Security is not a product, but a process.

learn more… | top users | synonyms (1)

-1
votes
1answer
28 views

Getting file size before download on a proxy server [closed]

We're working on building a multithreaded proxy file server in C, where we receive a request and retrieve it from another location using the libcurl library. The library gives you the option of ...
0
votes
0answers
50 views

Azure security HTTPS vs VPN vs ExpressRoute?

We're getting ready to release a Web API and I'm confused about the best way to secure it. Users will request data like: Browser -> HTTPS -> On-premise nginx -> ??? -> Azure worker -> Azure MSSQL ...
0
votes
1answer
23 views

Prevent a user from changing extended properties

Question: By default a user can change their own extended properties. Is the following code appropriate to prevent a user changing their user extended properties attributes?: USE [...
0
votes
1answer
26 views

Windows Server 2008R2 / IIS 7.5 VM Open Ports

I have a Windows Server 2008 R2 / IIS 7.5 server Hyper-v VM which when I run NMAP shows a lot of open ports. This server acts as a web server running Wordpress sites so it also needs MySQL. I am ...
13
votes
1answer
2k views

How can SSL be on port 110?

I patched up a Postfix + Dovecot server against a DROWN attack (I disabled sslv2 and sslv3). https://test.drownattack.com Shows :25 vulnerable to CVE-2016-0703 :110 vulnerable to CVE-2016-0703 ... ...
0
votes
1answer
146 views

OpenSSL test if server supports SSLv2

How to do this with the openssl command: openssl s_client -showcerts -connect localhost:443 I want to check for the DROW attack on non standard ports (test.drownattack.com)
2
votes
1answer
44 views

Do any OpenSSH 6.7 `preauth` error log entries warrant specific human attention?

A Linux (specifically Debian Jessie) server that needs to be exposed to the Internet is spitting out various OpenSSH 6.7 preauth errors in the logs. For example, I'm getting (timestamps elided for ...
2
votes
1answer
65 views

Some IP addresses getting security or 403 errors when trying to access the site

I co-own a charity forum that gives support to people in crisis (mental health, self harm, suicidal thoughts etc) Our webmaster left in a bit of a snit a month and a half ago and I have been ...
2
votes
0answers
45 views

Securing config file containing plain-text passwords only with file-system permissions?

I have read a lot of posts and questions about the safest way to secure your server configuration files, which contain sensitive information, such as passwords. The 3 main recommendations I have found ...
0
votes
1answer
184 views

Getting Centos Security Updates as in 2016

I have been searching around in the net and in StackExchange as well, and found out yum-plugin-security although can be installed but it is actually not functioning for Centos-base repositories, back ...
0
votes
0answers
30 views

SSH Server Connection over VPN

I connect my VPS over SSH terminal via ssh keys stored in my computer, password login is disabled. But sometimes I need to surf web behind VPN service which changes public IP for my home computer. ...
-3
votes
1answer
31 views

How to allow only my website to show my website page [closed]

I have my website example.com, some one example-hacker.com is showing complete my website.. interesting think is that they are using cloud-flare so I can't get their server IP address to block. Is ...
0
votes
0answers
242 views

Metasploit: Module database cache not built yet, using slow search

A fresh metasploit on kalilinux 2016(latest stable) systemctl start postgresql OK On msfconsole msf > db_status [*] postgresql connected to msf When i launch search msf > search samba [!]...
0
votes
0answers
15 views

Security breach: PHP files are being created over http posts. IIS 7.5 [duplicate]

I have a Windows Server 2008R2 / IIS7.5 hosting several Wordpress websites. The server is fully patched and all Wordpress sites are running the latest versions of Wordpress and all WordPress plugins ...
1
vote
1answer
207 views

Setting up IIS 8.5 - Security practices

This is the first time I'm setting up an IIS installation and i want to make sure to provide maximum security. Some questions were popping into my mind while setting up: Note that this server hosts ...
-3
votes
1answer
75 views

Port scan attacks detected from my server [duplicate]

I have dedicated server for my personal projects on Hetzner and today was the second time I got email from them informing that they detected portscan coming from server (first time was in January). At ...
1
vote
3answers
401 views

CentOS7 Kerberos Auth: Improper format of Kerberos configuration file;

I'm working on setting up a Squid 4.0 explicit proxy for group based AD authentication against a Active Directory domain (Server 2012 R2) with SSL bumping on a minimal CentOS 7 (64b) install. The ...
0
votes
0answers
13 views

IIS with PHP reagrding UserRights and security Risks

I'm very new to PHP but famliar with the IIS. Now I Encountered a question which we discussed and I hope someone can point me to some ressources or answer my question. Looking at the current trojan ...
1
vote
1answer
31 views

What is good practice for securing/authorizing a REST-service for server-to-server communication?

