Security is not a product, but a process.

learn more… | top users | synonyms (1)

1
vote
1answer
4 views

Nginx - Redirect to different url if an image is directly access

I want to redirect users if they access the gif images directly. http://www.example.com/uploads/file.gif This should be redirected to home page or some other page. Or If the image is directly ...
1
vote
4answers
68 views

How to get 2 servers under control (Red Hat Linux)

I've got kind of a situation here. We need to get 2 servers under our control. The things we know so far: both are running linux, at least one is running Red Hat they are used as file-server, mysql ...
0
votes
1answer
26 views

Setup VLANs in a switch and routing between them [on hold]

What I want to do: It's small business network setup. I need two separate LANs (LAN1 for developers, LAN2 for marketing and managers). A wifi access is also needed. All network should have access ...
1
vote
0answers
19 views

nginx spam 404 errors

My server is spammed by multiples XXX domains, there is a lot of 404 errors in my logs and i can't find the solution to stop that. 2015/07/31 09:13:20 [error] 7070#0: *610 open() ...
0
votes
0answers
14 views

fwknopd on Centos 6.5

I'm getting the same error as this guy. Namely, Error: Package: 1:fwknop-server-2.6.6-1.fc21.x86_64 (/fwknop-server-2.6.6-1.fc21.x86_64) Requires: libc.so.6(GLIBC_2.15)(64bit) Error: ...
0
votes
0answers
11 views

DevOps: How do I keep my systems patched and secure? [on hold]

In my last company we had an operations department responsible for making sure our servers were always set up properly and securely. In my current company, there isn't budget to hire experts in that ...
1
vote
0answers
4 views

iis 7.5 ipSecurity denyAction=NotFound causes 500 error instead of 404

I'm restricting access to certain folders in an IIS 7.5 web application based on IP address. Here is a segment from applicationHost.config: <ipSecurity allowUnlisted="false"> <add ...
0
votes
1answer
19 views

How to remove RC4 from node.js https server running on Windows 2012 R2

Using ssllabs.com's scan tells me RC4 is in use. I read that RC4 should be disabled by default in Windows 2012 R2. I'm running a node.js server using https.createServer and not specifying ciphers ...
1
vote
1answer
22 views

Apache security - list all possible handlers / actions

To ensure there aren't security weaknesses that can be exploited via .htaccess, how can we see all possible handlers that Apache can use via directives like SetHanlder and AddHandler. I know I can ...
2
votes
2answers
47 views

HIPPA Compliance - Home PC Use

I have some more questions on HIPPA Compliance. I'm considering presenting the idea of a RDS server to my clients who are family practice. If they use Home PCs to remote in, do these PCs have to be ...
2
votes
1answer
31 views

Git: expire ssh keys just like passwords expire?

I'm setting up git in a corporate environment. Git operations will be primarily though SSH using a single account with SSH keys used for access control. (http will be used for account configuration, ...
1
vote
0answers
20 views

Allow Execution, Deny Interactive login by GPO

Problem: Accounts to log into work stations are locked down tightly and unable to run nessesary applications on windows 7 stations. Saving an admin accounts credentials to elevate access is currently ...
0
votes
0answers
24 views

Mobile Encryption Password

I'm wondering what other people do for this. I have a client who needs to meet HIPAA Security Compliance. I have two things I'm wondering about. I need to encrypt all laptops that leave this ...
1
vote
1answer
22 views

Postfix sender acces restriction - Security breach?

We encounter security problems with our mail server and would like some advice. The story behind it On our mail server (Postfix 2.9.6 + Dovecot 2.1.7) we would like to be able to create restricted ...
-4
votes
0answers
29 views

A hacker changed my hosting password [on hold]

Im developing my own website from a template i bought from HTML5UP, my web is still under constructon, but it is uploaded to my server for testing. First suspicios things happend just after i bought ...
0
votes
2answers
40 views

IPtables on Linux for mysql server private interface

Looking to make a mysql database server for web-servers. The server has a public & private interface and I need some assistance writing the rules. I want to only allow SSH, mysql via private ...
2
votes
1answer
48 views

Is the Outlook OST cache file encrypted?

