Security is not a product, but a process.

learn more… | top users | synonyms (2)

-1
votes
0answers
4 views

Restrict access to one VPC in AWS

I am trying to restrict users to a single VPC. I went through Controlling Access to Amazon VPC Resources and came up with the following policy but it does not work. Can someone point out the errors in ...
-1
votes
0answers
18 views

IIS Hardening after benchmarking reveals easy take down

After running some benchmarks on our web-servers using a variety of tools, such as apache bench, it has revealed just how easy it is to take down a website. I've been able to solve this problem on ...
-1
votes
0answers
13 views

How to use pwauth plugin for jenkins on CentOS 6.5 [on hold]

I am running jenkins on a development machine and I want every user on this machine be able to access the jenkins page. I want use OS's user/group database for authentication As this post suggest, ...
-1
votes
0answers
30 views

Which distribution has the largest security update coverage [on hold]

Most large distributions provide timely security updates to newly discovered vulnerabilities. However, most distributions also limit these security updates to a subset of the packages in the ...
-6
votes
1answer
33 views

Verify HASH value of certificate [on hold]

How can I verify Hash value of a certificate I get from a website using openssl? Say for example or facebook.com.
-2
votes
1answer
22 views

EV Certificate on browser [on hold]

How does the browser recognise that the presented certificate actually is an EV certi cate? I went through this article but I couldn't figure out any thing for sure.
0
votes
0answers
8 views

Cups Does not ask for authentication for remote access at all, it will either not ask and work or not ask and not work

I can find an infinite amount of questions asking how to remove authentication but I cant seem to find any that want to be asked for a prompt before being able to access the web service GUI. I have ...
0
votes
0answers
17 views

Lock Down Users on Cygwin SFTP Server

How do I lock down sftp users in Cygwin so that they can't read from random directories such as /etc. i set up local windows accounts for each sftp user on the machine. I've used /etc/fstab file to ...
-1
votes
0answers
11 views

how to get tripwire to warn if a file exists

When I configure tripwire policy, I have to comment out files that don't exist so tripwire doesn't give an error. But what if I want to test for a file suddenly existing? Suppose I want to test, for ...
1
vote
1answer
46 views

Kerberos SSH Man-in-the-Middle for Data Sniffing

Kerberos clearly keeps an attacker from getting a user's credentials in an SSH man-in-the-middle scenario (one where the attacker has gotten the user to trust their server's public key and redirects ...
0
votes
1answer
22 views

Apache - Drop connection for anything but HTTP 200 status

Is there a way to configure Apache to drop connection for any request resulting in an HTTP status other than 200 (or possibly a list of status codes)? The idea is that, rather than returning any ...
0
votes
0answers
5 views

FIM2010 R2 SP1 service account requirements on database after installation

We're in the process of updating our Forefront Identity Manager to 2010 R2 SP1. The SQL Server instance for the old installation has the FIM service account in the sysadmin role, as is required for ...
0
votes
1answer
32 views

Why should I remove firewall rule after application exit?

I have a server which listens on port 80 for incoming requests - using HttpListener. I've found that to be able to do that, I need to open up the port (add a firewall rule which enables me to listen ...
-2
votes
0answers
25 views

triple vlan configuration on cisco swith is it possible [on hold]

I have 3 ports fa0/1, fa0/2, fa0/3 fa0/1 is connected to paging system ( public address vlan) fa0/2 is connected to paging system controller (public address vlan) fa0/3 is connected to IP Telephone ...
1
vote
1answer
54 views

Why is fail2ban not banning this attack?

I have fail2ban installed to ban bruteforce attempts on the ssh password. There are business requirements for not disabling password authentication on this machine. fail2ban was installed using the ...
0
votes
1answer
26 views

Does Active Directory alone is not enough to secure hadoop?