What good techniques exist to secure server-to-server REST-communication ? For communication involving human devices, like browsers, mobile phone, OAuth and SAML are good choices, but are they also ...
0
votes
1answer
26 views

Enable gateway only for authenticated clients [closed]

I want my server to be usable as a gateway to the internet by certain clients. Enabling forwarding is not my concern, rather to restrict it only to certain clients. I don't want hardcoded iptables ...
0
votes
0answers
14 views

can linux user (non root) alter system files? [duplicate]

Recently one of my linux users password was hacked and I would like to know what possible damage could be done by the hacker. I was notified that somebody tries to bruteforce another server from my ...
0
votes
1answer
496 views

How to upgrade ubuntu 14.04 to openssl version 1.0.1s or 1.0.2g , which will be released on 1 March 2016

I have some prod servers which are running with openssl version as 1.0.1f-1ubuntu2.16 . Since on 1 March 2016 a new ssl version will be released which will cover a majority of HIGH severity bugs, How ...
1
vote
1answer
107 views

Port Security / MAC lock with Netgear GS752TXS

Has anybody here has in use the Netgear GS752TXS (52 Port Stackable Smart Switch with 10GE uplink) with port security active? I would like to activate port security on specific ports to allow only ...
0
votes
1answer
64 views

How to Isolate users process from core process i.e from kernel processes completely? [closed]

Chroot is not good option as stated at many places due to root process can easily exit the chroot Is there any way to isolate the user space completely in *nix based systems?
1
vote
1answer
38 views

Clone identical cipher suite from Apache2 on linux to IIS 8.5 in Windows Server 2012r2

Intended result: To have identical cipher support in IIS 8.5 (new server), as I have support for in Apache 2.4 (the server I want to copy the supported ciphers from). ssllabs.com info : Apache 2.4 ...
1
vote
1answer
34 views

Monit sshd binary Checksum Check and Restart

I'm going over a monit config file and something doesn't seem right. I'm using monit to monitor the checksum of the sshd binary, if its different from whats expected it should reload a known binary. ...
0
votes
0answers
27 views

Windows Server 2008R2 / IIS7.5 / Recommended User and Folder Permissions to host WordPress

I have a Windows Server 2008R2 server running IIS 7.5. I host a number of WordPress sites and they are constantly under attack from hackers / bots. Does anyone out there know the recommended user ...
0
votes
0answers
13 views

What happens using SASL plaintext on an openldap server on the server side?

I have an OpenLDAP server and I use SASL with the login authentication mechanism. My user passwords are securely hashed and stored within my LDAP database. I understand that the login credentials are ...
1
vote
0answers
24 views

How to protect nginx proxy from being spoofed by other reverse proxies?

I've recently noticed that one of my sites that's running behind nginx proxy became accessible via bunch of random domains. Some of them are proxies generated by sites like http://unblocksit.es and ...
0
votes
1answer
20 views

Let OS X ScreenSharing accept incoming connections only from a list of trusted IPs [closed]

As a security measure, is it possible to set up screen sharing on a remote Mac to accept connections only from a given list of IP addresses? (Of course I could set up a firewall to allow traffic on ...
0
votes
1answer
32 views

Comparing/Matching ACLs

Rather it be through PowerShell or another tool here is what I'm trying to accomplish and where it stems from. We have Junction points on one volume and the Target folders on another volume. ...
0
votes
0answers
17 views

Linux - How to find a process that outbound a lot of data? [duplicate]

It sounds like my EC2 instance has been hacked. A lot ouf outbound traffic is there suddenly, and I received an email from AWS saying there is a DOS attack from my server. Can I identify which ...
0
votes
2answers
54 views

How to securely send logs from your application?

