Security is not a product, but a process.

learn more… | top users | synonyms (1)

-1
votes
1answer
30 views

Use 1 executable file to be distributed accross 100 client PROS and CONS guys? [closed]

for easy updates of our internal system I'm planning to use just 1 exe located at the server and just put a shortcut in my clients pointed at the exe in the server. PROS and CONS guys? Server 2008 R2 ...
0
votes
1answer
44 views

trace apache access_log file record called by which html or php file

I figured out that my access_log have funny records 118.101.120.86 - - [20/Apr/2015:23:20:57 +0400] "\xed3.\xbd\xd5\xeb\x16\xca\xa4" 200 378 146.185.239.100 - - [20/Apr/2015:23:31:00 +0400] "GET ...
1
vote
2answers
38 views

Setting up a network for a Host Server and it's Guest OS

Is there a standard as to how one sets up networking on a Server Host that will have virtual servers within? In the past I've used virtualmin and set up the nic to have multiple alias such as eth0:1 ...
-5
votes
1answer
147 views

Is it possible to change wireless router BSSID? [closed]

I suspect someone is trying to hack our wireless network. I've stopped broadcasting the SSID, but assuming they've already attempted to gain access in the past they could have the BSSID stored, which ...
27
votes
1answer
3k views

Is MariaDB a secure replacement for MySQL?

I've been using MariaDB, "an enhanced, drop-in replacement for MySQL" on my Debian stable servers for years, because of its increased performance. However I've noticed that it appears to lag with ...
1
vote
1answer
74 views

Weird server behavior, fear security breach but nothing on logs

These days my hosting (a2hosting) had an issue with the node hosting my VPS and during this period my users noticed a weird behavior other than the several restarts that happened while there were ...
3
votes
1answer
142 views

VLAN isolation failure with HP Procurve, Juniper Netscreen

I'm having problems with hosts being able to ping other hosts they shouldn't be able to communicate with. Fairly simple network - relevant hardware: HP Procurve 2810-24G switch Juniper Netscreen ...
3
votes
1answer
593 views

IIS 7.5 and above - enable schannel cipher DHE_RSA_AES_128_GCM following patch KB2992611 - Is this safe?

I recently became aware that following the release of patch KB2992611 in November, Microsoft made available four new cipher suites for schannel (and thus IIS); TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 ...
0
votes
0answers
55 views

Am I being picked up by a proxy sending my IP/request URLs to China? Sketchy

I spun up a new machine on Digital Ocean today which is pre-configured with a web environment. I made an initial request to the new site and found the following (IP address redacted) in my nginx ...
0
votes
1answer
63 views

Secure elasticsearch but allow remote CRUD

I'm going to run a bit of software on server A to add and remove entries from elasticsearch on server B. How can I allow these remote create and delete operations, but still keep ES secure? Is ...
0
votes
1answer
27 views

Data security for PII

I have a question regarding data security. I have an application that dumps a flat Excel file on a Windows server from an SAP database. The file is edited, then the application writes the edited ...
-3
votes
1answer
42 views

Windows File Shares inside an Organisation [closed]

I came across to a security weakness that potentially can put information at risk in my organisation. Whenever I access other's computer in the network through the command: \\192.168.20.4\c$ I ...
1
vote
2answers
50 views

How do I drop requests from dig?

Basically I'm getting tons of request to my named/bind service, basically those requests are being rejected by named, Those are the messages i get, from tons of ips., How extacly can I drop those ...
3
votes
1answer
117 views

Restrict postqueue access to admin user

I'm running postfix on Gentoo as mailer daemon. During investigation of some queue pileup I found that /usr/sbin/postqueue is executable by all users on the system, it happily outputs the current mail ...
0
votes
2answers
77 views

Protecting mysql instance on Linux Azure VM

I have mysql running in a Linux Azure VM. It's currently bound to the "Internal IP Address" of the VM as looked up in ifconfig and the Azure Dashboard. I've turned on logging to see who and what is ...
2
votes
2answers
142 views

How can I stop ansible from writing passwords to the logfiles?

I am setting up a MySQL server and want Ansible to set the mysql-root password during installation. With the help of the internet I came up with this solution: - name: Set MySQL root password before ...
2
votes
2answers
57 views

Does DNSSec NSEC3 require support from the Registrar, DNS Server or both?