I am trying to secure Hadoop environment installed in windows. So basically I started to analyse how to secure a Unix-based hadoop cluster. Have gone through various links related to Kerberos and ...
1
vote
1answer
22 views

Mod Security ctl:ruleEngine=Off Whitelist Fails in Phase 1

Background info : cPanel server with atomicorp ruleset, plus our own custom rules and whitelists in separate .conf files - Apache 2.2, modsec 2.8 Whitelist rule: SecRule REMOTE_ADDR ...
0
votes
0answers
17 views

What if Security ID and Account Name differ on Windows Security Event Log

the latest MS Kerberos Vulnerability let us search our Security Event Logs for potential attackers. According to a technet article, to identify an attacker you have to search for non matching security ...
-2
votes
0answers
22 views

Digital Ocean droplets get locked down because of outgoing DDOS attacts [duplicate]

Two of my droplets were locked down this week from my account for an apparent reason of outgoing DDOS attack. My first machine was allegedly compromised on Nov 18 2014 and my networking is brought ...
7
votes
1answer
75 views

PCI-DSS: Virtualization segmentation in ESXi environment

I have already asked this question over on Information Security but so far it has not garnered any comments. I am thinking perhaps it is more of a server infrastructure and configuration question, ...
1
vote
2answers
42 views

How to limit dynamic DNS updates

First off, I'm sorry if this is vague, but I'm not very familiar with DNS or DNS terminology. What I'm trying to do: I want to limit what hostnames are allowed to dynamically update DNS. I don't ...
1
vote
1answer
37 views

Disabling weak ciphers

Does anyone have any experience disabling weak ciphers on Windows Registry? Server doesn't have IIS installed. Below is the results of my security scan but not 100% what registry entries should be ...
-1
votes
0answers
11 views

How can I use tacacs+ server for AAA by my application

I am trying to centralize the AAA mechanism for for one of my application. So I was thinking of using tacacs+ server for that purpose. But I am not able to find a proper way to use it. I am trying to ...
-1
votes
1answer
39 views

How to drop first udp packet from a source with iptables?

As a defense against distributed udp flood, I need to drop first udp packet from a source and accept other than first packet. Does iptables has capability of doing this? If yes, how?
0
votes
2answers
451 views

How do I set permissions for uploading media in WordPress? (Ubuntu 14.04.1, nginx 1.4.6)

I'm having trouble finding the correct permissions for running a WordPress site on my droplet. I followed this guide to configure the site: How To Configure Secure Updates and Installations in ...
0
votes
1answer
36 views

iptables setting output default to DROP

I have two servers: one web, one database. The db server is on a private network. I thought I needed to restrict the default OUTPUT on the web server to DROP and created OUTPUT rules to to ACCEPT ...
0
votes
0answers
18 views

PHP Change log Centos 7 [duplicate]

Might be a silly question but Im looking at the change log for PHP by running this command - rpm -q --changelog php | grep CVE See all the CVE's listed does that mean they have been patched in the ...
-1
votes
2answers
47 views

Can't update to latest PHP version. Centos 7 [closed]

I'm unable to update to the latest PHP package. I ran yum update php and it updated to PHP 5.4.16. Reran the update command to see if there was any newer versions and stated there was no packages ...
0
votes
0answers
7 views

LANCOM 1781VAW disconnects any VPN connection after 1 hour. Why?

I have a small infrastructure here and we are wondering why our lancom-router (1781VAW) disconnects any vpn connection after 60 minutes. how could i troubleshoot this? is this maybe a security ...
1
vote
2answers
44 views

Best way to trace outgoing requests from a server

We have an Ubuntu 14.04.1 LTS server with nginx 1.4.6 that hosts a few dozen websites and received an abuse complaint from another server of hundreds of requests like this: "POST /wp-login.php ...
-1
votes
0answers
18 views

Why Access denied when removing files/folder on Windows [migrated]

What does really happen when I try to remove a folder on windows (7, 2008, 2012) and get the "famous": You need permission to perform this action ... Folder Access denied What I've done : I ...
0
votes
1answer
36 views

Network Security: Lan Manager Authentication Level

I'm a little bit confused by the explanation provided for the setting "Network Security: LAN Manager AUthentication Level" in group policies. The provided explanation only talks about clients and ...
-1
votes
1answer
45 views

How is Docker being used in VPS hosting? [closed]

I'm curious how Docker is being used to host VPS 's ? e.g. I get that it's very fast to boot, but I've heard that security of Docker is not enough to keep people out of the main system... How are ...
0
votes
1answer
35 views

