Questions tagged [network-security]
The network-security tag has no usage guidance.
30
questions
1
vote
0answers
40 views
Is there a way to modify specific IP options through iptables?
In IP header there is a option 130 - specified in RFC 1108, it adds some security options for IP packet, like mandatory access control levels and categories. My task is to try to modify at least level ...
0
votes
0answers
16 views
Send command to another machine in a secure credential way
I have a question to ask you: I am creating a script to use with certbot for the renewal of certificates via DNS, everything works correctly on the same machine where BIND is also running (this ...
0
votes
1answer
33 views
Network Mapped Drives sensitive information leakage when changing LAN networks on Windows
Assuming the following or similar setup of network drives/locations on a Windows 7+ system originally connected to a TrustedLAN:
TrustedLAN Gateway: 192.168.1.1 /24
TrustedLAN Windows System IP: 192....
0
votes
0answers
38 views
Reset MTU with forged ICMP Type 3, Code 4 packet
I have four Virtual machines in this configuration
configuration
Router A and Router B are communicating each other beetween an IPsec implementation. So beetween them there is a tunnel up, and when A ...
0
votes
2answers
86 views
Security implications of directly connecting a Windows PC to ISP via Network Adapter with Ethernet cable bypassing the Router
When diagnosing Internet connection issues (slow speed for example), an ISP technician may ask a user to connect their ISP-provided Ethernet cable directly to a device (typically a Windows PC) to run ...
0
votes
0answers
19 views
GLOBAL lockout of ALL external incoming access attempts
I have stripped down my /etc/services file to bare minimum (according to my awareness of what is needed) for a Linux DESKTOP configuration accessing remote services and offering no services to remote ...
1
vote
0answers
44 views
Location of authpriv.notice logs on Bitnami
I have a Bitnami server, Ubuntu Xenial, on AWS LightSail. I followed this tutorial to restrict SSH connections by country. This script ipfilter.sh filters IP addresses:
#!/bin/bash
# License: WTFPL
# ...
0
votes
1answer
170 views
Does GCP Cloud Armor support TCP load balancer? I am unable to add TCP load balancers as a Targets in Cloud Armor?
In the GCP cloud armor documentation, it is mentioned here, that it supports HTTP(S) and TCP load balancers to be configured. But I am unable to add TCP load balancer as a Target in Cloud Armor as it ...
google-cloud-platform
0
votes
2answers
839 views
netsystemsresearch.com on my internal network
It first started happening with the local network enabled printer. It printed out that netsystemsresearch.com was doing a search of all public networks. I stopped that by disabling outside connections ...
-5
votes
1answer
37 views
Which mobile VPN type, of IPSec, SSL/TLS, and SSH, would be better for travelling workers? [closed]
Not too sure on the specifics of each that would make one better for travelling.
0
votes
0answers
7 views
Secure Local Windows Web Server within Corporate Network
We have a local web server setup on a conference room computer that will allow people with smart phones to control the conference room (start video meeting, run preset programs, etc). The local web ...
1
vote
0answers
200 views
Do we need Fail2ban for VPN server?
we are using Ubuntu 20.04 LTS vps and running OpenVPN on it. We use certificate key to login to SSHD and the vps is not using any other program(eg. webserver etc).
Would you recommend installing and ...
0
votes
1answer
115 views
AWS - VPC traffic being dropped - how to debug Network ACL and security group?
I have an AWS VPC with two subnets: Public and Private. I can access the internet (via a NAT Gateway) from the public subnet, but not from the private subnet, and I can't work out what's wrong.
Both ...
0
votes
1answer
162 views
NACLs and NAT Gateways for public and private subnets
I have a VPC with 3 subnets:
Public (FE layer, inbound internet access only)
Protected (app layer, outbound internet access only)
Private (DB layer, no internet access at all)
The public subnet NACL ...
0
votes
0answers
94 views
Isolate Docker containers from processes running on the host
By default, a Docker host drops network packets targeted at its container, unless those packets are responses to connections initiated from within the container. Initiating a connection to a container ...
0
votes
1answer
121 views
AWS: VPN between VPC and an external resource with IKEv2 and ESP
I need to set up a VPN tunnel between the VPC in AWS and an external server with content that I want to access securely. The idea is to use the Site-to-site VPN Connection with Virtual Private Gateway ...
0
votes
0answers
23 views
Policy — Network isolation for known-vulnerable systems
My client has some systems that can't be patched for a variety of reasons. We have a remediation program underway, but we need to isolate those vulnerable servers until the replacement systems come ...
2
votes
1answer
363 views
Apartment-wide single SSID / multiple password Wi-Fi network security concerns?
My apartment building is changing internet providers, and the new provider plans to install a network that will have a single SSID for the entire building. Each tenant will be given a unique password ...
