Tagged Questions

Security is not a product, but a process.

learn more… | top users | synonyms (2)

-2
votes
0answers
22 views

triple vlan configuration on cisco swith is it possible

I have 3 ports fa0/1, fa0/2, fa0/3 fa0/1 is connected to paging system ( public address vlan) fa0/2 is connected to paging system controller (public address vlan) fa0/3 is connected to IP Telephone ...
1
vote
1answer
42 views

Why is fail2ban not banning this attack?

I have fail2ban installed to ban bruteforce attempts on the ssh password. There are business requirements for not disabling password authentication on this machine. fail2ban was installed using the ...
0
votes
1answer
22 views

Does Active Directory alone is not enough to secure hadoop?

I am trying to secure Hadoop environment installed in windows. So basically I started to analyse how to secure a Unix-based hadoop cluster. Have gone through various links related to Kerberos and ...
1
vote
1answer
16 views

Mod Security ctl:ruleEngine=Off Whitelist Fails in Phase 1

Background info : cPanel server with atomicorp ruleset, plus our own custom rules and whitelists in separate .conf files - Apache 2.2, modsec 2.8 Whitelist rule: SecRule REMOTE_ADDR ...
0
votes
0answers
13 views

What if Security ID and Account Name differ on Windows Security Event Log

the latest MS Kerberos Vulnerability let us search our Security Event Logs for potential attackers. According to a technet article, to identify an attacker you have to search for non matching security ...
-2
votes
0answers
21 views

Digital Ocean droplets get locked down because of outgoing DDOS attacts [duplicate]

Two of my droplets were locked down this week from my account for an apparent reason of outgoing DDOS attack. My first machine was allegedly compromised on Nov 18 2014 and my networking is brought ...
6
votes
1answer
50 views

PCI-DSS: Virtualization segmentation in ESXi environment

I have already asked this question over on Information Security but so far it has not garnered any comments. I am thinking perhaps it is more of a server infrastructure and configuration question, ...
0
votes
0answers
13 views

Secure source files and source content files in intranet from being accessed directly by any one who knows the location of its [closed]

We are developing a e-learning website, which has lots of video and audio contents. we have a plan to install it in intranet server for an organization but setting up tight security for the source ...
1
vote
2answers
41 views

How to limit dynamic DNS updates

First off, I'm sorry if this is vague, but I'm not very familiar with DNS or DNS terminology. What I'm trying to do: I want to limit what hostnames are allowed to dynamically update DNS. I don't ...
1
vote
1answer
34 views

Disabling weak ciphers

Does anyone have any experience disabling weak ciphers on Windows Registry? Server doesn't have IIS installed. Below is the results of my security scan but not 100% what registry entries should be ...
-5
votes
0answers
22 views

I am having security issues with Drupal server - are the following recommendations advisable. I am getting conflicting opinions [closed]

These are recommendation about your PHP settings. There are certain PHP functions that allow normal users to access system level functions. These dangerous PHP functions listed below should be ...
-1
votes
0answers
10 views

How can I use tacacs+ server for AAA by my application

I am trying to centralize the AAA mechanism for for one of my application. So I was thinking of using tacacs+ server for that purpose. But I am not able to find a proper way to use it. I am trying to ...
-1
votes
1answer
39 views

How to drop first udp packet from a source with iptables?

As a defense against distributed udp flood, I need to drop first udp packet from a source and accept other than first packet. Does iptables has capability of doing this? If yes, how?
0
votes
2answers
261 views

How do I set permissions for uploading media in WordPress? (Ubuntu 14.04.1, nginx 1.4.6)

I'm having trouble finding the correct permissions for running a WordPress site on my droplet. I followed this guide to configure the site: How To Configure Secure Updates and Installations in ...
0
votes
1answer
34 views

iptables setting output default to DROP

I have two servers: one web, one database. The db server is on a private network. I thought I needed to restrict the default OUTPUT on the web server to DROP and created OUTPUT rules to to ACCEPT ...
0
votes
0answers
18 views

PHP Change log Centos 7 [duplicate]

Might be a silly question but Im looking at the change log for PHP by running this command - rpm -q --changelog php | grep CVE See all the CVE's listed does that mean they have been patched in the ...
-1
votes
2answers
41 views

Can't update to latest PHP version. Centos 7 [closed]

I'm unable to update to the latest PHP package. I ran yum update php and it updated to PHP 5.4.16. Reran the update command to see if there was any newer versions and stated there was no packages ...
0
votes
0answers
7 views

LANCOM 1781VAW disconnects any VPN connection after 1 hour. Why?

