Tagged Questions

Security is not a product, but a process.

learn more… | top users | synonyms (2)

-1
votes
0answers
12 views

Why block wget Download Agents [migrated]

I noticed that some nginx configurations block download agents using wget like this: if ($http_user_agent ~* LWP::Simple|wget) { return 403; } Why block wget? If I use the above code in my ...
0
votes
0answers
21 views

Owncloud - Proxy changes certificate

I'm running an owncloud server 7.0.2 with apache(Ubuntu host) and configured it to use a self-signed ssl certificate. Everything works fine on my home-PC On an other machine I would like to use the ...
0
votes
1answer
36 views

Do blocking input ports increases security?

1-Do blocking unused input ports in firewall increases system security? How? (as there is no daemon listening on those ports anyway) 2-Do dropping those unused ports will positively or negatively ...
0
votes
1answer
10 views

PCI Failure due to HTTP Reverse Proxy Detection

We use Security Metrics for our PCI compliance scans. Haven't had any issues in the past but our most recent scan said we failed due to "HTTP Reverse Proxy Detection". I'm guessing this has to do with ...
0
votes
0answers
19 views

Intermittent SSH problems with a specific server from a specific Wifi router

I've been ssh'ing into a specific server from my home office via Wifi and Time Warner Cable internet for years with no problem. In recent months, I started having problems, where I'd be unable to ...
-4
votes
1answer
43 views

Restrict Access from certain machines to my Web Application in LAN

I am trying to deploy a Local Network web application, which should not necessitate a client login. The requirement is to block certain machines, (not users, just a few computers, the application ...
-6
votes
1answer
38 views

encryption of fiber communications [on hold]

We have to connect one site to another using leased fiber ( theoretically it's a dark one ) in order to replace a radio link. All servers are in one site. Both location now have Gigabit networks. Can ...
-2
votes
0answers
17 views

About Packetpig [on hold]

I have two question. 1.What is the major difference between a PacketPig and the other tools such as Snort Wireshark, TCPDump when used by big data set? 2.Is it possible to use PacketPig in order to ...
4
votes
1answer
23 views

How are files being added to site as apache, when site is running as FastCGI?

I have a web server that is running many different sites (standard vhosts setup, most sites are Joomla based, a few wordpress and other non-CMS sites) in a Parallels Automation 11.5 environment. The ...
0
votes
0answers
25 views

how can i find out more about this perl process [duplicate]

i recently have isolated a domain account on my virtualmin vps that i believe is responsible for high cpu usage for nefarious purposes. with the account disabled, the 2 perl process still popup but ...
0
votes
1answer
35 views

Securing Webserver and Database

I need to secure an internal web server and sql db, that is going to be made public(www) At this stage im only looking to provide a reasonable amount of security($$) until it gets bigger at which ...
2
votes
1answer
37 views

Least-Privilege BUILTIN\Administrator Failure Configuring Application Control Policies with AppLocker

I asked this question over at SuperUser to no avail a while ago, before realizing that serverfault may be a better option. I'm configuring execution control on a computer running Windows 7 SP1 ...
0
votes
0answers
25 views
+50

Enable secure port 9091 of Openfire server

Is it possible to import .crt and gd-g2_iis_intermediates.p7b certificates in to the keystore of Openfire 3.9.3 XMPP server in order to make SSL ports enabled. I received .crt and ...
0
votes
1answer
30 views

Does DB2 accept SSL3 connections?

Does DB2 allow connection through Secure Sockets Layer version 3 (SSL3)? To be more exact, will a program using SSL3 connection get an access to DB2? or will it fail? If it does accept it, is there ...
-2
votes
0answers
16 views

limit sites permissions on server [closed]

I am hosting multiple PHP sites on my linux server with LAMP, I want to restrict each sites' permissions not to modify any file outside site folder directory, like most shared hosting companies do, do ...
1
vote
2answers
37 views

Safety of sshpass and SFTP to dynamic host

I have a server with dedicated IP address A and a server with dynamic IP address B (routing via no-ip.org). A uploads a backup to B via sshpass: export SSHPASS=*** sshpass -e sftp **@** << ! ...
0
votes
0answers
6 views

Create a persistent mapping for a apppool identity

Can I create a persistent mapping for a apppool identity? For instance the IIS website "www.example.net" should access "\10.10.10.222\shared$" through F: My Website is MVC(5) so I think the ...
0
votes
0answers
17 views

How do I block all requests by default in vhost configuration?

