IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [tunneling]

tunneling refers to a mechanism in which one network protocol encapsulates a different payload protocol.

120 questions
2
votes
2 answers

SSH Tunnels for Securing IoT Sensor-to-Server Connections (Many to One)

All, How bad (or good) an idea would it be to utilize SSH tunnels from my sensor gathering remote computers (imagine an "industrial" Raspberry Pi-like device w/ Linux) to my centralized server (also Linux) that ingests the sensor data? SSL…
EnemyBagJones
  • 135
  • 4
2
votes
1 answer

X windows security: VNC and X server vs xpra

I have a CentOS server that currently has no X server on it. It will be used for doing statistical crunching and providing other services (probably via a web interface). The main security for the box is provided by VPN. Some of the users will need…
user1071847
  • 170
  • 1
  • 4
2
votes
1 answer

Captive portal DNS tunneling

I recently had a meeting with a security researcher who told me about tunnelling over a captive portal using DNS. I have done some research into this but I was wondering what is the simplest way to do this using a linux / unix system? and what…
TheHidden
  • 4,265
  • 3
  • 21
  • 40
1
vote
1 answer

What is the proper setup procedure for SSL Tunnel certificates?

I am a systems integrator using a system designed for bringing HVAC data up to a common interface; this system/software platform is called Niagara AX. The combination of the customer's network setup and requirements for a project have brought…
abiessu
  • 111
  • 4
1
vote
1 answer

Can I use transport mode in IPsec if I tunnel via UDP?

Can I use tranport mode (instead of tunnel mode) in IPsec if I tunnel a VPN via UDP? I don't see why the header (that sets the protocol and port) needs to be encrypted in my case (I suspect it would be dropped if the firewall cannot see it as UDP…
Skaperen
  • 315
  • 2
  • 11
1
vote
1 answer

Does GRE Tunneling support the Websocket Protocol?

Just curious because I am going to use a GRE Tunnel that has a ddos filtered ip, then tunnel it to my main gameserver. My gameserver uses HTML 5 Websockets and port 9300.
NiCk Newman
  • 167
  • 1
  • 1
  • 8
1
vote
1 answer

Limits of deep packet inspection wrt tunnels?

Multitun is a tunnel that encrypts connections and sends them bulk over a web socket, which is a web standard. So firewalls that ensure the expected protocol is running on the allowed port, will just pass it through as being compliant with HTML. …
HorseHair
  • 171
  • 7
1
vote
1 answer

How secure is split tunneling on a VPN?

What protocols get encrypted and go through the VPN? Is it just port 80 and DNS traffic that does not go through the VPN? Does this impose any security risks by running a split tunnel? Making the assumption that maybe we connected to a rogue AP by…
Jason
  • 3,086
  • 4
  • 20
  • 24
1
vote
0 answers

Pwn Plug like tunneling suite

Is there some sort of a (free) SSH tunneling suite like the one on the Pwnie Express' Pwn Plug (R2)? It has SSH over HTTP, DNS, ICMP, and other covert tunneling options and uses BackTrack 5 as a SSH revceiver. I would like the be able to test what…
David
  • 199
  • 2
  • 7
1
vote
1 answer

NAT traversal for IPsec AH protocol

Wherever I looked I only saw the description of NAT traversal for ESP protocol (for example: http://pic.dhe.ibm.com/infocenter/iseries/v6r1m0/index.jsp?topic=/rzaja/rzajaudpencap.htm) It's looks that encapsulation of AH will work the same way (as…
Bush
  • 327
  • 4
  • 8
1
vote
1 answer

What is the difference between an HTTPS traffic setup with Stunnel and a SSL-VPN

We have a scenario where we cannot connect to our stunnel server running on port 443 on our network, which only allows access to Internet via a proxy server. On the contrary, when we tried a SSL VPN using Adito, we could connect to the HTTPS site…
lamso
  • 11
  • 3
1
vote
1 answer

Does opening an IPsec tunnel compromise the rest of my VPN?

Let's assume: I allow all of my VPN users to connect to various internal services (VPN's IP is allow listed) My VPN will be connected to a 3rd party network via IPSec Site-2-Site Tunnel. The purpose of this tunnel is to allow my users to securely…
user2530062
  • 163
  • 6
1
vote
1 answer

How to set up a restricted account for reverse SSH port forwarding in a safe way?

I have a server (M: Main) that I trust very much (I have it home, locked, with an alarm, etc), to which I can SSH from the internet. I also have a number of "remote servers" and "IoT devices" (O: Others) that I trust a bit less (because they are…
Zorglub29
  • 255
  • 1
  • 11
1
vote
1 answer

Could someone the real IP address when using tunnel protocols like ngrok, localtunnel or serveo?

Could someone get the real IP address that is hidden behind the URL generated by tools like ngrok, localtunnel or serveo?
thecow milk
  • 13
  • 3
1
vote
2 answers

SQL Server connections with TLS vs. through an encrypted tunnel?

I'm developing an application that will connect to Microsoft SQL Server in a local network: I'm considering whether these connections need to use TLS Or whether to leave it to the customer's administrators to use an encrypted tunnel, if they see…
symbiont
  • 111
  • 3
1 2 3 4
5
6 7 8