Security is not a product, but a process.

learn more… | top users | synonyms (1)

0
votes
2answers
56 views

is there a way from iptables/iproute to forward all traffic to my IDS and also keep the regular flow

The reason of this, is that to catch all packages into my IDS keeping my existing enviroment, so the IDS does not become a single point of failure. If route all my traffic into my IDS and from my IDS ...
4
votes
2answers
1k views

Which CentOS Version Should I Use?

I have some used rackmount servers (Dell R610, HP DL180 G6, HP DL360 G5) that I intend to use for on demand video streaming in a colocation environment. I would like to have them all on the same OS to ...
1
vote
1answer
302 views

security group rules between EC2-classic and VPC server

We are currently using a set of Amazon EC2-classic servers for hosting our live and staging environments. We've got a couple of web servers and a background worker server in each environment. We've ...
3
votes
2answers
62 views

Docker remote access security

Assuming I am running several docker containers on a local server. When I give third parties ssh access to my server, any third party will have control over the docker manager. How can I make sure ...
0
votes
1answer
77 views

Information regarding netstat output

On netstat, I see my port 22 in connection with 122.225.97.99. Does this mean someone is accessing ssh .. OR is it just something related to ubuntu user@ubuntu:~$ netstat -ntu Active Internet ...
2
votes
2answers
1k views

Encrypting SMB traffic with Samba

We use Samba on Ubuntu 14.04 LTS as a PDC (primary domain controller) with roaming profiles. Everything works fine, except for if we try to enforce encryption via setting: server signing = ...
0
votes
1answer
48 views

Secure Database Password Contained Inside a File

I've got a Linux based application (Java) that connects to an external database (PostgreSQL) in the same LAN. However, due the sensitiveness of the database contents I would like to avoid the admins ...
-1
votes
1answer
52 views

How to load sites from your own server as localhost (ssh tunnel trickery)

I want to load a site from my server as if I'm on the server as localhost. Because some areas are restricted to localhost on a purpose. Now normal ssh tunnel like ssh -L 8080:localhost:80 ...
0
votes
1answer
540 views

Getting lots of traffic from russia to an unpublished site

I am currently building a website. Currently nobody knows about it but it is already reachable for testing purposes. Now I saw, that I get a lot of traffic from russia (Its a german website hosted on ...
11
votes
2answers
461 views

What do the OS X authorization mechanisms actually do?

Background  I'm trying to glean a better understanding of the OS X login process, in order to decide the best way for achieving VPN Single Sign On. Please do correct me if I'm wrong, but I believe ...
1
vote
1answer
95 views

.htaccess query string blocking phpmyadmin [closed]

After phpmyadmin login, I get this error message Error in Processing Request Error: 403 Error text: Forbidden" I found that removing the following lines from .htaccess it doesn't give any error ...
1
vote
1answer
87 views

Validating SSL/TLS renegotiation flaw

Our vulnerability scanner (Saint-based) is claiming that a large number of devices and servers are susceptible to the SSL/TLS renegotiation flaw (CVE-2009-3555). Most of these servers and devices are ...
-2
votes
1answer
174 views

VirtualBox Networking Lab Configuration [closed]

I'm creating a lab for a project that will test a network security defense product's effectiveness in detecting various attacks. I have a physical server with 32GB of RAM and VirtualBox to create the ...
2
votes
0answers
35 views

Certificate can only be used by network service account

Issues : Our service is using one certification for partner service call. It worked well in IIS site which is running as network service account. But when we run test the code as administrator ...
2
votes
0answers
188 views

Display port security state of an HP 3COM 5120 switch port

I'm using an HP-A5120-24G-SI switch and I'm asking how to obtain the current state of the port-security module for a certain port. I'm able to view the current settings using display port-security ...
0
votes
0answers
343 views

Can't get working Nginx secure link with rtmp

I'm trying to get Nginx secure link works with rtmp but I don't know what I'm doing wrong. Any help is appreciated. My Nginx conf: location /on_play { # set connection secure link ...
2
votes
0answers
90 views

ModSecurity phase not working?

