can
-
Posts
9 -
Joined
-
Last visited
Posts posted by can
-
-
You have the NAS accessible on the local LAN and want internet access to the files, just setup a tunnel or VPN into one of the home boxes to access the NAS over the tunnel or VPN and pull files down from the internet as needed. Not sure what the issue is. I wouldn't put anything stored on a NAS directly on the internet or in a DMZ, and even though its a NAS, its still a possible pivot point depending on the underlying OS and software in use, so for me, keep everything locked down, VPN home, then access what you need.
The thing is I do not wnat to use special software, or have it accessable to the internet. The Problem with the GoFlex NAS boxes, is that they must be conntected to the internet to be setup. There is no way around that.
That was easy to fix, just block the mac address is my firewall from accessing the internet. I do not want my NAS connected to the internet.
But in doing the the Seagate app for things like android and iOS will not work unless the NAS is taking to Seagates servies. To fix that little number I found a paid app that can access SMB shares.
-
You have to know who you are defending against before you can put up your defences.
Well the sad thing is, if you plan for one kind of atack, you leave yourself open to pritty much anything else.
That doesn't sound like you need security, it sounds more like you need a good backup. There are plenty of services which offer that, I'd make sure you go off site in some way just in case anything bad happens to your house.
I did have a good online backup service, I'd rather not say who I used, but they screwed up there service and I ended up dropping it.
Have you blocked ports on the way out or in? Good egress filtering is just as important as ingress filtering however it is very hard to do and keep a system running as apps tend to need to talk outbound and you end up opening ports all over the range just so your favourite editor can check for
I have set my firewall to block all ports and I have to open the ones I need to use the services I want, that covers both inbound and outbound.
I have my antviurs, firewalls and OS's set to auto update. And I do check on them every few months or so to make sure things are kept upto date.Make sure everything is patched, the best way to do this is to use something like Nessus home feed and give it credentials so it can do full checks.
Back up your stuff to some remote system just in case.
-
What BS is out there and what are you worried about?
If you are worried about attacks you have to think of the following:
Who is going to attack you?
What do you have to hide/lose if they get in?
How much budget in both time and money do you have to put in to this?
Where is your personal balance point between usability and security?
You are asking two questions, one, how should I lay out my network and how should I secure it. You need to break these down, come up with a good structure and then make sure the software on it is locked down.
Well the not so shocking, NSA and Microsoft exploation that has been going on in the news for a while now.
As for your question on who is going to be attacking you, well anybody from anywhere. I know the most secure thing to do it, just unplug the internet and the wifi, my home network will work just fine, even without the net connected.
Well budget wise I don't have any money to spend anymore, I already have the Seagate NAS boxes, I picked them up from the clearence bin.
I don't have anything to hide, but I have my iTunes libary and a tone of eBooks, funny gif/memes etc that I would rather not loose, most are backuped to DVD or Bluray.
As for usability and security, I am already running an antvirus and firewall both from sepreate venders, that and I have my Linux hardware firewall, running and for sometime, hell I have even blocked all but some ports.
-
What is the question? You've given a lot of facts and mentioned FreeNAS and a new firewall build but not actually said what you are trying to achieve. Is it just a network with a NAS somewhere on it or do you want more than this? What does the 2.4/5Ghz wifi have to do with it?
Sorry, I'm just lost on how I should setup my home network, with all the BS out there. I'm just thinking aloud.
I'll try and put it this way.
What I am slowly working towards now is a Network, with two Seagate NAS Boxes that houst all my data. And have three main computers, being a laptop, Windows PC and my Mac. Stilling running a Wireless access point with both 2.4 and 5Ghz radio frequency.
Or, should I just chuck the whole thing in and...
Setup a FreeNAS box with both hard drives from the Seagate NAS's I have (I have blocked the internet from talking to the Seagate NAS boxes) and use a few laptops running Linux on my main system with Windows as a side thing. And turn off the 2.4 Ghz side of my access point and only use the 5Ghz side.
What I am trying to achieve is something that would be more secure. What has been floating in the news of late has me a little worried.
-
Well with the latest news floating about, I have to wonder if I should look at reworking my home network plans or just keep moving foward as is.
So for my own little setup, I am behind a Linux hardware firewall, and have two Seagate Cloud NAS boxes, along with a 2.4/5Ghz Wifi Router and a Gigibit switch on my network, all the computers I have connected over lan are gigibit, I'll explan why soon.
