Security is not a product, but a process.

learn more… | top users | synonyms (1)

0
votes
0answers
10 views

recieved abuse complaint that badbot came from my ip [duplicate]

I recieved an abuse complaint that a badbot was used to attack their servers and the badbot listed my ip as the source. Does this mean that my server is infected and using my server to send out ...
0
votes
0answers
13 views

How to prevent MITM in mobile apps [on hold]

I want to make sure that my mobile app is the only one making calls to my API. How to ensure that if softwares like Fiddler generate a HTTPs certificate (man-in-the-middle) and anyone is able to ...
1
vote
2answers
29 views

How to set up TLS on hMailServer?

Complete noob here. Please be gentle :) I have a Windows 2008 server, running hMailServer. Right now all my communication is unencrypted. I want to start using TLS. So now I've got myself a SSL ...
1
vote
0answers
21 views

What is the best way to configure an iDRAC/dell server in a public data center such that the idrac doesn't have to be exposed public facing

I have a server right now in a data center behind an OpenVPN using the client on the box to connect to the vpn server. I'm going to install the iDRAC and want to know how to best configure the ...
0
votes
2answers
17 views

Asterisk new PJSIP driver security option

I have a working asterisk environment, but I get a lot of unwanted traffic, like sip scanners of people who even try to call as a guest. I'm using res_pjsip, the configuration is stored in ...
0
votes
0answers
41 views

Got hacked. Want to know how and protect the others similar setup instance [duplicate]

The website got hacked, would like to know how / possible approach the hacker did and how can i protect the server. This is the information of the hack: http://www.zone-h.org/mirror/id/23884086 The ...
0
votes
1answer
12 views

SonicWALL SSL VPN Can't Click Bookmarks

I've added an RDP bookmark to my SSL VPN Virtual Office page, but can't click it. I've tried importing the certificate, adding to Trusted Sites, and setting Security to Low....but the bookmark just ...
0
votes
1answer
19 views

Managing VPN-based users/VLAN access to a test environment

I'm involved in the setup of a demo/user lab environment comprising several racks of server kit. The idea is that potential hardware/software customers can be given a VPN account that will allow them ...
1
vote
1answer
37 views

How to detect Bios Rootkits on a server mainboard?

I recently read about a talk by Corey Kallenberg and Xeno Kovah given at the CanSecWest-conference which describes how the firmware of a server mainboard can be reprogrammed to include malicious ...
0
votes
0answers
9 views

How to set relaxed security for Terminal Services on 2008 R2

I installed Remote Desktop Services on Windows 2008 Server R2. I am trying to set it up with 'Relaxed Security' similar to Windows 2003 would have. Windows 2003 Server, I would set up: Permission ...
0
votes
0answers
47 views

How can I disable specific file type uploads globally in Apache?

In order to secure my webserver, I would like to block specific file types from being uploaded globally, independent of what FTP users configure in their webpages. Is there a way to globally block ...
-2
votes
0answers
38 views

Someone uploaded index.php into my ubuntu server, I don't know how? [duplicate]

I recently figured that someone uploaded an index.php into my server, which is an Ubuntu by the way. How could he do it? What should I do to fix this bug and prevent it from happening again?
-1
votes
1answer
30 views

Block everything except some ports and specific IP Addresses, server can't do HTTP GET

I can't get this firewall.sh script to work. It currently doesn't allow me to get a file at 'https://index.docker.io/v1/repositories/library/ubuntu/images' so either my DNS is flawed or I am blocking ...
4
votes
1answer
101 views

Alternative to Firewalld on memory critical servers?

I've bought a 512MB VPS @ DigitalOcean. Currently, I use Firewalld to allow/deny access to certain ports (probably 22, 80, 443 are open). It uses around 25-30MB of memory. EDIT: Not to forget that ...
-3
votes
0answers
34 views

DD-WRT Router Update [closed]

I installed DD-WRT on my Linksys E3200 router. Flashing the firmware using the associated Linksys E3200 DD-WRT firmware file found though the DD-WRT.com router database. This firmware was created in ...
0
votes
0answers
21 views

clamscan using maldet Error: Servname not supported for ai_socktype

So i have installed Linux Malware Detect (maldet) to scan a server and everything went fine with installation but when i run it i get an error. Bunch of errors and than the scan just closes it. Here ...
0
votes
1answer
25 views

Will Apache2 performance be reduced by huge IP blocklist

My web application is getting more and more hits from unknown sources trying to access secure pages, such as admin panel, etc. So, I want to block IP address from certain countries using this source. ...
1
vote
2answers
47 views

How risky is storing credentials on disk in a Powershell SecureString?

