Mar 14, 2019
Network Firewall are security devices that is used to stop or mitigate unauthorized access to private networks when they are connected to the internet.
seen from Portugal
seen from United States
seen from Iraq
seen from Australia
seen from Brazil
seen from TĆ¼rkiye
seen from Netherlands
seen from United States
seen from Netherlands
seen from Netherlands
seen from United States
seen from Netherlands
seen from Italy
seen from United States
seen from United States
seen from Germany
seen from Japan
seen from South Korea
seen from Germany
seen from United States
Network Firewall are security devices that is used to stop or mitigate unauthorized access to private networks when they are connected to the internet.
You can block internet access to a program for unnecessary updates and unwanted internet access using the windows firewall.
What is malware? Malware is short for malicious software and also known as malicious code. Hackers exploit security weaknesses on your server to gain access to your website and install malicious code. They use your website to spread viruses, hijack computers, and steal sensitive data such as credit card numbers or other personal information. Malware code is not easily detected and may infect your customersā computers when they visit your website.
Securing your MongoDB server
As Iām sure many of you know, there has been a massive amount of open MongoDB servers on the internet that have been discovered, and āhackersā have been taking advantage of this. Part of what makes these attacks so easy for āhackersā is that the tools are already there, just google āmongodb-toolsā and youāll see tools like mongodump, mongoexport, mongorestore, etc, as well as of course just the mongo shell. By leveraging these tools itās incredibly easy for āhackersā to make extremely simple scripts to automate the process of dumping, dropping, and inserting a ransom note or in some cases, just dropping and inserting a ransom note.
Letās get into how to protect against these kind of āattacksā. Now first of all, if you are running the MongoDB instance on the same server that your code that needs to access the MongoDB is running on, this is super easy. Just get a firewall (however you should still enable authentication, read further)! You should have one regardless. I recommend firewalld, as itās super easy to use, works great, and is in basically every single distributions repositories. For CentOS 7/RHEL you can do:
sudo yum install firewalld # installs firewalld sudo systemctl enable firewalld # enables firewalld to run on boot sudo systemctl start firewalld # starts firewalld
There you go! Now if you need to run your MongoDB server on a server different than the one that is running your app itself, itās slightly trickier, but still ridiculously easy, we just need to add authentication and a rule on who can access port 27017 on our MongoDB server. First, do the following in the mongo shell:
use admin db.createUser({ Ā user: "<username>", Ā pwd: "<password>", Ā roles: [ "root" ] });
Now like with Regex, itās best to be as specific as possible, so for example, if your application only needs access to the āproduction_memesā database, then just create a user that has the role: { role: āreadWriteā, db: āproduction_memesā }, of course, you still should create a root user for yourself, just donāt use it in the application.
Then we make sure MongoDB is always started with authentication. Find your MongoDB configuration (for me itās /etc/mongodb.conf) file and add the following line:
auth = true
Now since you can also start mongodb via the āmongodā command, we should add the following in our .bashrc in case we accidentally start mongod from bash instead of systemctl start mongodb:
alias mongod='mongod --auth'
Now to use the mongo shell as root and āloginā we just do:
use admin db.auth("<username>", "<password>");
There we go! If you need to connect from mongoose for example, we would do:
mongodb://<username>:<password>@localhost:27017/<dbName>?authSource=admin
Remember to read the username and password from a file in another directory so that your application wonāt accidentally expose itās credentials if the source were to get leaked somehow.
Now letās add the rule to our firewalld configuration to only accept traffic from the appās main server:
firewall-cmd --permanent --zone=public --add-rich-rule=' Ā rule family="ipv4" Ā source address="<your app server IP address>" Ā port protocol="tcp" port="27017" accept'
firewall-cmd --reload
Now I certainly did not cover all there is, so you should still check out the MongoDB Security Checklist. I hope this story taught you how easy it is to do these types of āattacksā and gave you a start on how to keep your MongoDB secure!
Como Bloquear con Iptables
Como Bloquear conĀ Iptables
ĀæCĆ³mo bloquear direcciones IP particulares o un host con el comando iptables de Linux? Para ello es necesario utilizar las siguientes sintaxis para colocar una direcciĆ³n IP o host, que se desea bloquear, con el comando iptables. Ejemplo: Bloquear las solicitudes entrantes desde la IP 1.2.3.4 El siguiente comando sirve para ignorar cualquier paquete que viene de la direcciĆ³n IP 1.2.3.4:ā¦
View On WordPress
FIREPLACE ROUTE X GRAF
We were asked to write one of the routes for the platform Graf. The Septemberās route. We thought that weather will be still nice by this time of the year so we decided to prepare something for the outdoor.
First step was to ask Zioxla for a list of 5 plants that she would think worth to visit in Barcelona. Then, the American editor gave us a list of 4 places related to flowers and plants. Then, we decided to aske artist Ryan Rivadeneyra to make a route through the selected places, focusing in certain elements he would pick up from each location.
Thatās the final text and photos he made for the route: http://www.graf.cat/en/ruta/agost-2015-per-quim-packard-i-angela-palacios-fireplace/
Thanks Zioxla and Ryan for the collaboration. And thanks to Graf for the invitation!
This project will continueā¦
Will my firewall stop an attack ?
Will my firewall stop an attack ? #hacked #breach #cybercrime #security #firewall #networking
Iāve been asked this question several times since cyber security came into the spotlight. The answer is neither a firm yes or no. A firewall is designed to secure access to network segments on the inside, and objects / entities on the outside. For many years, a firewall has formed the foundation of network security, but in todayās world of Advanced Persistent Threats, is this enough ? What is aā¦
View On WordPress
MikroTik RouterOS Free Download
MikroTik RouterOS FreeĀ Download
MikroTik RouterOS Free Download
MikroTik RouterOS Free Download Latest Version ISO Image. It is full offline installer standalone setup of MikroTik RouterOS for Routers and Intel PC X86.
MikroTik RouterOS Overview
MikroTik RouterOS is an operating system based on the Linux Kernel. This OS can beā¦
View On WordPress