0
votes
1answer
32 views
Would proxying ssh be insecure
If I would use something for remote port forwarding like ngrok, or Serveo:
ssh -R 80:localhost:22 serveo.net
Would this pose a treat to my security since there is a man in the middle?
How would I ...
1
vote
0answers
94 views
Install SMBv1 client on win10 without admin or compromising security? [closed]
This relates to Sending files from win10 to SMBv1 server? but it is broader. Feel free to edit/move/remove.
Windows 10 update 1803 removes all functionality of SMBv1 unless explicitly set so by admin,...
3
votes
1answer
558 views
Security Considerations of AWS Private Subnet vs Private Security Group
AWS Virtual Private Cloud allows several ways of restricting access to devices on the VPC network from the Internet.
1) Place devices into a private subnet (no Internet Gateway). Each device can ...
0
votes
0answers
65 views
Get information about MAC address
My router (FritzBox 7330) shows tons of errors about a device that continuously try to connect to my network:
23.12.19 10:17:07 Registrazione del dispositivo wireless fallita: chiave wireless ...
1
vote
1answer
52 views
Can user credentials from HTTP session be seen through Wireshark? [duplicate]
Can we get that info the same way we do for FTP since HTTP is a plain text protocol?
0
votes
2answers
364 views
Prevent Unjoined-to-domain computers from connecting to my network
How to prevent any computer that is not joined to the domain from requesting any service from my network? Considering that the computer is on another network.
1
vote
1answer
63 views
What to do with log entries indicating intended attacks at my server
Since last week I am running a web server (Apache2 on Ubuntu, accessible by IP only) and I reckon that I am most vulnerable now that I don't know well what to pay attention to, so I'll ask the experts ...
0
votes
1answer
488 views
Multiple internet connections and single firewall appliance
The company that I work for has three internet connections. We're planning to install a single firewall appliance that covers all of the three connections.
I can theoretically imagine it being done ...
-2
votes
2answers
43 views
Can admin monitor what websites has be accessed? [closed]
I am using my company laptop, where is being monitored by company admin.
They have install Windows 7 OS on all laptops and some other security packages.
Currently I am usnig laptop outside my ...
11
votes
3answers
1k views
If public IPs are pinned to a single AS, how does BGP anycast work?
It is my understanding that public IP blocks are assigned from IANA, which assigns sub-blocks to RIRs, which assigns sub-blocks to ISPs, which assigns sub-blocks to individual ASs as outlined in this ...
0
votes
1answer
1k views
Tool to manage windows shared folders and their permissions
I remember there was a tool to easily manage shares for Windows. But I don't remember anything about it.
My case is mostly used configuration but in windows is very hard to manage user permissions ...
1
vote
2answers
734 views
encrypting network traffic passing over 'untrusted' segment of Ethernet cable
let's say i have two office spaces in a multi-tenant building. landlord was kind enough to provide me with copper cat 6 cable connecting both of the disjoint spaces.
i could just attach network ...
Related Tags
security × 8
networking × 7
windows × 4
network-share × 3
amazon-vpc × 3
ssh × 2
iptables × 2
vpn × 2
firewall × 2
router × 2
wifi × 2
linux × 1
ubuntu × 1
docker × 1
web-server × 1
linux-networking × 1
domain × 1
configuration × 1
nat × 1
apache2 × 1
port-forwarding × 1
vlan × 1
more related tags
Hot Network Questions
- Reference request for Linton's theorems on equational theories
- If you sliced the moon in half perfectly, would it hold together?
- Would a stream enterer no longer need the "I am the owner and heir of my karma" reflection?
- Putting a sack over an enemy's head
- Cast iron plates seem heavier than rubber coated
- At what point is the check for whether or not I meet the criteria for Ending C?
- What is the copyright status of a journal article written more than 70 years ago?
- Are these small yellow things on my lettuce worms?
- In the USA, do college courses deeply differ from high school courses?
- Would oceans filled with long-lived, omnivore, intelligent Krakens make sea travel impossible?
- Where can I download the voting results for UK elections?
- On German bicycle direction signs, what does the background colour for bicycle highway pictograms indicate?
- Is there anything different about the gravitation around a non-spinning black hole and a neutron star of the same mass?
- How do you insert lyrics into a novel?
- What is this icon from shell32.dll
- How efficiently did the Red Army conduct itself during the invasion of Poland in 1939?
- LWC - Iterating over arrays passed into the component by a parent is ridiculously slow
- How can my level 3 party defeat a group of Liches?
- Why does AWK print "0xffffffffbb6002e0" as "ffffffffbb600000" using printf?
- Signed up for a talk, not enough material
- Why do we need air-filled tires?
- Why are mornings cooler than nights?
- How would a fruit causing longevity be identified as one?
- Why does black gain from this "center fork trick"?
