The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
0answers
7 views

Cloudfront - How to invalidate objects in a distribution that was transformed from secured to public?

The setting I have an Amazon Cloudfront distribution that was originally set as secured. Objects in this distribution required a URL signing. For example, a valid URL used to be of the following ...
0
votes
2answers
51 views

Citrix secure gateway, DMZ settings not working as expected

Here's the scenario. I have a client with an old Citrix farm (PS4.5 + CSG 3.1), On doing some discovery about the network I discovered that all their Citrix connection traffic coming from the web ...
0
votes
1answer
39 views

Is the shred utility always safe given a good random number generator?

I recently experimented with different methods of disk randomization to find what would get the job done fastest. The openssl random number generator with AES in counter mode was said to be pretty ...
0
votes
1answer
72 views

secAst lib prerequisites too new for Debian/Utuntu 12 LTS?

as requested in FAQ I wrote here the question (there is no question for this product yet on this site?) This Asterisk securing tool looks very nice so I tried to test it out: ...
0
votes
2answers
51 views

Enable Apache Virtualhost Site To Only View Over SSL [duplicate]

Viewing site over http and https are both working but prefer to configure it so that ALL visitors ONLY go through the SSL connection so that it always start with http*s*://www.example.com - what am I ...
0
votes
2answers
572 views

Apache2 authentication NTLM without prompted semi Basic auth type

I succesfully configured ntlm authentication. Unfortunately config allows semi basic authorization. For example when I'm using tortoise svn1.8.4(with serf access lib), chrome or IE web browsers, they ...
1
vote
1answer
662 views

MS SQL Server configured for secure (SSL) connection allows non-secure connection from JDBC Client

I need to connect to the MS SQL Server 2008 r2 using the secure communication. I have been able to do the same using the following connection string: jdbc:sqlserver://<<db server ...
0
votes
2answers
233 views

restrict ssh, sftp access on ubuntu 12.04 through iptables or /etc/hosts.allow

I´ve tried to get into restricting access to a ubuntu server but i´m still unsure which way to go. the situation: We want to restrict access for ssh, and sftp to 4 clients with no static ip on a ...
1
vote
1answer
159 views

How do I redirect users from https://www.domain.com to https://domain.com?

Hi serverfault community! I did not purchase a wildcard certificate, but I see a big problem with my setup. When I navigate to https://www.redmeetsblue.org I do not have a certificate, like the one I ...
-1
votes
1answer
162 views

Setting up an irc where only people with a certain Vhost can talk [closed]

Well after trying out, ircd-hybrid, Unrealircd and inspircd. I could still not do what I need for my irc server. I need to make a secure channel / server. what I want to do is I want to have it so ...
0
votes
0answers
101 views

Secure FTP for classic ASP on IIS7

I have an application on Windows 2008 server that runs on IIS7 which is coded in classic ASP. The application does a straight FTP to a mainframe server using the wscript.shell utility. I am asked to ...
0
votes
1answer
58 views

How to securely store sensitive data on a shared-hosting provider while accessible to server-side scripts?

I want to store some sensitive data on my hosting provider which is a shared-hosting, lets say for example on MySQL, and i want it to be accessible to the website(server-side languages like PHP) ...
0
votes
1answer
119 views

secure cookies when https is done on balancer, but balancer->appserver is http

We're trying to maintain PCI compliance for our application and after an audit, the report was telling us that we need to set the secure flag on our cookies. The site is HTTPS (using pound for https ...
0
votes
2answers
83 views

Secure NFS implementation (or other solution for mounting home directories on multiple servers)

Is there any chance to secure NFS so it can authenticate mount requests more than by IP address? Of course I am aware that NFS by design does not allow it but I think of any wrapper for it or may be ...
2
votes
2answers
100 views

Secure upload of big files to Ubuntu server

I need to allow my users an easy way to create a directory and upload a few files to this directory on my Ubuntu server. I also need this to comply with the following requirements: Must use the ...
1
vote
3answers
221 views

SSH autologin works sporadically

I am installing 20 servers. On each, with a specific user I created a dsa key. I did cat key.pub from each server onto ~/.ssh/authorized_keys of the first server I verified all servers can log in ...
1
vote
2answers
174 views

Hardware VPN solution?

