Security is not a product, but a process.

learn more… | top users | synonyms (2)

0
votes
0answers
6 views

Does an inline UTM device exist? [on hold]

I'm looking to find a device which can sit inline on a network cable and provide anti virus protection to the PC behind it. I cannot install any software on the PC. I thought about a device such as ...
0
votes
1answer
17 views

HP ProCurve Vlan Isolation

Okay, so we have an HP ProCurve Switch 2824, a Zyxel router and a bunch of 2012 R2 servers. We currently have 3 VLANs in our network: 10(Public),20(Private) and 30(Management), but we'd like to have ...
2
votes
0answers
10 views

Unable to reset IPMI cipher using ipmitool: “Parameter Data does not match” – why?

In attempting to make some Dell server BMC's more secure, I followed the recommendations given elsewhere and disabled cipher 0, using the following (ipmitool running on the host OS, which is CentOS ...
-4
votes
1answer
32 views

Is 10 character (letters and numbers mixed) password strong enough for Internet Servers? [on hold]

Assuming ssh brute force attacks. Assuming the following IPTABLES configuration: DROP tcp -- anywhere anywhere tcp dpt:ssh state NEW recent: UPDATE seconds: 120 ...
0
votes
1answer
23 views

Linux glibc versions 2.18 and older - vulnerability

Server: Red Hat Enterprise Linux Server release 5.9 (Tikanga) I came to know that Linux GNU C Library (glibc) versions prior to 2.18 are vulnerable to remote code execution via a vulnerability in the ...
1
vote
6answers
429 views

No success when trying to upgrade glibc on RHEL4 due to GHOST

Due to the recent GHOST vulnerability I was trying to upgrade the glibc version on our RHEL4. The command I tried using was: rpm -Uvh glibc-2.3.4-2.57.x86_64.rpm Result was: [root@rhel4-test ~]# ...
0
votes
1answer
11 views

Configure account event auditing with Secedit

I'm currently putting together a number of PS scripts which can be run against a new webserver in order to harden it prior to it being placed in production. One of these scripts will launch secedit ...
-1
votes
0answers
18 views

Are there wifi routers that provide good connectivity over a very short range [on hold]

Looking for a solution to extend a secure closed system with wifi. The goal is to allow client devices to move around a shop floor without losing connectivity but lose connectivity if taken near to ...
-1
votes
2answers
27 views

Open port to only one external IP address

I am having trouble with unwanted traffic on a certain open port and want to lock the open port so it only allows incoming traffic from One single external IP address. I have had a Google and cant ...
2
votes
2answers
43 views

Windows UAC disabled but I'm still getting the elevation pop-up

I have UAC disabled on my Windows 2008R2. Why am I still getting UAC "Windows needs your permission to continue" window before trying to change Owner of a folder? My user is a member of the ...
1
vote
1answer
49 views

Allowing Internet traffic into DMZ using Azure Network Security Group

I am trying to create a simple DMZ using Azure Network Security Groups, using a Barracuda WAF as the public entrypoint into the DMZ, however I am having some trouble allowing internet traffic to ...
0
votes
0answers
28 views

Debian server hacked - root login on /dev/tty1 - therebel exploit [duplicate]

I have a test server running Debian Wheezy (Kernel 3.2.0-4-amd64) and OwnCloud 7. It is a virtual machine hosted on a Debian Wheezy kvm Server. It uses an own IP address configured via br0. I made ...
0
votes
1answer
16 views

How to lower security level of IE on Win 2008R2 to allow product register?

There is IE 11 installed on Win2008R2 server. After installing a Visual studio express, we are asked to register the software. A user account was created on outlook.com. However after entering login ...
0
votes
1answer
28 views

When authenticating through Internet LDAPS or LDAP+RADIUS [closed]

I am setting up a LDAP server in order to centralize my users accounts. Some servers that will need to access to this LDAP Server are in remote locations and will access through Internet. Since PAM ...
1
vote
1answer
72 views

How can I avoid passwords

I'm the default IT guy at a small family business. We have 5-10 employees that only work at the office for about half the year. Because of this, it's a pain to have unique passwords - so people seem ...
0
votes
0answers
20 views

Checking security on a shared hosting server [closed]

I am in the process of testing different hosting shared servers and I am very concerned about the security of the server. Thats why I would like to ask for advice on how to do to determine whether a ...
3
votes
4answers
1k views

Am I at risk by leaving a test FTP account available on the server?

