Reputation
251
Top tag
Next privilege 300 Rep.
Create new tags
Badges
4 16
Impact
~17k people reached

  • 0 posts edited
  • 0 helpful flags
  • 37 votes cast
Nov
25
comment (PCI-DSS, APF) Firewall UDP Packet Source Port 53 Ruleset Bypass?
I'm going to open a ticket with the CP vendor. Since APF is managed by them, I suspect anything I change under the hood is going to be at risk for overwriting. I still would like to understand exactly why this attack is possible and how to mitigate it (firewall-neutral answer is fine).
Nov
25
comment (PCI-DSS, APF) Firewall UDP Packet Source Port 53 Ruleset Bypass?
APF = Advanced Policy Firewall (rfxn.com/projects/advanced-policy-firewall). Not exactly my cardholder data environment. My customer requested an isolated environment for their application, a requirement from a governing body above them, and unfortunately all control panels (also required) tend to be monolithic by design. I've disabled everything possible already, and the only issue not passing PCI yet is this firewall issue.
Nov
25
comment (PCI-DSS, APF) Firewall UDP Packet Source Port 53 Ruleset Bypass?
I'm not sure if this post is better on Server Fault or on Information Security. I posted it here because I really need a configuration solution, even with my interest in exactly why this is a security issue.
Nov
25
asked (PCI-DSS, APF) Firewall UDP Packet Source Port 53 Ruleset Bypass?
Oct
23
comment KeepAlive in Apache 2.4 interfering with form submissions
You have made my day. I searched and tested yesterday and today and still had not considered it could be a bug in Apache 2.4 MPM ITK. I was far off track. Thank you very much.
Oct
23
comment KeepAlive in Apache 2.4 interfering with form submissions
"I am using mpm-itk..." Thank you for mentioning this; I rarely come across ITK users. You described my problem exactly. Before finding your question here, I was hunting for a race condition in my code that doesn't exist and trying any suggestion I could find with KeepAlive. I haven't tried the patched version yet, but I just tested using my older Ubuntu VM with Apache 2.2-itk and it works fine with IE.
Sep
17
awarded  Notable Question
Aug
20
awarded  Notable Question
Aug
12
accepted PuTTY Fatal Error dialog - Can it be suppressed?
Jun
25
comment Forward all SMTP traffic to anti-spam server except for authenticated SMTP?
Correct. I do not need to worry about the spam. I have updated the question. I cannot fully reject unauthenticated connections on port 25, as the anti-spam filter will pass the clean messages on without authentication. I do not know how to configure qmail to reject all unauthenticated messages except from a specific IP, which I believe is what I specifically need.
Jun
25
revised Forward all SMTP traffic to anti-spam server except for authenticated SMTP?
Added "UPDATE" for clarification.
Jun
24
awarded  Editor
Jun
24
revised Forward all SMTP traffic to anti-spam server except for authenticated SMTP?
deleted 36 characters in body
Jun
24
asked Forward all SMTP traffic to anti-spam server except for authenticated SMTP?
May
20
awarded  Popular Question
Mar
12
answered Avoid own domain name for WHOIS records?
Oct
13
awarded  Popular Question
Sep
5
awarded  Popular Question
Jul
2
awarded  Curious
Mar
15
awarded  Popular Question