0
votes
0answers
17 views

Database showing a list of current vulnerabilities?

I have been recently building my own firewall, but I was wondering is there a website or database which lists majority of the known vulnerabilities so I could obviously update my firewall based on the ...
0
votes
0answers
16 views

Set a max for number of failed password log in attempts in juniper srx

Normally my Juniper-SRX doesn't delimit number of failed log in attempts. I want to know if is there any way to change settings in a way that after for example 3 failed attempt, that user locked for ...
0
votes
0answers
17 views

Local Network Addresses Visible to ISP

While I was on a support call with my ISP, their network engineer started listing IP addresses that were visible to him on my local network. He was right on the money as far as IPs that were up. I'd ...
1
vote
0answers
29 views

Is it possible to restrict access to certain URLs for individual programs?

I have a certain use case where I want to whitelist a list of URLs that a certain application can access. In other words, I want to sandbox it, but don't have access to blocking or white listing those ...
0
votes
1answer
13 views

Restricted logins + almost all ports closed : secure?

Context : I plan to travel. I want to make a little cloud with my personal server. I wish I could d/l some of my files and eventually upload some files which will not be executed and the whole is ...
0
votes
1answer
43 views

iptables: Is it dangerous to filter by source port?

I would like to run a stateless firewall setup and I currently have the following rules: #Do not track any packet *raw :PREROUTING ACCEPT [0:0] -A PREROUTING -j NOTRACK COMMIT #Actual firewall rules ...
0
votes
0answers
37 views

How should I configure my Tor-dedicated firewall for optimum security?

I'm setting up a Tor-based isolating proxy using the 'Anonymizing Middlebox' iptables rules specified here: https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy i.e. iptables -t nat -A ...
3
votes
3answers
474 views

If you block an .exe file in Windows Firewall, are you also blocking the .dll files it uses or it needs to be done separatly?

Let's consider this scenario: There's some X software downloaded from the internet with one .exe file and several .dll files. The .exe file is prevented from accessing the Internet by using Windows ...
-3
votes
1answer
32 views

Where can I ask Windows security related questions that are not product specific [closed]

Following up from this I'd like to know if there are any Windows Security forums that are not product specific. I want to use such a forum to ask about combinations of Free Firewalls and Virus ...
0
votes
1answer
33 views

Is it bad to have a stand alone firewall that disables the native system firewall?

I've heard claims that firewalls such as the one that comes with Avast are better than others that disable the system firewall. Is it correct that it could lead to problems disabling a firewall built ...
0
votes
1answer
150 views

Should fwknop be listening to a port?

I am trying to install fwknop on a VirtualBox Debian 7 machine. It installs with no error (apt-get install fwknop-server -y), i made the modification in /etc/default/fwknop-server file so daemon ...
0
votes
0answers
48 views

How can I confirm if a process is being blocked from communicating on a network?

I have a user system with a third-party vendor product that needs to communicate with the network. We're noticing symptoms that suggests that the program/process is being blocked from communicating ...
1
vote
2answers
276 views

Source port 443?

I'm might embarrass myself with this question, because of something really obvious, but I'm puzzled. My home broadband firewall log says it has been blocking incoming TCP traffic with a source (!) ...
1
vote
2answers
73 views

How do I do this without an expensive firewall?

I've got a cheap-o Motorola Cable Modem for now and I hate it. I'm used to doing this with SonicWALL routers but life happened. I need a way to isolate these groups securely and keep threats from ...
1
vote
1answer
203 views

Restrict access to ubuntu server by computer specific information (NOT by IP, preferably not MAC either)?

How would one go about restricting access to a Linux (Ubuntu) server such that only a selected group of computers could connect -- from anywhere? Something like CPU serial number, hard drive serial ...
1
vote
1answer
440 views

Internet access to host behind firewall using ssh tunnel

My goal is to give host behind firewall access to the internet. Below you can find brief description of network [internet] <-> [proxy] <-> [A] <-> (firewall) <-> [B] [A] - ...
0
votes
0answers
169 views

Configuring port forwarding for SSH - no response outside LAN

I recently moved, and at the same time purchased a new router (Linksys E1200). Prior to the move, I had my old router set up to forward a port for SSH to servers on my LAN, and I was using DynDNS to ...
1
vote
2answers
532 views