I have two Filezilla server instances on different WAN connections, both mapping to the same /test directory on the file server. To validate that clients have connectivity I have a read/list only ...
0
votes
1answer
7 views

VBulletin 3.6, disable “Invalid SQL” errors

VBulletin likes to dump SQL query and database metadata in case of query-error. I do not find it entertaining from security point of view. Is there a way to disable this and just show "something went ...
0
votes
1answer
8 views

vSphere-created node complaining about ECDSA fingerprint?

I just cloned an Ubuntu template in vSphere Client, just like I've done hundreds of times before. It didn't give me any errors, however when I went to SSH into this server to test it, I get the ...
1
vote
2answers
92 views

Should I need to provide a root certificate when setting SSL cert on nginx

In Qualys SSL test always warn me that the root certificate is an extra download and can be safely removed. However, from Comodo website, their guide on installing cert on nginx is NGINX Needed for ...
1
vote
1answer
25 views

Does it make sense to remove NFS from a simple web server?

Does it make sense security- and performance-wise to remove NFS on a simple server which has ~10 Wordpress websites? Or is simply stopping the services enough?
0
votes
0answers
31 views

Docker non-root secure?

If I set up a Docker container on an Ubuntu server, and then let it run arbitrary/untrusted code like uploaded PHP, Python etc. as a NON-ROOT user. Is this totally contained and secure by ...
0
votes
1answer
51 views

Strange TCP Flood / Flood from Port 445

Good Evening. Today I noticed a strange flood on a box that I am working with, here is a dump from tcpdump: 23:21:07.580917 IP (tos 0x0, ttl 64, id 5746, offset 0, flags [DF], proto TCP (6), length ...
0
votes
1answer
12 views

Viewing older entries for lastb on linux

I have a server (Amazon Linux) that has been up for 261 days: [server]$ uptime 16:29:46 up 261 days, 4:47, 1 user, load average: 0.05, 0.16, 0.18 I am trying to find out if there have been any ...
0
votes
0answers
8 views

SQL 2012 IPSec or SSL

I have a requirement to secure connections to SQL server. (at transit that is) - TDE will be used for encryption at rest. SQL provides two options which are either certificate based SSL or Windows ...
2
votes
1answer
38 views

Is default Apache version in Ubuntu 14.04 secure?

I have installed apache on ubuntu server 14.04 using apt-get. I set up a simple site, uploaded a few pictures etc, the website is working. I've decided to take a look at security of the thing using ...
0
votes
1answer
55 views

Account lockouts not in Event Viewer

I am having trouble getting Windows Server 2008 to log when domain user accounts are being locked. My Domain Controllers are all Windows Server 2008 R1. I am able to find Audit Failure events (ID ...
-1
votes
2answers
47 views

Can one domain have 2 or more SSL certificates?

I have googled and found this post: http://security.stackexchange.com/questions/46988/is-it-technically-possible-to-configure-two-different-ssl-certificates-for-the-s If it actually is possible, then ...
4
votes
1answer
167 views

Sendmail - Is it secure, and really essential?

I have a web application server running Ubuntu. The Application is built in Python/Django, but does not have any specific use cases to send email. We have log management software that allows us to ...
0
votes
2answers
36 views

is there a way from iptables/iproute to forward all traffic to my IDS and also keep the regular flow

The reason of this, is that to catch all packages into my IDS keeping my existing enviroment, so the IDS does not become a single point of failure. If route all my traffic into my IDS and from my IDS ...
4
votes
2answers
710 views

Which CentOS Version Should I Use?

