Security is not a product, but a process.

learn more… | top users | synonyms (1)

0
votes
0answers
7 views

Hold F5 cause all virtual hosts crash : How to limit max process per user in SuPHP

I am hosting a VPS server with Apache2, PHP/SuPHP and MySQL (LAMP). I have many virtual hosts on that server. The problem is that when someone (that happens about 20 times a day) hold F5 on a website ...
2
votes
0answers
10 views

Windows 8 GPT Encryption [on hold]

I have to run encryption for HIPAA Compliance and ran into a snag. I have a Windows 8.1 Home with GPT Based drive. It does not have Bitlocker nor TPM, and VerCrypt doesn't support GPT Partitions. ...
0
votes
1answer
10 views

java - how to limit sending email by 3rd party tools?

I have a (Win2008 R2) box running the Jenkins continuous integration server. It's a java program running as a Windows service. The command line looks like this: > "C:\Program Files ...
0
votes
0answers
11 views

PCI Compliance 11.5: File Integrity Checkers [on hold]

has anyone used EzFIM for compliance on Windows servers? My understanding is that it is highly configurable and pretty cheep. If so please let my know if you like it and if the auditors will accept ...
0
votes
0answers
16 views

sysctl: cannot stat /proc/sys/kernel/exec-shield: No such file or directory

Enable ExecShield protection - ExecShield is security Linux kernel patch to avoid worms and other problems. After Adding to /etc/sysctl kernel.exec-shield = 1 Getting this error sysctl: cannot ...
1
vote
1answer
13 views

Nginx - Redirect to different url if an image is directly access

I want to redirect users if they access the gif images directly. http://www.example.com/uploads/file.gif This should be redirected to home page or some other page. Or If the image is directly ...
2
votes
4answers
84 views

How to get 2 servers under control (Red Hat Linux)

I've got kind of a situation here. We need to get 2 servers under our control. The things we know so far: both are running linux, at least one is running Red Hat they are used as file-server, mysql ...
0
votes
1answer
31 views

Setup VLANs in a switch and routing between them [on hold]

What I want to do: It's small business network setup. I need two separate LANs (LAN1 for developers, LAN2 for marketing and managers). A wifi access is also needed. All network should have access ...
1
vote
0answers
23 views

nginx spam 404 errors

My server is spammed by multiples XXX domains, there is a lot of 404 errors in my logs and i can't find the solution to stop that. 2015/07/31 09:13:20 [error] 7070#0: *610 open() ...
0
votes
0answers
14 views

fwknopd on Centos 6.5

I'm getting the same error as this guy. Namely, Error: Package: 1:fwknop-server-2.6.6-1.fc21.x86_64 (/fwknop-server-2.6.6-1.fc21.x86_64) Requires: libc.so.6(GLIBC_2.15)(64bit) Error: ...
0
votes
0answers
14 views

DevOps: How do I keep my systems patched and secure? [closed]

In my last company we had an operations department responsible for making sure our servers were always set up properly and securely. In my current company, there isn't budget to hire experts in that ...
1
vote
0answers
6 views

iis 7.5 ipSecurity denyAction=NotFound causes 500 error instead of 404

I'm restricting access to certain folders in an IIS 7.5 web application based on IP address. Here is a segment from applicationHost.config: <ipSecurity allowUnlisted="false"> <add ...
1
vote
1answer
60 views
+50

How to remove RC4 cipher from node.js https server running on Windows 2012 R2

Using ssllabs.com's scan tells me RC4 is in use. I read that RC4 should be disabled by default in Windows 2012 R2. I'm running a node.js server using https.createServer and not specifying ciphers ...
1
vote
1answer
24 views

Apache security - list all possible handlers / actions

To ensure there aren't security weaknesses that can be exploited via .htaccess, how can we see all possible handlers that Apache can use via directives like SetHanlder and AddHandler. I know I can ...
2
votes
2answers
52 views

HIPPA Compliance - Home PC Use

I have some more questions on HIPPA Compliance. I'm considering presenting the idea of a RDS server to my clients who are family practice. If they use Home PCs to remote in, do these PCs have to be ...
2
votes
1answer
32 views

Git: expire ssh keys just like passwords expire?

