Collaborate Disseminate
Suppose that an ARP poisoning has been done and the attacker is sitting between the victims and the router, all traffic intended for the gateway would now go through attacker.
Would the attacker be able to intercept DNS queries and craft a… Continue reading Hidden MitM DNS Poisoning Attack
I’ve just set up a new Debian-based VPS instance and put my usual iptables rules in place where I block off almost all ports and open the ones I need, and I’ve noticed that on this network I’m getting peppered by lots of extra UDP requests… Continue reading Should I block traffic on UDP 5353, 5355, and 137,138,139?
I’ve the following nftable configuration (/etc/nftables.conf) to enforce a "VPN kill switch". Except for ICMP and IGMP, connections are only allowed through tun0. This works well as a "kill switch".
#!/usr/sbin/nft -f
… Continue reading How can there be incoming connections when using a VPN?
I am struggling with this script of mine that should prepare a secure VPN connection with VPN kill switch and I need some help.
What I am trying to do (in general):
My goal is to set up a very strict firewall, with iptables (nftables are a… Continue reading Forcing OpenVPN process to run with a specific group using nmcli [migrated]
I am switching to nftables and converted my old iptables rules. I would like to support IPv6 too.
I have several rules that I have added over the years from reading tutorials about security.
Several of them I either forgot or I am not sur… Continue reading Do I need to change my nftables firewall rules?
I have:
Installed Fail2ban
Created a local jail file.
Changed lines within /etc/fail2ban/jail.local where enabled is mentioned x2 to true.
Added enabled = true to the Asterisk section of the jail.local file.
Increased ban time to 1 day.
… Continue reading Fail2ban not resulting in any update of IPTables
Although Covenant’s Administrator portal by default runs on localhost port 7443 (https://127.0.0.1:7443) but it’s also accessible through the public IP of the VPS.
So to limit the access to Administrative page, I created an iptables rule t… Continue reading The C2 Listener isn’t listening when used with iptables [closed]
I have a ubuntu router set up that is leasing addresses on the LAN ETHO side from my WAN WLAN0 connection through iptables routing. I tested my device and my ETH0 network is able to ssh and ping the devices on the WAN WLAN0 connections. Wh… Continue reading Iptables Command [migrated]
I recently mapped routing output through iptables using root.
Question:
How can we analyze the iptables routing to suggest that there was an intrusion that was able to change the iptables kernel configuration?
My knowledge of iptables is … Continue reading Not the usual routing on Android
I installed hping and nmap tools for the first time. Both tools can’t connect to any website including google.com, but ping command works
Ping
[heman@Main ~]$ ping google.com
PING google.com(bom12s01-in-x0e.1e100.net (2404:6800:4009:810::2… Continue reading ping is working but hping (icmp host unreachable) and nmap (host is down) are not working for all websites [migrated]