Server Fault

Questions tagged [network-security]

Ask Question

The tag has no usage guidance.

44 questions
Newest
Active
Bountied
Unanswered
Filter by
Sorted by
Tagged with
0 votes
1 answer
19 views

Some ports in my IP direct to unknown server

Backgrounds I have a dedicated server(which is a desktop) running in my office. It has static IP and was running for about 5 years now with out any network problems. However, after the office had a ...
user avatar
Gooday2die
  • 3
0 votes
1 answer
40 views

Access control rely on nftables, WireGuard and Reverse Path Forwarding only

I have an idea to host a web app that without built-in authentication on my server. And protect it by nftables, WireGuard and Reverse Path Forwarding only. The web server will listen to the server's ...
user avatar
TrevorT
  • 13
0 votes
0 answers
35 views

When is mapUser required -

I'm not sure I understand when & why mapUser is needed. When you generate a keytab with ktpass you can map the Service Principal to a user wit mapUser. You can then kinit to the Service from an ...
user avatar
Gonzalo Etse
  • 1
0 votes
1 answer
40 views

QEMU/KVM: how to protect monitor access?

Runing QEMU/KVM with monitor: kvm ...some_parameters... -monitor unix:/my_path/my_fifo,server,nowait We can then connect using socat - UNIX-CONNECT:/my_path/my_fifo then type commands. Easy and handy. ...
user avatar
Gregory MOUSSAT
  • 1,727
0 votes
1 answer
17 views

mongo secondary node - weird log entries

I have mogodb cluster with 4 nodes, all nodes work on standard 27017 port. I found weird things in my mongod.log on a secondary node: {"t":{"$date":"2022-03-26T23:22:34.593+03:...
user avatar
Antonio
  • 169
0 votes
0 answers
131 views

Domain computer connected to non-domain computer share giving a lot of login failed event 4625

I have an application running on a domain joined Windows Server 2019 server called AppSrv that writes images out to a non-domain DMZ Windows Server 2019 server called WebSrv. A drive is shared from ...
user avatar
Caynadian
  • 381
0 votes
1 answer
32 views

How to allow outbound connections only for updates

I have a network with a number of VMs hosting applications mainly for internal use, but they are also exposed to the internet via Traefik. Because there is a chance one of them will be hacked ...
user avatar
Alex
  • 101
0 votes
1 answer
54 views

How to block .git Folder serverwide on NGINX?

I have a question about blocking the .git folders server wide on a NGINX system. At the moment I'm playing around a little with NGINX, I actually use Apache. In Apache, it's actually no problem to ...
user avatar
Taoiseach
  • 1
0 votes
0 answers
24 views

Inspecting FTPs traffic

I have researched the possibility for securing / inspecting FTPs traffic with a sandbox to do malware filtering. There are a lot of vendors offering WAFs (Fortinet, Cloudflare, Check Point, and so on) ...
user avatar
Linz
  • 13
0 votes
2 answers
174 views

Should server be hidden behind a VPN for the SSH access?

We have three server instances, Nginx/PHP, PostgreSQL, and ELK stack. My idea is that the PHP server would allow public access for ports 22, 80, and 443, ELK server would have open port 5601 for ...
user avatar
djboris
  • 101
0 votes
1 answer
52 views

IPv6 vs IPv4 available subnets - enough or too less

I read a bit about IPv6 and found that usually you get assigned a /48 prefix address. Which gives you 16 bit for subnetting. Reading further assuming that you use /64 subnets you would end up with ...
user avatar
metriXc
  • 1
0 votes
1 answer
45 views

Cisco Catalyst 2960 Allow Management from Single IP Address

Our organization was recently required to use MFA for logging into our networking hardware. We're accomplishing this by using Royal Server and Royal TS, and limiting the source IP for SSH and web GUIs ...
user avatar
emike09
  • 13
0 votes
0 answers
19 views

IPsec on ESXi - How to avoid inputting plaintext crypto keys in command line?

The ESXi's IPsec commands require the encryption/integrity keys be inputted in plaintext from the command line. This is not recommended security practice. The command line history is even logged to /...
user avatar
SF.express
  • 334
0 votes
1 answer
83 views

Domain joined WAP in DMZ

To date, I've only ever used ADFS for claims aware applications. I'm now looking at using it for some non-claims aware applications. I've read that the WAP server must be domain joined for this so ...
user avatar
Steve
  • 1
0 votes
0 answers
22 views

How to secure AMI?