I have a small infrastructure here and we are wondering why our lancom-router (1781VAW) disconnects any vpn connection after 60 minutes. how could i troubleshoot this? is this maybe a security ...
1
vote
2answers
42 views

Best way to trace outgoing requests from a server

We have an Ubuntu 14.04.1 LTS server with nginx 1.4.6 that hosts a few dozen websites and received an abuse complaint from another server of hundreds of requests like this: "POST /wp-login.php ...
-1
votes
0answers
16 views

Why Access denied when removing files/folder on Windows [migrated]

What does really happen when I try to remove a folder on windows (7, 2008, 2012) and get the "famous": You need permission to perform this action ... Folder Access denied What I've done : I ...
0
votes
1answer
31 views

Network Security: Lan Manager Authentication Level

I'm a little bit confused by the explanation provided for the setting "Network Security: LAN Manager AUthentication Level" in group policies. The provided explanation only talks about clients and ...
-1
votes
1answer
38 views

How is Docker being used in VPS hosting? [closed]

I'm curious how Docker is being used to host VPS 's ? e.g. I get that it's very fast to boot, but I've heard that security of Docker is not enough to keep people out of the main system... How are ...
0
votes
1answer
35 views

Windows server private shared folders

What is the best practice for sharing private home folders with the users (Windows Fileserver with AD)? I was asked this question today after someone watched this video, and it got me thinking.. ...
4
votes
1answer
56 views

Multiple websites on multiple servers - seperate mysql or not

I currently have 2 Debain boxes (VPS - 4Gb memory) and am hosting a variety of websites of different importance, some ore production sites, others are demo/staging/test sites. Approximately 15-20 ...
1
vote
1answer
26 views

Windows 7 Unchangable AppLocker Rules

I have a windows 7 image that appears to be using an applocker ruleset that I'm unable to modify or disable. Performing the following appears to have no effect on this enforced AppLocker mystery ...
0
votes
0answers
14 views

Disable Keyboard on Ubuntu Kiosk Touch PC

I'm in the middle of deploying a series of Kiosk PC's with a minimal Ubuntu server and a web enabled Application(Rails) on it. The hardware are Shuttle All-in-one PC's at the moment. The PC starts ...
0
votes
0answers
16 views

Meraki Z1: protection of corporate devices from personal devices

My company employees about 600-700 remote employees, each of whom is issued a corporate IP phone an a thin client compute endpoint. In our current deployment, both devices are configured (defaults ...
0
votes
0answers
12 views

Apache2 + Chroot + PHP global prepend

I have a Debian Wheezy server with PHP 5.4 and Apache 2.4 . I have following problem: User A has home dir /home/user_a with public directory /home/user_a/public_html User B has home dir ...
-1
votes
0answers
12 views

Why block wget Download Agents [migrated]

I noticed that some nginx configurations block download agents using wget like this: if ($http_user_agent ~* LWP::Simple|wget) { return 403; } Why block wget? If I use the above code in my ...
1
vote
0answers
28 views

Owncloud - Proxy changes certificate

I'm running an owncloud server 7.0.2 with apache(Ubuntu host) and configured it to use a self-signed ssl certificate. Everything works fine on my home-PC On an other machine I would like to use the ...
0
votes
1answer
55 views

Do blocking input ports increases security?

1-Do blocking unused input ports in firewall increases system security? How? (as there is no daemon listening on those ports anyway) 2-Do dropping those unused ports will positively or negatively ...
0
votes
1answer
46 views

PCI Failure due to HTTP Reverse Proxy Detection

We use Security Metrics for our PCI compliance scans. Haven't had any issues in the past but our most recent scan said we failed due to "HTTP Reverse Proxy Detection". I'm guessing this has to do with ...
0
votes
0answers
30 views

Intermittent SSH problems with a specific server from a specific Wifi router

I've been ssh'ing into a specific server from my home office via Wifi and Time Warner Cable internet for years with no problem. In recent months, I started having problems, where I'd be unable to ...
-4
votes
1answer
55 views

Restrict Access from certain machines to my Web Application in LAN [closed]

I am trying to deploy a Local Network web application, which should not necessitate a client login. The requirement is to block certain machines, (not users, just a few computers, the application ...
-6
votes
1answer
40 views

encryption of fiber communications [closed]

We have to connect one site to another using leased fiber ( theoretically it's a dark one ) in order to replace a radio link. All servers are in one site. Both location now have Gigabit networks. Can ...
4
votes
1answer
28 views

How are files being added to site as apache, when site is running as FastCGI?

