Security is not a product, but a process.

learn more… | top users | synonyms (1)

1
vote
0answers
14 views

How to secure configuration management server

There are many configuration management software options nowadays (Chef, Puppet, CFEngine, Ansible...) which offer an architecture with their repository on a central server and clients communicating ...
0
votes
0answers
12 views

Secure Email Settings for Email Clients & for PHPMailer

I'm trying to work out how to make my outgoing/incoming email's as secure as I can possibly make them. First of all, my domain has Wildcard OV SSL Certificates, I have copies of the .csr, .crt and ...
0
votes
0answers
24 views

Company Discover A Ghost IP With All Ports Opened [on hold]

Good day, recently when we do a screen through at our internal network. We discover a Ghost IP with all the ports open FTP SSH etc.. and the last one is VNC. My questions is , does it mean our ...
-1
votes
0answers
10 views

Download files from server securly from mobile app [on hold]

I am creating a mobile app that need to download some files from a server (AWS S3 or similar). I would like to use a REST API for downloading and authentication. I have read a lot about ...
-1
votes
1answer
15 views

Allow run /sbin/ifconfig to user

So, I want to allow some user to execute ifconfig. I'd created a special group "if" and done user to own this group. And now I'm going to do "chown root:if ifconfig". But I think: What wrong thing ...
0
votes
0answers
19 views

Having trouble getting correct information from Motion camera streaming server for fail2ban

I have a camera running a Motion streaming server, which uses simple HTTP md5 authentication, tunneled through stunnel on the server side. I'm using like to have fail2ban limit requests just for ...
2
votes
0answers
31 views

Can't find users logged in with notty via the who command

I was curious if anyone had any ideas why when I run who and who --all, I still cannot see users logged in under notty? See below: [cbennett@lstn ~]$ who --all system boot 2016-04-25 ...
1
vote
0answers
22 views

How to disable Null Session Enumeration of the DC?

I am a sysadmin for a company, and we just had a Penetration Test done on our internal network, the team discovered that it is possible to perform query\enumerate our DC (Server 2012) for information ...
0
votes
1answer
32 views

What do these logs mean? Am I attacking someone?

This night my server got put in an "anti-hack" mode where I could only use a read-only FTP to download my data. They told me that I was being a threat to the network, and that these were the logs ...
0
votes
0answers
21 views

WordPress site with no traffic; MySQL reporting 300-500 queries per second, frequently crashing

My server is running Debian 7.10 (Apache 2.2.22, MySQL 5.5.47, PHP5). It's a VPS. I've tried to summarise the issue in the title. I'm running a very small, private WordPress blog which is only ...
0
votes
0answers
21 views

multi-factor authentication to delete disks/snapshots/etc GCE [closed]

I want to know if there's any way to configure a multi-factor authentication to delete snapshots and disks on GCE Like SMS or an token authenticated app on a smartphone. Thanks! If yes, where can I ...
2
votes
1answer
38 views

openSUSE installs and VMs constantly being hacked and bricked

Sorry if this is a total newbie question, but I'm doing frontend design work for a radical political organisation and ALL my installations of Linux, be they openSUSE, Ubuntu or Fedora keep getting ...
0
votes
2answers
21 views

Is it necessary to secure TCP traffic for PHP FPM over shared private VPS network?

There are lots of recommended practices and tutorials for securing various components of a LEMP/LAMP stack when running in a cluster whose private network traffic is shared by other, potentially ...
2
votes
2answers
25 views

How much protection is provided for my remote centos vps by using certificate-only root login

I have two leased centos servers, one to run mysql for backends to the web and mail server on the other, as well as data from my android apps. I am only planning to give access to the data server if ...
2
votes
0answers
14 views

security audit flags redhat/centos package version numbers despite patches

Redhat has this policy of backporting security fixes. But then when RHEL and CentOS sites get audited, the auditors invariably just list the package versions or ask ssh what it's version number is, ...
-1
votes
0answers
28 views

working on a locked corporate network, what do I need to get unblocked in order to be able to use tools like NPM and GIT? [closed]

I work at a company that has it's network really locked up. There are very few sites you can browse, etc, and when you try to download a file, it has to go through a process where it first gets ...
2
votes
3answers
60 views

Do AWS Servers need fail2ban?

