Security is not a product, but a process.

learn more… | top users | synonyms (2)

-2
votes
1answer
40 views

Multiple attacks - what can I do

I experience multiple attacks on my server recently (for past several days). Types of these attacks are e.g.: Several SQL Injection methods (select/union/where/null, etc.) Brute force attacks (e.g. ...
-3
votes
1answer
22 views

Is it safe to allow user to upload xml and/or zip files to an apache server through a php script? [on hold]

So there is an upload function at one of my scripts, it restricts mime types to txt and images, I want to change it to allow xml or maybe zip files. Will my server run into any security risks if I ...
-1
votes
1answer
29 views

Making Private Domain Marriage Public Domain Name - Revisited

I'm building a server with Windows Server 2012 and I've checked many articles on the net about "naming" your internal domain. Interestingly, most of the comments are from 2009. As we all know, times ...
0
votes
1answer
25 views

How to block spambots and about security

Is it normal to have many many lines in /var/log/kern.log about UFW block? For example: Aug 29 22:13:13 myvps kernel: [1980808.931708] [UFW BLOCK] IN=venet0 OUT= MAC= SRC=60.173.8.240 DST=me ...
0
votes
1answer
19 views

Under what conditions in Apache installations is AddHandler application/x-httpd-php .php required?

I am a security researcher who has been running into multiple cases where file upload forms can be exploited, allowing attacker-controlled PHP code to be interpreted by the server, leading to remote ...
-1
votes
0answers
31 views

is my home network compromised or are any of these incoming logs legitimate? [on hold]

My Linksys administration tab where logs are located shows a total of 12 incoming connection entries. Some of these addresses say they're in china when i google them which exponentially increased my ...
0
votes
2answers
26 views

IE11: Allow display of local HTML files

How can I enable Internet Explorer 11 that has Enhanced Protected Mode turned on to display local HTML files? This is very annoying also I see the security need behind this feature. Can someone ...
1
vote
0answers
30 views

Prevent user interactive logon to domain computers

I currently have a user DOMAINJOINER (located in the WIN7Support OU) which I use to deploy Windows 7 machines. This user can Create and Delete Computer Objects in the WIN7Computers OU, that's about it ...
10
votes
4answers
219 views

How to convince my Administrator that Java ON A SERVER is not insecure per se?

The Application We have a small Java application which uses some Camel routes to pick up uploaded files from a webserver, process them and send out some e-mails with the results. The server on which ...
0
votes
1answer
39 views

Completely block access to Cisco

There is Cisco Catalyst 3850 (WS-C3850-48T-E) which is managed only via management port. There are several VLANs on the switch. Also the switch works as a DHCP server. SNMP & SSH are already ...
0
votes
0answers
15 views

RHEL 5 with PHP 5.1.6 VS RHEL 6 with PHP 5.3.3: Security implications

Using only the RHEL Repositories, RHEL 5 considers PHP 5.1.6 to be up to date, and RHEL 6 considers PHP 5.3.3 to be up to date. My question is: Are security updates/patches backported so that 5.1.6 ...
-2
votes
1answer
41 views

How can I upgrade apache in Ubuntu 14.04 LTS

I'm running an Ubuntu server 14.04 LTS (Long Time Support), it comes with Apache/2.4.7. However, Apache 2.4.10 is out, with some security fixes I'd like to have. So how can I get these security ...
-1
votes
3answers
32 views

Is it possible to configure inheritance for EC2 VPC Security Groups?

We'd like to be able to access the instances in our VPC from the various public IPs that we have in our corporate network. Is it possible to create security groups (like operator-security-group) and ...
2
votes
0answers
32 views

Is the server still vulnerable to attack if we don't turn off cgi.fix_pathinfo?