Basically, I want to cache the credentials needed for New-PSSession and make them available to scripts so they don't have to nag a human. If I use export-clixml or similar to store a PSCredential on ...
14
votes
2answers
1k views

How to prevent users from extending their window of valid login

Been working on some security hardening procedures for a RedHat box, and I wanted to know if would be possible to prevent a user from changing his password, once it's expired. For one of our clients ...
0
votes
1answer
24 views

Cannot understand this example fail2ban rule

I'm trying to secure my admin and user login page from brute force attacks. I have setup iptables and the closest thing I can find which looks useful is this: jail file: [nginx-login] enabled = true ...
6
votes
1answer
803 views

Is it a bad idea to stop unnecessary services running

I have a debian dedicated server. I'm trying to secure it and one way I thought would be good is to shut down services I dont need, like FTP for example. I am suggesting to run something like this on ...
1
vote
1answer
47 views

Need recommendations on Firewalled DMZ design for PHP web server on Linux

The 3 options we are considering are listed below. Which one is best or is there a better solution we didn't consider. All servers are linux with nginx. Do you see anything particularly wrong with ...
0
votes
0answers
20 views

Is setting a Content Security Policy incompatible with Joomla's admin page?

I'd like to set a content security policy header for a Joomla website running on Apache 2.4 and served by Varnish. Using this configuration from h5bp and setting Header set Content-Security-Policy ...
1
vote
0answers
14 views

Single row user security in MS SQL 2008 R2

I have a SQL Server 2008R2 question regarding making a single row in an odd way. situation: I have a student records database in which ~ 100 students might in-process in a given day. They enter a ...
3
votes
2answers
48 views

Can't seem to disable root login [duplicate]

I am trying to disable root password login and only allow root login with a ssh key on debian 7. cat << EOF >> /etc/ssh/sshd_config PasswordAuthentication yes UsePAM no PermitRootLogin ...
1
vote
0answers
40 views

Configurable ftp-proxy with LDAP authentication

I am looking for solution for following situation. I have bunch of ftp account (many servers) and many users. They need access to that servers. I don't want to give every user passwords to every ...
0
votes
1answer
18 views

Https transparent proxy and SSL certificate validation

If I setup a transparent proxy for https connections using a SSL certificate signed by my local CA and distributed to all my active directory clients by GPO, may the client (browsers) reject or advise ...
0
votes
0answers
11 views

How do I edit a signed or encrypted SMIME message to include a footer?

Is there any way to edit a signed/encrypted SMIME message so that there is a legal disclaimer on the message? I'm thinking about the MIME multipart email directive may allow for this.
0
votes
0answers
13 views

Persistent SSH port forward without public keys [migrated]

Problem I haven't found a solution to run an SSH port forward in a reliable and persistent fashion, when the server you are connecting to does not support public-key authentication. Question What ...
0
votes
1answer
17 views

Move a Sftp User in a Subdirectory of his Jail

I've a question concerning the Jail explained later: User to be jailed: foo Jail Directory: /mnt/foo-jail Home directory of foo: /mnt/foo-jail/foo-home Everything is ok. Jail is up and the user is ...
-1
votes
0answers
85 views

Customising IPtables for a more secure webserver

Based on my reading online and a few tutorials I have produced a set of iptables rules: i=/sbin/iptables # Flush all rules $i -F $i -X # Setup default filter policy $i -P INPUT DROP $i -P OUTPUT ...
1
vote
2answers
47 views

How to store admin passwords in a way that can be accessed by multiple admins? [closed]

How to store all the admin passwords for routers, servers, desktop computers in the network if they need to be accessible by multiple admins? There are so many that they can't be memorised and they ...
-2
votes
1answer
30 views

DNS ATTACK \/ or some kind of an error, i don't know

I am getting those errors in my CSF firewall, I would like to know how can I stop it. is it type of an attack? also if it is, how can I stop it? Mar 11 22:48:57 root named[7598]: client ...
2
votes
1answer
26 views

Catch incoming email and then deliver to original recipient on sendmail

in the company I work for there are a user that is making bad use of the email, but to have evidence of what he is doing we need to intercept all the incoming email to him and all outgoing email from ...
1
vote
0answers
45 views

How to copy locked swap files in ESXi?

