Collaborate Disseminate
I am switching to nftables and converted my old iptables rules. I would like to support IPv6 too.
I have several rules that I have added over the years from reading tutorials about security.
Several of them I either forgot or I am not sur… Continue reading Do I need to change my nftables firewall rules?
Let’s say there’s a keylogger secretly installed in an employee’s computer. The keylogger recorded a bunch of information, but the well-configured firewall blocked the keylogger from sending that information to its server.
Attacking the fi… Continue reading Is it possible to make whitelisted software do custom, malicious things?
I have a website running on IIS. I have set inbound rule for wp3wp.exe with any port opition but web site is not reachable with this rule.
When i add rule with settings: Program and Services >
All programs that meet the specified condit… Continue reading Windows Firewall and IIS Permission
I installed Raspberry Pi OS on a RPi 3B, then I installed NetworkManager, set the Ethernet connection to "Shared to other computers" and connected an ethernet cable between the RPi and a normal desktop running Windows 11. The set… Continue reading How to block 192.168.0.1 for connected clients?
I’m hoping there is a domain or two I can blacklist on our firewall that will prevent the Apple Podcasts app from loading? I’ve checked here but there’s nothing obvious or specific to podcasts. I realise that podcasts can be watched/listen… Continue reading Block Apple Podcasts Apps [closed]
I want to limit access from the Internet to my Web server but the clients will have a dynamic IP address so the best I can do is to whitelist all addresses belonging to that specific mobile carrier which still leaves the system open to too… Continue reading Can a Reverse Proxy be used instead of port filtering?
Currently we have a Palo Alto FW that serves as our perimeter devices for our network. We are required by our contract to block certain IP addresses. Over time this list has grown to almost 150k entries. Palo has a limitation on the max nu… Continue reading Perimeter IP Address Blocking
I am currently involved in enhancing the security of a Docker-based web application.The application follows a traditional three-tier architecture, comprising a web app, an application layer, and a database—all operating on the same VM. A f… Continue reading Network security in Docker containers
I’m using a Mikrotik router and for the past few weeks have noticed constant scanning activity on the WAN interface (Internet –> MyPublicIP:53) after enabling logging for the "drop all not coming from LAN" input chain rule. I… Continue reading Constant DNS Port Scanning Traffic [closed]
On our company network, suricata just raised the following (single) alert:
{
"timestamp": "2024-01-05T12:42:28.511703+0100",
"flow_id": 1276412390854359,
"in_iface": "igb0",
… Continue reading ThreatFox alert on Cloudflare IP