I am setting up a site using standard apache vhost but I have multiple domains pointed at the server. I know the first vhost catches all the other names even if they are not listed under the vhost. ...
-1
votes
1answer
36 views

Check my own servers for vulnerabilities [closed]

We are a small early stage startup with not so much money to spend. We have less than 3 servers that we want to monitor for security issues. Our website is essentially on one server having: Ubuntu ...
0
votes
1answer
42 views

Enabling cipher TLS_RSA_WITH_3DES_EDE_CBC_SHA (0xa) on Windows Server 2003+ISA 2006

I have been given a task to disable all "weak" ciphers/protocols on our very old ISA server based on Windows Server 2003. I have disabled all protocols but TLS1.0, and all ciphers but RC2/128, RC4/128 ...
0
votes
1answer
16 views

How can I know where and how a security group is triggering a logon script for some users?

The organization I work for has implemented application access and scripts via Security Groups. This is, if a person needs to access some applications or have a script run when he logs on, we add ...
0
votes
1answer
42 views

Can I block inbound traffic from a certain ISP

The problem My server keeps getting DDoS attacks from IP's belonging to Ecatel in The Netherlands. I wrote them a month ago and still haven't heard anything, and keep blocking individual IP addresses ...
0
votes
1answer
29 views

Google Authenticator - generate new set of emergency codes

I use Google Authenticator on my SSH servers with Andoid app for generating codes. After I run $ google-authenticator application create set of emergyncy keys: ...
-1
votes
0answers
40 views

Most secure reboot-to-restore solution? [closed]

We have a few computers running Windows 7 that we need to lock down and so I have been doing some research on reboot-to-restore solutions. Here is what I've found out: Deep Freeze: "Deep Freeze is a ...
1
vote
2answers
572 views

POODLE: SSLv3 vulnerability (CVE-2014-3566) with Apache24 on FreeBSD-9.2

I'm using FreeBSD 9.2-RELEASE-p5 with apache24-2.4.10_2 package. According to CVE-2014-3566 (POODLE), I went ahead and disabled SSLProtocol -SSLv3 following by restart of apache24 service, yet after ...
0
votes
0answers
12 views

Apache HTTP server STIG rule

I am new to setting up Apache HTTP and have to STIG the Apache HTTP 2.2 I have running. (http://iase.disa.mil/stigs/app-security/web-servers/Pages/index.aspx). For one of the rules it says the ...
-2
votes
1answer
54 views

How can I check if my server is using ssl 3? [duplicate]

How can I check if my server is using ssl 3? When I run openssl version command I get this. OpenSSL 1.0.1 14 Mar 2012 Thanks.
-1
votes
0answers
41 views

Post wp-login.php flood [duplicate]

my wordpress website is very slow and i'm getting thousand of line like this in access.log of apache : 127.0.0.1 - - [15/Oct/2014:12:43:31 +0200] "POST /wp-login.php HTTP/1.0" 200 5297 "-" "-" ...
-2
votes
0answers
38 views

how to find Poodle (Padding Oracle On Downloaded Legacy Encryption ) vulnerability in Apache 2.4.7 [duplicate]

how to find Poodle (Padding Oracle On Downloaded Legacy Encryption) vulnerability in Apache 2.4.7 and solution to fix the issue. when I use openssl how can find.
10
votes
2answers
4k views

How can I tell if my website is vulnerable to CVE-2014-3566 (POODLE)?

Google announced a vulnerability in the SSLv3 protocol that ... allows the plaintext of secure connections to be calculated by a network attacker. This vulnerability has been given the ...
0
votes
1answer
66 views

Powershell script for specifically OU

Need help with hte following, a script that can export all members of a specifically OU with in that multiple security groups. Location of the OU is; OU=Security Groups,OU=Public ...
0
votes
1answer
41 views

Diagnosing heavy bandwidth usage

I run a couple of IIS web servers, one on win server 2008 R2, the other on 2003. Both fully patched and up to date, with AV. Running on a No NAT connection with 8 WAN IP's The 2003 machine seems to ...
0
votes
0answers
16 views

do automatic updates (unattended-upgrades) still work with third party repository?

