Security is not a product, but a process.

learn more… | top users | synonyms (1)

0
votes
0answers
19 views

How do I edit a signed or encrypted SMIME message to include a footer?

Is there any way to edit a signed/encrypted SMIME message so that there is a legal disclaimer on the message? I'm thinking about the MIME multipart email directive may allow for this.
0
votes
1answer
42 views

Move a Sftp User in a Subdirectory of his Jail

I've a question concerning the Jail explained later: User to be jailed: foo Jail Directory: /mnt/foo-jail Home directory of foo: /mnt/foo-jail/foo-home Everything is ok. Jail is up and the user is ...
1
vote
2answers
88 views

How to store admin passwords in a way that can be accessed by multiple admins? [closed]

How to store all the admin passwords for routers, servers, desktop computers in the network if they need to be accessible by multiple admins? There are so many that they can't be memorised and they ...
-2
votes
1answer
35 views

DNS ATTACK \/ or some kind of an error, i don't know

I am getting those errors in my CSF firewall, I would like to know how can I stop it. is it type of an attack? also if it is, how can I stop it? Mar 11 22:48:57 root named[7598]: client ...
2
votes
1answer
48 views

Catch incoming email and then deliver to original recipient on sendmail

in the company I work for there are a user that is making bad use of the email, but to have evidence of what he is doing we need to intercept all the incoming email to him and all outgoing email from ...
1
vote
0answers
61 views

How to copy locked swap files in ESXi?

Based on this question : How to disable swap files in ESXi?. The main answer states that it is possible to extract data from the swap files (for exemple using strings) so I tried to make a simple ...
1
vote
1answer
42 views

How to implement table security without SUPER privilege?

A MAJOR provider of cloud-based MySQL does not grant the SUPER privilege to the master user. The provider is Amazon RDS, but my question isn't about Amazon RDS specifically, it's for the general case ...
14
votes
1answer
440 views

What is the Rowhammer DRAM bug and how should I treat it?

DRAM chips are very tightly packed. Research has shown that neighboring bits can be flipped at random. What is the probability of the bug triggering at random in a server-grade DRAM chip with ECC ...
1
vote
0answers
145 views

Restrict hostapd wireless client from talking to eachother

How can I keep a wireless client of hostapd from talking to a wired client on the same network or another wireless client on the same network? Here's my network topology: [wired client] --> ...
3
votes
3answers
100 views

Why is Android / IE using 3DES when AES is available?

I have a Zimbra installation and want to harden the cipher suites. I disabled some and am quite OK with what is left. The problem now is that the Qualys SSL test shows a lot of clients will use 3DES, ...
1
vote
1answer
56 views

Is using su to drop root in shell scripts a security risk?

When searching for how to drop root permissions in shell scripts, I often see answers using su. However, when you're done using su you can just type logout and be back at the shell of the original ...
1
vote
2answers
119 views

Giving access to multiple users for remote desktop

I have 50+ users whom I want to give remote desktop access to multiple VM machines. Instead of adding each individual user to "Remote desktop users" I created a AD security group & added all the ...
0
votes
1answer
165 views

Blocking SSH Brute force from a HAProxy LB

We're trying to grant access to an internal SSH server using a HAProxy setup on a public DMZ. This works as expected however connections into the server are originated from the HAProxy (tproxy won't ...
0
votes
1answer
50 views

PSAD IPTables logging error

I installed PSAD on my Ubuntu server and then set the IPTables accordingly. But I still get this error by email: You may just need to add a default logging rule to the /sbin/iptables 'filter' ...
0
votes
1answer
93 views

New User Accounts have “Too Much” privileges Windows 7 Ultimate Edition SP1 x64

I am running Windows 7 Ultimate Edition SP1 x64 (Build 7601) in WORKGROUP mode (Non-NT_Domain, Non ADDS environment). I am the Administrator of these machines and Network. My setup is only a few ...
3
votes
1answer
32 views

Please clarify for me how tcpwrappers works

We've recently gone through a security audit and among several valid and other, quite pointless findings is one that states that tcpwrappers is not disabled. I've never used tcpwrappers so I don't ...
2
votes
2answers
105 views

Windows Server Administration - which services are safe to run internet facing?

