Collaborate Disseminate
I bought a new router and I’m thinking to make my network a bit smarter from the security aspect.
My question is now: How can I make sure that an attacker cannot get into my "secure" network with properly insecure IoT devices (li… Continue reading Setup network with IoT devices
I have a single home server with a single NIC. I intend to run numerous Docker containers — some will be internet exposed, some will not.
The way I see it, I have two options:
Use the normal bridge network driver:
Create 2 unique bridge… Continue reading Is there any value in using macvlan/VLANs to create router aware networks to segment internet exposed containers vs non exposed containers?
I have an exercise with the Firewall model as shown below.
My problem is not being able to set the IP address (When I set this model, I noticed the lack of a router in the "server area", I thought this was a problem I couldn’t do… Continue reading Set the IP address for the Network model, Firewall Model and Security issue [closed]
I start by saying that I am not really familiar with AD and DMZs.
In my company, we have a DMZ with one server, isolated from the internal network (only a few open ports) and exposed to the web. There are some IIS applications running whic… Continue reading DMZ and ActiveDirectory users [migrated]
I recently had to bypass my company policy by establishing a VPN connection from a LAN device (raspberry pi) located inside my company, to a WAN server.
As devices accessible from outside must be placed in the DMZ, I couldn’t get a prope… Continue reading VPN from inside a company
We have a tier 1 and tier 2 firewall
What are the use case to host services on tier 2 firewall? e.g. is connection from field enineers/remote workers one of those?
What security risks and controls should i be considering for tier 2 servic… Continue reading What are the use case to host services on tier 2 firewall?
I understand that you place public facing servers in a DMZ and so if they are compromised, it doesn’t compromise the inner network. In order to do so, the outer firewall forwards ports (80 and 443 in my case) to web servers. From this, I u… Continue reading What’s the point of a DMZ if it has access to a DB inside inner network?
A few days ago while messing around with a web server, I put my server into a DMZ via my router and forgot to disable it. I opened port 80 and 3306 on the server’s firewall (Windows Server) to access it on my LAN. Today I logged into the s… Continue reading Left port 80 exposed, several IPs accessed phpmyadmin
Our support staff established remote access connection from jumphosts that are isolated within a DMZ. To provide support they need project files (up to a few GB of size) which are stored on a file server within our LAN. Curre… Continue reading Secure File Replication between LAN and DMZ
Possibly basic question from a developer, not a security expert.
AFAIK, a very common setup for web sites is to have 1 or more web servers behind a firewall and load balancer, with the web servers sending requests to a datab… Continue reading Separate server between web server and database server