Is the OST cache file created by Outlook encrypted? I understand that Outlook won't open the file unless it can connect to the user's Exchange account, but I'm wondering if there's a possibility that ...
0
votes
0answers
28 views

Weak points of ssh tunnel and x11 server, hack investigation

So, today I've been hacked. It's very puzzling to me how it was done, so I'm looking for experienced people to show weak points in design of my systems. I have two servers. One is VPS with ...
-3
votes
0answers
23 views

How can i view password protected drives on my hardisk? [closed]

I am not able to see my second partition of harddisk which is password protected. Whenever i connect my harddisk it only shows a single drive instead of showing both.
0
votes
1answer
36 views

How do i know if this logs are normal, and if somenone got into my server?

last month i was logging into my server as usual and was a mess: programs not working, /home not mounting anymore etc etc Now i've downloaded all the Ubuntu server logs and i've noticed that auth is ...
1
vote
2answers
17 views

How do I stop a simple DDOS attack?

There is a hacker who is mad at us, and has started a DDOS attack against us. I think he is a script-kiddie, using tools like DarkComet; the attack is probably simple. I host a server on my PC. The ...
2
votes
1answer
55 views

How to create a private network between a VPS and 4 IPs?

I own a VPS running Debian and i want to avoid security breaches from "outside" (via Internet). I want to guarantee these rules: Allow all outbound traffic; Allow HTTPS connections from IP 1, 2, 3; ...
2
votes
2answers
53 views

What kinds of security vulnerabilities does providing DNSSEC expose?

I was thinking about signing my DNS zone with DNSSEC. My zone, the registrar and my DNS server (BIND9) all support DNSSEC. The only one who doesn't support DNSSEC is my secondary nameserver provider ...
1
vote
1answer
20 views

Audit Logs for Environment Path Changes

Something (or someone) keeps changing our environment path variables on several of our servers. I have the Audit Policy (under local sec pol) set to Success, Failure for all but Process Tracking ...
0
votes
0answers
18 views

SSHFS mount with sudo - how to restrict privileges?

I need to mount a remote server (server1) with an SSHFS mount on server2 via an automated script. I need to be able to access some files on server1 that require root access, but I don't want to enable ...
0
votes
0answers
37 views

How to evaluate security risks of a git server installation

I need to evaluate the security risks of code being hosted on a virtual machine in a git repository. Its an area relatively new to me as a programmer. I want to setup the git repos, but I have to ...
1
vote
0answers
18 views

Frequent SIGTERM Apache

I suspect sometims is going wrong in my webserver (maybe possible DoS attack). In fact I see a lot of such entries: [Sun Jul 19 10:36:21 2015] [error] [client 141.212.122.18] client sent HTTP/1.1 ...
0
votes
1answer
18 views

How to use Snort generate packet logs when in the NIDS mode?

I am using Snort act like a network IDS by implementing snort configuration file and snort rules, I also want to capture all the packets (traffic) going through the specific network interface. My ...
0
votes
1answer
21 views

Windows Server Blocking Web Service?

I have a program that uses a webservice that connects to a server to get software licenses. This is blocked in Windows Server 2003, 2008, 2008 R2, 2012, 2012 R2 by default. However, in Windows XP, ...
7
votes
1answer
605 views

Hardware requirements for 100 virtualized high performance Windows 7 desktops?

We are debating whether to add Client Hyper-V or VMWare Player Pro to new Windows 10 desktops later this year and have our developers run their developer tools in a Windows 7 VM on their local ...
0
votes
2answers
45 views

S3 backup with versioning plus lifecycle management to prevent malicious deletion of backups?

I just want to run this idea by some smarter people to make sure I'm not overlooking something obvious: I want to backup my Linux server to S3 using one of the many backup scripts that allow ...
-1
votes
1answer
17 views

Server Blocked by Provider Sending UDP Packages to certain IP - what does that mean?

