Security is not a product, but a process.

learn more… | top users | synonyms (1)

9
votes
5answers
29k views

SSH / SSHD - How do I set max login attempts?

What is the easiest way to setup max login attempts in a LAMP environment (sshd installed via yum)? Is there a package or simple firewall rule?
1
vote
2answers
31 views

Is it possible to truncate packets using iptables?

The first thing on my mind when setting up a new Linux server (dedicated or VPS) is how you can increase security. I was wondering if it is possible using iptables to truncate icmp packets. If you ...
1
vote
1answer
999 views

snort complains on local.rules

I just installed snort-2.9.7.0 on Fedora 20, and am getting error when running: % snort -c /etc/snort/snort.conf --dump-dynamic-rules=/tmp Running in Rule Dump mode --== Initializing Snort ...
14
votes
9answers
8k views

How to view all ssl certificates in a bundle?

I have a certificate bundle .crt file. doing openssl x509 -in bundle.crt -text -noout only shows the root certificate. how do i see all the other certificates?
0
votes
0answers
9 views

MySQL /nonexistent home vs “No directory, logging in with HOME=/”

The preinst script in the Debian/Ubuntu packages for MySQL sets the default home directory for the MySQL server to /nonexistent, presumably as a security measure - the MySQL server has its own datadir ...
16
votes
6answers
4k views

Why would a university block incoming UDP traffic with destination port 53?

From my understanding DNS uses UDP and port 53. What undesirable things could happen if incoming UDP packets to port number 53 weren't blocked? UPDATE: Packets originate or are destined to the ...
1
vote
0answers
19 views
+50

controlling access while caching video content on-site on client's network

we have many hours of video training courses that we want to deliver on-site to clients with encryption or something to control access Currently , we offer via website (eg like udacity), but some ...
46
votes
6answers
30k views

How to add a security group to a running EC2 Instance?

I have an Amazon EC2 instance running and I will like to add another security group to that instance and then remove the current security group from that instance. Is this possible?
2
votes
5answers
13k views

Error when restoring database (Windows 7 test environment)

I have a windows 7 operating system as a test environment. I have SQL Server EE installed with two instances, named as test and production. I took a full backup from AdventureWorks database from test ...
0
votes
1answer
1k views

How do I install OSSIM (Alientvault SIEM) manually?

AlienVault by defult is a .iso image. It installed on the core of Debian. I want to install it on Ubuntu 12.04. How can i do that?! Or is it possible or not?! (AlienVault is a SIEM product, it is an ...
0
votes
0answers
23 views

ThinkServer x3550 M3: AES-NI disabled?

We are running a x3550 M3 with Ubuntu and we wanted to enable AES-NI functionality. First, we checked whether it was enabled already by executing: # grep aes /proc/cpuinfo However, no aes flags ...
1
vote
0answers
13 views

What are the differences between Blue coat ProxySG and Cisco Ironport?

What are the main differences between ProxySG and Cisco's Ironport Appliances? I already found out: Cisco's Ironport: - is only available as a scalable Hardware Appliance (not Virtual) - high ...
-1
votes
2answers
41 views

How to install SSL certificate for Windows 8.1

I have a Windows 8.1 machine that I RDP into on a public IP (also secured by 2FA). I am getting a failing PCI scan because the default SSL cert created by Windows for RDP is using SHA1 hashing. So ...
2
votes
2answers
186 views

How to keep access keys safe in the event of a compromised server?

What's the best strategy to keeping access tokens secure in the event of a compromised server? Let's say I have a Linux web server to which I regularly ssh into. There is a variety of critical access ...
1
vote
1answer
271 views

ejabberd: set Diffie-Hellman (DH) ciphers bitsize to >= 2048

In the modern version of ejabberd there is a possibility to use custom Diffie-Helman parameters by providing a self-generated pem-file to the dhfile and s2s_dhfile options in ejabberd.yml. I had ...
0
votes
0answers
14 views

Which AWS entities may have security group associated?

