Security is not a product, but a process.

learn more… | top users | synonyms (2)

-1
votes
0answers
17 views

Are there wifi routers that provide good connectivity over a very short range [on hold]

Looking for a solution to extend a secure closed system with wifi. The goal is to allow client devices to move around a shop floor without losing connectivity but lose connectivity if taken near to ...
-1
votes
2answers
27 views

Open port to only one external IP address

I am having trouble with unwanted traffic on a certain open port and want to lock the open port so it only allows incoming traffic from One single external IP address. I have had a Google and cant ...
1
vote
2answers
36 views

Windows UAC disabled but I'm still getting the elevation pop-up

I have UAC disabled on my Windows 2008R2. Why am I still getting UAC "Windows needs your permission to continue" window before trying to change Owner of a folder? My user is a member of the ...
1
vote
1answer
38 views

Allowing Internet traffic into DMZ using Azure Network Security Group

I am trying to create a simple DMZ using Azure Network Security Groups, using a Barracuda WAF as the public entrypoint into the DMZ, however I am having some trouble allowing internet traffic to ...
0
votes
0answers
28 views

Debian server hacked - root login on /dev/tty1 - therebel exploit [duplicate]

I have a test server running Debian Wheezy (Kernel 3.2.0-4-amd64) and OwnCloud 7. It is a virtual machine hosted on a Debian Wheezy kvm Server. It uses an own IP address configured via br0. I made ...
0
votes
1answer
15 views

How to lower security level of IE on Win 2008R2 to allow product register?

There is IE 11 installed on Win2008R2 server. After installing a Visual studio express, we are asked to register the software. A user account was created on outlook.com. However after entering login ...
0
votes
1answer
28 views

When authenticating through Internet LDAPS or LDAP+RADIUS [on hold]

I am setting up a LDAP server in order to centralize my users accounts. Some servers that will need to access to this LDAP Server are in remote locations and will access through Internet. Since PAM ...
1
vote
1answer
70 views

How can I avoid passwords

I'm the default IT guy at a small family business. We have 5-10 employees that only work at the office for about half the year. Because of this, it's a pain to have unique passwords - so people seem ...
0
votes
0answers
18 views

Checking security on a shared hosting server [closed]

I am in the process of testing different hosting shared servers and I am very concerned about the security of the server. Thats why I would like to ask for advice on how to do to determine whether a ...
3
votes
4answers
1k views

Am I at risk by leaving a test FTP account available on the server?

I have two Filezilla server instances on different WAN connections, both mapping to the same /test directory on the file server. To validate that clients have connectivity I have a read/list only ...
0
votes
1answer
7 views

VBulletin 3.6, disable “Invalid SQL” errors

VBulletin likes to dump SQL query and database metadata in case of query-error. I do not find it entertaining from security point of view. Is there a way to disable this and just show "something went ...
0
votes
1answer
8 views

vSphere-created node complaining about ECDSA fingerprint?

I just cloned an Ubuntu template in vSphere Client, just like I've done hundreds of times before. It didn't give me any errors, however when I went to SSH into this server to test it, I get the ...
1
vote
2answers
79 views
+50

Should I need to provide a root certificate when setting SSL cert on nginx

In Qualys SSL test always warn me that the root certificate is an extra download and can be safely removed. However, from Comodo website, their guide on installing cert on nginx is NGINX Needed for ...
1
vote
1answer
24 views

Does it make sense to remove NFS from a simple web server?

Does it make sense security- and performance-wise to remove NFS on a simple server which has ~10 Wordpress websites? Or is simply stopping the services enough?
0
votes
0answers
28 views

Docker non-root secure?

If I set up a Docker container on an Ubuntu server, and then let it run arbitrary/untrusted code like uploaded PHP, Python etc. as a NON-ROOT user. Is this totally contained and secure by ...
0
votes
1answer
50 views

Strange TCP Flood / Flood from Port 445

Good Evening. Today I noticed a strange flood on a box that I am working with, here is a dump from tcpdump: 23:21:07.580917 IP (tos 0x0, ttl 64, id 5746, offset 0, flags [DF], proto TCP (6), length ...
0
votes
1answer
12 views

Viewing older entries for lastb on linux

I have a server (Amazon Linux) that has been up for 261 days: [server]$ uptime 16:29:46 up 261 days, 4:47, 1 user, load average: 0.05, 0.16, 0.18 I am trying to find out if there have been any ...
0
votes
0answers
8 views

SQL 2012 IPSec or SSL

I have a requirement to secure connections to SQL server. (at transit that is) - TDE will be used for encryption at rest. SQL provides two options which are either certificate based SSL or Windows ...
2
votes
1answer
36 views

Is default Apache version in Ubuntu 14.04 secure?