I'm interested in getting NSEC3 support for my domain getvalid.com, so that I can prevent name traversal. DYN doesn't seem to support NSEC3, and it's clear that BIND and the DNS server require the ...
7
votes
1answer
219 views

Managing IAM security credentials for multiple docker containers

Within plain EC2 environment, managing access to other AWS resources is fairly straightforward with IAM roles and credentials (automatically fetched from instance metadata). Even easier with ...
-2
votes
1answer
631 views

How to secure OwnCloud? [closed]

I am not literate when it comes to servers, but I like the idea of having my own cloud storage for privacy reasons. OwnCloud is targeting (at least a little bit) the "DIY-home-user" so it seemed to be ...
0
votes
2answers
60 views

Disable ssh login on specified time for particular users

I would like to disable ssh login to my system for particular users say X,and Y on specified time 17.00 to 18.00. so how to achieve this ? any help would be appreciated.
1
vote
2answers
55 views

Where are MySQL users and passwords stored?

When I delete 'mysql'.'user' table I'm still able to log in as any user I've created before. How is this possible?
0
votes
0answers
66 views

LDAP Browser(Softerra) vs LDP.exe

Here is the issue; -> There is a Deny All(FullControll) set on 2 OUs for a service account. -> When i use LDP.exe to query those OUs, it can read their names but can not display any objects ...
-2
votes
1answer
55 views

What are the security risks associated with an automated login script?

I have a remote server that only allows logins through a browser https request. I want to download images from it, and cache them and use them in a local job. What are the security risks with ...
-1
votes
1answer
136 views

DHE cipher suite issue

I am now using this cipher suite: SSLCipherSuite ...
0
votes
0answers
20 views

How do I ban IP's that request files that do not exist using fail2ban? [duplicate]

I have recently started using Fail2Ban and need to configure a specific 'Jail'. My apache error logs are filled with requests for files within my /var/www folder. The folder doesn't contain any ...
1
vote
1answer
37 views

Strange file structure on surveillance DVR

I have a 2TB HDD (WD Purple) from a client's surveillance DVR (Night Owl) with a puzzling file structure. The drive has 7,451 256MB files all dated 1/10/2098 23:02. The files are named 0001-7451 with ...
4
votes
2answers
251 views

should anonymous access to the IPC share be allowed on Windows 2008 r2

During an audit the question of anonymous access to the IPC$(null sessions) share was raised. The audit lists the following as being a risk on a Windows 2008r2 file server: C:\>net use ...
0
votes
0answers
43 views

Warnings in Tiger auditing reports (process is listening on socket)

I get email logs like the ones below emailed daily from my server. I don't really know what does it mean and thinking about disabling them, but I guess this is not a good idea and it's better to learn ...
0
votes
0answers
13 views

recieved abuse complaint that badbot came from my ip [duplicate]

I recieved an abuse complaint that a badbot was used to attack their servers and the badbot listed my ip as the source. Does this mean that my server is infected and using my server to send out ...
2
votes
2answers
632 views

How to set up TLS on hMailServer?

Complete noob here. Please be gentle :) I have a Windows 2008 server, running hMailServer. Right now all my communication is unencrypted. I want to start using TLS. So now I've got myself a SSL ...
1
vote
0answers
62 views

What is the best way to configure an iDRAC/dell server in a public data center such that the idrac doesn't have to be exposed public facing

I have a server right now in a data center behind an OpenVPN using the client on the box to connect to the vpn server. I'm going to install the iDRAC and want to know how to best configure the ...
0
votes
2answers
128 views

Asterisk new PJSIP driver security option

I have a working asterisk environment, but I get a lot of unwanted traffic, like sip scanners of people who even try to call as a guest. I'm using res_pjsip, the configuration is stored in ...
0
votes
0answers
48 views

Got hacked. Want to know how and protect the others similar setup instance [duplicate]

The website got hacked, would like to know how / possible approach the hacker did and how can i protect the server. This is the information of the hack: http://www.zone-h.org/mirror/id/23884086 The ...
0
votes
1answer
76 views

SonicWALL SSL VPN Can't Click Bookmarks

I've added an RDP bookmark to my SSL VPN Virtual Office page, but can't click it. I've tried importing the certificate, adding to Trusted Sites, and setting Security to Low....but the bookmark just ...
0
votes
1answer
67 views

Managing VPN-based users/VLAN access to a test environment

I'm involved in the setup of a demo/user lab environment comprising several racks of server kit. The idea is that potential hardware/software customers can be given a VPN account that will allow them ...
3
votes
1answer
209 views

How to detect Bios Rootkits on a server mainboard?