I'm writing a security audit tool and I would like to see all the services which have particular SG associated. At this point I found out that SG may be associated with: ec2 instance rds instance ...
0
votes
1answer
25 views

Windows 2003(!) Server won't boot: stuck at “applying security policy”

We have a (partly) decommissioned Windows 2003 server (of year 2000 vintage) which has been running fine until I had to turn it off for the first time in months due to a planned power outage. The ...
0
votes
0answers
17 views

Web Attack: Mass Injection Website 19 [duplicate]

I got issue at Norton web safety (attached is the image) Can please any body tell me what cause this issue?
4
votes
1answer
39 views

How can I reduce the verbosity of certain Ansible tasks to not leak passwords into syslog?

Sometimes I would like to use Ansible's lineinfile or blockinfile modules to write a password into some configuration file. If I do so, the whole line or block, password included, ends up in my ...
-1
votes
1answer
22 views

Is it possible to authencticating/login for WPA2-Enterprise using web portal?

I just wondering is it possible using WPA2-Enterprise with authentication using web just like captive portal? If possible I think it would be really cool though the setup will take time.
-1
votes
0answers
13 views

Server Security - Stop sending spams from server [duplicate]

My server is sending spam emails because of which my IP is blocked at some servers. Can any body please suggest what security measurements should be taken? Also Norton Safe Web has analyzed my site ...
4
votes
2answers
1k views

How to set up two-factor authentication with OTP on FreeBSD?

I have a FreeBSD server that I like to be able to get to from anywhere. Normally I use SSH publickey to log in, or if I don't have my SSH private key available then I might use regular password over ...
-1
votes
0answers
21 views

IPtables: block fragment type “DF” don't fragment [closed]

I'm getting some DDoS attacks and I need to block the packets with UDP flags "DF" using iptables, or another packet filtering method. I think u32 can do it, but I don't know how to check the "Don't ...
2
votes
1answer
1k views

Securing an Apache Setup with a Fresh Ubuntu Web Server with users and permissions

I have a virtual Server with Ubunto 10.04 on. My host Mediatemple have a few guides on trying to secure the apache config, but I think they are missing some details, or at least it makes no sense to ...
-2
votes
0answers
18 views

How to protect my site against dereferer links? [closed]

A potentially illegal website has been linking to my website for a while, so I used .htaccess to blacklist it. Now, the site has used a service called dereferer.org to prevent the referer from being ...
1
vote
1answer
32 views

Nginx serving .PHP as a download only when .php is added with arguments

Here is my current nginx config: server { server_name mydomain.example; access_log /srv/www/mydomain.example/logs/access.log; error_log /srv/www/mydomain.example/logs/error.log; root ...
3
votes
1answer
1k views

Problems with disabled ssl version 2 in ubuntu server. Can I also disable ssl version 3 to solve problems?

I recently set up a Ubuntu 12.10 server for a service which I used to run on a 12.04 machine. Since Ubuntu 10.10 SSLv2 seems to be disabled because of known security reasons. If i run curl against ...
50
votes
13answers
7k views

Linux: productive sysadmins without root (securing intellectual property)?

Is there any way to make a seasoned Linux syadmin productive without giving him full root access? This question comes from a perspective of protecting intellectual property (IP), which in my case, is ...
3
votes
4answers
3k views

WMI permissions: Select CommandLine, ProcessId FROM Win32_Process returns no data for CommandLine

I am gathering performance data via WMI and would like to avoid having to use an account in the Administrators group for this purpose. The target machine is running Windows Server 2003 with the latest ...
5
votes
5answers
111k views

Windows Security (In windows 7) keeps asking for my credentials, and won't “Remember my credentials”

I'm not the network admin, but my network admin is having trouble solving this as well. My issue is exactly as the title says... Windows Security (In windows 7) keeps asking for my credentials, and ...
3
votes
1answer
57 views

How convince Security auditors to change frequent password change policy?

I am a new Junior IT Manager in a small company of around 500 employees and the current policy regarding passwords has enforced password expiration within 30 days, with a password history of 5. As ...
2
votes
1answer
238 views

Unable to reset IPMI cipher using ipmitool: “Parameter Data does not match” – why?

In attempting to make some Dell server BMC's more secure, I followed the recommendations given elsewhere and disabled cipher 0, using the following command (ipmitool running on the host OS, which is ...
2
votes
1answer
24 views

Should i use Firewalld or Iptables for Fail2ban in Centos 7?