My webserver got blocked by my provider recently for the reason that it was performing an attack to another server. The email contained the following log: 08:26:39.219940 68:05:ca:07:02:01 > ...
-1
votes
0answers
7 views

Default “connect automatically” to disabled for new wireless networks [migrated]

I'm using Gnome NetworkManager and I don't want my wireless attempting to connect automatically to any network. For an individual network to which you have already attempted to connect, this is easy ...
-2
votes
0answers
11 views

Secure dcom in AWS

We have 2 servers calling each other's services using dcom. These servers are in a single VPC in AWS and pass sensitive data to each other via dcom. We are told all server communications need to be ...
0
votes
1answer
33 views

OpenSCAP incorrectly reporting false for RHSA-2014:1306: bash security update (Important)

I'm using the following command to test for RHSA-2014:1306 on CentOS 5.9: oscap oval eval --id oval:com.redhat.rhsa:def:20141306 com.redhat.rhsa-all.xml The result is: Definition ...
0
votes
0answers
15 views

PSAD does not start on Ubuntu 14.04

I complied PSAD from source, compilation went smoothly however when I run this command: sudo psad --sig-update I got this: Can't load ...
0
votes
2answers
29 views

Exim - password disclosure by world-readable exim.conf - is that necessary?

I saw /etc/exim.conf is world-readable. The issue with this is to configure Exim to use an SMTP service like Sendgrid to route all outgoing email, you put your username and password into that file, ...
1
vote
1answer
49 views

Are Elastic Beanstalk's environment variables an appropriate place to store secret values?

I have deployed my Django application to Elastic Beanstalk with the intention of using its environment variable configuration interface to store my API keys instead of storing them in my source (as ...
0
votes
1answer
21 views

Apache Security Issue with VirtualHosts

I have setup Apache 2.2+php 5.3.3 on CentOS 6.6 and are running virtual hosts with their document roots setup like /var/www/domainFoldername and their virtual hosts configuration in httpd.conf like: ...
0
votes
0answers
14 views

libvirt: can it provision network interfaces where the network backend is running in a domU rather than dom0?

Thanks to a great blog post, only slightly out of date [1] I've managed to configure a dom0 which has no networking at all: physical network interfaces are passed through to dedicated domU guests ...
2
votes
0answers
27 views

Security concerns w/ physical vs virtual network gateways [closed]

I am in the process of setting up a private network that uses a gateway system for access to certain services on systems behind the network, e.g. ssh, ftp. I have some experience using virtualized ...
1
vote
1answer
30 views

Constant server pings

I've got a Python/Django app hosted on Heroku, monitored on New Relic, with logging tracked on Logentries. I've noticed a large amount of logs that are of the form: at=info method=HEAD ...
0
votes
0answers
17 views

PHP allow_url_fopen seciurity risks

There is theory (among some admins) that allow_url_fopen will put your server at risk because you can include external scripts (prior to PHP 5.2.0). Since PHP 5.2 there is different option ...
1
vote
3answers
99 views

How to disable the default document root in Apache?

I host some websites on my server running Apache Httpd. Each website has it's own domain or sub-domain and virtual host. Therefore, I need no default document root. Is it possible to disable ...
0
votes
0answers
30 views

How to prevent Apache from serving files owned by root?

I run multiple websites on a server using vhosts. I want to configure Apache to just serve files owned by the apache user. Also, only those files should be interpreted by PHP. How can set this ...
1
vote
1answer
43 views

Is a jump server really necessary when using RDC to connect to Azure VM?

We are setting up a new Network which includes a VM in Azure. I can connect to this via RDC. However, our security guy wants me to access it through a second VM for security reasons. In other words, ...
0
votes
0answers
22 views

Website randomly not load some files

I have a single page web application who has recent HTML, JavaScript and CSS that interact with very old Classic ASP pages called using AJAX. In localhost all is working good, on the other hand in the ...
0
votes
1answer
15 views

How can I make sure only my VPN client can access public networks directly? [closed]

Presently, I go like this: Go to Starbucks Open my laptop (which may have 3 gmail accounts etc open in browser) Connect to their public network Sometimes have to press the "I agree" button in ...
0
votes
0answers
53 views

Amazon EC2 Abuse Report - SQL Injection Attempts

I have an EC2 server (Win2008) which has about 10 sites on it, it's completely locked down apart from ports 80 and 443. I can only access port 3389 and 21 from my home and work IP addresses. Just ...
-1
votes
0answers
17 views

Can LAN Manager Authentication Level in Group Policy be set differently for a wireless connection?

I seem to be seeing the following behavior and wondering how it is possible: A client machine (external) generally has no trouble connecting to hosts in our RDS-based environment. When the same ...