Questions tagged [security-groups]
The security-groups tag has no usage guidance.
122
questions
0
votes
0answers
19 views
Required outgoing ports to open for an Ubuntu 20.04 EC2 instance (beside TCP 80/443)
I'm hardening the security groups for EC2 instances running on a default Ubuntu 20.04 AMI. What system services will break after closing all outgoing ports expect TCP 80 and TCP 443? (I'm assuming all ...
0
votes
0answers
20 views
How we have differentiate the packet capture based on the RX & TX
I am working in the security industry. We have taken packet capture on the firewall multiple times.
Can we take Pcap based on RX and & tx and force the tcpdump command to write the output in two ...
-1
votes
1answer
13 views
Disable Do not display lock screen using powershell
Is there any Power shell command that changes the setting of the "Do not display lock screen" policy in Local group policy and i should perform the same on 30 machines.
Can i do it with a single ...
0
votes
0answers
14 views
Immediately revoke windows share access to user who USED to be a member of a permitted group
When a user is removed from an AD group, their access is not immediately revoked from file shares where that group is permitted.
EG:
:User1: is a member of ~Folder1_Modify~ group.
The share ...
-1
votes
0answers
26 views
DenyAllInbound in Security Rules
I am new to Azure and we just noticed that our created VMs are no longer accessible. When I ran the diagnostics, the DenyAllInbound rule was added to our Network Security Group settings. Tried to ...
0
votes
0answers
20 views
Server 2016 Standard Security Group automaticlly removing users
I currently run a windows server 2016 Standard server as a DC. I am getting an issue where when I add a user to a security group after a few minuites they then are no longer a member of the group.
...
0
votes
0answers
17 views
Networking security with ACLs and Security Groups
I'm learning AWS currently and building up highly secure VPCs the subnets within them. My question is simple: how can anyone (or thing) theoretically manage to "get past" both/either an ACL and/or ...
0
votes
1answer
27 views
Jenkins with Nginx, need to listen only https port
I have Jenkins instance in AWS EC2. I have installed Jenkins with port 8080. And I have nginx as a reverse-proxy.
My jenkins.mydomain.com.conf:
server {
listen 80;
server_name ...
0
votes
0answers
14 views
AWS EC Security group can not connect from internal network
I created 3 intances in same VPC and same subnet.
2 instances A,B use same security group: WebSG (id: sg-ab)
instance C use security group: DbSG (id: sg-onlyc)
In WebSG, I add rule Alltraffic from ...
1
vote
1answer
46 views
Firewall : is inbound rule required for getting SYN-ACK from the server while outbound rule already there?
I have a VPC, within which I have a EC2 instance deployed in private subnet.
I have my NACL(Subnet firewall) ALLOW ALL on inbound and outbound.
I have my security group rule(Ec2 firewall) , It ...
0
votes
0answers
15 views
Office365 Security Groups Update Time
My organisation is using Office365.
I just created a security group. I called it Developer Security Group. I also have a Sharepoint site. All the developers were added to this exchange site. I removed ...
6
votes
1answer
677 views
Can't ping EC2 instance after enabling ICMP packets [closed]
I followed this guide to allow me to ping my EC2 instance. In my security group I have Custom ICMP Rule - IPv4, Echo Reply, N/A, Anywhere.
However it simply doesn't work. If i run ping ec2-X-X-X-X.ap-...
1
vote
1answer
78 views
Load balancing for Host network is not working when access within the instance
I have designed this infrastructure.
ECS SG:
Ingress: 0.0.0.0/0
Egress: 0.0.0.0/0
ECS Cluster ASG SG:
Ingress: 0.0.0.0/0
Egress: 0.0.0.0/0
Now when I SSH to instance EC2 No 1. Sometimes I have ...
2
votes
1answer
49 views
AWS cli filter not applied
I want to receive some values from an AWS SecurityGroup and am using the following command:
aws ec2 describe-security-groups --group-ids $GROUP \
--filters 'Name=ip-permission.from-port,Values=22 ...
1
vote
1answer
83 views
Will a domain controller in the domain that a group is defined contain all member information?
Let's say I have a forest setup with many domains. If I were to pick an arbitrary security group from any of the domains, what is the best way to find ALL user members of that group, including user ...
1
vote
0answers
37 views
Rust Nickel Server Not Working When Deployed
I created a simple backend server using the Rust "Nickel" framework by following the guide here: https://nickel-org.github.io/getting-started.html
I can run cargo run locally and hit the local ...