Coming from a Linux background and now having to manage some Windows servers (2008R2 & 2012R2) I'm wondering which services are safe to run directly over the internet. The servers are all internet ...
0
votes
1answer
66 views

Recomendations for this mail server setup?

EMAIL SERVER SETUP Hey, its my first time using serverfault but I hope the community can help. I am trying to build a secure email system using Linux, Postfix, Dovecot and MySQL. I have read on ...
-1
votes
1answer
34 views

web application audit task require my remote IP to be allowed on application network firewall [closed]

I want to audit a web application which is hosted on a web server sitting behind a cyberoam firewall. My task is to run a scan from my remote machine which has ISP MTNL broadband. My machine gets a ...
0
votes
1answer
140 views

How do I open specific ports on Linux (an AWS instance of RHEL v. 7)?

I'm using RedHat version 7. My AWS instances are in a security group with ample permissions for inbound connectivity. I can do Yum updates. The servers can ping each other. I can transfer files ...
0
votes
0answers
74 views

Tracking user activity in openvz container?

I have been trying to figure out a way to track user activity in an openvz container for a long time now (auditd like in KVM's). This is a PCI-DSS requirement. I can't seem to find any good ...
-1
votes
1answer
24 views

Run two mysql process on one data directory

I would like to launch two mysql process on one data directory (/var/lib/mysql) I have two servers, web-01 and web-02 but web-01 locked mysql data directory, and i would like to break this security. ...
2
votes
3answers
182 views

WinRM Publicly Available

I am looking for specific feedback on WinRM. There are ::still:: debates out there about whether or not making RDP publicly available without a VPN is a good idea--There are no debates on whether or ...
0
votes
1answer
32 views

WRT160NL Linksys Cisco Wifi router

There is a WRT160NL Cisco Wifi router, and has to decrease the wifi range, so it cannot go outside of the office. I tried to find this settings on the admin page, but I have not found yet. Does ...
3
votes
1answer
57 views

Need advices on iptables

Helly guys ! :-) . I need a (several?) advice(s) from you about my iptables setup. I'm pretty new to iptables, and this is the first time I configure a server with iptables ONLY as a firewall (we ...
2
votes
1answer
2k views

snort: drop icmp rule doesn't actually drop packets

I installed snort-2.9.7 from sources, and launch as IDS: % snort -devQ -A console -c /etc/snort/snort.conf -i eth0:eth1 Enabling inline operation Running in IDS mode ... The config file is very ...
0
votes
2answers
73 views

Does Ubuntu 12.04LTS have the OpenSSL heartbleed fix?

Only OpenSSL 1.0.1f or later has the fix for the heartbleed exploit. So does Ubuntu 12.04LTS have the fix? We need to use 12.04LTS for reasons I won't go into, and we can't upgrade. According to this ...
0
votes
0answers
115 views

how do I set restrict anonymous to 2

I want to change the registry setting for restrictanonymous to "2" (HKLM\SYSTEM\CurrentControlSet\Control\Lsa\restrictanonymous). I created a script to do this but noticed the setting kept on going ...
0
votes
0answers
63 views

Application-role based access with nginx?

What are some different ways to configure nginx to allow static file access based on application-defined roles that a user belongs to? (Not local system user groups or roles, just roles defined at the ...
0
votes
4answers
694 views

Permissions set to 555. How can another user modify the files? [duplicate]

I run an Ubuntu 12.04 x64 VPS with Vesta, and a site in PHP. It has been hacked several times with injected code that looks like this: <?php ...
6
votes
3answers
1k views

Fixing the IIS tilde vulnerability

One of our IIS servers (IIS 7.5, Server 2008 R2) is apparently "vulnerable" to the tilde Short Filename disclosure issue. However, I'm having a hard time actually fixing the issue. So far, I've ...
1
vote
1answer
417 views

In OpenVPN, what's the risk of omitting the key-direction when using tls-auth?