I have a web server that is running many different sites (standard vhosts setup, most sites are Joomla based, a few wordpress and other non-CMS sites) in a Parallels Automation 11.5 environment. The ...
-1
votes
0answers
27 views

how can i find out more about this perl process [duplicate]

i recently have isolated a domain account on my virtualmin vps that i believe is responsible for high cpu usage for nefarious purposes. with the account disabled, the 2 perl process still popup but ...
0
votes
1answer
37 views

Securing Webserver and Database

I need to secure an internal web server and sql db, that is going to be made public(www) At this stage im only looking to provide a reasonable amount of security($$) until it gets bigger at which ...
2
votes
1answer
60 views

Least-Privilege BUILTIN\Administrator Failure Configuring Application Control Policies with AppLocker

I asked this question over at SuperUser to no avail a while ago, before realizing that serverfault may be a better option. I'm configuring execution control on a computer running Windows 7 SP1 ...
0
votes
1answer
40 views

Does DB2 accept SSL3 connections?

Does DB2 allow connection through Secure Sockets Layer version 3 (SSL3)? To be more exact, will a program using SSL3 connection get an access to DB2? or will it fail? If it does accept it, is there ...
1
vote
2answers
53 views

Safety of sshpass and SFTP to dynamic host

I have a server with dedicated IP address A and a server with dynamic IP address B (routing via no-ip.org). A uploads a backup to B via sshpass: export SSHPASS=*** sshpass -e sftp **@** << ! ...
0
votes
0answers
6 views

Create a persistent mapping for a apppool identity

Can I create a persistent mapping for a apppool identity? For instance the IIS website "www.example.net" should access "\10.10.10.222\shared$" through F: My Website is MVC(5) so I think the ...
0
votes
0answers
19 views

How do I block all requests by default in vhost configuration?

I am setting up a site using standard apache vhost but I have multiple domains pointed at the server. I know the first vhost catches all the other names even if they are not listed under the vhost. ...
-1
votes
1answer
38 views

Check my own servers for vulnerabilities [closed]

We are a small early stage startup with not so much money to spend. We have less than 3 servers that we want to monitor for security issues. Our website is essentially on one server having: Ubuntu ...
0
votes
1answer
113 views

Enabling cipher TLS_RSA_WITH_3DES_EDE_CBC_SHA (0xa) on Windows Server 2003+ISA 2006

I have been given a task to disable all "weak" ciphers/protocols on our very old ISA server based on Windows Server 2003. I have disabled all protocols but TLS1.0, and all ciphers but RC2/128, RC4/128 ...
0
votes
1answer
21 views

How can I know where and how a security group is triggering a logon script for some users?

The organization I work for has implemented application access and scripts via Security Groups. This is, if a person needs to access some applications or have a script run when he logs on, we add ...
0
votes
1answer
52 views

Can I block inbound traffic from a certain ISP

The problem My server keeps getting DDoS attacks from IP's belonging to Ecatel in The Netherlands. I wrote them a month ago and still haven't heard anything, and keep blocking individual IP addresses ...
0
votes
1answer
38 views

Google Authenticator - generate new set of emergency codes

I use Google Authenticator on my SSH servers with Andoid app for generating codes. After I run $ google-authenticator application create set of emergyncy keys: ...
1
vote
2answers
842 views

POODLE: SSLv3 vulnerability (CVE-2014-3566) with Apache24 on FreeBSD-9.2

I'm using FreeBSD 9.2-RELEASE-p5 with apache24-2.4.10_2 package. According to CVE-2014-3566 (POODLE), I went ahead and disabled SSLProtocol -SSLv3 following by restart of apache24 service, yet after ...
0
votes
0answers
15 views

Apache HTTP server STIG rule

I am new to setting up Apache HTTP and have to STIG the Apache HTTP 2.2 I have running. (http://iase.disa.mil/stigs/app-security/web-servers/Pages/index.aspx). For one of the rules it says the ...