I have following situation: I have three clients in 3 different cities. They are all 24/7 available computer machines running in different schools and collecting energy measurements in the buildings. ...
1
vote
1answer
180 views

Offshore application development - Access to dev network (Security best practice)

Let me start by telling you that I'm not very technical, but need to provide someone with some guidance and I was hoping you could assist. The situation is: Dev and Prod subnets (Not sure if ...
2
votes
1answer
162 views

How do I create a certificate for WLAN users?

I would like to create a certificate system to add security to a small business wireless network. I understand that certificates can be used as authentication on a WLAN. Does anyone know how to do ...
0
votes
4answers
492 views

Windows Server 2008 R2 secure enough for internet without 3rd party (hardware) firewall

I need to setup a Windows2008 Server R2 incl. SQL Server and IIS. The server is as far as I know directly connected to the internet. My question is, is Windows 2008 R2 Server secure enough for this ...
2
votes
1answer
288 views

Recommended ufw port configuration to secure tomcat web-application ubuntu server?

Assuming an ubuntu server operating web applications on Tomcat (with redirection from apache 80 to 8080). What is the recommended port configuration to secure the server? Thanks. P.S.: I would like ...
1
vote
0answers
53 views

Oracle SGD 4.61.915 not closing Windows 2003 application sessions

I'm using a Windows 2003 Application Server and I have followed this article: http://download.oracle.com/docs/cd/E19351-01/821-1926/z40000df1311155.html#bbjiefec but still.. when i close a application ...
3
votes
1answer
3k views

how to secure an vmware esxi host on a root server?

for me, a vmware machine normally has 2 lan interfaces, one connected with the lan or the management computer and the 2nd one connected with the wan interface for public access. so security is ...
0
votes
4answers
190 views

Secure file transfer to transfer files to clients

Today, our company is using an FTP Server to transfer files to clients, vendors and more. Now, we want something more secure. Needs Uploading with FTP (Windows Explorer, no own program), Browser ...
2
votes
1answer
348 views

Secure Apache PHP vhost configuration

I'm looking to secure some websites running under apache using suexec. At the moment php is executed with the user/group of the file being executed. This seems to me, not secure enough. It stops ...
0
votes
1answer
219 views

Intranet Analytics solution?

I am looking for a web analytic package for a intranet network. The main requirement is that the data should not go outside the network and that it should remain on the intranet. This probably rules ...
0
votes
2answers
216 views

vbscript and secure connection

I don't know if anyone has been able to connect to a secure mssql server over the internet with vbscript using the adodb object is there pilicy that restrict script connecting to secure servers?
1
vote
6answers
407 views

Ultra Secure Linux Server SSH Only

I'm setting up a secure server for my use only to store encrypted files, but it will need to be accessed from the internet. The server itself is in a secure location with no physical access which is ...
1
vote
4answers
153 views

Explanation of my SSH log file please

I'm trying to understand what I'm seeing in my SSH log file so that I can best defend against the bad guys. Particularly interested in understanding the number listed after "port" in the log. Here is ...
0
votes
2answers
685 views

CentOS: Log entries of /var/log/secure are not ordered by date and time - why?

Can you please tell me what can be the reason of log entries of /var/logs/secure be like this: Mar 30 10:50:02 server2 proftpd: pam_unix(proftpd:session): session opened for user XXXXXXXXXXXXXX by ...
0
votes
1answer
85 views

Exchange 2003 encrypt external relay

I have a Postfix server filtering emails for an Exchange 2003 server. From the firewall, all incoming emails are routed through Postfix, gets filtered before it is delivered to the Exchange 2003 ...
0
votes
1answer
288 views

How to securely backup to S3

I am using the excellent s3 tools (http://s3tools.org/s3cmd) to backup files from a Linux based server to S3. Does anyone know of a good strategy so that I can use this tool to upload o S3 in a way ...
0
votes
1answer
355 views

/var/log/secure user activity. also, httpd can not start without two users

i found some strange informations in /var/log/secure file: Feb 10 02:02:04 server2364 usermod[30750]: unlock user `username1' password Feb 10 02:02:04 server2364 usermod[30811]: lock user `username2' ...
0
votes
3answers
248 views

