5
votes
2answers
137 views

Best place in network to put syslog server for DMZ hosts?

I have a firewalled router that connects to two virtual Lans. The first lan is an administration network and the second a DMZ. My virtual machines in the DMZ need to send syslog messages to a syslog ...
0
votes
1answer
52 views

Providing root ssh access to virtual servers behind NAT? [duplicate]

We are a web hosting company. We have 4 Servers which are running OpenVZ on top of CentOS. Each of the server has around 50 containers running on top of it. We are planning to provide ssh root ...
2
votes
1answer
71 views

allowing forwarding on a root server, security risk?

Having a root server without iptables rules (I know this is not good, it's just temporary tho in my case), and having configuration like this (for VPN reason): echo 1 > ...
4
votes
2answers
171 views

How should I secure a corporate wireless network?

We are implementing a new WiFi network at my work, and I am trying to think through a design of the security for the network. Use case 1: guests. We will have a captive portal setup, guests will ...
2
votes
2answers
102 views

Log incoming and outgoing connections on my Leased Line

I am a System Administrator at a college where we have a leased line internet connectivity and 32 Static IPs. The Local; network is running behind the Juniper Firewall. Now I would like to log all the ...
3
votes
1answer
399 views

Should I dual home our webservers (DMZ/Internal network) or just do 1-to-1 NAT?

I'm setting up a rack of servers which will have 2 webservers and 10 internal servers that provide back end application support (migrating from an AWS environment). We'll have virtual machine ...
1
vote
0answers
402 views

Lots of activity on port 9001 to Tor-related domains… How can I probe this? [closed]

I was toying with iftop on my VPS, and I discovered that half of my connections were between my port 9001 and "Tor domains": * :9001 <=> psilotorlu.torservers.net:34599 0b 80b 20b * :9001 ...
2
votes
1answer
549 views

shouldn't /etc/hosts.deny be intercepting this before it hits ssh logs?

I'm using a combination of /etc/hosts.deny and ufw on my ubuntu 10.04.04 server. Most days, I see failed ssh attempts from machines in the .com.cn domain, reported like so: Failed logins from: ...
0
votes
1answer
309 views

Securing windows 7 based kiosk on network

What steps should be taken to secure a kiosk running windows 7 and a proprietary application on a network? The kiosk requires the ability to make outgoing calls over port 443. I am looking for advice ...
2
votes
2answers
350 views

Blocked connections passing through firewall. What is wrong?

In our company we have a small business router (Cisco RV082) on which we are using its standard configuration (block all incoming traffic). We also have an SMTP relay configured (using WS2008R2) so ...
0
votes
1answer
148 views

Open Source Software that combines Snort and Cisco Blocked Lists

There used to be this software that existed maybe 8-10 years ago (I thought it was maybe called FloodGate?) It worked by having a Linux box bridge running snort or prelude. When it detected a DOS or ...
1
vote
2answers
321 views

Where Can I get good certification as server admin? [closed]

I programmer without job. Where Can I get good security network certification (online ) as server admin, that will help me to get better Job? Thanks