Based on this question : How to disable swap files in ESXi?. The main answer states that it is possible to extract data from the swap files (for exemple using strings) so I tried to make a simple ...
1
vote
1answer
26 views

How to implement table security without SUPER privilege?

A MAJOR provider of cloud-based MySQL does not grant the SUPER privilege to the master user. The provider is Amazon RDS, but my question isn't about Amazon RDS specifically, it's for the general case ...
13
votes
1answer
236 views

What is the Rowhammer DRAM bug and how should I treat it?

DRAM chips are very tightly packed. Research has shown that neighboring bits can be flipped at random. What is the probability of the bug triggering at random in a server-grade DRAM chip with ECC ...
1
vote
0answers
18 views

Restrict hostapd wireless client from talking to eachother

How can I keep a wireless client of hostapd from talking to a wired client on the same network or another wireless client on the same network? Here's my network topology: [wired client] --> ...
3
votes
3answers
49 views

Why is Android / IE using 3DES when AES is available?

I have a Zimbra installation and want to harden the cipher suites. I disabled some and am quite OK with what is left. The problem now is that the Qualys SSL test shows a lot of clients will use 3DES, ...
1
vote
1answer
32 views

Is using su to drop root in shell scripts a security risk?

When searching for how to drop root permissions in shell scripts, I often see answers using su. However, when you're done using su you can just type logout and be back at the shell of the original ...
1
vote
2answers
54 views

Giving access to multiple users for remote desktop

I have 50+ users whom I want to give remote desktop access to multiple VM machines. Instead of adding each individual user to "Remote desktop users" I created a AD security group & added all the ...
0
votes
0answers
45 views

Blocking SSH Brute force from a HAProxy LB

We're trying to grant access to an internal SSH server using a HAProxy setup on a public DMZ. This works as expected however connections into the server are originated from the HAProxy (tproxy won't ...
0
votes
1answer
23 views

PSAD IPTables logging error

I installed PSAD on my Ubuntu server and then set the IPTables accordingly. But I still get this error by email: You may just need to add a default logging rule to the /sbin/iptables 'filter' ...
0
votes
1answer
43 views

New User Accounts have “Too Much” privileges Windows 7 Ultimate Edition SP1 x64

I am running Windows 7 Ultimate Edition SP1 x64 (Build 7601) in WORKGROUP mode (Non-NT_Domain, Non ADDS environment). I am the Administrator of these machines and Network. My setup is only a few ...
3
votes
1answer
26 views

Please clarify for me how tcpwrappers works

We've recently gone through a security audit and among several valid and other, quite pointless findings is one that states that tcpwrappers is not disabled. I've never used tcpwrappers so I don't ...
2
votes
2answers
72 views

Windows Server Administration - which services are safe to run internet facing?

Coming from a Linux background and now having to manage some Windows servers (2008R2 & 2012R2) I'm wondering which services are safe to run directly over the internet. The servers are all internet ...
0
votes
1answer
51 views

Recomendations for this mail server setup?

EMAIL SERVER SETUP Hey, its my first time using serverfault but I hope the community can help. I am trying to build a secure email system using Linux, Postfix, Dovecot and MySQL. I have read on ...
-1
votes
1answer
26 views

web application audit task require my remote IP to be allowed on application network firewall [closed]

I want to audit a web application which is hosted on a web server sitting behind a cyberoam firewall. My task is to run a scan from my remote machine which has ISP MTNL broadband. My machine gets a ...
0
votes
1answer
41 views

How do I open specific ports on Linux (an AWS instance of RHEL v. 7)?

I'm using RedHat version 7. My AWS instances are in a security group with ample permissions for inbound connectivity. I can do Yum updates. The servers can ping each other. I can transfer files ...
0
votes
0answers
21 views

Tracking user activity in openvz container?

I have been trying to figure out a way to track user activity in an openvz container for a long time now (auditd like in KVM's). This is a PCI-DSS requirement. I can't seem to find any good ...