I have some used rackmount servers (Dell R610, HP DL180 G6, HP DL360 G5) that I intend to use for on demand video streaming in a colocation environment. I would like to have them all on the same OS to ...
1
vote
1answer
31 views

security group rules between EC2-classic and VPC server

We are currently using a set of Amazon EC2-classic servers for hosting our live and staging environments. We've got a couple of web servers and a background worker server in each environment. We've ...
3
votes
2answers
31 views

Docker remote access security

Assuming I am running several docker containers on a local server. When I give third parties ssh access to my server, any third party will have control over the docker manager. How can I make sure ...
0
votes
0answers
25 views

Information regarding netstat output

On netstat, I see my port 22 in connection with 122.225.97.99. Does this mean someone is accessing ssh .. OR is it just something related to ubuntu user@ubuntu:~$ netstat -ntu Active Internet ...
1
vote
1answer
101 views

Encrypting SMB traffic with Samba

We use Samba on Ubuntu 14.04 LTS as a PDC (primary domain controller) with roaming profiles. Everything works fine, except for if we try to enforce encryption via setting: server signing = ...
0
votes
1answer
41 views

Secure Database Password Contained Inside a File

I've got a Linux based application (Java) that connects to an external database (PostgreSQL) in the same LAN. However, due the sensitiveness of the database contents I would like to avoid the admins ...
-1
votes
1answer
40 views

How to load sites from your own server as localhost (ssh tunnel trickery)

I want to load a site from my server as if I'm on the server as localhost. Because some areas are restricted to localhost on a purpose. Now normal ssh tunnel like ssh -L 8080:localhost:80 ...
0
votes
1answer
86 views

Getting lots of traffic from russia to an unpublished site

I am currently building a website. Currently nobody knows about it but it is already reachable for testing purposes. Now I saw, that I get a lot of traffic from russia (Its a german website hosted on ...
10
votes
1answer
160 views

What do the OS X authorization mechanisms actually do?

Background  I'm trying to glean a better understanding of the OS X login process, in order to decide the best way for achieving VPN Single Sign On. Please do correct me if I'm wrong, but I believe ...
1
vote
1answer
39 views

.htaccess query string blocking phpmyadmin

After phpmyadmin login, I get this error message Error in Processing Request Error: 403 Error text: Forbidden" I found that removing the following lines from .htaccess it doesn't give any error ...
1
vote
1answer
42 views

Validating SSL/TLS renegotiation flaw

Our vulnerability scanner (Saint-based) is claiming that a large number of devices and servers are susceptible to the SSL/TLS renegotiation flaw (CVE-2009-3555). Most of these servers and devices are ...
-1
votes
0answers
47 views

Allowing root login, but denying any actual logins [migrated]

A friend told me a few months ago about an audit where he discovered root logins were enabled via SSH. This obviously ended up on the report, but when questioned the admin told him that he had set up ...
4
votes
0answers
38 views

Linux graphical password dialog trick security [migrated]

When we run a command by sudo, the password is asked [sudo] password for user If the sudo is not typed the password should not be asked. If asked, I would assume it as a fraud by the application. ...
-2
votes
1answer
59 views

VirtualBox Networking Lab Configuration [closed]

I'm creating a lab for a project that will test a network security defense product's effectiveness in detecting various attacks. I have a physical server with 32GB of RAM and VirtualBox to create the ...
0
votes
0answers
19 views

My Hosting Infected with CryptoPHP Script Hostgator [duplicate]

Before 10days Hostgator migrated server to Indian Servers , and they said it is highly secure, As for more than 10 days i am getting problems in My backend word press plugins, So last 10 days i was ...
2
votes
0answers
27 views

Certificate can only be used by network service account

Issues : Our service is using one certification for partner service call. It worked well in IIS site which is running as network service account. But when we run test the code as administrator ...
0
votes
0answers
5 views

OSX Mavericks: package installs fail, Gatekeeper seems broken [migrated]

For some reason my OSX Gatekeeper seems to be broken. Every time I try to install software I get: the package was signed with a certificate that has expired. However, when looking at the certificate ...
-1
votes
0answers
15 views

How to set up Fail2Ban for my dynamic ip [duplicate]

I am setting up fail2ban for my VPS and need to know what value should i specify for "ignoreip" , I have a dynamic ip from which I connect to my Vps and it generally changes every week. Can I put ...
2
votes
0answers
37 views

Display port security state of an HP 3COM 5120 switch port

I'm using an HP-A5120-24G-SI switch and I'm asking how to obtain the current state of the port-security module for a certain port. I'm able to view the current settings using display port-security ...
1
vote
0answers
35 views

ModSecurity phase not working?

Sorry I am very new to modsecurity (2.8). So I made my first rule to block a referrer spam with the following: SecRule REQUEST_HEADERS:Referer "buttons\-for\-website\.com" ...