I saw that while I was creating my AWS instance I opted for only my IP address being able to access my server. Also There is a RSA key that is configured for you. In this case do I really need ...
-2
votes
0answers
25 views

Protect data so only verified client can read [closed]

I am creating a REST server that will be holding a decent amount of proprietary information. I want users to be able to access the information in only the intended way, which is through a map built ...
2
votes
0answers
23 views

Protect cached content in apache

I'm facing an issue where I have some cached contents in a disk and I want to protect it with a token url. I can protect my files via htaccess, once they are not cached (direct access), but now I ...
1
vote
1answer
55 views

How can I modify my cgi to most effectively respond_to/block/whatever a ddos attack? [closed]

I am under DDoS. What can I do? already addresses this kind of "canonical question", but I think I'm asking a distinguishable variant, as described below. But please advise if this post inappropriate. ...
2
votes
0answers
27 views

SELinux preventing access to /var/log due to Docker

I have a Docker container that should read logs, including those from the host itself. So I mount the volume /var/log using the z flag. This changes the SELinux context on the files inside /var/log ...
7
votes
2answers
182 views

How to ensure integrity and security enforcing signed unmodified RPM package?

There is a way to verify files related to specific package against original RPM content: # Verify `vsftpd` package. rpm -V vsftpd How to complete the chain and verify that rpm command itself hasn't ...
6
votes
2answers
290 views

What does 'Log on as a Service' actually mean?

I am building Group Policy for a new domain that we are migrating to. In our current environment the settings Log on as a Service is set at the Server OU level - which has about a hundred Service ...
4
votes
1answer
177 views

Where does Credential Manager store credentials on the file system?

I want to clear a users stored credentials on a remote machine. Without having to have the user login and open the Cred manager GUI or run CMDKEY with them logged in. Is there a place on the file ...
0
votes
0answers
18 views

Website was hacked but only 1 domain [duplicate]

I recently found out that one of my Domains (which was only a empty Wordpress installation), was hacked. The website didn't show the wordpress installation anymore, instead there was just a website ...
1
vote
1answer
32 views

How to secure a 'public' sftp?

I have a server which enables some users of my services to upload files using SFTP. When I talk about users, I can neither be sure who they are nor how many have access. I have set up the access as ...
1
vote
2answers
89 views

Configure same Internet Explorer zone mappings with and without ESC via GPO

Our Active Directory domain consisting of Windows Server 2012 R2 servers and Windows 7 workstations configures Internet Explorer security zones using this Group Policy setting: Computer ...
1
vote
3answers
85 views

Secure Administration AD Domain

I have a project to securize my Active Directory infrastructure. To do that, one of my colleague told me about the possibility to create another AD domain in the forrest just for administration. That ...
1
vote
0answers
19 views

Win Server 2012 R2. Apply security GPO to local users on a specific machine

We have a "demo" machine which we use for providing remote access to demo software as a local user. Is there a way to hide and deny access to everything except the user folder using a GPO?
0
votes
0answers
12 views

How did my non-CMS based website get hacked? I have a file called mails.php which contains a preg_replace statement [duplicate]

I have a series of websites in my server, all of which share the same set of PHP files. They're not based in any CMS (no Wordpress, no Joomla, etc.). All of them contain my own "CMS" so to speak. I've ...
1
vote
2answers
48 views

WMI Remote “Access Denied”

I can no longer remote access WMI on anything in my environment (10/8.1/XP/7 workstations). Here some specifics: 1) I am a Domain Admin and "MRT" is my user and password "mmmmn". 2) Since this ...
0
votes
0answers
10 views

Secure an external linux distro

I have a fairly complex situation, I have researched all the parts required before asking this question. I am trying to make a bootable linux distro on which I have an app that is located on an ...
0
votes
0answers
10 views

Error with security constraint in Tomcat

I have a problem setting up a login with password in a web application, but returns me a 404 error when I try to access the website. My first step was add a new role and user in tomcat-users.xml: ...
0
votes
0answers
13 views