I have installed apache on ubuntu server 14.04 using apt-get. I set up a simple site, uploaded a few pictures etc, the website is working. I've decided to take a look at security of the thing using ...
0
votes
1answer
49 views

Account lockouts not in Event Viewer

I am having trouble getting Windows Server 2008 to log when domain user accounts are being locked. My Domain Controllers are all Windows Server 2008 R1. I am able to find Audit Failure events (ID ...
-1
votes
2answers
47 views

Can one domain have 2 or more SSL certificates?

I have googled and found this post: http://security.stackexchange.com/questions/46988/is-it-technically-possible-to-configure-two-different-ssl-certificates-for-the-s If it actually is possible, then ...
4
votes
1answer
167 views

Sendmail - Is it secure, and really essential?

I have a web application server running Ubuntu. The Application is built in Python/Django, but does not have any specific use cases to send email. We have log management software that allows us to ...
0
votes
2answers
36 views

is there a way from iptables/iproute to forward all traffic to my IDS and also keep the regular flow

The reason of this, is that to catch all packages into my IDS keeping my existing enviroment, so the IDS does not become a single point of failure. If route all my traffic into my IDS and from my IDS ...
4
votes
2answers
701 views

Which CentOS Version Should I Use?

I have some used rackmount servers (Dell R610, HP DL180 G6, HP DL360 G5) that I intend to use for on demand video streaming in a colocation environment. I would like to have them all on the same OS to ...
1
vote
1answer
29 views

security group rules between EC2-classic and VPC server

We are currently using a set of Amazon EC2-classic servers for hosting our live and staging environments. We've got a couple of web servers and a background worker server in each environment. We've ...
3
votes
2answers
31 views

Docker remote access security

Assuming I am running several docker containers on a local server. When I give third parties ssh access to my server, any third party will have control over the docker manager. How can I make sure ...
0
votes
0answers
23 views

Information regarding netstat output

On netstat, I see my port 22 in connection with 122.225.97.99. Does this mean someone is accessing ssh .. OR is it just something related to ubuntu user@ubuntu:~$ netstat -ntu Active Internet ...
1
vote
1answer
90 views

Encrypting SMB traffic with Samba

We use Samba on Ubuntu 14.04 LTS as a PDC (primary domain controller) with roaming profiles. Everything works fine, except for if we try to enforce encryption via setting: server signing = ...
0
votes
1answer
39 views

Secure Database Password Contained Inside a File

I've got a Linux based application (Java) that connects to an external database (PostgreSQL) in the same LAN. However, due the sensitiveness of the database contents I would like to avoid the admins ...
-1
votes
1answer
39 views

How to load sites from your own server as localhost (ssh tunnel trickery)

I want to load a site from my server as if I'm on the server as localhost. Because some areas are restricted to localhost on a purpose. Now normal ssh tunnel like ssh -L 8080:localhost:80 ...
0
votes
1answer
79 views

Getting lots of traffic from russia to an unpublished site

I am currently building a website. Currently nobody knows about it but it is already reachable for testing purposes. Now I saw, that I get a lot of traffic from russia (Its a german website hosted on ...
10
votes
0answers
146 views

What do the OS X authorization mechanisms actually do?