Windows server private shared folders

What is the best practice for sharing private home folders with the users (Windows Fileserver with AD)? I was asked this question today after someone watched this video, and it got me thinking.. ...
4
votes
1answer
56 views

Multiple websites on multiple servers - seperate mysql or not

I currently have 2 Debain boxes (VPS - 4Gb memory) and am hosting a variety of websites of different importance, some ore production sites, others are demo/staging/test sites. Approximately 15-20 ...
1
vote
1answer
27 views

Windows 7 Unchangable AppLocker Rules

I have a windows 7 image that appears to be using an applocker ruleset that I'm unable to modify or disable. Performing the following appears to have no effect on this enforced AppLocker mystery ...
0
votes
0answers
16 views

Disable Keyboard on Ubuntu Kiosk Touch PC

I'm in the middle of deploying a series of Kiosk PC's with a minimal Ubuntu server and a web enabled Application(Rails) on it. The hardware are Shuttle All-in-one PC's at the moment. The PC starts ...
0
votes
0answers
18 views

Meraki Z1: protection of corporate devices from personal devices

My company employees about 600-700 remote employees, each of whom is issued a corporate IP phone an a thin client compute endpoint. In our current deployment, both devices are configured (defaults ...
0
votes
0answers
15 views

Apache2 + Chroot + PHP global prepend

I have a Debian Wheezy server with PHP 5.4 and Apache 2.4 . I have following problem: User A has home dir /home/user_a with public directory /home/user_a/public_html User B has home dir ...
-1
votes
0answers
12 views

Why block wget Download Agents [migrated]

I noticed that some nginx configurations block download agents using wget like this: if ($http_user_agent ~* LWP::Simple|wget) { return 403; } Why block wget? If I use the above code in my ...
1
vote
0answers
30 views

Owncloud - Proxy changes certificate

I'm running an owncloud server 7.0.2 with apache(Ubuntu host) and configured it to use a self-signed ssl certificate. Everything works fine on my home-PC On an other machine I would like to use the ...
0
votes
1answer
55 views

Do blocking input ports increases security?

1-Do blocking unused input ports in firewall increases system security? How? (as there is no daemon listening on those ports anyway) 2-Do dropping those unused ports will positively or negatively ...
0
votes
1answer
53 views

PCI Failure due to HTTP Reverse Proxy Detection

We use Security Metrics for our PCI compliance scans. Haven't had any issues in the past but our most recent scan said we failed due to "HTTP Reverse Proxy Detection". I'm guessing this has to do with ...
0
votes
0answers
31 views

Intermittent SSH problems with a specific server from a specific Wifi router

I've been ssh'ing into a specific server from my home office via Wifi and Time Warner Cable internet for years with no problem. In recent months, I started having problems, where I'd be unable to ...
-4
votes
1answer
61 views

Restrict Access from certain machines to my Web Application in LAN [closed]

I am trying to deploy a Local Network web application, which should not necessitate a client login. The requirement is to block certain machines, (not users, just a few computers, the application ...
-6
votes
1answer
40 views

encryption of fiber communications [closed]

We have to connect one site to another using leased fiber ( theoretically it's a dark one ) in order to replace a radio link. All servers are in one site. Both location now have Gigabit networks. Can ...
4
votes
1answer
28 views

How are files being added to site as apache, when site is running as FastCGI?

I have a web server that is running many different sites (standard vhosts setup, most sites are Joomla based, a few wordpress and other non-CMS sites) in a Parallels Automation 11.5 environment. The ...
-1
votes
0answers
28 views

how can i find out more about this perl process [duplicate]

i recently have isolated a domain account on my virtualmin vps that i believe is responsible for high cpu usage for nefarious purposes. with the account disabled, the 2 perl process still popup but ...
0
votes
1answer
37 views

Securing Webserver and Database

I need to secure an internal web server and sql db, that is going to be made public(www) At this stage im only looking to provide a reasonable amount of security($$) until it gets bigger at which ...
2
votes
1answer
60 views

Least-Privilege BUILTIN\Administrator Failure Configuring Application Control Policies with AppLocker

I asked this question over at SuperUser to no avail a while ago, before realizing that serverfault may be a better option. I'm configuring execution control on a computer running Windows 7 SP1 ...