What has me trubbled, is this whole cloud thing. My Seagate NAS boxes are the GoFlex Home, my problem is they require access to the web, to get the bloody things up and running. Well I have done that and then in my (Hardware) Firewall blocked them. Now seagate has this whole access your files anywhere app for the iOS and Android devices, which sadly dosn't work for me, even when I am at home. Why, because it still requires the internet to connect, even when the NAS's are local. I was able to get around this with a 3th party app that is able to access SMB network shares.
These NAS boxes are for holding all my data, so that I can access any of my files from the network drive, without having to use a USB flash drive or what not to use them on a second computer, because I also use my NAS for backup, its nice to have the extrea speed when coping large files or even accessing large files accross my network. (Like streaming hak5 from my NAS)
---
Sadly I still want to have WIndows on one computer, mostly to jump on Second Life and play Left for Dead 1/2. But I am taking a wild guess that someone will tell me that both are on Linux and now are far easer to setup now.
I'm wanting to slowly draw myself into a place where on my local network, I have access to my all my data from a NAS and run OSX, Windows and Linux. Also in time, run both iOS and Windows Phone/Tablet (But with what is comming out, o hell no)
Or if I should start a freash Firewall, redo my network, with a FreeNAS (I did have a freeNAS setup a long time ago, but I had issues with useing only HDDs and the OS wasn't realy stable, this is before it was handed over to the new guys. The Seagate NAS'sI have, well two have a 3TB SATA drive each) system linked with my iMac running OSX any my main PC rinning Mint. Get an iPhone 5 or one of the new iPhones, so I can access the 5GHz Wifi, my iPhone 4s well can't. And turn off my 2.4 Ghz network. And go back to scanning my http logs and block any URL's that I am connecting to that I do not know of or don't want to have access too. (ATM I just look at the ads that are loaded and block them as they come up)
And two laptops as backup systems, and one as a server. (I have picked up a number of thrown out laptops, moslty banged up, but nothing really wrong with them)
---
Urg I never should have started backing up too DVD and bluray, I have fallen behind.
(Update)
Sorry I forgot to add, that I am using both a software firewall and an Antvirus on my windows system.
-
Yes, I was wonding about that. Thanks.
I was more throwing it out into the wild, seeing if someone else may have already come up with that.
If an admin can see this, coul you pleace movie this topic, or do I need to repost it?
Thanks.
I think you'll get a better response if you post this in the Pineapple's subforum (within hak5). It's confusing because they call the forum "Jasager" which is the name of the implementation of a program called Karma on a Fon router (http://www.digininja.org/jasager/).
Anyway, I'm sure you could write a script for what you're describing, but I wouldn't be the one to be able to give an example of such a script. I am a coder, but a math/stat coder.
-
Hi, while I was watching the end of your latest web show, I came up with a question, now I can't see this listed under the FAQ, so s0rry if this has already been done.
Can the Pineapple be configured in a way, with a second Wifi dongle, to automatically fined and connect to a open hotspot, (also agree to any terms and conditions pages) then connect to a VPN or Proxy. Also disconnect after a set time or data usage and reconnect with a new mac address.
All while hosting its open secure Wifi.
Its an idea I had.
-
My name is Mic a.k.a can
Favourite game: Left 4 Dead
Favourite OS: OSX
Favourite console: Playstation (First)
Nationality: Australian
Accent: English (US/Australia) All thanks to television.
Sex: Male
Race: English
Height: 1.9 m
Build: dropping the fat
Favourite author: Michael Moore.
Favourite movie: The Thirteenth Floor (1999)
Favourite TV Show: The Walking Dead
Other hobbies: Walking, thinking, reading.
Car: Saving to buy one, if I can pass the driving test
Occupation: Looking for work.
Well Hi, I guess, well I think. Anyway I'm more of a 2000/2006 hardware and software repair guy, for the moment I have a cisco switch on the table needing a replacemnt BR2335 battery; I'm thinking after the new year, with all the stuff going through the post.
I can add that, I'm fillmer with OSX (including mobile OS), Windows OS's, Debin, Ubuntu, Puppy, and a few others I can't recall.
And I'm wonding if anyone wouls create a template for this?
FFMPEG/MP4Box converting M4V to MP4
in Questions
Posted
So, I guess I should admit that this is an iTunes download, and yes there is no DRM on this file. And Yes, I have already demuxed and remuxed this file.
However, I wasn't able to include the subtitles and chapters in my remuxed MP4
So you understand what I am working with, I'll post the details of the 'file'
The Best thing for me to point out is, right now I only have the Video #1 and Audio #1 in an MP4 file. However I am waiting to keep/include (copy) Video #1, Audio #1, Text and Menu into a mp4 file.
Is anyone able to help me with a command with FFMPEG and or MP4Box?