Security is not a product, but a process.

learn more… | top users | synonyms (2)

0
votes
0answers
19 views

My Hosting Infected with CryptoPHP Script Hostgator [duplicate]

Before 10days Hostgator migrated server to Indian Servers , and they said it is highly secure, As for more than 10 days i am getting problems in My backend word press plugins, So last 10 days i was ...
3
votes
2answers
6k views

How do I prevent the Windows 2008 logon screen from showing user account names?

When I logon to Windows 2008 via the console or via RDP it shows me the names of user accounts already created as clickable buttons. How do I prevent this and make Windows 2008 ask me for a username ...
0
votes
2answers
865 views

Passed SSL checker, but browser doesn't show secure?

I've set up my SSL certificate following the instructions at http://splittingelectrons.wordpress.com/2012/02/24/how-to-configure-an-ssl-certificate-for-apache-on-amazon-ec2/ I've checked my website ...
4
votes
2answers
1k views

How found suspect connection in a netstat output?

It seems some ssh brute force are outgoing from my debian 7.1. I'm searching how to find the source of these brute force. I'm searching in netstat output, but how can i identify trace of this hack ? ...
9
votes
2answers
106 views

How widely supported is forced TLS on inbound SMTP connections?

I run an MTA consisting of the standard Postfix, SpamAssassin, ClamAV, SPF/DKIM checks etc. This MTA is used for inbound email only, doesn't host any accounts and forwards any mail that passes said ...
0
votes
0answers
5 views

OSX Mavericks: package installs fail, Gatekeeper seems broken [migrated]

For some reason my OSX Gatekeeper seems to be broken. Every time I try to install software I get: the package was signed with a certificate that has expired. However, when looking at the certificate ...
-1
votes
0answers
15 views

How to set up Fail2Ban for my dynamic ip [duplicate]

I am setting up fail2ban for my VPS and need to know what value should i specify for "ignoreip" , I have a dynamic ip from which I connect to my Vps and it generally changes every week. Can I put ...
22
votes
9answers
6k views

How to hide a password passed as command line argument?

I'm running a software daemon that requires for certain actions to enter a passphrase to unlock some features which looks for example like that: $ darkcoind masternode start <mypassphrase> ...
2
votes
0answers
38 views

Display port security state of an HP 3COM 5120 switch port

I'm using an HP-A5120-24G-SI switch and I'm asking how to obtain the current state of the port-security module for a certain port. I'm able to view the current settings using display port-security ...
13
votes
3answers
981 views

Enable SSH shell access but disable SFTP access

I've searched for a viable answer to this question, and most of the answers include advice on why to not do it. However, here's the scenario, and what makes it necessary: I have a console app, and in ...
0
votes
3answers
47 views

aws ec2 security group and centos ip tables

I try to change the SSH port from 22 to another port (218). In AWS EC2, I shall add the rules in security group or in IP Tables? Is there any guideline/references recommended for EC2 Security ...
1
vote
3answers
371 views

selinux Missing type enforcement (TE) allow rule

When I run my FTP test to test for full functionality, I'm concerned on why am I getting an avc denial error on such a popular command, such as 'mkdir'? Here is the AVC denial message: type=AVC ...
5
votes
2answers
5k views

How to solve call trace produced by security_ops_task_setrlimit() with bind

I have a machine with CentOS 5.9 and VMware installed. Currently I am using BIND 9.3.6-P1-RedHat-9.3.6-20.P1.el5_8.6 (default shipped with distribution). When I restart the machine, I can see this ...
0
votes
4answers
4k views

Disable audit of Logon Logoff

I have a SBS 08 with 50 users on my domain. In Event Viewer : Windows Logs > Security, I've got nearly 300,000 events about EventID 4624 Logon, 4634 Logoff, 4776 Credential Validation, 4769 Kerberos ...
5
votes
2answers
72 views

Perfect Forward Secrecy (PFS) for mail servers

Perfect Forward Secrecy is an important enhancement to SSL/TLS communications, helping prevent captured SSL traffic from being decrypted even if the attacker has the private key. It's easy enough to ...
1
vote
0answers
35 views

ModSecurity phase not working?

Sorry I am very new to modsecurity (2.8). So I made my first rule to block a referrer spam with the following: SecRule REQUEST_HEADERS:Referer "buttons\-for\-website\.com" ...
11
votes
13answers
5k views

what's a secure way to send passwords over the internet?

