1
vote
1answer
16 views

How do I block all traffic except firefox?

Lets say for example I want to block all traffic except incoming from nginx, outgoing for firefox and allow out and incoming to some torrent client. Would that be possible? I took a look at apparmor ...
0
votes
1answer
65 views

Will Editing HOSTS file in Ubuntu Improve my Network Security?

I have recently learnt about 2 different ways of editing the hosts file in Ubuntu for the purpose of blocking webpages and domains tracking my computer (protecting myself from tracking cookies), and I ...
0
votes
2answers
236 views

What do LISTEN and ports mean in netstat? [closed]

I have been monitoring my system lately and I have found some strange things are running on my system. Can anyone please explain what they are and why same program use several processes? Output of ...
0
votes
1answer
43 views

I have some questions about Firewall [closed]

So I am pretty new to Linux (With the exception of Android), and being use to the old ways of Windows pretty much all I had to do for Firewall was turn it on and forget about it. However with Ubuntu ...
0
votes
2answers
79 views

How to store network-manager settings in home

I'm using Ubuntu 14.04 with the network-manager. It stores all Information about wireless networks, VPNs, ... in /etc/NetworkManager/system-connections and I was just wondering why... I thought the ...
0
votes
0answers
54 views

How to create a fake packet that can be used in Ettercap filters

I am working on Ettercap filters and came across inject(file) function provided by it. This function simply injects the contents of file specified in the current packet. We can also drop the entire ...
0
votes
1answer
44 views

How to temporarily block network access to root user?

Just want to temporarily block network access sometimes, even to the root user. How can I do this?
0
votes
0answers
40 views

Does the network proxy run after the VPN connection, no leakage whatsoever?

I'm inside a Ubuntu 12.04 Virtualbox guest (Bridged Adapter) and by finding 'Network' in the GUI, I can access three things, a VPN which I've configured to be an OpenVPN to a VPN, a 'Wired' connection ...
0
votes
0answers
32 views

Error in decrypting WEP-encrypted .pcap file

I got a pcap file containing captured WEP packets, and a WEP key to decrypt it. I tried using both Wireshark and airdecap-ng to decrypt the packet. The key is correct, so the decryption was done ...
3
votes
1answer
208 views

Why do I have new and strange networks (_not wifi_) in my network manager? 14.04

Ok, so I updated my system to 14.04 last week (running on a Dell XPS13 ultrabook- but I'm not a developer, not particularly technically minded). Some strange things happened with network manager. ...
0
votes
1answer
53 views

Preventing Déjà Dup from attempting a backup when out of my network

I’ve set Déjà Dup to back up daily to my home network’s Synology NAS (by WebDAV, if you’re curious). The problem is that my laptop comes with me to many places. My laptop does not seem to realise ...
1
vote
2answers
390 views

How can I stop my server being an “open DNS resolver”?

This morning I got a letter from my ISP saying that my Ubuntu Server (13.10) can be used as an "open DNS resolver". They propose 3 possible solutions to fix this problem: Limit access to recursive ...
2
votes
1answer
2k views

linux command to prevent dos attack by using netstat and iptables

I want to DROP more than 200 requests per ip to prevent ddos attack. this is command that i used to detect requests count per ip : netstat -alpn | grep :80 | awk '{print $5}' |awk -F: '{print ...
2
votes
1answer
102 views

What are the possible threats if internal IP address is publicly revealed?

In many cases, people do not take enough care to remove their IP addresses from some output before posting it to help forums and Q&A sites like askubuntu. Considering one's IP address is revealed ...
0
votes
0answers
80 views

Analyze firewall logs to track intrusion

I have just started this topic where the firewall on my router detects intrusions e.g. Mar 11 14:15:11 kernel warning kernel: [fwlog] Intrusion -> SRC=85.102.133.241 DST=109.78.126.234 ...
0
votes
0answers
21 views

NIC in Monitor mode used by two program simultaneously

Presently I am designing sniifer that is uses NIC in monitor mode but side by side I am also using wireshark ( for which also NIC in monitor mode ). So both this program using monitor mode ...
1
vote
2answers
53 views

Network Information for Theft Prevention [closed]

I haven't seen much of this around, and I'm not a network expert/sysadmin, so I need some advice. I have a laptop that I'd like to "protect" against theft (this is really a game more than a real ...
3
votes
1answer
6k views