1
vote
2answers
32 views
How to prevent user from disabling the Mcafee
How can I prevent user from disabling the Mcafee VirusScan Enterprise 8.8? Is there any Registry or Local Group Policy that I could do it?
2
votes
0answers
50 views
AWS EC2 : IAM policy to allow inbound SecurityGroup with PORT Range
I want to allow the access to specific ec2 security group to one of the developer. For that I know that we can use something like this :
{
"Version": "2012-10-17",
"Statement": [
{
...
1
vote
1answer
36 views
Why can't I ping my new Amazon Web Service EC2 Windows instance, even with security group with ICMP enabled?
There are several questions asking the same thing, but they are all 6+ years old so I thought I'd ask again in case something has changed. The AWS EC2 docs here also make it look simple; just add the ...
0
votes
1answer
288 views
Active directory group scope - Domain local or Global?
CONTOSO has offices in the UK and in the US. each country has its own domain, but the domains trust each other.
I have created a group in the AD in UK but if the group is set to global I cannot add ...
0
votes
0answers
196 views
Cannot use public DNS to SSH to OpenVPN server when I am connected to the VPN
I have a strange issue with a new OpenVPN server.
I've set up am OpenVPN 2.4.7 server on CentOS 7.7.1908, hosted in AWS. This is used to both have a single outbound IP address for various whitelists ...
0
votes
0answers
13 views
Security groups on cloud computing instance
When assigning security groups to public ip (interface eth1) to my cloud computing instance do I have to assign the same security groups to the private ip (interface eth0) as well?
0
votes
0answers
8 views
For what objects in Windows / AD can you calculate Effective Permissions?
So far my list looks like this:
File System ACLs
Registry Key ACLs
SQL Server - Server Instances
SQL Server - Databases
SQL Server - Stored Procedures
SQL Server - Tables
SQL Server - Views
...
1
vote
1answer
92 views
GPO - Setting an Item-Level Filter on a Registry Collection Does not work
We're faced with a weird issue. We created a collection of Proxy Settings that we are applying to essentially everyone in the company. However we do have a subset of users that need to be excluded ...
0
votes
1answer
61 views
Blocking all outbound traffic except API response - AWS Security Groups
I've got a web app (App 1) and am setting up an API endpoint. I will send a request to that endpoint from App 2. App 1 and App 2 are in the same VPC.
I'd like for App 1 to allow NO outbound traffic ...
0
votes
1answer
189 views
How to export/import local groups with domain user members from/to a Windows server
What is the recommended way of cloning local group memberships (local groups, domain users) from one Windows server to another (script, tool, utility)? Servers are at version 2008 and later. Thanks.
0
votes
1answer
57 views
How to manage custom application specific permissions in AD?
We are planning to let our customers of our software configure users and their permissions entirely in Active Directory.
Once a AD-user is member of the AD-group "SoftwareXyz" he can log in and use ...
1
vote
0answers
184 views
Nesting gMSA in security group for use in ACLs
I'm trying to solve a conundrum for my DBAs and developers. We have an application that is running under a gMSA (group managed service account) identity. This application needs to access a SQL ...
4
votes
1answer
95 views
Why EC2 instance continues responding to a ping request after deleting the inbound security group rule?
While playing around with AWS console, I tried the following
Launched an EC2 instance (public IP enabled) in the default VPC with the default security group, and default subnet.
EC2 launched in the ...
1
vote
1answer
38 views
Allow only Angular application to access Node application (Same EC2 instance)and block Node for everybody else
I have hosted both my angular(port no 4200) and node application(port no 3000) on the same EC2 instance.
Both are currently accessible to anyone.
I want to limit access to the Node application so that ...
1
vote
1answer
28 views
AWS: Same VPC, but can only access one DB
I am fairly new to AWS, so I am sure that I am just missing something, but here is my problem:
I have created a VPC with 3 subnets and one security group linked to all of them. The security group ...
0
votes
2answers
41 views
Benefits of private VPC with NAT versus public VPC with firewall rules (in AWS)
Imagine you have some EC2 servers which are fronted by a load balancer (ELB).
Say they're in a public VPC - i.e. each EC2 instance has a public IP address and each instance is firewalled using ...