I recently read about a talk by Corey Kallenberg and Xeno Kovah given at the CanSecWest-conference which describes how the firmware of a server mainboard can be reprogrammed to include malicious ...
0
votes
0answers
46 views

How to set relaxed security for Terminal Services on 2008 R2

I installed Remote Desktop Services on Windows 2008 Server R2. I am trying to set it up with 'Relaxed Security' similar to Windows 2003 would have. Windows 2003 Server, I would set up: Permission ...
0
votes
1answer
139 views

How can I disable specific file type uploads globally in Apache?

In order to secure my webserver, I would like to block specific file types from being uploaded globally, independent of what FTP users configure in their webpages. Is there a way to globally block ...
-1
votes
1answer
73 views

Block everything except some ports and specific IP Addresses, server can't do HTTP GET

I can't get this firewall.sh script to work. It currently doesn't allow me to get a file at 'https://index.docker.io/v1/repositories/library/ubuntu/images' so either my DNS is flawed or I am blocking ...
4
votes
1answer
164 views

Alternative to Firewalld on memory critical servers?

I've bought a 512MB VPS @ DigitalOcean. Currently, I use Firewalld to allow/deny access to certain ports (probably 22, 80, 443 are open). It uses around 25-30MB of memory. EDIT: Not to forget that ...
0
votes
2answers
561 views

clamscan using maldet Error: Servname not supported for ai_socktype

So i have installed Linux Malware Detect (maldet) to scan a server and everything went fine with installation but when i run it i get an error. Bunch of errors and than the scan just closes it. Here ...
0
votes
1answer
45 views

Will Apache2 performance be reduced by huge IP blocklist

My web application is getting more and more hits from unknown sources trying to access secure pages, such as admin panel, etc. So, I want to block IP address from certain countries using this source. ...
1
vote
2answers
187 views

How risky is storing credentials on disk in a Powershell SecureString?

Basically, I want to cache the credentials needed for New-PSSession and make them available to scripts so they don't have to nag a human. If I use export-clixml or similar to store a PSCredential on ...
14
votes
2answers
1k views

How to prevent users from extending their window of valid login

Been working on some security hardening procedures for a RedHat box, and I wanted to know if would be possible to prevent a user from changing his password, once it's expired. For one of our clients ...
0
votes
1answer
37 views

Cannot understand this example fail2ban rule

I'm trying to secure my admin and user login page from brute force attacks. I have setup iptables and the closest thing I can find which looks useful is this: jail file: [nginx-login] enabled = true ...
6
votes
1answer
877 views

Is it a bad idea to stop unnecessary services running

I have a debian dedicated server. I'm trying to secure it and one way I thought would be good is to shut down services I dont need, like FTP for example. I am suggesting to run something like this on ...
2
votes
1answer
189 views

Need recommendations on Firewalled DMZ design for PHP web server on Linux

The 3 options we are considering are listed below. Which one is best or is there a better solution we didn't consider. All servers are linux with nginx. Do you see anything particularly wrong with ...
1
vote
1answer
279 views

Is setting a Content Security Policy incompatible with Joomla's admin page?

I'd like to set a content security policy header for a Joomla website running on Apache 2.4. Using this configuration from h5bp and setting Header set Content-Security-Policy "script-src 'self'; ...
1
vote
1answer
41 views

Single row user security in MS SQL 2008 R2

I have a SQL Server 2008R2 question regarding making a single row in an odd way. situation: I have a student records database in which ~ 100 students might in-process in a given day. They enter a ...
3
votes
2answers
82 views

Can't seem to disable root login [duplicate]

I am trying to disable root password login and only allow root login with a ssh key on debian 7. cat << EOF >> /etc/ssh/sshd_config PasswordAuthentication yes UsePAM no PermitRootLogin ...