Securing up ubuntu on Amazon ec2

let's say you create a new instance on Amazon ec2 and you choose a default Ubuntu AMI. What things would you recommend for making the instance as secure as possible? Elias
5
votes
2answers
225 views

Faster, secure, protocol/code required for long-distance transfer

I've ran into a problem and I'm looking for a new secure protocol/client/server that's faster over a 1Gb/s fibre link - let me tell you the story... I have a pair of redundant, diversely-routed, ...
1
vote
2answers
519 views

Is it not secure download anything by torrent clients by server?

I read some thing about torrent , that any one can get our ip while download torrents or peer to peer connections. Is there any way for secure downloading by torrent clients ?
0
votes
3answers
3k views

Secure ldap problem [closed]

I have tried to config my openldap to have secure connection by using openssl on Debian5. By the way, I got trouble during the below command. ldap:/etc/ldap# slapd -h 'ldap:// ldaps://' -d1 ...
1
vote
0answers
560 views

Securing portmap with multiple interfaces

I have an Ubuntu 9.10 server with a public and private interface. I'd like to run portmap only on the private interface for security, so in /etc/default/portmap I had set: OPTIONS="-i 192.168.122.1" ...
1
vote
2answers
107 views

My host doesn't support secure file transfers. I don't have root access. Do I have any options at all?

I like this host a lot, and the lack of secure file transfer is the only thing stopping me from committing to them for a new e-commerce site. I've seen a few recommendations for WebDav, but that would ...
0
votes
5answers
625 views

Private IRC Channel

Assume I have an IRC server running on a linux box and the only way to get to that box is over ssh. I don't want to open any ports to the world, I just want folks with logins on that server to be ...
2
votes
3answers
174 views

Free FTP Client that automatically opens files for editing?

My company currently uses FTP Voyager as the main way for remote employees to access and edit their project files. We have a multi-user license for the non-secure version – i.e. usernames/passwords ...
1
vote
3answers
2k views

How to hack my own server?

Hello Im using Windows Server 2008 R2, yesterday I notice that my AD was not working propertly cause I cant manage users and mmc console dont allow me to work with any ad, dns relative consoles. So I ...
1
vote
2answers
204 views

Password Vaults

The company I work for is looking to setup a web based application that will host the passwords. So it should use SSL and be able to have access controls implemented by user. It does not necessarily ...
3
votes
1answer
791 views

Best development setup for multiple server roles?

At the company I work for we have a pretty complex development environment. Our system runs on several servers, each server fills a different role and has its own code base. There might be more than ...
4
votes
3answers
455 views

Webapp for secure file delivery to customers?

Situation: For each customer, I have a script that generates some customized configuration files for their installation (host addresses, options, organization names, etc.) I need to get these to the ...
2
votes
2answers
124 views

Secure USB flash drives that don't require a reboot

As a result of data loss, we now have a corporate policy (imposed by a major partner as a condition of continued funding, so non-negotiable) that only approved storage devices can copy data from our ...
0
votes
4answers
4k views

Force VPN use on Windows whenever connected to the internet?

The worker bees take our XP/Vista/Win7 laptops around the world. They connect to the Internet via wired, wireless or dialup connections (whatever is available in the area). How can I make it ...
1
vote
2answers
187 views

Providing a file upload system for a handful of (possibly unknown) people

I need to give access to a few people to upload some large (video) files to a server i manage. For myself, I'd use scp but as they are not me, I don't want to give them full ssh(/scp) access to the ...
6
votes
11answers
545 views

Will my URL stay secret if I never link to it?

I have a URL that I would like to share with my friend who needs the information on it, but I do not want the public to see it. The URL refers to an index.html, which is in my public_html and ...
2
votes
1answer
452 views

Apache 2.2 Mod-dav-svn ignores SuexecUserGroup directive

While setting up mod_dav_svn on Apache 2.2.x on shared hosting, I've ran into some trouble. The main problem is that most of the vhosts use their own user/group, websiteX:clientX, and the svn ...