Ubuntu - saying your security settings have blocked an application from running with an out-of-date version of java

I have this new problem since 2014 begin. I cant remotely login to this enterprise network for giving them support. Its keep showing this new error. How to fix it please? EDIT:
2
votes
1answer
621 views

How to protect my PC from netcut users? (ARP spoof)

In my campus, some people they are using netcut in Windows and they are blocking us not to use Internet. Since I am a Ubuntu user, I can't install neither nutcut nor netcut-defender to protect and ...
0
votes
0answers
302 views

vmware player bridged does not work when on vpn

The problem I am having now is I vpn off from my job to a vpn provider. I then load my kali linux vm and connect to the vpn my security labs. I can run scans, enumerations etc. The problem is when I ...
0
votes
0answers
46 views

Secure a samba print server in 12.04

I set up a sambda server on my router, and can access it with ubuntu. I installed the following applications to see the share: $ sudo apt-get install samba samba-common system-config-samba ...
0
votes
0answers
202 views

[SOLVED]Unable to installing Intel 5100AGN driver on Ubuntu 13.04 for Wifi Cracking

I am new to Linux and wanted to know if my wifi adapter has packet injection capabilities. When I try it on Ubuntu 13.04 it says my adapter does not support packet injection. But when I used Ubuntu ...
0
votes
1answer
86 views

which is strong ubuntu dist or windows? [closed]

Gentlemen, i am using windows in my company. I want to secure my system or to secure my company systems. should my company use linux(ubuntu) to become more secure than windows 8 ? what also the ...
0
votes
0answers
38 views

Too Many unsolicited “Incoming Connections”

With the ufw rule "deny incoming", ufw logs as many as 2 to 3 block packets from random IPs on random ports. I find it quite irritating. I was just wondering if this is normal "midirected" internet ...
0
votes
1answer
479 views

SSH: Dynamic DNS vs Port Forwarding

I recently set up SSH on my newly installed ubuntu, and already set up public key authentication and know that it works properly remotely on my local network. Now I decided that I would make it ...
1
vote
0answers
297 views

SSL certificates issue with Ubuntu 12.04 as guest OS in a Windows7 virtual box behind strict firewall

I have set up an ubuntu guest for Rails development in a Windows7-hosted virtual box. The windows workstation is a behind an extremely strict firewall with often fluctuating rules. The ubuntu host ...
1
vote
0answers
311 views

Apache shows blank white page after 2 to 10 hours

I am using ubuntu 12.04, it has to network cards, A = internal 10.0.0.0 and B public Ip , I have only apache2 installed, after 2 to 10 hours the website shows as a blank white page on the public ...
1
vote
2answers
1k views

Ubuntu - apt-get not working behind restricted internet access

I have Ubuntu 12.04 64-bit boxes running in a company but they have internet browsing and firewalls for security. When I do apt-get update or install it fails. But I have a remote server which ip is ...
1
vote
1answer
431 views

Secure OpenERP Server

I use a Ubuntu 12.10 Desktop as a server 'only' for OpenERP 7.0. This OpenERP server is used by both, the team as well as clients. I've checked out posts that help someone secure a 'web-server' (i.e a ...
1
vote
0answers
94 views

Running a VPN server off Ubuntu Desktop?

I am unfamiliar with Ubuntu and Linux in general. I bought 3 old Dell PowerEdge 2650 servers off eBay for £20. I didn't really know what I was going to do with them, but for the price, they seemed ...
13
votes
3answers
31k views

How to disable IPv6 permanently?

How can we disable IPv6 system wide via terminal commands? I've read editing /etc/modprobe.d/aliases and replacing: alias net-pf-10 ipv6 with: alias net-pf-10 off alias ipv6 off Is this safe ...
0
votes
3answers
473 views

WiFi, as it relates to my router

Why does my ubuntu make a WiFi connection ONLY when I disable the security settings of the router? I have a 3-computer network, 2 of which connect just fine (with the router's security settings ...
0
votes
1answer
404 views

Isolate Malware in VirtualBox and emulate fake responses [closed]

I have some malware I want to study, intercepting its "phone home" connections, sniffing where and how it is trying to connect and then somehow, by pretending I am the host(s) he is connecting to, ...
-1
votes
1answer
677 views

How can I prevent the hacking of my wired and wireless networks by tools like feedingbottle? [closed]

I am network administrator and I am always worried about network security as I know people use different techniques of hacking to penetrate wireless and wired networks. Recently I came to about ...
0
votes
4answers
3k views

fail2ban or denyhosts to block invalid username login attempts

Is there a way to automatically block IP address when a user tries to login as any invalid username? I already have: [ssh] enabled = true port = ssh filter = sshd logpath = /var/log/auth.log ...
2
votes
1answer
202 views

How can I monitor/control applications making network connections?