RSH from Linux to WIN7 and access COM port

I have a script(run on a Linux machine) , and does the following rsh to a Windoes machine (rsh XX.XX.XX.XX CMD) cd to a directory (cd YY) run a script (say ZZ.pl --someargument) it runs fine when ...
1
vote
1answer
23 views

apache LimitRequestBody equivalent for haproxy

recently we migrate our http load balancers from apache to haproxy (http mode) for security reasons we use LimitRequestBody in apache configurations to control requests size is there any equivalent ...
0
votes
0answers
19 views

Fail2Ban WordPress filter not working on Debian VPS

I am having trouble getting WordPress Fail2Ban filter to work. I have installed the WP Fail2Ban plugin using the latest update which had a few changes, however, nothing is getting blocked. Here is a ...
1
vote
1answer
22 views

utility of using ALL in --tcp-flags in iptables rule

I m wondering what is the difference between the following 2 --tcp-flags rules: 1) -p tcp --tcp-flags SYN,FIN,RST SYN,FIN,RST 2) -p tcp --tcp-flags ALL SYN,FIN,RST
0
votes
1answer
27 views

Do “Old Passwords” have an expiration?

There are some systems that keep track of "old passwords" for increased security, like Databases, Domain Controllers, personal pages (Like Facebook) etc. Do these "old passwords" have an expiration? ...
0
votes
1answer
18 views

Fail2Ban login filter not working on Debian Web Server

So I am having issues getting Fail2Ban to work with as a custom filter for a web app login. First of all, other filter do work such as NGINX Auth. However, my emails have stopped working, not sure why ...
-2
votes
0answers
35 views

does 22 port should open in firewall when internal user want to use services on 22 port

user in internal network want to communicate outside via 22 port to access a particular URL. do i need to open 22 port in firewall? is there any solution to fix this issue with altering security ...
0
votes
0answers
7 views

Two network cards, one directly to internet, other in LAN [migrated]

I need some insight in my thinking so that I don't do something completely stupid. I have two physical network cards on my computer, one card/interface offers a handful of services and the other is ...
0
votes
2answers
31 views

Inspecting TLS/SSL passing in/out of a network without specialised device?

At the moment I'm managing a small home office setup - a few PCs and a soft open source x86 *nix based router. I'd like to move traffic scanning / inspection onto an edge device. The motive is to ...
-1
votes
1answer
24 views

FTP Port Protocol Type

I recently switched to a different VPN provider, therefore did a fresh server installation. Before I proceed, please keep in mind that I am not super experienced with server stuff. I am having a ...
-2
votes
0answers
29 views

Ownership permissions with current Nginx configuration a security issue? [duplicate]

Today I set up Nginx and PHP5-FPM with my main account named Nick in Ubuntu server by changing the user and group defintions of nginx.conf and www.conf, so that both instances are running under my ...
0
votes
1answer
32 views

Secure way of granting access to production database

We are currently using the FedEx Ship Manager in our warehouse and would like to automate the process of entering customer shipping information automatically. Inside the ship manager there is an ...
-2
votes
0answers
19 views

server getting hacked daily how to fix it [duplicate]

my server gets hacked daily 1: after i restore back and see next day my .htacess files seem to be modified 2: google keeps on showing error with hacked content how can i fix error 1: i found no ...
0
votes
0answers
14 views

Tornado server on port 80/443, any issues?

I would like to run an application based on the Tornado web server in a production environment. The performance requirements are low. Since I don't need a load balancer, I wonder if it is OK to have ...
0
votes
0answers
26 views

VPN revocation error?

I have managed to successfully configure a SSTP VPN connection on my internal client PC, but only through registry fixes. I keep getting this error relating to checking to see if the server has been ...
3
votes
1answer
19 views

Will it detriment my security if I allow all connections from localhost through iptables?

Under my current configuration, iptables will block every inbound connection, even if coming from localhost. In some cases, I need localhost to connect to itself. If I create a rule that allows all ...
1
vote
1answer
31 views

Tomcat 8.0 - tomcat-users file being ignored, failing to restrict access to manager app

My tomcat server is presently running the manager app unprotected. We would like to continue using this as our primary means of starting, stopping and deploying applications. Our tomcat-users file ...