We are planning to use 3rd party or Community AMIs. Challenge is they all come locked down and cannot be hardened via our build factory. Any Security Architects in the group suggest what kind of ...
user avatar
koya
  • 1
0 votes
3 answers
492 views

Do network acls block inter-subnet traffic as well?

I have VMs placed in different AZs on AWS. In order to be able to do this, you need a subnet in each AZ. If I'm creating a network acl for the entire setup (ie to be associated with all subnets) do I ...
user avatar
ndtreviv
  • 113
-1 votes
1 answer
163 views

AWS network-acl blocking nginx dns resolution

I'm trying to lock down ports on my subnets, and am having a problem with an nginx instance that I'm running on ECS. Traffic comes into the system on :443 to an ELB, which routes some of it to an ...
user avatar
ndtreviv
  • 113
2 votes
0 answers
52 views

Does an IP lockout policy prevent most public RDP attacks?

My company uses RemoteApp to provide a "cloud edition" of our desktop software. The RDP port has been changed from default, and we run RDP Shield, which blocks the IP address after 5 failed ...
user avatar
Kyohei Kaneko
  • 121
1 vote
0 answers
161 views

Is there a way to modify specific IP options through iptables?

In IP header there is a option 130 - specified in RFC 1108, it adds some security options for IP packet, like mandatory access control levels and categories. My task is to try to modify at least level ...
user avatar
kiyama
  • 11
0 votes
0 answers
20 views

Send command to another machine in a secure credential way

I have a question to ask you: I am creating a script to use with certbot for the renewal of certificates via DNS, everything works correctly on the same machine where BIND is also running (this ...
user avatar
MrTaik
  • 7
0 votes
1 answer
40 views

Network Mapped Drives sensitive information leakage when changing LAN networks on Windows

Assuming the following or similar setup of network drives/locations on a Windows 7+ system originally connected to a TrustedLAN: TrustedLAN Gateway: 192.168.1.1 /24 TrustedLAN Windows System IP: 192....
user avatar
Fit Nerd
  • 103
0 votes
2 answers
130 views

Security implications of directly connecting a Windows PC to ISP via Network Adapter with Ethernet cable bypassing the Router

When diagnosing Internet connection issues (slow speed for example), an ISP technician may ask a user to connect their ISP-provided Ethernet cable directly to a device (typically a Windows PC) to run ...
user avatar
Fit Nerd
  • 103
0 votes
0 answers
20 views

GLOBAL lockout of ALL external incoming access attempts

I have stripped down my /etc/services file to bare minimum (according to my awareness of what is needed) for a Linux DESKTOP configuration accessing remote services and offering no services to remote ...
user avatar
Eric
  • 1
1 vote
0 answers
114 views

Location of authpriv.notice logs on Bitnami

I have a Bitnami server, Ubuntu Xenial, on AWS LightSail. I followed this tutorial to restrict SSH connections by country. This script ipfilter.sh filters IP addresses: #!/bin/bash # License: WTFPL # ...
user avatar
miguelmorin
  • 215
0 votes
1 answer
992 views

Does GCP Cloud Armor support TCP load balancer? I am unable to add TCP load balancers as a Targets in Cloud Armor?

In the GCP cloud armor documentation, it is mentioned here, that it supports HTTP(S) and TCP load balancers to be configured. But I am unable to add TCP load balancer as a Target in Cloud Armor as it ...
user avatar
Ravi K Mahankali
  • 1
0 votes
2 answers
3k views

netsystemsresearch.com on my internal network

It first started happening with the local network enabled printer. It printed out that netsystemsresearch.com was doing a search of all public networks. I stopped that by disabling outside connections ...
user avatar
panosl
  • 101
-5 votes
1 answer
42 views

Which mobile VPN type, of IPSec, SSL/TLS, and SSH, would be better for travelling workers? [closed]

Not too sure on the specifics of each that would make one better for travelling.
user avatar
john
  • 1
1 vote
0 answers
319 views

Do we need Fail2ban for VPN server?

we are using Ubuntu 20.04 LTS vps and running OpenVPN on it. We use certificate key to login to SSHD and the vps is not using any other program(eg. webserver etc). Would you recommend installing and ...
user avatar
aboka
  • 11
0 votes
1 answer
262 views

AWS - VPC traffic being dropped - how to debug Network ACL and security group?

