The network-security tag has no wiki summary.
2
votes
0answers
33 views
Software to prevent daemons from binding/listening to local ports?
Having an issue with some not-so-bright developers creating daemon processes that are binding to the (not actually reserved) local ports on our Linux servers. Those ports being defined in:
cat ...
25
votes
2answers
551 views
What kind of network attack turns a switch into a hub?
I read an article today describing how a penetration tester was able to demonstrate creating a fake bank account with a $14 million balance. However, one paragraph describing the attack stood out:
...
2
votes
1answer
41 views
cross region security amazon ec2
At the moment, because it isn't possible to specify a security group from another region when allowing port access using amazon ec2's security groups, we have had to insert each individual IP into the ...
1
vote
1answer
33 views
Network Services Write/Modify Permissions on Inetpub Folder Potiential security issues
I have an asp.net web application that runs as a Content Management system for a website.
It was originally on an IIS6 Server. However the web application was recently moved to an II7 Server. After ...
0
votes
0answers
13 views
DD-WRT home VPN setup..help needed [migrated]
I currently have 2 routers.
Router 1 is my primary gateway. It is actiontec wifi router that I got from frontier communications. (192.168.1.1)
Router 2 is a Netgear N600 Dual Band, DD-WRT based ...
-1
votes
0answers
10 views
Difference connection security rules and IPSEC [closed]
I'm havin diffuculties seeing the difference between setting connection security rules (translated correct? I'm using a localized version) in a GPO or setting up IPSec in said GPO.
As I can basically ...
4
votes
2answers
109 views
How should I secure a corporate wireless network?
We are implementing a new WiFi network at my work, and I am trying to think through a design of the security for the network.
Use case 1: guests. We will have a captive portal setup, guests will ...
2
votes
2answers
41 views
Log incoming and outgoing connections on my Leased Line
I am a System Administrator at a college where we have a leased line internet connectivity and 32 Static IPs. The Local; network is running behind the Juniper Firewall. Now I would like to log all the ...
7
votes
1answer
759 views
Configuring WPA2-Enterprise with Freeradius
I'm trying to set up an authenticated wifi network with Freeradius. I've managed to get things working using self-signed certs etc.
The problem is Windows clients need to uncheck the "Automatically ...
0
votes
1answer
38 views
Where should I setup a staging environment in Amazon VPC? And testing?
I setup the production environment for my service in an Amazon VPC in Oregon:
2 availability zones
1 public subnet (including bastion, nat, and ELBs) and 3 private subnets (database, web servers and ...
3
votes
1answer
113 views
Should I dual home our webservers (DMZ/Internal network) or just do 1-to-1 NAT?
I'm setting up a rack of servers which will have 2 webservers and 10 internal servers that provide back end application support (migrating from an AWS environment). We'll have virtual machine ...
0
votes
3answers
66 views
Netflow/IPfix Analyzer for network threats and anomalies
I'm evaluating various options for Netflow/IPfix based analyzers which focus on identifying security threats and anomalies. It would be highly appreciated if someone can provide a list of tools with ...
0
votes
2answers
87 views
configure iptables to allow in/out bound connections from the WAN (web) and only a couple pcs on the LAN while blocking anything else
I have a Xen server with several Virtual Machines on it sitting along side normal pcs on my LAN. The VMs host content bound for web access. Httpd is one of them so lets use that as an example.
I ...
0
votes
1answer
72 views
Securing a switch
I have switch (HP ProCurve 1810-24G to be exact) and it's placed in a datacenter.
To secure the switch, there's a lenghty password on it. But, there's one great downside: anyone with the IP address ...
-1
votes
1answer
58 views
Securing network: Windows XP 64 bit Professional [closed]
For a small office network (e.g. 6 machines on LAN), using Windows XP 64 bit Professional as the OS on the server machine, I want to enable sharing of files on the server machine NTFS hard-drive ...
1
vote
0answers
111 views
Lots of activity on port 9001 to Tor-related domains… How can I probe this? [closed]
I was toying with iftop on my VPS, and I discovered that half of my connections were between my port 9001 and "Tor domains":
* :9001 <=> psilotorlu.torservers.net:34599 0b 80b 20b
* :9001 ...
0
votes
0answers
23 views
How secure is the SOAP API, between servers running in JAIL?
We where working on a project in order to link our own 2 different websites.
Then we (my dept. and IT) decided for one of it to take over its others content and user data. (The "master" site had ...
1
vote
1answer
172 views
Disable external Java apps network-wide
According to US CERT TA13-010A, all computer users are advised to disable Java 1.7 in their browser due to arbitrary code execution risks from a zero-day Java vulnerability; however, we rely on ...