0
votes
1answer
197 views
AWS security groups as custom source
I have a security group that contains all the IP range of my company and some ports it should be able to connect to defined in its inbound rule.
I understand that you can use a security group id as a ...
1
vote
2answers
42 views
Updating Group objects directly in Office 365 Portal instead of On-Premises Active Directory
Recently, I found a new job which uses O365 in a hybrid environment. Just to explain a bit, the new environment has On-premises Active Directory plus an instance of On-premises Exchange Server (which ...
0
votes
3answers
594 views
Can't access EC2 instance, but not NLB in other VPC
I've recently started the process of switching from AWS ELB to NLB, and I'm facing some connectivity issues.
We have 2 VPCs. In VPC1, both EC2 database servers, old ELB and NLB is located. In VPC2, ...
7
votes
1answer
1k views
Managing Security Groups for NTFS Permissions
To start off with, I work for a company that a long time ago when they implemented file shares for each division, they also broke the cardinal rule of NTFS permissions and used explicit permissions ...
0
votes
0answers
320 views
Attach security groups to multiple EC2 instances
Is it possible to attach a new security group to all the EC2 instances in a specific region and keeping the old ones in place?
0
votes
2answers
85 views
Avoiding security groups in Windows domain with automated filesystem security
As far as I understand, best practices recommend that security groups are used with a Windows domain to assign permissions over files and folders. That is, you should create groups in Active Directory,...
2
votes
1answer
533 views
Limit public access to AWS ECS Fargate Service
I have a service on AWS ECS deployed using Fargate.
This service uses a Network Load Balancer (NLB) to allow an Elastic IP to be associated with the service.
This is not an http service and is using ...
1
vote
0answers
19 views
Editing Local Windows Built in Group: Network Operator
We need our local Built-in Group Network operator to be able to modify the speed ( aka Advanced TCP-IP setting) of the Windows 10 Network adapter but as per our test/research, this privilege is not ...
-1
votes
2answers
113 views
Why are primary network interfaces forced to inherit all the security groups of their EC2 instances?
I'm testing a virtual load balancer which is running on an EC2 instance. I'd like to be able to alter the setup and test the balancer under various conditions. In order to simulate a physical load ...
7
votes
3answers
4k views
AWS Security Group - how to allow Public IP from another Security Group
I have two instances in a VPC distinct security groups, each with their own public IP. I would like instance one to be able to connect to instance two on it's Public IP. I discovered that granting ...
9
votes
4answers
2k views
SSH between EC2 instances not permitted
I am setting up a few EC2 instances in a shared AWS account and want to give them access to each other. At the same time I want to prohibit access from other instances in the account.
I created a ...
1
vote
1answer
266 views
How to connect to my server from AWS device farm when limiting the device farm ip range to 54.244.50.32/27?
We have a classic load balanser that's configured to allow TCP traffic on port 444. We have a security group configured that allows TCP traffic from 54.244.50.32/27.
If we open up the traffic to the ...
1
vote
4answers
144 views
Do not show all docker containers to a particular user
I want to use one server to host multiple docker-containers. I want to give another user a possibility to manage new docker-containers, but I do not want to give him access to all other containers, ...
1
vote
1answer
31 views
Database Connections Persist After Security Group Change
We've set up a system to send a message to a queue in SQS when there's an outage on a dependency. In order to simulate an outage and test the system, I blocked the outbound port to a database on the ...
2
votes
2answers
456 views
Does it makes sense to configure iptables when you have configured AWS EC2 security groups?
We are using some Amazon EC2 instances with configured Security Groups (e.g. can SSH only from particular IPs -- sorry I cant post rules).
Some time ago I checked iptables and it looked like there ...
0
votes
1answer
537 views
IIS on AWS Windows Server 2016 not serving to external clients
I created an AWS Windows Server 2016 instance and also allocated an elastic IP address to it. Server's running fine and I can RDP into it.
I also installed IIS on it and ensured that it is running. ...
0
votes
1answer
643 views
AWS ALB security group allow connection from only my servers
I'm using an intenet-facing AWS ALB (Application Load Balancer) with a ECS cluster(docker), and I want to use it for forward web standard and internal web services traffic.
The application load ...
0
votes
1answer
75 views
Issue connecting EC2 instances in 2 separate VPCs (same region)
I have 2 VPCs (default and special) each hosting 1 EC2 instance.
Both instances have the same security group (say name = internal). The security group allows All Traffic from internal (a circular ...
