Collaborate Disseminate
My goal is to integrate a public facing service with AD using LDAP.
While I vouch for federated approach to user authentication, the business dictates LDAP.
We run a DMZ subnet and I insist on not punching any(punching as few as possible) … Continue reading Perfect DMZ: LDAP auth to AD
We have started TLS and MTLS enforcement in all our private customer connections on our servers but we are facing design constraints in regards to High Availability TLS deployments.
For context, we are dealing with long-lived TCP sockets t… Continue reading TLS and high-availability [migrated]
I’m currently working on a project based on creating virtual networks and configuring a virtualized firewall (pfSense) along with access control. I was given this project idea in a cybersecurity subreddit and thought to give it a go since … Continue reading pfSense not working properly on Azure VNet? What do i do?
Is there any way, in looking at the firewall/system log to tell? I realize these events are very common these days.
However, I want to make sure that they didn’t get through the firewall and that it is not a more targeted attack.
What was… Continue reading How to Determine if an Intrusion in the Firewall Log was Successful or Not?
I installed hping and nmap tools for the first time. Both tools can’t connect to any website including google.com, but ping command works
Ping
[heman@Main ~]$ ping google.com
PING google.com(bom12s01-in-x0e.1e100.net (2404:6800:4009:810::2… Continue reading ping is working but hping (icmp host unreachable) and nmap (host is down) are not working for all websites [migrated]
I decided to use a whitelist approach to secure my environment (i.e blocking all inbound/outbound connections by default, unless otherwise stated).
I need to whitelist some Windows apps (not all of them) like Powershell, cmd, remote deskto… Continue reading Whitelist PowerShell, cmd, remote desktop (some Windows apps) in the firewall [migrated]
I have several servers that must be exclusively accessible only on the internal network, for example database, which can never be accessible via internet.
And also cases that they can only be accessed by specific IPs, for example, access v… Continue reading How to actively monitor open ports on servers
As usual, I ordered a CentOS 7 virtual machine from my hoster. Installed a firewalld and docker on it. In docker, through docker-compose, I launched a web application that hangs on the standard port 80. And after a couple of days I found t… Continue reading How did I get hacked? [closed]
Wasn’t sure if this was normal or not.
Continue reading Is this a normal amount of denied access requests for the firewall? [closed]
When I opened up Wireshark, I noticed pings from an IP from Taiwan, and I am suspicious about it. It happens like every couple of seconds from the second I boot up my laptop. I used whois and it said the netname is HINET-NET and the source… Continue reading Suspicious ICMP ping to/from my laptop [closed]