I'm setting up git in a corporate environment. Git operations will be primarily though SSH using a single account with SSH keys used for access control. (http will be used for account configuration, ...
1
vote
0answers
22 views

Allow Execution, Deny Interactive login by GPO

Problem: Accounts to log into work stations are locked down tightly and unable to run nessesary applications on windows 7 stations. Saving an admin accounts credentials to elevate access is currently ...
0
votes
0answers
25 views

Mobile Encryption Password

I'm wondering what other people do for this. I have a client who needs to meet HIPAA Security Compliance. I have two things I'm wondering about. I need to encrypt all laptops that leave this ...
1
vote
1answer
25 views

Postfix sender acces restriction - Security breach?

We encounter security problems with our mail server and would like some advice. The story behind it On our mail server (Postfix 2.9.6 + Dovecot 2.1.7) we would like to be able to create restricted ...
-4
votes
0answers
31 views

A hacker changed my hosting password [closed]

Im developing my own website from a template i bought from HTML5UP, my web is still under constructon, but it is uploaded to my server for testing. First suspicios things happend just after i bought ...
0
votes
2answers
52 views

IPtables on Linux for mysql server private interface

Looking to make a mysql database server for web-servers. The server has a public & private interface and I need some assistance writing the rules. I want to only allow SSH, mysql via private ...
2
votes
1answer
51 views

Is the Outlook OST cache file encrypted?

Is the OST cache file created by Outlook encrypted? I understand that Outlook won't open the file unless it can connect to the user's Exchange account, but I'm wondering if there's a possibility that ...
0
votes
0answers
29 views

Weak points of ssh tunnel and x11 server, hack investigation

So, today I've been hacked. It's very puzzling to me how it was done, so I'm looking for experienced people to show weak points in design of my systems. I have two servers. One is VPS with ...
-3
votes
0answers
23 views

How can i view password protected drives on my hardisk? [closed]

I am not able to see my second partition of harddisk which is password protected. Whenever i connect my harddisk it only shows a single drive instead of showing both.
0
votes
1answer
37 views

How do i know if this logs are normal, and if somenone got into my server?

last month i was logging into my server as usual and was a mess: programs not working, /home not mounting anymore etc etc Now i've downloaded all the Ubuntu server logs and i've noticed that auth is ...
1
vote
2answers
22 views

How do I stop a simple DDOS attack?

There is a hacker who is mad at us, and has started a DDOS attack against us. I think he is a script-kiddie, using tools like DarkComet; the attack is probably simple. I host a server on my PC. The ...
2
votes
1answer
56 views

How to create a private network between a VPS and 4 IPs?

I own a VPS running Debian and i want to avoid security breaches from "outside" (via Internet). I want to guarantee these rules: Allow all outbound traffic; Allow HTTPS connections from IP 1, 2, 3; ...
2
votes
2answers
54 views

What kinds of security vulnerabilities does providing DNSSEC expose?

I was thinking about signing my DNS zone with DNSSEC. My zone, the registrar and my DNS server (BIND9) all support DNSSEC. The only one who doesn't support DNSSEC is my secondary nameserver provider ...
1
vote
1answer
23 views

Audit Logs for Environment Path Changes

Something (or someone) keeps changing our environment path variables on several of our servers. I have the Audit Policy (under local sec pol) set to Success, Failure for all but Process Tracking ...
0
votes
0answers
19 views

SSHFS mount with sudo - how to restrict privileges?

I need to mount a remote server (server1) with an SSHFS mount on server2 via an automated script. I need to be able to access some files on server1 that require root access, but I don't want to enable ...
0
votes
0answers
38 views

How to evaluate security risks of a git server installation

I need to evaluate the security risks of code being hosted on a virtual machine in a git repository. Its an area relatively new to me as a programmer. I want to setup the git repos, but I have to ...
1
vote
0answers
18 views

Frequent SIGTERM Apache

I suspect sometims is going wrong in my webserver (maybe possible DoS attack). In fact I see a lot of such entries: [Sun Jul 19 10:36:21 2015] [error] [client 141.212.122.18] client sent HTTP/1.1 ...
0
votes
1answer
19 views

How to use Snort generate packet logs when in the NIDS mode?

I am using Snort act like a network IDS by implementing snort configuration file and snort rules, I also want to capture all the packets (traffic) going through the specific network interface. My ...
0
votes
1answer
21 views

Windows Server Blocking Web Service?