I have an AWS VPC with two subnets: Public and Private. I can access the internet (via a NAT Gateway) from the public subnet, but not from the private subnet, and I can't work out what's wrong. Both ...
user avatar
mdarwin
  • 121
0 votes
1 answer
525 views

NACLs and NAT Gateways for public and private subnets

I have a VPC with 3 subnets: Public (FE layer, inbound internet access only) Protected (app layer, outbound internet access only) Private (DB layer, no internet access at all) The public subnet NACL ...
user avatar
mdarwin
  • 121
0 votes
1 answer
201 views

AWS: VPN between VPC and an external resource with IKEv2 and ESP

I need to set up a VPN tunnel between the VPC in AWS and an external server with content that I want to access securely. The idea is to use the Site-to-site VPN Connection with Virtual Private Gateway ...
user avatar
george007
  • 103
2 votes
1 answer
429 views

Apartment-wide single SSID / multiple password Wi-Fi network security concerns?

My apartment building is changing internet providers, and the new provider plans to install a network that will have a single SSID for the entire building. Each tenant will be given a unique password ...
user avatar
bigreddmachine
  • 121
0 votes
1 answer
34 views

Would proxying ssh be insecure

If I would use something for remote port forwarding like ngrok, or Serveo: ssh -R 80:localhost:22 serveo.net Would this pose a treat to my security since there is a man in the middle? How would I ...
user avatar
mvklingeren
  • 1
1 vote
0 answers
136 views

Install SMBv1 client on win10 without admin or compromising security? [closed]

This relates to Sending files from win10 to SMBv1 server? but it is broader. Feel free to edit/move/remove. Windows 10 update 1803 removes all functionality of SMBv1 unless explicitly set so by admin,...
user avatar
bliako
  • 147
5 votes
2 answers
1k views

Security Considerations of AWS Private Subnet vs Private Security Group

AWS Virtual Private Cloud allows several ways of restricting access to devices on the VPC network from the Internet. 1) Place devices into a private subnet (no Internet Gateway). Each device can ...
user avatar
hellodanylo
  • 153
0 votes
0 answers
68 views

Get information about MAC address

My router (FritzBox 7330) shows tons of errors about a device that continuously try to connect to my network: 23.12.19 10:17:07 Registrazione del dispositivo wireless fallita: chiave wireless ...
user avatar
Mark
  • 135
1 vote
1 answer
139 views

Can user credentials from HTTP session be seen through Wireshark? [duplicate]

Can we get that info the same way we do for FTP since HTTP is a plain text protocol?
user avatar
Yoane Maior
  • 21
0 votes
2 answers
798 views

Prevent Unjoined-to-domain computers from connecting to my network

How to prevent any computer that is not joined to the domain from requesting any service from my network? Considering that the computer is on another network.
user avatar
Alaa AlHafez
  • 11
1 vote
1 answer
67 views

What to do with log entries indicating intended attacks at my server

Since last week I am running a web server (Apache2 on Ubuntu, accessible by IP only) and I reckon that I am most vulnerable now that I don't know well what to pay attention to, so I'll ask the experts ...
user avatar
doetoe
  • 111
0 votes
1 answer
770 views

Multiple internet connections and single firewall appliance

The company that I work for has three internet connections. We're planning to install a single firewall appliance that covers all of the three connections. I can theoretically imagine it being done ...
user avatar
Arpan Adhikari
  • 1
-2 votes
2 answers
45 views

Can admin monitor what websites has be accessed? [closed]

I am using my company laptop, where is being monitored by company admin. They have install Windows 7 OS on all laptops and some other security packages. Currently I am usnig laptop outside my ...
user avatar
user2129623
  • 109
11 votes
3 answers
2k views

If public IPs are pinned to a single AS, how does BGP anycast work?

It is my understanding that public IP blocks are assigned from IANA, which assigns sub-blocks to RIRs, which assigns sub-blocks to ISPs, which assigns sub-blocks to individual ASs as outlined in this ...
user avatar
turtlemonvh
  • 253
0 votes
1 answer
2k views

Tool to manage windows shared folders and their permissions

I remember there was a tool to easily manage shares for Windows. But I don't remember anything about it. My case is mostly used configuration but in windows is very hard to manage user permissions ...
user avatar
Hasan Gürsoy
  • 111
1 vote
2 answers
922 views

encrypting network traffic passing over 'untrusted' segment of Ethernet cable

let's say i have two office spaces in a multi-tenant building. landlord was kind enough to provide me with copper cat 6 cable connecting both of the disjoint spaces. i could just attach network ...
user avatar
pQd
  • 29.5k

Your privacy

By clicking “Accept all cookies”, you agree Stack Exchange can store cookies on your device and disclose information in accordance with our Cookie Policy.