The secure tag has no wiki summary.
0
votes
0answers
54 views
Solution overview of “theft proof” online video software [closed]
What are the solutions for securing online videos against download theft?
Background: I want to make a video tutorial site (I am using joomla) where members only can view the videos. The videos ...
0
votes
1answer
91 views
Offshore application development - Access to dev network (Security best practice)
Let me start by telling you that I'm not very technical, but need to provide someone with some guidance and I was hoping you could assist.
The situation is:
Dev and Prod subnets (Not sure if ...
2
votes
1answer
64 views
How do I create a certificate for WLAN users?
I would like to create a certificate system to add security to a small business wireless network. I understand that certificates can be used as authentication on a WLAN. Does anyone know how to do ...
0
votes
4answers
184 views
Windows Server 2008 R2 secure enough for internet without 3rd party (hardware) firewall
I need to setup a Windows2008 Server R2 incl. SQL Server and IIS. The server is as far as I know directly connected to the internet.
My question is, is Windows 2008 R2 Server secure enough for this ...
2
votes
1answer
60 views
Recommended ufw port configuration to secure tomcat web-application ubuntu server?
Assuming an ubuntu server operating web applications on Tomcat (with redirection from apache 80 to 8080).
What is the recommended port configuration to secure the server? Thanks.
P.S.: I would like ...
1
vote
0answers
30 views
Oracle SGD 4.61.915 not closing Windows 2003 application sessions
I'm using a Windows 2003 Application Server and I have followed this article: http://download.oracle.com/docs/cd/E19351-01/821-1926/z40000df1311155.html#bbjiefec but still.. when i close a application ...
2
votes
1answer
373 views
how to secure an vmware esxi host on a root server?
for me, a vmware machine normally has 2 lan interfaces, one connected with the lan or the management computer and the 2nd one connected with the wan interface for public access.
so security is ...
0
votes
4answers
134 views
Secure file transfer to transfer files to clients
Today, our company is using an FTP Server to transfer files to clients, vendors and more.
Now, we want something more secure.
Needs
Uploading with FTP (Windows Explorer, no own program), Browser ...
1
vote
0answers
114 views
Secure Apache PHP vhost configuration
I'm looking to secure some websites running under apache using suexec. At the moment php is executed with the user/group of the file being executed. This seems to me, not secure enough. It stops ...
0
votes
1answer
63 views
Intranet Analytics solution?
I am looking for a web analytic package for a intranet network.
The main requirement is that the data should not go outside the network and that it should remain on the intranet.
This probably rules ...
0
votes
2answers
66 views
vbscript and secure connection
I don't know if anyone has been able to connect to a secure mssql server over the internet with vbscript using the adodb object
is there pilicy that restrict script connecting to secure servers?
1
vote
6answers
210 views
Ultra Secure Linux Server SSH Only
I'm setting up a secure server for my use only to store encrypted files, but it will need to be accessed from the internet. The server itself is in a secure location with no physical access which is ...
1
vote
4answers
108 views
Explanation of my SSH log file please
I'm trying to understand what I'm seeing in my SSH log file so that I can best defend against the bad guys. Particularly interested in understanding the number listed after "port" in the log. Here is ...
0
votes
2answers
258 views
CentOS: Log entries of /var/log/secure are not ordered by date and time - why?
Can you please tell me what can be the reason of log entries of /var/logs/secure be like this:
Mar 30 10:50:02 server2 proftpd: pam_unix(proftpd:session): session opened for user XXXXXXXXXXXXXX by ...
0
votes
1answer
33 views
Exchange 2003 encrypt external relay
I have a Postfix server filtering emails for an Exchange 2003 server. From the firewall, all incoming emails are routed through Postfix, gets filtered before it is delivered to the Exchange 2003 ...
0
votes
1answer
163 views
How to securely backup to S3
I am using the excellent s3 tools (http://s3tools.org/s3cmd) to backup files from a Linux based server to S3.