I have a program that uses a webservice that connects to a server to get software licenses. This is blocked in Windows Server 2003, 2008, 2008 R2, 2012, 2012 R2 by default. However, in Windows XP, ...
7
votes
1answer
610 views

Hardware requirements for 100 virtualized high performance Windows 7 desktops?

We are debating whether to add Client Hyper-V or VMWare Player Pro to new Windows 10 desktops later this year and have our developers run their developer tools in a Windows 7 VM on their local ...
0
votes
2answers
46 views

S3 backup with versioning plus lifecycle management to prevent malicious deletion of backups?

I just want to run this idea by some smarter people to make sure I'm not overlooking something obvious: I want to backup my Linux server to S3 using one of the many backup scripts that allow ...
-1
votes
1answer
17 views

Server Blocked by Provider Sending UDP Packages to certain IP - what does that mean?

My webserver got blocked by my provider recently for the reason that it was performing an attack to another server. The email contained the following log: 08:26:39.219940 68:05:ca:07:02:01 > ...
-1
votes
0answers
7 views

Default “connect automatically” to disabled for new wireless networks [migrated]

I'm using Gnome NetworkManager and I don't want my wireless attempting to connect automatically to any network. For an individual network to which you have already attempted to connect, this is easy ...
-2
votes
0answers
11 views

Secure dcom in AWS

We have 2 servers calling each other's services using dcom. These servers are in a single VPC in AWS and pass sensitive data to each other via dcom. We are told all server communications need to be ...
0
votes
1answer
34 views

OpenSCAP incorrectly reporting false for RHSA-2014:1306: bash security update (Important)

I'm using the following command to test for RHSA-2014:1306 on CentOS 5.9: oscap oval eval --id oval:com.redhat.rhsa:def:20141306 com.redhat.rhsa-all.xml The result is: Definition ...
0
votes
0answers
15 views

PSAD does not start on Ubuntu 14.04

I complied PSAD from source, compilation went smoothly however when I run this command: sudo psad --sig-update I got this: Can't load ...
0
votes
2answers
30 views

Exim - password disclosure by world-readable exim.conf - is that necessary?

I saw /etc/exim.conf is world-readable. The issue with this is to configure Exim to use an SMTP service like Sendgrid to route all outgoing email, you put your username and password into that file, ...
1
vote
1answer
52 views

Are Elastic Beanstalk's environment variables an appropriate place to store secret values?

I have deployed my Django application to Elastic Beanstalk with the intention of using its environment variable configuration interface to store my API keys instead of storing them in my source (as ...
0
votes
1answer
21 views

Apache Security Issue with VirtualHosts

I have setup Apache 2.2+php 5.3.3 on CentOS 6.6 and are running virtual hosts with their document roots setup like /var/www/domainFoldername and their virtual hosts configuration in httpd.conf like: ...
0
votes
0answers
14 views

libvirt: can it provision network interfaces where the network backend is running in a domU rather than dom0?

Thanks to a great blog post, only slightly out of date [1] I've managed to configure a dom0 which has no networking at all: physical network interfaces are passed through to dedicated domU guests ...
2
votes
0answers
27 views

Security concerns w/ physical vs virtual network gateways [closed]

I am in the process of setting up a private network that uses a gateway system for access to certain services on systems behind the network, e.g. ssh, ftp. I have some experience using virtualized ...
1
vote
1answer
30 views

Constant server pings

I've got a Python/Django app hosted on Heroku, monitored on New Relic, with logging tracked on Logentries. I've noticed a large amount of logs that are of the form: at=info method=HEAD ...
0
votes
0answers
19 views

PHP allow_url_fopen seciurity risks

There is theory (among some admins) that allow_url_fopen will put your server at risk because you can include external scripts (prior to PHP 5.2.0). Since PHP 5.2 there is different option ...
1
vote
3answers
104 views

How to disable the default document root in Apache?

I host some websites on my server running Apache Httpd. Each website has it's own domain or sub-domain and virtual host. Therefore, I need no default document root. Is it possible to disable ...
0
votes
0answers
31 views

How to prevent Apache from serving files owned by root?

I run multiple websites on a server using vhosts. I want to configure Apache to just serve files owned by the apache user. Also, only those files should be interpreted by PHP. How can set this ...