I'm setting up Fail2ban to protect ssh, and I use firewalld, I saw a lot of people recommending to use anaction = iptables-multiport and other solutions using iptables instead of firewalld claiming ...
0
votes
1answer
19 views

Unable to reinstall fail2ban after completly removing it from Centos 7

After completely removing Fail2ban from Centos 7, I decided to reinstall it. So I run the installation(yum), and everything seems ok, no errors, But the it seems like the installation does not create ...
-1
votes
0answers
11 views

Php-fpm pools configuration for multiple websites in Centos 7

After following this tutorial for installing Lemp on Centos 7, I decided to host multiple sites on the same Virtual Server. Using Nginx i created a server block for each site, and everything worked ...
5
votes
6answers
2k views

Email notification about each SSH connection to Linux server

I would like to be notified about each SSH connection to the Linux (Debian) server. Already saw some methods, which proposed to add mail command into own .bashrc, but this approach seems not to cover ...
0
votes
1answer
55 views

Is this an SQL injection attack? If so, what's it trying to do?

I'm seeing a number of entries in my access log where 'A=0 is added to a query parameter, eg: http://www.server.org/foo/?bar=1'A=0&type=xml The parameter that 'A=0 is attached to varies, but ...
-1
votes
0answers
19 views

What application/service is expected under the URL /more?

I am seeing a lot of 'random' URLs giving 404 in my apache access logs: /favicon.ico /browserconfig.xml /robots.txt /more /a2billing /apple-touch-icon.png /apple-touch-icon-precomposed.png I ...
4
votes
5answers
32k views

How to enable Audit Failure logs in Active Directory?

I have a user account that keeps on getting locked out. I am trying to find out what caused it. So I want to enabled failure audits in event viewer as a start. But, I don't know how! How do I enable ...
0
votes
1answer
22 views

Asterisk hacking defence: “Call setup” in tcpdump from denied IP number

I am running Asterisk 11.7 on Ubuntu for my small business. These last days someone could access the server and make all phone extensions ring in regular intervals. I would like to understand how that ...
0
votes
3answers
5k views

How to disable anonymous access on LDAP

I need to secure my LDAP server and am not quite sure the best way to go about it. I am running Debian "Lenny", and using OpenLDAP (slapd). I notice that if I run: ldapsearch -x -W -b ...
0
votes
1answer
43 views

Apache access log full of unauthorized and suspicious requests, how to take action

I have setup a small tiny VPS for my own website. Since it was live, I see many suspicious activity in the access.log file. When I was on a shared hosting I did not have access to this file and ...
0
votes
1answer
491 views

vsftpd on ubuntu saucy - “OOPS: Child died”

I have installed vsftpd with apt-get install vsftpd on my freshly deployed ubuntu saucy amd64 linode. vsftpd starts but when I connect to it from an ftp client, even from localhost, I get this error: ...
0
votes
0answers
4 views

Tomcat 7 auth constraint role name active directory

I integrated waffle into my tomcat 7. I need to define the users in the active directory group that can visit the site, web.xml looks like: <security-constraint> <display-name>not ...
2
votes
1answer
20 views

Apache 2 no authentication from ips

I have a deployment with apache 2.2.22 server behind varnish. What I would like to accomplish is that password protect a directory with htpasswd but make this accessible for certain users coming from ...
0
votes
0answers
26 views

How http basic authentication implemented in my app will interact with IIS?

I'm working on Rails app and I was asked to do LDAP authentication. I implemented it on Ruby side via simple login form. Later my boss told me that I should implement the authentication using LDAP ...
1
vote
2answers
44 views

Central control for SSH access to AWS instances

What are some approaches or best practices for managing SSH access by many devops to many AWS instances? I'd like to have the ability to e.g. add or remove access for a user to multiple instances ...
-1
votes
0answers
21 views

Audit user activity

I need to grant access to one of ours Ubuntu servers to our new freelance developer. He is a new guy for us, so we'd like to verify his activity on our server. We have to add him to sudoers, because ...
0
votes
2answers
27 views

How safe is IPtables whitelisting?

I am deploying some VPS and of course, security is a big concern. I read that IPtables whitelisting is the best way to safeguard your machine. So I set up the follwing : echo "Flushing rules" ...
-1
votes
0answers
7 views

How can I create separate/isolated regions on a home network? [migrated]

I currently have a flat network at home. My boradband router comes in and is connected to a switch, which supplies the Ethernet drops within the house. I also have a wireless router connected to the ...