Collaborate Disseminate
My company distributes software that runs on locally installed Ubuntu Virtual Machines. To update the software, we pull our latest code down from Github.
Some IT departments have github blocked on their firewall. One IT guy suggested to us… Continue reading Using Github’s Public IP Address as Remote URL
We used to have on-prem servers on our local network protected by a firewall. By now, we have migrated all of our servers to Azure so all we have in the office is our personal computers. Our firewalls and switches are now 6 years old and w… Continue reading Servers migrated to Azure – what network security is needed
The organization I work for uses Malicious Domain Blocking and Reporting (MDBR), which is a service provided by Center for Internet Security (CIS). MDBR technology prevents IT systems from connecting to harmful web domains, helping limit i… Continue reading CIS MDBR blocking major libraries (jQuery, gstatic)
To secure a router available at a public static IP address from various vulnerabilities discovered and exploited from time to time (or other examples), would it help to separate its firewall and/or VPN capabilities into dedicated device pu… Continue reading Will pulling firewall from router into separate device in front of the router increase security?
Suppose this scenario:
You are already inside a corporate network. Suppose to find out a RCE in a X service. The machine that hosts that service is behind a network-based firewall, ingress rules and IPS/IDS are not a problem. You don’t nee… Continue reading Getting reverse shell from firewalled target
Suppose this scenario:
You are already inside a corporate network.
Suppose to find out a RCE in a X service.
The machine that hosts that service is behind a network-based firewall, ingress rules and IPS/IDS are not a problem.
You don’t nee… Continue reading Getting reverse shell from firewalled target [closed]
We have a problem with the forticlient These last week many of our endpoints lose their licenses, we have to uninstall and reinstall the agent on the endpoint to reactivate the license.
I want to know what are the best solutions to correct… Continue reading FortiEMS: problem of unlicensed endpoint without uninstall and install forticlient [closed]
I have configured a proxy for PyPI (which uses a security service to vet module requests). I want to block direct access to downloads at the network firewall without affecting pypi.org’s usefulness as a search and documentation destination… Continue reading Block `pip install` but not pypi search/documentation [migrated]
I’m experimenting with OpenVPN on my Macbook and am attempting to limit my outward network traffic to just the tun interface created by OpenVPN. With the pf firewall disabled I’m able to connect to my server and access the internet just fi… Continue reading Using a pf firewall to secure an OpenVPN connection
I need to create a virtual machine (Debian 10) with Virtualbox on a Linux host system. The VM will be used as an office desktop to access the Internet via browser and therefore needs to use the Internet-connection that is provided by the h… Continue reading How to protect the host system against a rootkit on a virtual machine?