Does anyone know of a good strategy so that I can use this tool to upload o S3 in a way ...
0
votes
1answer
178 views
/var/log/secure user activity. also, httpd can not start without two users
i found some strange informations in /var/log/secure file:
Feb 10 02:02:04 server2364 usermod[30750]: unlock user `username1' password
Feb 10 02:02:04 server2364 usermod[30811]: lock user `username2' ...
0
votes
3answers
167 views
Securing up ubuntu on Amazon ec2
let's say you create a new instance on Amazon ec2 and you choose a default Ubuntu AMI. What things would you recommend for making the instance as secure as possible?
Elias
5
votes
2answers
167 views
Faster, secure, protocol/code required for long-distance transfer
I've ran into a problem and I'm looking for a new secure protocol/client/server that's faster over a 1Gb/s fibre link - let me tell you the story...
I have a pair of redundant, diversely-routed, ...
1
vote
2answers
428 views
Is it not secure download anything by torrent clients by server?
I read some thing about torrent , that any one can get our ip while download torrents or peer to peer connections.
Is there any way for secure downloading by torrent clients ?
1
vote
3answers
1k views
Secure ldap problem
I have tried to config my openldap to have secure connection by using openssl on Debian5. By the way, I got trouble during the below command.
ldap:/etc/ldap# slapd -h 'ldap:// ldaps://' -d1
...
1
vote
0answers
272 views
Securing portmap with multiple interfaces
I have an Ubuntu 9.10 server with a public and private interface. I'd like to run portmap only on the private interface for security, so in /etc/default/portmap I had set:
OPTIONS="-i 192.168.122.1"
...
1
vote
2answers
101 views
My host doesn't support secure file transfers. I don't have root access. Do I have any options at all?
I like this host a lot, and the lack of secure file transfer is the only thing stopping me from committing to them for a new e-commerce site. I've seen a few recommendations for WebDav, but that would ...
0
votes
4answers
407 views
Private IRC Channel
Assume I have an IRC server running on a linux box and the only way to get to that box is over ssh. I don't want to open any ports to the world, I just want folks with logins on that server to be ...
2
votes
3answers
72 views
Free FTP Client that automatically opens files for editing?
My company currently uses FTP Voyager as the main way for remote employees to access and edit their project files. We have a multi-user license for the non-secure version – i.e. usernames/passwords ...
1
vote
3answers
849 views
How to hack my own server?
Hello Im using Windows Server 2008 R2, yesterday I notice that my AD was not working propertly cause I cant manage users and mmc console dont allow me to work with any ad, dns relative consoles.
So I ...
1
vote
2answers
162 views
Password Vaults
The company I work for is looking to setup a web based application that will host the passwords. So it should use SSL and be able to have access controls implemented by user. It does not necessarily ...
3
votes
1answer
520 views
Best development setup for multiple server roles?
At the company I work for we have a pretty complex development environment. Our system runs on several servers, each server fills a different role and has its own code base. There might be more than ...
4
votes
3answers
257 views
Webapp for secure file delivery to customers?
Situation:
For each customer, I have a script that generates some customized configuration files for their installation (host addresses, options, organization names, etc.) I need to get these to the ...
2
votes
2answers
99 views
Secure USB flash drives that don't require a reboot
As a result of data loss, we now have a corporate policy (imposed by a major partner as a condition of continued funding, so non-negotiable) that only approved storage devices can copy data from our ...
0
votes
4answers
2k views
Force VPN use on Windows whenever connected to the internet?
The worker bees take our XP/Vista/Win7 laptops around the world. They connect to the Internet via wired, wireless or dialup connections (whatever is available in the area). How can I make it ...
1
vote
2answers
152 views
Providing a file upload system for a handful of (possibly unknown) people
I need to give access to a few people to upload some large (video) files to a server i manage. For myself, I'd use scp but as they are not me, I don't want to give them full ssh(/scp) access to the ...