Background  I'm trying to glean a better understanding of the OS X login process, in order to decide the best way for achieving VPN Single Sign On. Please do correct me if I'm wrong, but I believe ...
1
vote
1answer
39 views

.htaccess query string blocking phpmyadmin

After phpmyadmin login, I get this error message Error in Processing Request Error: 403 Error text: Forbidden" I found that removing the following lines from .htaccess it doesn't give any error ...
1
vote
1answer
38 views

Validating SSL/TLS renegotiation flaw

Our vulnerability scanner (Saint-based) is claiming that a large number of devices and servers are susceptible to the SSL/TLS renegotiation flaw (CVE-2009-3555). Most of these servers and devices are ...
-1
votes
0answers
47 views

Allowing root login, but denying any actual logins [migrated]

A friend told me a few months ago about an audit where he discovered root logins were enabled via SSH. This obviously ended up on the report, but when questioned the admin told him that he had set up ...
4
votes
0answers
38 views

Linux graphical password dialog trick security [migrated]

When we run a command by sudo, the password is asked [sudo] password for user If the sudo is not typed the password should not be asked. If asked, I would assume it as a fraud by the application. ...
-2
votes
1answer
55 views

VirtualBox Networking Lab Configuration [closed]

I'm creating a lab for a project that will test a network security defense product's effectiveness in detecting various attacks. I have a physical server with 32GB of RAM and VirtualBox to create the ...
0
votes
0answers
19 views

My Hosting Infected with CryptoPHP Script Hostgator [duplicate]

Before 10days Hostgator migrated server to Indian Servers , and they said it is highly secure, As for more than 10 days i am getting problems in My backend word press plugins, So last 10 days i was ...
2
votes
0answers
25 views

Certificate can only be used by network service account

Issues : Our service is using one certification for partner service call. It worked well in IIS site which is running as network service account. But when we run test the code as administrator ...
0
votes
0answers
5 views

OSX Mavericks: package installs fail, Gatekeeper seems broken [migrated]

For some reason my OSX Gatekeeper seems to be broken. Every time I try to install software I get: the package was signed with a certificate that has expired. However, when looking at the certificate ...
-1
votes
0answers
15 views

How to set up Fail2Ban for my dynamic ip [duplicate]

I am setting up fail2ban for my VPS and need to know what value should i specify for "ignoreip" , I have a dynamic ip from which I connect to my Vps and it generally changes every week. Can I put ...
2
votes
0answers
35 views

Display port security state of an HP 3COM 5120 switch port

I'm using an HP-A5120-24G-SI switch and I'm asking how to obtain the current state of the port-security module for a certain port. I'm able to view the current settings using display port-security ...
1
vote
0answers
32 views

ModSecurity phase not working?

Sorry I am very new to modsecurity (2.8). So I made my first rule to block a referrer spam with the following: SecRule REQUEST_HEADERS:Referer "buttons\-for\-website\.com" ...
0
votes
3answers
45 views

aws ec2 security group and centos ip tables

I try to change the SSH port from 22 to another port (218). In AWS EC2, I shall add the rules in security group or in IP Tables? Is there any guideline/references recommended for EC2 Security ...
1
vote
3answers
360 views

Confused about what I'm seeing in my apache access log (think I might have been hacked)?

I have a VPS running CentOS. I installed apache and configured the access log. Just checked it and found some interesting traffic: VPS-Hostname MYIP MYIP - - [23/Dec/2014:16:47:20 -0500] "GET / ...
1
vote
1answer
56 views

What is the best way to block IPs from an apache2 web server?

I'm asking myself whats the best way to block certain IP Addresses (or whole blocks from countries like china, south korea) from accessing my apache2 web server. I'm aware of methods using Allow ...
4
votes
2answers
58 views

Website is being targeted by mail bots

I have a small website. When I perform a netstat is shows a lot of traffic from .p.mail. I think this is some kind of mail bot, trying to harvest email addresses from my website. How can I prevent ...
0
votes
1answer
32 views

Pricing of Key Pairs and Security Groups on AWS?

My free AWS account expired. I deleted all S3 and EC2 resources, but am wandering if I can leave the Key Pairs and Security Groups without having to pay for them. (My account resources look like this ...
-2
votes
1answer
82 views

How do you “prevent powerful accounts from being used on unauthorized systems”? [closed]

I was browsing through Microsoft's Best Practices for Securing Active Directory and saw the chart linked which includes some of the best practices included in the document, rated by importance. At ...
13
votes
3answers
965 views

Enable SSH shell access but disable SFTP access

I've searched for a viable answer to this question, and most of the answers include advice on why to not do it. However, here's the scenario, and what makes it necessary: I have a console app, and in ...