56
votes
How to detect whether a user is using USB tethering?
You can use Group Policy to prevent the installation of new network devices.
You'll find an option in Administrative Templates \ System \ Device Installation \ Device Installation Restrictions \ ...
- 248k
17
votes
Accepted
How to detect whether a user is using USB tethering?
There's several options:
On windows 7 you can control which USB devices can be connected. See this article for example.
You can monitor that the PC is connected to the network, for example by ...
- 2,028
9
votes
How to detect whether a user is using USB tethering?
What type of antivirus you are using?
In Kaspersky antivirus you can define trusted and local networks. So, you can configure your local network as trusted and prohibit any other networks. This works ...
- 683
8
votes
Putting Android on ethernet network using VLAN s
Shouldn't the switch be responsible for tagging the network traffic based on a machine's subnet and the ports it is plugged into?
VLAN's are a Layer 2 construct and IP addresses are a Layer 3 ...
- 111k
7
votes
How to setup auto-configure email for Android Mail app on your server?
I wrote up autoconfig (Thunderbird/Mozilla standard) + autodiscover (Microsoft standard) and RFC 6186 as an Ansible 'role' - but with plenty of text to explain what's going on. Summary: Setup RFC 6186 ...
- 366
6
votes
Private and authenticated DNS
For example, let's say I own a domain example.com, I'd like to create a subdomain mypc.example.com (not just only one though) that is only resolved for those phones (Android/iOS) and PCs (Windows, ...
- 33.1k
5
votes
Accepted
Chrome desktop and android refuses to accept trusted self-signed cert
Chrome requires SAN. For two years now, Chrome has used the Subject Alternative Name (SAN) extension in a certificate, NOT the CommonName (CN) attribute in the Subject as was used last century. (Other ...
- 3,469
5
votes
How to get cpu hardware id on Android systems?
Some commands to get hardware(CPU) info(Some need addition package installation and some are dependent on OS type)
sudo dmidecode -t 4 or sudo dmidecode --type processor
cat /proc/cpuinfo
lscpu
cpuid
...
- 2,934
4
votes
How to detect whether a user is using USB tethering?
I think an option is to create, on the target machine, a script to monitor the PC network settings (eg: IP address and gateway) and to alert you (eg: via email) when something change.
- 50.7k
4
votes
Putting Android on ethernet network using VLAN s
You really shouldn't be in a situation where you set VLAN tags on an actual client device. There's too much administrative overhead and it's simply not scalable.
Instead, you should set the relevant ...
- 198k
4
votes
Accepted
DNS over TLS / DoT as a private Service (authentication) possible?
Neither DoT nor DoH are really specified or implemented with client authentication in mind.
Even though one could imagine leveraging protocol features like client certificates (either) or HTTP ...
- 35.5k
3
votes
What hardware specs is needed to serve 100,000 clients on OpenVpn?
We can't properly answer capacity planning questions since they are highly dependent on your actual use cases and usage patterns.
The vendor documentation more or less says the same:
CPU requirements ...
- 80.3k
3
votes
Accepted
How much protection is provided for my remote centos vps by using certificate-only root login
Assuming your cert is strong, and not generated by a compromised or weak piece of software, certificate-only root login protects you against root logins from people who do not have your certificate. ...
- 54k
2
votes
HTML5 Audio not working for Android
I tried the files on my nginx server and all of them except flac work on android 4.4 with the default Browser and Firefox.
This is the tag I used:
<audio preload="auto" controls="">
<...
- 190
2
votes
Warehouse WiFi Repeatedly Disconnecting Only When Standing Under AP with 'Preferred Site' Error
That is the product of the antenna, I think. Even with most omni directional antenna's the wifi signal strength is somewhat doughnut shaped and not completely spherical, causing a blind spot directly ...
- 80.3k
2
votes
Accepted
No Certificates Found on Chrome Android with Comodo Positive SSL and IIS
It appears that you enabled "Require Client Certificate" option in IIS.
Open IIS Manager, select your website, click SSL Settings and switch radiobutton to "Ignore":
- 7,117
2
votes
Accepted
Thunderbird can send emails over own mailserver, K-9 not
It is the mail client problem.
There is related bug report on github. The developer said he did not consider it possible or necessary to implement HELO validation in this mobile mail client when ...
- 3,313
2
votes
Is there a way to find what processes are in nice CPU top list?
You can also use a really nice tool called htop.
Not sure which package manager you're working with but htop can be downloaded from the general ones.
When you run htop there's a menu list in the ...
- 10.8k
2
votes
Accepted
OpenVPN traffic incorrectly routed outside tunnel when accessing server IP
The reason that connections to your Web server (which is hosted on the same machine as your OpenVPN server) is not routed through your VPN tunnel is normal behavior.
If you would route all traffic ...
- 1,549
2
votes
Android OpenVPN disconnects the SSH tunnel
The question is old, but since there is no accepted answer I thought my answer might help anyone facing this issue... .
This happens because the packets passing through the ssh tunnel are forced to ...
- 121
2
votes
Accepted
Android appears to bypass firewall rule which restricts request for port 53
As it turns out, Android has the ability for DNS over TLS, otherwise called Private DNS. The Private DNS setting would appear to be using port 853 rather than port 53.
DNS over TLS has its own port,...
- 129
2
votes
Accepted
Strongswan swanctl profile for native Android IKEv2 IPsec
As the client log confirms, it expected the server to authenticate with the PSK too, not a certificate. So instead of local.auth=pubkey you'd have to configure local.auth=psk.
Note that while using a ...
- 4,102
2
votes
What can cause 'Network is unreachable' when the link is up, the route is there, and the netmask is correct?
Android uses a lot of routing rules and tables, probably one per application.
As can be seen, without such rule added and probably its corresponding fwmark, a packet will hit routing rule 32000: ...
- 12.8k
1
vote
Demo infrastructure faisability
Yes. I've done this with OpenVPN and would imagine it will work with any VPN.
Under the hood, Android is running Linux, and when hotspotting is acting as an AP + router. Android sees a VPN as a ...
- 6,302
1
vote
Private and authenticated DNS
So, nothing really exists that does this as one product. You could maybe cobble together a few things to do something silimar, but not likely with things like iOS/Android as you're limited to what you ...
- 2,172
1
vote
Accepted
How to make Wi-Fi Clients happy on Airgapped network?
You should be able to find what DNS records are being looked up by enabling query logging in BIND.
Running a packet sniffer would show what other traffic is being attempted by the clients.
- 4,771
1
vote
Accepted
Managing Google accounts in an MDM scenario
The eventual solution was to use Android for Work with devices in "device owner" mode. Here's a brief summary of the process:
Link the MobileIron Cloud tenant to Google's Android for Work platform ...
- 1,872
1
vote
How to detect whether a user is using USB tethering?
Never forget that the user can check porn directly on the user's cellphone via the LTE network, so no one will never know it (and a new cell phone has got a big screen...) Why the user used the bridge ...
- 17.1k
1
vote
How to turn off MS Exchange Server requests for “Activate Device Administrator” permissions on mobile devices
This might work:
From the Exchange Management Console:
Navigate to Organization Configuration > Client Access
Click on the tab labelled Exchange ActiveSync Mailbox Policies
Right-click an existing ...
- 11
1
vote
Accepted
Connect to Cisco ASA 8.2 VPN with Android 2.1 L2TP/IPsec?
The bug report I submitted to the AOSP was closed years ago as "won't fix (Obsolete)," and the Cisco TAC told other users that this configuration was not supported.
- 181
Only top scored, non community-wiki answers of a minimum length are eligible