6
votes
11answers
503 views
Will my URL stay secret if I never link to it?
I have a URL that I would like to share with my friend who needs the information on it, but I do not want the public to see it.
The URL refers to an index.html, which is in my public_html and ...
1
vote
1answer
273 views
Apache 2.2 Mod-dav-svn ignores SuexecUserGroup directive
While setting up mod_dav_svn on Apache 2.2.x on shared hosting, I've ran into some trouble. The main problem is that most of the vhosts use their own user/group, websiteX:clientX, and the svn ...
2
votes
3answers
201 views
Dedicated “Logging” Server
My Question: Does such a service currently exist, and if so, where on the web?
Details:
I understand that I can pay a consultant to build and host such a system, but I am wanting something that is ...
1
vote
8answers
3k views
Real one-time passwords (OTP) on Linux other than S/Key?
Surely it is no good idea to log into a remote system from an untrusted computer. But sometimes it is plain necessary. Exposing an unencrypted SSH keyfile is no option of course. Entering a regular ...
2
votes
6answers
316 views
Encrypted Email and Proxy to Bypass the Great Firewall
I have some friends travelling to China, and they would like to get email, use Skype, and browse the web without the fear of the government looking over their shoulder.
My first thought is to set up ...
2
votes
2answers
148 views
Secure Database
We are an Oracle database shop. I have an application for which I think Oracle likely isn't the best answer. I am looking for a lightweight, good performing and very secure database. The database ...
1
vote
6answers
215 views
How do I protect the database server?
Currently my database user and its password are pretty easily to guess, eg.
database user: dbadmin
database pwd : super + companyname
What and how to generate a secure a secure database password? ...
0
votes
1answer
64 views
latency time for three types of replication such as snapshot, transactional and merge
hi
i want to compute latency time for each type of replication with c# and then i want to compare these three types, that can be possible or not. what can i do for this performance? how can i compute ...
2
votes
3answers
176 views
How can I set up a casual proxy [closed]
I have a friend living abroad who can't access certain country specific sites.
He wants to decide who can use/not use it.
So my question to you is:
Is there a small, simple application that can ...
3
votes
6answers
936 views
Secure hosted file sharing services for small businesses?
Scenario: A small business wants to share files securely with its clients. Some of the files are typical (e.g. word processing or spreadsheet docs), whereas some files may be large (e.g. database ...
12
votes
12answers
2k views
questionable timeservers in pool.ntp.org?
I've noticed that, after changing the reg settings outlined in Episode 52 of the Stack Overflow podcast to pool.ntp.org, my box keeps requesting time from gordo.foofus.net. The web site hosted on that ...
5
votes
4answers
174 views
Secure storage solution sought
I need an end-to-end multi-client/multi-supplier secure storage system, I can build it using various bits and pieces but it feels overcomplex - am I missing a trick?
Specifically I need to offer ...
8
votes
15answers
11k views
How to securly join two networks together over the Internet?
Let's say there are two locations. Both locations have their own fast Internet connections.
How do you join these two networks together such that every computer can see every other computer?
Do you ...
7
votes
3answers
2k views
How to perform a secure rsync between servers across an unsecured network
Basically what I'm asking is, has anyone come across a means by which to wrap rsync inside ssh.
With OpenSSH v4.9+ sftp has some nice options that allow you to chroot the incoming connection and such ...
3
votes
3answers
684 views
Secure internet accessible NAS
I would like to be able to set up and access a NAS securely via an internet connection. I would like to use an existing linux server I own, so essentially I am looking for recommendations for which ...
3
votes
9answers
5k views
Is there an alternative to /dev/urandom?
Is there some faster way than /dev/[u]random? Sometimes, I need to do things like
cat /dev/urandom > /dev/sdb
The random devices are "too" secure und unfortunately too slow for that. I know that ...