How can I completely and surgically block any communication between adobe.com and my computer? [duplicate]

I'm not much of a networking guru, but I'm needing to conduct an experiment to see why some RSLs are not loading on some client computers when they try to load a swf off of their intranet's server. ...
0
votes
4answers
129 views

How to secure a Windows ME system connected to the internet? [closed]

I am about to re-install Windows ME on an old Dell Dimension 4300. The computer is connected to the internet via a 2Wire 3600HGV DSL modem/router. What do I need to secure the computer? Do I need ...
0
votes
0answers
61 views

Windows 7 Security setup with firewall

Sorry if this is a repeat, but I have been searching the forums and haven't found an exact answer for my question. I have had some security concerns on my home network lately so I decided to take a ...
1
vote
1answer
81 views

What does Windows Firewall do if I don't add a specific firewall rule?

Suppose I have a program which needs to connect to the Internet in order to work. Let's also say that I only want this program to communicate on private networks, so I add a firewall rule allowing it ...
1
vote
1answer
178 views

Sandboxing Windows7 apps

Are there any software packages, that allow to selectively limit filesystem access for each application? Do they have significant impact on system performance?
0
votes
1answer
658 views

UDP packet and firewall

I notice when I send udp packets from computer A to computer B, B can receive the upd packets correctly but if I send udp packets from computer B to computer A the udp packets are not received A and ...
1
vote
1answer
218 views

my credit card leaked [closed]

I got a phone call from someone pretend from Amazon and he want to confirm my credit card so he asked the expire date and security code when I refused he give me full name, address, last 4 digits of ...
0
votes
1answer
339 views

TCPview: Some strange process?

I just install the TCPview to check if there are any abnormalities in my computer connections, and there are something looks strange: There are 2-3 process that show the following status from time to ...
2
votes
1answer
183 views

How to simulate yourself as if you are located internally behind the trusted zone of a FW

I work in security operational center engineer in one company. We manage a lot of customer FW, proxy,..etc. An example of our daily tickets could be the user can't access some site, so we check the ...
0
votes
1answer
302 views

Blocking the unwanted Web Traffic [closed]

There are some trackers most of the times you could see they are running on your PC, Dependent on the softwares, services, Addons, OPSys, ... much more some of the major trackers could be 'Google', ...
0
votes
1answer
72 views

windows prevent app from accessing internet

I bought a desktop password management application and I want to make sure it is secure and doesn't send any data to the developer. So I want to block it from using the internet. I am using Windows ...
-2
votes
2answers
362 views

Does 32-bit GeSWall protect 64-bit Windows 7?

GeSWall provides excellent Windows security, but there's no 64-bit version. It works on 32-bit Windows 7, and 64-bit Windows 7 can run 32-bit software, so I was wondering whether it does protect ...
1
vote
1answer
523 views

Configure Firewall so that server can't be used for SPAM [closed]

So, my ISP unblocked port 25 for my IP, and now my email server is being used for sending spam. I just need it to work only from my localhost, and thats it. How do I configure Windows firewall to do ...
1
vote
1answer
297 views

How can I block all internet connections except the Microsoft Update website?

I want download updates for Windows XP. Until all updates have been downloaded, my computer will be more exposed to hackers. How can I block all internet connections except those to/from the Microsoft ...
1
vote
1answer
606 views

OS X stealth mode: where is it enacted?

I am working through the security guide from apple (which they did not update since Snow Leopard). In the firewall section it states that ipfw has a default allow rule: 65535 allow ip from any to any ...
-2
votes
1answer
261 views

port 21 and 22 are open on a fresh install of mountain lion

I have Mountain Lion (fresh install as of today), I have also reset the router and it has no port forwarding or anything. There are no other devices connect to the router but just the mac. I did a ...
4
votes
2answers
10k views

How to use OpenVPN through a restrictive firewall?

I'm currently in the situation of attempting to setup OpenVPN on a personal VPS, for connection primarily through an overly restrictive firewall. All of the setups mentioned below work when used ...
0
votes
1answer
928 views

Multiple connection attempts per minute on udp port 1024 - What might be the cause?