I found out about nethogs and iftop the other day, and ran them. I was surprised to see some applications running daemons I didn't know about. It's fine now that I know about them, but I'd like to be ...
2
votes
1answer
391 views

Enabling TCP MD5 signatures in 12.04?

After running a NeXpose scan of one of my servers, I'm getting notice that TCP MD5 signatures may not be enabled. I've looked all over the net and from what I can see this feature should be enabled ...
3
votes
1answer
208 views

Was my computer hacked by Minecraft/Craftbukkit Initscript?

I was playing around in Terminal, I 'mis-clicked' (havent yet configured trackpad, very jumpy cursor) while trying to run nano. What happened next kind of threw me for a loop. Here is what printed ...
1
vote
2answers
360 views

Networking security issue with suspicious traffic. How to track it down?

I have specific problem a bit advanced for me. On my router log I have seen following lines: Internal Prot. External NAT Time-out 192.168.0.167:56396 TCP ...
0
votes
1answer
169 views

Can I have ipsec-tools working for non standard ports?

I was trying to set up a manually-keyed connection via ipsec-tools between two ubuntu 12.04 servers, following this simple tutorial, but one of that two servers, has just a range of ports 3000 .. 3100 ...
2
votes
1answer
551 views

CUPS: Restrict printer access to trusted users on network

I would like to share my printer (connected to my computer with USB) with my colleague though our network. I am very concerned with security issues and I don't want to do anything that could ...
0
votes
1answer
275 views

How can I connect 12.4 to the Internet with WEP key?

I have Ubuntu and I want to know how can I connect to the Internet using my WEP key for my wireless. I tried too many times but it doesn't work. I have my wireless password but it doesn't work too. ...
7
votes
1answer
338 views

I want to use Ubuntu as a firewall and wireless AP, with some external traffic passing through openVPN, and the rest just through a firewall

I would like to do some configuration through Zentyal or a similar setup, but I am also willing to use config files. I am connecting to a commercial VPN using a username and password. I want that ...
3
votes
3answers
395 views

SSH key plus password

I see there are continuous attempts to login into my computer via ssh using usernames, like joan florin root from 60.169.22.118, -how can I forbid ssh access and only allow it to users with specific ...
2
votes
1answer
362 views

Does Linux support capturing tcp packets without being super user?

Is it possible to capture packets without superuser? This is what I see in the wikipedia article: In some Unix-like operating systems, a user must have superuser privileges to use tcpdump ...
3
votes
1answer
945 views

why samba share files are not able to access by some user for some time?

I'm running samba on Ubuntu Server 10.04 LTS, I've some folders on samba share and created some user to access it, but suddenly some of the user are not able to access it for a certain time only. For ...
4
votes
0answers
370 views

Asking for a SSTP connecting configuration file for using SSTP command line [closed]

Using sstp with Network Manager and DNScrypt stopped working on Ubuntu 12.04 DNSCrypt and Network manager and using Unblockvpn's SSTP - http://sourceforge.net/projects/sstp-client/ Connects the ...
2
votes
1answer
2k views

how to enable iptables tarpit?

I'm using ubuntu server 10.04 and I have to enable tarpit module . I installed the followning packet : aptitude install xtables-addons-common xtables-addons-source module-assistant auto-install ...
7
votes
1answer
19k views

What are ICMP redirects and should they be blocked?

After enabling ufw and the Tiger security auditor, I see warnings saying: The system accepts ICMP redirection messages What are ICMP redirection messages? Should they be disabled for security ...
1
vote
2answers
389 views

what software can i use to access SILC Networks?

i want to access a SILC network and all the infos from the official site are missing (site down?!?) EDIT: it seems the site is back up as of last week. Good thing that i got curious and checked it ...