I'm looking for the best way to send passwords over the internet safely. Options I've looked at are PGP and encrypted RAR files. There are no real parameters other than getting from point a to point ...
0
votes
1answer
1k views

How to enable connection security for WMI firewall rules when using VAMT 2.0?

I want to use VAMT 2.0 to install product keys and active software in remote machines. Everything works fine as long as the ASync-In, DCOM-In, and WMI-In Windows Firewall rules are enabled and the ...
1
vote
3answers
373 views

Confused about what I'm seeing in my apache access log (think I might have been hacked)?

I have a VPS running CentOS. I installed apache and configured the access log. Just checked it and found some interesting traffic: VPS-Hostname MYIP MYIP - - [23/Dec/2014:16:47:20 -0500] "GET / ...
4
votes
2answers
58 views

Website is being targeted by mail bots

I have a small website. When I perform a netstat is shows a lot of traffic from .p.mail. I think this is some kind of mail bot, trying to harvest email addresses from my website. How can I prevent ...
1
vote
1answer
56 views

What is the best way to block IPs from an apache2 web server?

I'm asking myself whats the best way to block certain IP Addresses (or whole blocks from countries like china, south korea) from accessing my apache2 web server. I'm aware of methods using Allow ...
0
votes
1answer
32 views

Pricing of Key Pairs and Security Groups on AWS?

My free AWS account expired. I deleted all S3 and EC2 resources, but am wandering if I can leave the Key Pairs and Security Groups without having to pay for them. (My account resources look like this ...
-2
votes
1answer
83 views

How do you “prevent powerful accounts from being used on unauthorized systems”? [closed]

I was browsing through Microsoft's Best Practices for Securing Active Directory and saw the chart linked which includes some of the best practices included in the document, rated by importance. At ...
0
votes
2answers
182 views

Unexplained spike in web traffic

Question I am suspicious of an unexplained 1600% increase in traffic and massive slow-down that lasted about 10 minutes. I'm not sure if it was an attempted DoS attack, dictionary login attack, etc. ...
5
votes
5answers
5k views

“Account locked out” security event at midnight

The last three midnights I've gotten an Event ID 539 in the log...about my own account: Event Type: Failure Audit Event Source: Security Event Category: Logon/Logoff Event ID: 539 Date: ...
-1
votes
1answer
182 views

Restrict shared folder access to specific computer/IP [closed]

How to configure a server [having DNS and ADS roles installed user account created/configured] to restrict its shared folder access to a specific computer in the network. Sol-1: Solution proposed ...
3
votes
2answers
41 views

Are redirected GET request to HTTPS secure?

This affects a lot of thank-you pages from 3rd party carts, etc. Are GET requests to HTTP that are redirect to HTTPS secure? Or, can they be snooped before the redirect takes place? Thank you
1
vote
1answer
35 views

HTTPS posts to HTTP URL's insecure?

Have to deal with some incorrectly assigned/redirected posts from an HTTPS server to HTTP URL's. How much of a security risk are these? Are they vulnerable to something like a man-in-the-middle ...
1
vote
1answer
39 views

Authentication of saltmaster against salt minions

I am just getting started with salt and I am wondering how the saltmaster is being authenticated against the clients. I know that when connecting a minion the master has to accept the public key of ...
0
votes
1answer
2k views

EC2 instance always ask me to enter passphrase for the pem during connection

The pem file is generated by AWS console I was able to connect using the EC2 remote web interface, using the same pem file The permission of pem is 600 already Error.. ssh -i ~/test.pem -v ...
0
votes
1answer
40 views

Centralised log monitoring for linux servers [closed]

I've read several QA on this site about monitoring servers, but I found out, that none of them centralises all the logs I want to watch. To describe my situation: 10 linux hosts Using logwatch to ...
1
vote
2answers
779 views

Best pen test distro [closed]

I have seen a lot about Back Track and was wondering if that was the best pen testing distro or if there are others that are better.
1
vote
0answers
23 views

Why does SYSTEM “Privilege Use” event cause another program to crash?

