votes
1answer
74 views

Preventing a Domain Computer from Logging off Causes loss of Authentication

I have a set a domain computer to not require a password on wakeup. This is a strange situation I know but we want the user to never have to login to the computer unless he specifically logs out or ...
0
votes
0answers
67 views

Apache2 mod_dav_svn SVNListParentPath dependent on cilent IP / subnet?

Hopefully a simple question. Given the following Apache 2.2 VirtualHost configuration on a local network server with access from the local network and the internet: <VirtualHost *:80> ...
0
votes
1answer
68 views

OpenVPN and Performance [closed]

From my understanding RDP is encrypted and so is the OpenVPN connection so that is an encryption in an encryption. My Setup: LAPTOP <---> REMOTE SERVER <---> OFFICE SYSTEM Due to ...
0
votes
0answers
139 views

Shutting Down Firewall Rules for TMG 2010

Since TMG is being sunsetted next year we have decided to go with a new firewall/web filter and put the TMG 201O server off the network and used ONLY as a front-end authentication/proxy piece for our ...
3
votes
2answers
104 views

Windows updates, Anti-virus updates for Air gapped hosts

I just took over as an admin for a network that uses corporate imaged hosts, to manage various special purpose machines. These hosts directly connect to the equipment they are managing via Serial or ...
0
votes
1answer
134 views

fail2ban block retry count always changes

As title mentions clearly, fail2ban block retry count always changes. I set all retry counts to 3; but sometimes it blocks me after 6 or 7 retries. How can set its behavior a constant value? I added ...
0
votes
1answer
75 views

Providing root ssh access to virtual servers behind NAT? [duplicate]

We are a web hosting company. We have 4 Servers which are running OpenVZ on top of CentOS. Each of the server has around 50 containers running on top of it. We are planning to provide ssh root ...
2
votes
2answers
128 views

How to configure apache to behave as a remote browser?

For my IT security class summer project, we have to work on different ways to circumvent security measures setup on a school/company network and to explain how these hacks can be detected and avoided. ...
0
votes
1answer
175 views

VMWare Workstation and network isolation

When I install VNC or some other RAT to a container in my VMWare Workstation machine box, what ways can I prevent access to my local network and other machines on my network. Is this where setting up ...
0
votes
2answers
152 views

Should I use openVPN or something Else?

I'm in charge of setting up a "walled network" set of servers for a group of employees, but I have no clue where to start. Posted below are the initial requirements, my line of thoughts, and my ...
-3
votes
1answer
162 views

Can I block android phones from my company wireless network? [duplicate]

Network is password protected, all employees have access to password. Company policy is only company approved and provided devices are allowed on network. We can not tell who is logging in on ...
3
votes
1answer
107 views

Traffic backlogged after (D)DoS attack? [closed]

About 25 hours ago, I got an e-mail from UptimeRobot (uptimerobot.com) telling me that me websites had gone down. I raced over to my server room, where my TP-Link router was completely unresponsive ...
2
votes
2answers
89 views

VLAN & Communication

I'm working on a project regarding Network Security and I've come to the topic regarding VLANs. I was wondering if it is possible to set up multiple VLANs (VLAN0, 10, 20, 30) in a way that all VLANs ...
1
vote
2answers
584 views

Windows Jump Host

A Jump Host is a special purpose computer on a network typically used to manage devices in a separate DMZ. So, I'm looking for the proper way to implement this for a target running on Windows. I was ...
0
votes
1answer
133 views

How do jabber servers find each other and how do they proof the authority for the domain they handle?

Recently google chatback has been turned off, and I was searching for an alternative that allows visitors of my website to isntantly message me, without the need of having a login at facebook or ...
1
vote
1answer
82 views

VLAN over three switches

We are connecting three offices via fiber optics. For each office we have one switch. In each office there will be one PC which has to be isolated in a VLAN A. There will be other PCs but those three ...
1
vote
1answer
97 views

Weird iptables patterns of closed ports

Scratching my head over this one...I'm using Shields Up while proxied into a server I just setup with Rackspace. Here's my iptables config: *filter # Allow all loopback (lo0) traffic and drop all ...
0
votes
3answers
357 views

I think I'm under DoS attack. How can I respond?

My server's CPU has been spiking out for the past few days, to the point that it drops requests. I've been looking through the logs, and see certain IP's in the logs that are just simply downloading ...
9
votes
1answer
232 views

Where can I embed proprietary information in a layer 2 or layer 3 packet?

The Citrix Netscaler has an interesting property that embeds information in the TCP packet that gets sent to the host. This property is echoed back to the Netscaler in such a way that the Netscaler ...
3
votes
1answer
619 views

Should I dual home our webservers (DMZ/Internal network) or just do 1-to-1 NAT?

I'm setting up a rack of servers which will have 2 webservers and 10 internal servers that provide back end application support (migrating from an AWS environment). We'll have virtual machine ...
1
vote
2answers
303 views

Protection from ARP spoofing

I'm running Linux and I know my gateway will always be 192.168.1.254 with MAC address aa:aa:aa:aa:aa:aa. Is there any way I can instruct my machine to only ever use this MAC address for the gateway ...
2
votes
2answers
4k views

Configure Windows Firewall to block all except for specific traffic

I'm trying to configure Windows Firewall on Server 2008 R2 to block everything except for the traffic that I add to the rule list. I see there are three policies - public/private/domain. I've been ...
1
vote
0answers
469 views

Lots of activity on port 9001 to Tor-related domains… How can I probe this? [closed]

I was toying with iftop on my VPS, and I discovered that half of my connections were between my port 9001 and "Tor domains": * :9001 <=> psilotorlu.torservers.net:34599 0b 80b 20b * :9001 ...
0
votes
2answers
90 views

How do you restrict access to a server to be from a single machine (which doesn't have a dedicated IP)?

We want to deploy a J2EE WAR file from a build server to an application server (running JBoss 7.1.1) using the JBoss management console. Each machine is located on a different network. On the build ...
0
votes
0answers
48 views

wifi network connection selection restriction

I'm dealing with the following scenario. C1 - computer 1 used for work. Windows 7 with limited user account for worker. R1 -- is wifi router 1. This router is allowed to be accessed by C1. It is ...
0
votes
1answer
859 views

Site2Site tunnel via SSL VPN?

i have tried convincing my opposite office of the tunnel in question to get site-2-site ipsec up and running. However they are not really into that and run everything via SSL VPN.. Is it possible to ...
1
vote
1answer
259 views

Meaning of number inside iptable rules' brackets? [duplicate]

Possible Duplicate: Donโ€™t understand [0:0] iptable syntax E.g. The command iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080, lead to the configs *nat :PREROUTING ...
1
vote
3answers
5k views

Duplicate MAC address on the same LAN possible?

Let's say someone is on the same network as me and spoofs their MAC address to match mine: Is this possible? Can two or more clients with the same MAC address be on the same network at the same time ...
-1
votes
3answers
799 views

Block incoming traffic to specific computer

I have a router that is connected to the internet. To that router we connect via LAN and WAN. WAN settings are up, router user/pass, router access is secured with WPA/WPA-2. I want to make some ...
1
vote
3answers
207 views

Several border firewalls in the same network [closed]

I'm currently analyzing the consequences of multipath connections for the firewalls. In that context, I'm wondering if it's really uncommon to have several firewalls at the borders of a network to ...