The /etc/nginx/sites-available/default file that comes with nginx installation has the following content: # You may add here your # server { # ... # } # statements for each of your virtual hosts to ...
-3
votes
0answers
25 views

How to secure a Kippo honeypot? [closed]

I want to run a Kippo SSH honeypot on Debian. The honeypot will be reachable over the Internet with permanent uptime. What should I do to decrease the damage my infected honeypot can cause to others? ...
0
votes
0answers
13 views

Restrictions for remote Vmware View users

We have a Vmware View VDI infrastructure with several thousands of users that can log on from the internal network and from Internet thru a VMware View Security Server. We want to restrict ...
-5
votes
0answers
38 views

How to check the OS is running on bare metal and not in virtualized environment created by BIOS? [closed]

Is there any software available as a Linux, *BSD, or Windows program or boot-image to check (or guess with good probability) the environment an operating system is loaded onto is genuine bare metal ...
-1
votes
1answer
39 views

What is it that makes BSD a popular choice for firewalls? [closed]

What is it that makes BSD a popular choice for firewalls? Is the kernel generally more secure?
-1
votes
2answers
38 views

Multiple non-http services, 1 static IP [closed]

I have an issue where we have several non-http(s) services which we would like to access from across the WAN. SSH is a primary protocol we'd be using, FTP as well. Here's how things are laid out. We ...
-2
votes
1answer
35 views

Unix Server Protection from Physical Access?

I'm working to license our software to some buyer. Our software will be ran from an unix server that is physically controlled by the buyer. Is there any way to prevent the buyer who have physical ...
0
votes
1answer
20 views

Nginx Password Protect Directory Downloads Source Code

I'm trying to password protect a WordPress login page on my Nginx server. When I navigate to http://www.example.com/wp-login.php, this brings up the "Authentication Required" prompt (not the WordPress ...
0
votes
3answers
49 views

Securely executing system commands as sudo from PHP

Is it possible? I have written a command line tool in PHP for creating new environments for our company. It creates system users, directories, databases, VHosts and restarts apache, amongst other ...
0
votes
3answers
58 views

Is there some free remote sniffer (aka sniffer on free remote server)? [closed]

I have this setup: ________Company LAN_______ _________ . '| _________ | | .| BUNCH OF | ...
0
votes
0answers
17 views

rkhunter reports suspicious activity /bin/usr/wget and killall permissions changed

Sorry about the long post but please bear with me. I'm wondering if my system has been compromised. I've had issues in the past on this VM server with a Linux.BackDoor.Gates.5 Trojan that was DDoSing ...
1
vote
3answers
50 views

How do I restrict a removable NTFS drive to domain access only? [closed]

A fixed NTFS drive in my computer requires a login by me, or if on the corporate network, a login by any domain user. So if the drive is stolen, no one can get at it - correct? But a removable drive ...
0
votes
1answer
40 views

How to block server's internet access and only allow LAN [closed]

I was wondering what the best way to block a server's internet access is while allowing LAN connections. Essentially, I want a server to be only accessible by LAN. What ips, ports, etc should I block? ...
1
vote
1answer
44 views

How can I let nginx log the used SSL/TLS protocol and ciphersuite?

My goal is to ensure proper security for clients connecting to my nginx. I'm following Mozilla's guide to configure TLS properly on my nginx installation, but I don't have an overview of the actual ...
0
votes
5answers
115 views

Should I change the SSH port to < 1024? [duplicate]

Many server configuration guides recommend that the SSH port should be changed to something > 1024, for obscurity and to avoid conflicts. This is interesting, because it recommends using a port < ...
1
vote
0answers
30 views

Disabling HSTS for managed browsers

What are my options for disabling HSTS both for new sites and for those sites baked into the browser? The use of HTTPS inspection inherently changes the thumbprint of a site by acting as a man in ...
0
votes
4answers
90 views

Email + data server for a small company needed?

I am currently working with a small company (10 people), whose main business has nothing to do with IT. But we have some IT-Infrastructure, namely an aging Small Business 2003 server, which runs ...
0
votes
1answer
43 views

Securing MySQL debian-sys-maint

With a fresh (but old) install of Ubuntu and MySQL, I found I could access the MySQL via command line client without being asked for any user or password. This bothered me as the default situation, ...
0
votes
1answer
100 views

I think my server was hacked - how do i know what has been changed? [duplicate]

I have read the following posts which didn't answered my questions: - My linux server was hacked. How do I find out how and when it was done? - How do I know if my Linux server has been hacked? - and ...
1
vote
1answer
35 views

What are (if any) possible scenario whereby hacker can find multiple sites hosted in one VPS?