If I install nginx from the nginx repository by appending the following to the end of the /etc/apt/sources.list file: deb http://nginx.org/packages/mainline/debian/ trusty nginx deb-src ...
0
votes
1answer
33 views

SSH Failed password login - log password

today I checked the log of my sshd and I have discovered tons of lines like :Oct 12 Oct 12 12:31:34 my_user sshd[15324]: Failed password for invalid user admin from 104.194.25.135 port 2683 ssh2 ...
0
votes
4answers
47 views

where should the site root directory be? [closed]

Where should I put my site root directory "my_site"? Any best practice? /var/www/my_site/ /var/local/sites/my_site/ /usr/share/wwww/my_site/ /usr/local/my_site/ /opt/my_site/ /srv/my_site/
0
votes
0answers
18 views

how to run a web app: users/groups to use for each component?

How do you organize your users/groups to run the different components of your web app? Any best practices? The answer of this question (What permissions should my website files/folders have on a ...
-3
votes
1answer
27 views

Secure SSH access [duplicate]

I am making a website and I am using a droplet made in digital ocean as my dev server. (No stg or prd yet) The problem is that I am using Dynamic IP and if I blocked access on port 22 to my current ...
5
votes
1answer
36 views

W2K8R2 - A way to convert effecitve Group Policy settings to import on stand-alone machines for local policy?

If I have a relatively robust domain environment (e.g. 20 Security related Group Policy Objects) applying to my servers as a baseline set of policy settings and I have a stand-alone server that I want ...
0
votes
1answer
29 views

OpenBSD chroot for nginx/Apache file permissions

I haven't been able to find a satisfying answer on Goole or the various Stack forums: I noticed that files under /var/www (where nginx and I believe Apache are chrooted by default) have permissions ...
0
votes
0answers
17 views

Check Unix Credentials on Apache Server Web App

I am building a number of web apps served by apache for internal use and I really want to have them use unix credentials for access. I know a few ways I could do this but all of them seems to expose ...
1
vote
1answer
29 views

Ways to follow newly discovered vulnerabilities?

I happened to be in a situation where I am in charge for 100+ systems on top of my job as a programmer. Everything we run is Linux (Debian, Ubuntu, Centos) and gladly our sysadmin set everything with ...
0
votes
1answer
55 views

Local port access blocked by iptables

Although experienced with Linux, I'm new to iptables, having set it up following a Rackspace virtual server setup guide. Using port scans and checking remote access to required ports, I can see all ...
0
votes
1answer
72 views

Http 1.1 protocol detected

I have a CentOS server and we had a Retina security scan. I have no idea how to fix this vulnerability. Can you point me in the right direction? We are running nginx.
2
votes
1answer
39 views

Submit a certificate request file from a non domain computer. How to figure out policy server parameters

I'm trying to submit a certificate request. I'm trying to do it from command line so I can run it from code. Previously I have done it by using the Microsoft Active Directory Certificate Services for ...
0
votes
0answers
9 views

Exposing pm.status_path [migrated]

Do you think it's dangerous to publicy expose PHP-FPM pm.status_path? It displays "Pool Status", "Active Processes status" and "Idle Processes status", showing Script path and Request URI.
-2
votes
0answers
42 views

Apache was hited from localhost at the time the server was under attack [duplicate]

I have reasons to conjecture that my server was under some kind of attack last week. (The webserver wasn't responding during the time I was teaching students of computer science at university.) I was ...
3
votes
3answers
615 views

How is a private data center more secure than a public cloud?

I have customers in the financial services industry that insist that a SaaS hosted on public clouds like Amazon's are not as secure as colocation in a private data center. However, I can't find ...
1
vote
1answer
85 views

Security risks of using Google DNS to resolve names on a private net (192.168.x.x)?

Are there any known risks associated with using a public DNS versus a DNS which we or our partners control? Our solution involves a few embedded devices so using Google DNS would give us a degree of ...
-2
votes
1answer
95 views

How do I know how the hacker gained access to my machine? [duplicate]

I own a dedicated machine and today I got an email from my host saying that my server will be blocked if I don't stop abusing the network. I am not a spammer or hacker. Someone was using my machine to ...
-1
votes
1answer
37 views

IIS 8.5 Securing FTP [closed]

I have a IIS installation on Windows Server 2012 R2. I need to provide FTP access to a website. Its only one person. The easiest way to make it secure is to make an ip-restriction and only ...