I have installed modsecurity (2.8). So I made my first rule to block a referrer spam with the following: SecRule REQUEST_HEADERS:Referer "buttons\-for\-website\.com" ...
0
votes
3answers
198 views

aws ec2 security group and centos ip tables

I try to change the SSH port from 22 to another port (218). In AWS EC2, I shall add the rules in security group or in IP Tables? Is there any guideline/references recommended for EC2 Security ...
1
vote
3answers
851 views

Confused about what I'm seeing in my apache access log (think I might have been hacked)?

I have a VPS running CentOS. I installed apache and configured the access log. Just checked it and found some interesting traffic: VPS-Hostname MYIP MYIP - - [23/Dec/2014:16:47:20 -0500] "GET / ...
1
vote
1answer
79 views

What is the best way to block IPs from an apache2 web server?

I'm asking myself whats the best way to block certain IP Addresses (or whole blocks from countries like china, south korea) from accessing my apache2 web server. I'm aware of methods using Allow ...
4
votes
2answers
88 views

Website is being targeted by mail bots

I have a small website. When I perform a netstat is shows a lot of traffic from .p.mail. I think this is some kind of mail bot, trying to harvest email addresses from my website. How can I prevent ...
0
votes
1answer
51 views

Pricing of Key Pairs and Security Groups on AWS?

My free AWS account expired. I deleted all S3 and EC2 resources, but am wandering if I can leave the Key Pairs and Security Groups without having to pay for them. (My account resources look like this ...
-2
votes
1answer
118 views

How do you “prevent powerful accounts from being used on unauthorized systems”? [closed]

I was browsing through Microsoft's Best Practices for Securing Active Directory and saw the chart linked which includes some of the best practices included in the document, rated by importance. At ...
13
votes
3answers
2k views

Enable SSH shell access but disable SFTP access

I've searched for a viable answer to this question, and most of the answers include advice on why to not do it. However, here's the scenario, and what makes it necessary: I have a console app, and in ...
-1
votes
1answer
1k views

Restrict shared folder access to specific computer/IP [closed]

How to configure a server [having DNS and ADS roles installed user account created/configured] to restrict its shared folder access to a specific computer in the network. Sol-1: Solution proposed ...
5
votes
2answers
223 views

Perfect Forward Secrecy (PFS) for mail servers

Perfect Forward Secrecy is an important enhancement to SSL/TLS communications, helping prevent captured SSL traffic from being decrypted even if the attacker has the private key. It's easy enough to ...
2
votes
2answers
48 views

Are redirected GET request to HTTPS secure?

This affects a lot of thank-you pages from 3rd party carts, etc. Are GET requests to HTTP that are redirect to HTTPS secure? Or, can they be snooped before the redirect takes place? Thank you
8
votes
2answers
416 views

How widely supported is forced TLS on inbound SMTP connections?

I run an MTA consisting of the standard Postfix, SpamAssassin, ClamAV, SPF/DKIM checks etc. This MTA is used for inbound email only, doesn't host any accounts and forwards any mail that passes said ...
1
vote
1answer
70 views

HTTPS posts to HTTP URL's insecure?

Have to deal with some incorrectly assigned/redirected posts from an HTTPS server to HTTP URL's. How much of a security risk are these? Are they vulnerable to something like a man-in-the-middle ...
6
votes
2answers
485 views

For an internet-facing, all-roles-in-one Exchange server, what do I need to let through the firewall?

As the result of a recent penetration test, in which we did not fare well, it has been brought to my attention that our internet facing, all-roles-in-one, Exchange 2010 SP3 server has no firewall in ...
0
votes
1answer
133 views

Apache2 Mod_spamhaus Whitelist

We are using Apache2 mod_spamhaus and many customers were banned using the "Post" method. There is no way to deny mod_spamhaus ban continuously our customers making false positive or ban customers ...
0
votes
1answer
85 views

Are department-wide shares a bad idea?

