1,187 reputation
712
bio website
location
age
visits member for 5 years, 3 months
seen Dec 20 at 15:19

Dec
14
comment Restrict SSH access to whitelist IP - what is stopping someone pretending to be from my IP?
See my comment below, but you're missing a fundamental notion of routing. Each router along the path will try to route the packet to the real destination, and not to the attacker. In the "bad old days" of the Internet, things like source routing were possible (the source could specify the return path) but that's practically impossible these days.
Dec
14
comment Restrict SSH access to whitelist IP - what is stopping someone pretending to be from my IP?
There's no luck involved, and no "catching the handshake". Each router along the path either knows a route to the remote IP (x.x.x.x) or it doesn't (and uses its default route). I don't know what you mean by getting "physically close enough to the server". If there is one router between them and the target and they control that router, great, they win. If there are two, they need to control both. If there are ten... you get the picture. If you don't see how this is possible, I recommend you read up a bit on IP fundamentals.
Dec
14
answered Restrict SSH access to whitelist IP - what is stopping someone pretending to be from my IP?
Nov
12
awarded  Nice Answer
Sep
3
awarded  Yearling
Dec
19
comment How to override default source address on packets originating from a router
It looks... mostly correct, I think. What interface is that 217.154.193.209 address bound to right now? Also, did you try putting in a "default" rule in the CHENIN_ONLY table just to see what happens?
Dec
19
revised How to debug sporadic outbound connection timeouts?
edited body
Dec
19
revised How to debug sporadic outbound connection timeouts?
deleted 212 characters in body
Dec
19
revised How to debug sporadic outbound connection timeouts?
deleted 212 characters in body
Dec
19
answered How to debug sporadic outbound connection timeouts?
Dec
5
answered Why running named(bind) in chroot is so important for security? Or maybe it is not ?
Sep
3
awarded  Yearling
Jul
3
comment How can i find out why my web server is refusing traffic from my web proxy?
I don't think there's enough information here to say conclusively, but I'd start by looking closely at the proxy server. Is there anything in the logs? What is the current configuration? What is it allowing, and from/to which addresses? Also, you said "Recently, the web server has started refusing traffic"... what changed recently? Is there a firewall running on the proxy host itself?
Jun
21
awarded  Editor
Jun
21
revised After installing Mysql 5.6 the server can't start
added 127 characters in body
Jun
21
revised What is this in my syslog and should I be concerned?
added 39 characters in body
Jun
21
answered After installing Mysql 5.6 the server can't start
Jun
21
answered What is this in my syslog and should I be concerned?
Feb
19
awarded  Nice Question
Dec
12
awarded  Notable Question