Let me clarify: Say that I have 10 sites hosted in one VPS host. And for some reason, one of these sites gets famous and a hacker wants to know where it is hosted, and how many other sites are hosted ...
6
votes
4answers
407 views

Security of Apache DocumentRoot

I have a general question about security of Apache DocumentRoot, which comes from a statement I read when installing Galaxy, a bioinformatic web service and infrastructure. The statement says ...
-2
votes
1answer
80 views

Is the Datadog install script safe to run? [closed]

I have a production server (CentOS 6, Apache, Nginx, MySQL, PHP, wordpress). I want to see some metrics (e.g., load bandwidth, RAM, CPU and so on). I chose a Datadog for this task. The instructions ...
1
vote
1answer
61 views

Apache 2.4/PHP-FPM ProxyPassMatch and access restriction

I've got Apache/PHP setup exactly like this: https://wiki.apache.org/httpd/PHP-FPM It includes the ProxyPassMatch rule as mentioned: ProxyPassMatch ^/(.*\.php)$ ...
0
votes
0answers
4 views

Why/when does creating a mysql trigger require SUPER privileges? [migrated]

I'm attempting to parse and understand what the MySQL doc says about when SUPER privileges are required for creating triggers. They say: If binary logging is enabled, CREATE TRIGGER might require ...
2
votes
2answers
313 views

EC2 & MySQL security

The current infrastructure contains two servers located in Amazon EC2: application server, and MySQL server. Concern: security of communication between the application server and the database, ...
2
votes
1answer
52 views

Advanced Audit Policy not getting applied on 2012 R2

I have configured several avanced audit policy settings under: Computer Configuration => Policies => Windows Settings => Security Settings => Advanced Audit policy Configuration => ...
0
votes
1answer
45 views

Should I still disable root if I disable password authentication and enable only key authentication?

I'm new to the linux world and I've been reading a few tutorials on security. I've seen some questions on StackExchange tackling this subject, but from what I've seen, none of the answers clarified ...
0
votes
2answers
53 views

Remote login terminal

I have an unusual request. I have a box - running Fedora 19 - that I'm using as a server. I have a crappy Atom netbook - also running Fedora - that isn't good for anything. I was wondering if there is ...
0
votes
0answers
37 views

Who or what is writing suspicious files in /tmp [duplicate]

Some hacker has managed to poke around enough to write files to my /tmp directory on a hardened CentOS 6 web server box. As far as I can tell they haven't succeeded in anything other than writing ...
0
votes
1answer
22 views

Interpreting ** RABHIT ** logs - Potential Attak - SYN?

I am hosting a web on a Linux - Debian Wheezy x64. Our Web Server is LiteSpeed using APF-Firewall and DDoS-Defeat Recently, we are getting logs of below sort, telling us it may be a potential ...
26
votes
3answers
2k views

Is it safe to reboot a server open to the internet?

Specifically I have an iptables ruleset defined on a server running CentOS. Am I guaranteed / can I guarantee / how can I guarantee that when networking comes online (either at machine boot, or after ...
0
votes
1answer
70 views

Installing VirtualBox and restricting NAT and Bridged Network Adapters for Corporate Security

I work as a developer in a security heavy finanical services company. As a group we are finding that our Windows 7 workstation security policy is preventing us from performing our jobs. We do not ...
2
votes
3answers
90 views

Is there any point securing a “guest” wifi network with WPA?

We have a guest wifi network setup on a separate VLAN, using an open connection (e.g. NO wpa/wep). A (semi-technical) customer recently complained that he wasn't happy about his traffic not being ...
0
votes
1answer
24 views

nginx not showing internal at directory

Below is my nginx configuration file. It should make /inc and /admin/inc internal, but I can access them normally, like the line doesn't even exist. It's not giving me a 404 for external requests like ...
1
vote
1answer
163 views

Strange Entry in Access Log of Apache [closed]

I got a strange in apache access_log 117.86.199.18 - - [27/Jul/2014:10:42:10 +0200] "GET http://hotel.qunar.com/render/hoteldiv.jsp?&__jscallback=XQScript_4 HTTP/1.1" 302 256 It looks that ...
0
votes
0answers
34 views

Setting up muli-project web development server

I'm trying to set up a development server that will be used for several (web) projects by different teams (consisting of different people, some of which may be involved with more than one project). I ...
1
vote
1answer
108 views

Restricting the network access of Docker container

I'm in the process of creating an SFTP only Docker container, one that will be used by multiple people for the sole purpose of uploading and managing files in their own Chrooted Environment. On ...