0
votes
0answers
65 views
Firewall is down, but I still can't connect in from outside (Ubuntu)
I'm very confused right now. I have a server, Sahand, that I can connect from on campus too without issue. There's another server, Dena, that shares the same switch, etc.. also can connect to it.
...
0
votes
0answers
154 views
Network Segmentation - router, switches, or both?
I'm just looking for advice/best practices on how to properly segment my network with the goal of it being as secure as possible, but also easy to manage.
Currently, the network is flat and almost ...
0
votes
1answer
295 views
How to block specific IP on SonicWALL NSA240
We are being hammered by port scans from a specific IP address. How can I block this IP from my SonicWALL NSA240?
2
votes
1answer
278 views
shouldn't /etc/hosts.deny be intercepting this before it hits ssh logs?
I'm using a combination of /etc/hosts.deny and ufw on my ubuntu 10.04.04 server. Most days, I see failed ssh attempts from machines in the .com.cn domain, reported like so:
Failed logins from:
...
2
votes
0answers
28 views
OpenVPN bad source address from client [duplicate]
Possible Duplicate:
OpenVPN bad source address from client
I have one problem with OpenVPN.
There are a lot drops records in the openvpn log file on the server:
Mon Oct 22 10:14:41 2012 ...
2
votes
2answers
146 views
Hyper-V Manager - Host Access During a Catastrophe
How can I ensure that I can always have Hyper-V Manager access to a Hyper-V server, even in the event that the Active Directory Server is down (in a domain-login environment)?
Background:
The one ...
0
votes
0answers
86 views
Windows server 2008 R2 - disallow LDAP null bases
A security scan found out that LDAP allows null bases for server 2008. Does someone know how to disable it?
Thanks!
1
vote
2answers
320 views
Where Can I get good certification as server admin? [closed]
I programmer without job.
Where Can I get good security network certification (online ) as server admin, that will help me to get better Job?
Thanks
0
votes
2answers
62 views
Secure every connection between endpoints
Sometimes one has to work with software that hasn't built in security-features for non-local connections.
In fact, some client-libraries are sending credentials in clear text over the wire.
On the ...
1
vote
2answers
205 views
Malware scanners for apache log files
Are the any malware/security scanners out there, that can analyze apache error and access logs and tell me if I have potential risks on my server or if there is unauthorized access etc. ?
0
votes
1answer
234 views
Securing windows 7 based kiosk on network
What steps should be taken to secure a kiosk running windows 7 and a proprietary application on a network?
The kiosk requires the ability to make outgoing calls over port 443. I am looking for advice ...
5
votes
3answers
2k views
Is there danger to virtualizing a router?
I had read on a few forums about pfSense that said it was dangerous to virtualize pfSense. The reason that was stated was an attacker could use pfsense as a spring board for an attack on the ...
2
votes
2answers
274 views
Blocked connections passing through firewall. What is wrong?
In our company we have a small business router (Cisco RV082) on which we are using its standard configuration (block all incoming traffic). We also have an SMTP relay configured (using WS2008R2) so ...
1
vote
1answer
111 views
secure L2 connection
Due to some rapid changes I need to also provide vlan(s) in a new location. The topology looks like this:
(main location, vlans:id=6(workstations),id=8(phones))
|
my_switch01
\
\
...
3
votes
2answers
231 views
Is Windows Server 2008R2 NAP solution for NAC (endpoint security) valuable enough to be worth the hassles?
I'm learning about Windows Server 2008 R2's NAP features. I understand what network access control (NAC) is and what role NAP plays in that, but I would like to know what limitations and problems it ...
2
votes
3answers
121 views
What are some topics you'd like to see covered in an 'Introduction to Network Security' book?
I'm trying to put together a list of topics in Network Security and prioritize them accordingly. A little background on the book - we are trying to gear the text towards college students, as an ...
0
votes
2answers
104 views
last night, my server was doing something intensive with the hard drive
I have an ubuntu server running in my bedroom. It's connected to the internet. Last night, at 5am, it was doing some intensive i/o with the hard drive (I heard it) for like 20 minutes. I don't have ...
0
votes
1answer
143 views
Open Source Software that combines Snort and Cisco Blocked Lists
There used to be this software that existed maybe 8-10 years ago (I thought it was maybe called FloodGate?) It worked by having a Linux box bridge running snort or prelude. When it detected a DOS or ...
1
vote
1answer
239 views
How can i enter in Network Security Field [closed]
I am thinking of Entering in Network Security Field.
It can be securing windows network , linux network
But exactly don't ave the full picture how does that area is divided
I only have the vague ...