I am currently setting up logging with graylog for my system and have a problem, that the logs can potentially contain sensitive information. The standard behaviour is to send the logs unencrypted via ...
0
votes
1answer
46 views

ACL inheritance in Linux: create subdirectory with 700 rights for multiple users

If I understand correctly this picture http://www.vanemery.com/Linux/ACL/img1.gif from this manual http://www.vanemery.com/Linux/ACL/POSIX_ACL_on_Linux.html, setting 700 via chmod will make user::...
0
votes
1answer
53 views

How secure Google Compute Engine is?

We're moving to GCE and we want to know how secure it is. Do we need to install our own intrussion detection/prevention software on our VM Instances? (Tripware, Ossec, Snort). or does GCE handle ...
0
votes
2answers
44 views

Making server accessible on local network without opening ports

I'm responsible for operating the server for a small startup game developer based at my university for my placement year - mostly because I'm the only one of us with any network knowledge to speak of. ...
2
votes
2answers
44 views

SSL Subject Alternative Name and Man in the Middle attacks

My company "ourcompany" owns a 2nd level DNS domain name: ourcompany.org. We currently use this domain, as well as www.ourcompany.org and feature1.ourcompany.org, and have an SSL certificate generated ...
0
votes
0answers
10 views

Trigger Builds if OS Security Updates are available

In classic non-cloudy server environments, you have a fixed set of servers. If updates were available, you installed them and were done. In cloudy server-environments, you often auto-scale your ...
0
votes
1answer
120 views

How to investigate which services and programs are using glibc?

I'm planning to upgrade glibc on several servers due to CVE-2015-7547. https://googleonlinesecurity.blogspot.jp/2016/02/cve-2015-7547-glibc-getaddrinfo-stack.html Before upgrading glibc, I would ...
1
vote
0answers
19 views

Directly accessing files through reverse proxy

With my web app I've got to provide files to third party apis that unfortunately only accept file names. The files can be located anywhere, local or on network shares. The files are actually stored on ...
4
votes
3answers
1k views

Glibc bug mitigation for getaddrinfo()

Ran across an exploit for glibc today which involves the getaddrinfo() call for DNS resolution. I'm running Ubuntu 12.04 on two Bind9 boxes that face the internet. I'm not sure I totally understand ...
0
votes
0answers
76 views

Apache with mod_php fpm fastcgi, which is most secure?

I have a web server to install and I would like to have your minds about my choice of using mod_php instead of fastcgi of fpm. On the web server there is only one Drupal website and only one system ...
2
votes
1answer
45 views

Can I verify the integrity of an amazon instance?

If my Amazon EC2 credentials are stolen at time D, can I verify the integrity of the root volume by: Lookup the instance in EC2 API, check the time the primary network interface was attached, and ...
1
vote
2answers
34 views

Passphrase-less ssh keys on a puppet master?

Our puppet code lives on github, so we pull to the puppet master. But our github repository is private. Is standard (best) practice to give the puppet master ssh keys to github without passphrase (...
-2
votes
2answers
91 views

When should a port 9040 used for? [closed]

A firewall rule for my web app ( python) is created with allowed protocol tcp:9040. I added my domain and created DNS zones, however I still don't get to see my app when I type my domain in the ...
1
vote
1answer
72 views

Is it possible to truncate packets using iptables?

The first thing on my mind when setting up a new Linux server (dedicated or VPS) is how you can increase security. I was wondering if it is possible using iptables to truncate icmp packets. If you ...
1
vote
0answers
328 views

MySQL /nonexistent home vs “No directory, logging in with HOME=/”

The preinst script in the Debian/Ubuntu packages for MySQL sets the default home directory for the MySQL server to /nonexistent, presumably as a security measure - the MySQL server has its own datadir ...
19
votes
6answers
5k views

Why would a university block incoming UDP traffic with destination port 53?

From my understanding DNS uses UDP and port 53. What undesirable things could happen if incoming UDP packets to port number 53 weren't blocked? UPDATE: Packets originate or are destined to the ...
1
vote
0answers
150 views

What are the differences between Blue coat ProxySG and Cisco Ironport?

What are the main differences between ProxySG and Cisco's Ironport Appliances? I already found out: Cisco's Ironport: - is only available as a scalable Hardware Appliance (not Virtual) - high ...
6
votes
1answer
61 views

controlling access while caching video content on-site on client's network

we have many hours of video training courses that we want to deliver on-site to clients with encryption or something to control access Currently , we offer via website (eg like udacity), but some ...