Here's a small sample from my firewall log: Sep 24 14:51:04 server Shorewall:net2fw:DROP: IN=eth0 OUT= MAC=44:87:fc:8a:f2:c3:00:04:ed:dd:e6:4a:08:00 SRC=213.5.110.105 DST=10.1.1.3 LEN=131 TOS=00 ...
1
vote
1answer
1k views

mystery Internet traffic to port 445

Recently, I noticed traffic from the office network to TCP port 445 on the Internet [a]. Below are the Linux firewall log entries to Facebook's network [b] and Google's network [c]. I would like to ...
4
votes
1answer
68 views

Is password required for restricted database servers [closed]

I have a dedicated Database server which is have PostgreSQL 9.1. This server has firewall. Only 10.0.0.3 is allowed to connect and access to this server via Firewall. All other requests from other ...
0
votes
2answers
646 views

CSF/LFD - would I really need CPHulk enabled also?

So if I have the default configuration of CSF/LFD firewall running, should I enable CPHulk, or does CSF/LFD already do what CPHulk does? If the answer is "No, CSF/LFD does not do what CPHulk does", ...
2
votes
1answer
4k views

How to quickly Enable/Disable Internet Traffic so that it ONLY goes to ONE program?

What Firewall program (preferably free) can I use to quickly enable/disable internet traffic so that it only goes to one program? For example, sometimes I need only one program (Program X) to be ...
0
votes
1answer
577 views

What do I need to open on my Windows Firewall to allow GFI Security Endpoint functionality

I've been asked to switch off my firewall so that GFI Security Endpoint will work properly, I'm not switching off my firewall! What do I need to do on my windows firewall to allow GFI Security ...
2
votes
1answer
349 views

Accessing my Rails webrick behind proxy?

In my mackbook, when I try to connect to my rails application in office I can't , in the office there are some http proxy , and when I run my rails like this : sudo rails s -p8080 => Booting ...
0
votes
1answer
2k views

How to have Screen Sharing + Firewall without port 5900 open in OS X

On 10.6.8, if you have both Screen Sharing and Firewall turned on, port 5900 is automatically opened in the firewall. This is bad, because I want to access that port via ssh port forwarding and not ...
2
votes
3answers
1k views

How to firewall a VPN connection in Windows 7?

I have a VPN connection to a private VPN server in another country. I don't want any internet packets to leave or enter my laptop unless they are going to or coming from the VPN server's IP. Is ...
1
vote
1answer
1k views

Why can't we turn off firewall And file sharing?

I was under the impression that turning off file sharing "makes it more secure". Especially when I like to have my firewall switched off, turning off file sharing becomes more important to me. But ...
1
vote
1answer
505 views

What is the simplest way to use svn repository through firewall without compromizing the security?

I have a multiple Win xp/7 PCs in a network that have no Internet access. All traffic is routed through a firewall PC (latest ubuntu LTS, without admin). This firewall has limited ports open to ...
2
votes
2answers
619 views

Home Network, VPN & Security

At the moment, my home network is comprised of 5 computers (3 laptops and 2 desktops), one of which is running Windows Server 2008 and works as a home repository for some of our files. We access the ...
3
votes
2answers
407 views

Weird hits on port 2703

I'm getting these periodical console messages on my Mac: 7/22/11 8:01:03.925 AM Firewall: Stealth Mode connection attempt to UDP 10.0.0.1:2703 from 91.143.232.133:15881 7/22/11 8:01:05.885 AM ...
3
votes
3answers
198 views

Creating a secure LAN within an insecure LAN

I have multiple computers on an insecure network (with third party, untrusted computers). My computers and the third party computers are all behind the same firewall. Currently my computer's software ...
2
votes
3answers
152 views

Granular control of the flow of data into and out of all devices on a home network to an ISP enforcing bandwidth limits

Internet service providers are gradually chipping away at net neutrality and imposing bandwidth limits. Most users will need to trust their ISP to report accurate bandwidth consumption rates, and ...
1
vote
1answer
3k views

Open firewall port on Fedora 14

I want to open the port 18680 on my remote Fedora 14 machine. I did sudo iptables -I INPUT -p tcp --dport 18680 -m state --state NEW,ESTABLISHED -j ACCEPT sudo iptables -I OUTPUT -p tcp --sport ...