All Questions
54
questions
0
votes
1
answer
186
views
How to get through restrictions blocking OpenVPN?
I have recently set up a VPN server on my desktop at home in the hopes I can connect to it while at the university from my laptop. I have confirmed that I can connect easily on a mobile data hotspot, ...
- 101
0
votes
0
answers
79
views
Knockd not executing the knock command
I am trying to setup knock daemon, however it does not seem to execute the knock command. To debug the issue, I used this simple configuration, which is slightly edited example from the documentation:
...
- 1
0
votes
0
answers
33
views
Firewall detects strange ip's (hosts) in the network
I need your suggestion.
My router antispoofing detects and blocks the ip's like: 10.211.87.139; 10.209.198.166; 10.25.59.222. I'm not using these subnets, I tried to set my adater as static with given ...
- 1
-1
votes
1
answer
79
views
Why is it written in nmap official doc that -sL does not send any packet, when it actually send them?
Sniffing with wireshark, I see a bunch of ARP, and DNS requests.
So why in the official doc it's written this:
The list scan is a degenerate form of host discovery that simply lists
each host of the ...
- 254
0
votes
0
answers
339
views
Draytek Vigor Firewall
I have a Draytek router (Vigor 2865) which i have had for a while, and whilst its a great router, a have a few queries regarding the firewall & WAN security:
Outline of my WAN Connection - ...
- 469
20
votes
11
answers
10k
views
How is Windows XP still vulnerable behind a NAT + firewall?
Everyone knows that Windows XP is highly insecure these days. However, here is an example situation:
Windows XP box is connected to a LAN.
This means the router's firewall is between the XP box and ...
- 469
1
vote
1
answer
506
views
Windows Firewall Does Not Block VMs From Accessing Port 135 on Windows 10 Host
I have a newly setup Windows 10 device with VMWare installed, and the guest OSes will be designated malware analysis playgrounds with (limited) network access. However, I cannot get the Windows ...
1
vote
1
answer
129
views
Force close port 22 (ssh) on GCP VM
For security reasons, I want to close port 22 (ssh) of my VM that is on GCP.
Currently, if I execute the command telnet xx.xx.xxx.xxx 22 the server responds to me:
Trying xx.xx.xxx.xxx...
Connected to ...
0
votes
0
answers
36
views
Setting up a 2 DMZ configuration, simulating an attacker in the middle zone, pinging hosts after the second firewall is not possible
I am setting up a network with a 2 DMZ configuration and decided to put an attacker within the middle zone of both firewalls. I am trying to ping some of the hosts that are located after the second ...
- 111
0
votes
1
answer
649
views
If a Firewall blocks an incoming Port, and an application listens to that exact port, what happens?
Lets assume that I set up a Firewall Rule, that blocks all incoming traffic from Port 23 (Telnet).
An Application now tries to listen to Port 23. .
What happens?
Does the Application listen to that ...
- 25
0
votes
1
answer
163
views
Filter incoming traffic from google.com using pfSense
I'm running Home Assistant in my home network and in order for Google Home to interact with it, the system must be accessible from the outside.
I don't want the open port to appear on any scan against ...
- 261
0
votes
2
answers
1k
views
Mitigating TCP reset style attacks
I appear to be a victim of TCP reset attacks with the purpose of preventing me from downloading specific data. I know this is the case at this stage.
For the time being I am staying at a hotel and so ...
- 1
1
vote
1
answer
669
views
I want to block all external traffic but allow internal traffic on a port 138
As a security enhancement, I need to block all incoming external traffic to port 138. But I want to make sure that systems within the same network can still access or communicate over this port, ...
- 11
0
votes
1
answer
4k
views
rundll32.exe making outbound TCP connection
I've been attempting to harden my network, and have taken some extra security precautions for the sake of learning, as well as.. to be secure. I've recently formatted and re-installed Windows 10, and ...
- 1
0
votes
1
answer
621
views
Explorer.exe making outbound TCP connection to Akamai
I've just noticed that my c:\windows\explorer.exe executable has attempted to make an outbound connection from localhost:49844 -> 104.111.87.125:443.
It seems that this IP is registered to Akamai, ...