This is an odd one that I've been trying to track down for while. I am not a server administrator, but a programmer/developer, but, sadly, at my company, I probably have the most knowledge of how to ...
0
votes
1answer
30 views

Using Cloud Servers and Firewall

I would like to ask if the configuration of "firewall rules eg. only allowing port 80.. when configuring a server instance on cloud services such as google cloud and amazon aws is securely equivalent ...
2
votes
1answer
2k views

What are anonymous logons in Windows Event log?

I'm playing with a new Win2008 R2 server installed and hosted online with a direct connection to the web (i.e. no separate firewall in front of it). The server is supposedly locked down with just ...
12
votes
17answers
1k views

What are the arguments for and against a network policy where the sys admin knows users passwords? [closed]

I'd like to know pros and cons.. reasons for and against the idea of sys admin’s maintaining user account lists with passwords.. and additionally not allowing those users to change their passwords. I ...
1
vote
1answer
893 views

Nginx : Proper use of limit_req_zone and limit_req

I have 2 website running on VPS. Their purpose is sharing music files and publishing news. Both of them use wordpress. What I am trying is that I want to prevent little hackers from flooding the ...
0
votes
1answer
36 views

Remote SCP & SSFTP access to linux server denied

This situation is a bit embarrassing but I could really use some help. I took steps to secure my linux server by carrying out the following steps: created and use a different user to use in place ...
3
votes
6answers
12k views

How to disable SELinux for Apache httpd only on my Fedora 14?

By following this link I am able to just turn SELinux off completely from my Fedora 14. But I wonder how could I disable SELinux only for the httpd daemon? I don't have system-config-selinux installed ...
2
votes
0answers
25 views

Device not accepting connections from a forwarded port. Security Issue?

I am forwarding a port through to a PLC/Management unit type device for a heatpump. The device accepts local connections from the LAN on port 80. It runs a normal web site on port 80 for management. ...
1
vote
1answer
56 views

Lockdown Mozilla Thunderbird on Windows Remote Desktop Services

I've installed Mozilla Thunderbird 31.3.0 on a Windows Server 2012 R2 which has the Remote Desktop Services role. I want to configure the Thunderbird program and set each user's email account etc and ...
23
votes
3answers
52k views

How can I allow one user to su to another without allowing root access?

I'd like to allow certain users to su to another user account without having to know that account's password, but not allow access to any other user account (i.e. root). For instance, I'd like to ...
0
votes
1answer
110 views

Enabling TLS1.0? Cannot communicate securely with peer: no connection encryption algorithms

For over a year I have been running a photo based website that allows customers to order prints, which are subsequently fulfilled by a printing company. Orders are posted in XML format to a ...
0
votes
6answers
8k views

How can I stop SipVicious ('friendly-scanner') from flooding my SIP server?

I run an SIP server which listens on UDP port 5060, and needs to accept authenticated requests from the public Internet. The problem is that occasionally it gets picked up by people scanning for SIP ...
3
votes
2answers
710 views

What are pros and cons of keeping a local administrator account in Windows 7 workstations in a domain?

We have a network with Windows 7 Enterprise machines, all members of a domain. We've been keeping a local (unlocked) 'Admin' account on each workstation in parallel to the built-in (locked) ...
3
votes
2answers
1k views

Google authenticator with Openldap or Fedora 389 Server or FreeIPA

After a little googling I could see some references of configuring Google Authenticator with Windows Active Directory, however, I could not see how I could do it on Linux/CentOS system. What would be ...
1
vote
2answers
93 views

Task Scheduler with Virtual Accounts, possible?

Currently I'm using LOCAL SERVICE as the user account for various regular tasks, and was wondering if it was possible to use a Virtual Account instead. Task Scheduler seems to reject NT SERVICE\ ...
34
votes
9answers
15k views

Why not block ICMP?

I think I almost have my iptables setup complete on my CentOS 5.3 system. Here is my script... # Establish a clean slate iptables -P INPUT ACCEPT iptables -P FORWARD ACCEPT iptables -P OUTPUT ACCEPT ...
2
votes
1answer
904 views

Using a Group Managed Service Account (gMSA) for a scheduled task

Back in Windows Server 2008 R2, when stand-alone Managed Service Accounts (sMSA) were new, they could not be used to execute scheduled tasks. In Windows Server 2012 however, there is a new type of ...
0
votes
2answers
253 views

postfix feed to program as root

I'm trying to get postfix to pipe stdin from an email into a script that needs to be run by root (yes I understand the security issues of doing this. no lectures, please). Content of aliases file ...