Let's say an organization has a department with 10-15 users who sometimes need to share files between each other. They currently have an open share, where anyone read read / write to the share. If ...
0
votes
1answer
108 views

Centralised log monitoring for linux servers [closed]

I've read several QA on this site about monitoring servers, but I found out, that none of them centralises all the logs I want to watch. To describe my situation: 10 linux hosts Using logwatch to ...
1
vote
1answer
241 views

OpenVAS 7 failing to SSH into a test server

My local machine is hosting a Kali VM. I am trying to run local security tests using the VM's OpenVAS 7 on a server running Ubuntu 12.04.5. When I run SSH Authorization Test I get the following ...
2
votes
1answer
123 views

Authentication of saltmaster against salt minions

I am just getting started with salt and I am wondering how the saltmaster is being authenticated against the clients. I know that when connecting a minion the master has to accept the public key of ...
0
votes
1answer
69 views

Remote SCP & SSFTP access to linux server denied

This situation is a bit embarrassing but I could really use some help. I took steps to secure my linux server by carrying out the following steps: created and use a different user to use in place ...
0
votes
1answer
37 views

Using Cloud Servers and Firewall

I would like to ask if the configuration of "firewall rules eg. only allowing port 80.. when configuring a server instance on cloud services such as google cloud and amazon aws is securely equivalent ...
2
votes
1answer
44 views

Device not accepting connections from a forwarded port. Security Issue?

I am forwarding a port through to a PLC/Management unit type device for a heatpump. The device accepts local connections from the LAN on port 80. It runs a normal web site on port 80 for management. ...
3
votes
2answers
227 views

High number connections coming from an IP

On our corporate network we're detecting workstations opening too many connections to the IP address 75.126.196.159 (port 3478) causing the Cisco ASA Firewall 5550 to detect a "SYN Attack" and reach ...
0
votes
1answer
499 views

Enabling TLS1.0? Cannot communicate securely with peer: no connection encryption algorithms

For over a year I have been running a photo based website that allows customers to order prints, which are subsequently fulfilled by a printing company. Orders are posted in XML format to a ...
0
votes
0answers
302 views

OpenSSL 1.0.1e-2+deb7u14 Debian Wheezy and CVE-2014-0224

According to Debian security tracker CVE-2014-0224 vulnerability is fixed in OpenSSL 1.0.1e-2+deb7u10. https://security-tracker.debian.org/tracker/CVE-2014-0224 I have: #apt-cache policy openssl ...
1
vote
1answer
194 views

Lockdown Mozilla Thunderbird on Windows Remote Desktop Services

I've installed Mozilla Thunderbird 31.3.0 on a Windows Server 2012 R2 which has the Remote Desktop Services role. I want to configure the Thunderbird program and set each user's email account etc and ...
1
vote
1answer
658 views

nginx - deny all *.php requests except index.php for security reasons

os: CentOS 7 nginx: 1.6.2 httpd: apache 2.4.6 cms: Drupal 7 After my server was compromised I removed all from server, reinstalled OS and soft, and restored data from backup. Now I configure all ...
-1
votes
2answers
71 views

HowTo Track an E-Mail on it's voyage [closed]

Is there any way to track an E-Mail during it's "journey"? A friend of mine believes, that People the sports club he is involved with and where he has an E-Mail address, is reading the E-Mails of all ...
-4
votes
4answers
91 views

Blocking another Win 2008 R2 admin from accesing some important folders [closed]

I have sold half my dedicated server to somebody but I dont want them accessing my web hosted Plesk files for my Wordpress website. As some of them are custom and confidential. I gave them local ...
0
votes
1answer
34 views

How should a wildcard certificate be used?

I have a wildcard certificate (pfx file) and I have doubts on how to use that. Should I install that on all of my application servers or alternatively create a new certificate and sign it with the ...
2
votes
2answers
278 views

Restrict access to active directory attributes from a particular computer?

I know that some attributes in AD are classified as personal information and some are classified as public information (see the "property set" column here - ...
0
votes
0answers
308 views

Enabling the Internet Connection on an EC2 Windows Server 2012 Machine

I've disabled the firewall: netsh firewall set opmode disable I've made sure to accept all inbound and all outbound connections: Is there anything that I should be installing or adding on to the ...
-2
votes
2answers
944 views

Removing the Security Alert Outlook pops up for internal network domain clients - Remove security?

I have several Outlook clients on the internal network pointing to the internal DNS name of the Exchange 2010 SP1 R2 server. The name we're using is exchange2.example.local. Since new guidelines ...
1
vote
2answers
98 views

Should I sudo as root or use a public key [duplicate]

I have read a few times to disable root login and sudo as root using another user. But is using a public key as good if not better security?