Category Archives: Routing

What to consider when routing priviledged ports to sandboxed services? net.ipv4.conf.eth0.route_localnet=1 vs CAP_NET_BIND_SERVICE

Posted on by

The use case is: running isolated services, either as a hardened systemd unit file — with close to a zero score on systemd-analyze security, or a linux container.
Both of those will place services listening on localnet (127.0.0.0/8-ish) o… Continue reading What to consider when routing priviledged ports to sandboxed services? net.ipv4.conf.eth0.route_localnet=1 vs CAP_NET_BIND_SERVICE→

Why is IPsec transport mode "vulnerable" for not having integrity of variable fields? Why is this so important?

Posted on by

With IPsec transport mode we CAN’T have integrity of variable fields (eg TTL and checksum).
Why is it a problem? Is it? What could be the attack?
I think TTL expire or checksum modification (so both DoS), but I mean, if an attacker can mod… Continue reading Why is IPsec transport mode "vulnerable" for not having integrity of variable fields? Why is this so important?→

Can my employer detect that I am using a torrent client on my home pc while teleworking? [duplicate]

Posted on by

I am working from home with a ‘work’ laptop, connected through a VPN client to my company and also to the customer networks.
I also have my ‘home pc’ on the same home network.
Both computers are connected to the same home router.
Can the c… Continue reading Can my employer detect that I am using a torrent client on my home pc while teleworking? [duplicate]→