In my TLS enabled OpenVPN configuration I would like to use the additional security offered by using tls-auth. The good news is, is that it works as expected. However, I have a question about the ...
0
votes
1answer
299 views

https and ssh access to OpenVPN from windows

I recently installed OpenVPN on a remote CentOS 7 web server. I am able to connect to it from a local CentOS 7 devbox by typing openvpn --config /path/to/client.ovpn. Once the connection is made, I ...
0
votes
1answer
34 views

How to I assign OWNER RIGHTS permissions to a file in Windows 7?

When I run ICACLS on a file, it returned: foobar.LDF OWNER RIGHTS:(OI)(CI)(F) BUILTIN\Administrators:(OI)(CI)(F) What securityid do I pass to icacls to assign to the generic user ...
0
votes
1answer
186 views

tacacs+ for Linux authentication/authorization using pam_tacplus

I am using TACACS+ to authenticate Linux users using pam_tacplus.so PAM module and it works without issues. I have modified the pam_tacplus module to meet some of my custom requirements. I know by ...
0
votes
0answers
20 views

give serverprincipalname read write permissions to security group members

What are the settings for the group to make the following change? I need to create a group that can be used to grant: serviceprincipalname SELF Read serviceprincipalname SELF Write to its members. ...
2
votes
1answer
59 views

Use VPS provider's kernel or maintain my own?

I've got a Debian Wheezy VM on Linode and they run it with their own kernel. As a reputable company, I'm sure they're quick to apply security patches, and all I need to do is reboot to get the new ...
0
votes
0answers
42 views

smb.conf - where do I set key and certificate for 'smb encrypt' transport encryption?

Reading smb.conf man page I can enforce encrypted smb transport; smb encrypt = mandatory. Where do I set the keys to use for the encrypted transport? I was expecting something like apache2: ...
0
votes
0answers
28 views

Is it possible to break out of a “trap 1 2 3” secured terminal session by using SIGSEGV?

The title says it mostly. I'm auditing the security of a terminal-based application on AIX, and the way you use it is to connect to it remotely through telnet, where the ".profile" of the telnet user ...
0
votes
1answer
444 views

snort complains on local.rules

I just installed snort-2.9.7.0 on Fedora 20, and am getting error when running: % snort -c /etc/snort/snort.conf --dump-dynamic-rules=/tmp Running in Rule Dump mode --== Initializing Snort ...
2
votes
2answers
176 views

My site is suddenly getting slammed, not legitimate traffic

I run a site with about 700 registered users. On a typical day, there are 30-50 hits. In the last three days, the traffic has increased insanely fast (according to Google Analytics). I got 7,287 hits ...
-1
votes
1answer
129 views

Compiling nginx and php

Im about to set up a basic web server based on ubuntu server 14.04 x64 with an online shop section, the server will also consist mysql, mail, and maybe other servers as well until it runs smoothly. ...
0
votes
1answer
51 views

I guess that my mail server is unprotected and spammers are using my mail server to spam myself [duplicate]

Since I switch to my own mail server (I folowed this two tutorials: https://www.linode.com/docs/email/postfix/email-with-postfix-dovecot-and-mysql and ...
2
votes
1answer
30 views

What is the best way to isolate permissions to a role, where traditionally role-based security is not implemented?

The particular example I'm pursuing here is a having a deployment officer role. Typically, this would be performed by one particular employee, but that employee can get sick, fired, go on vacation, ...
-1
votes
1answer
63 views

I see a flood of requests from Revista22

In many of the sites I am running I see in Google Analytics thousands of visits referred from a site called revista22.ro, which I don't know and which mentions nothing about any of my sites. Also, I ...
-1
votes
1answer
41 views

What are the MOST Important Things to Configure on a WAF? Specifically Barracuda Web Application Firewall

I will be hosting a web application on a cloud provider. This will be protected behind a WAF specifically Barracuda's Web Application Firewall Vx. I do not have too much experience with WAF ...
0
votes
2answers
207 views

kadmin cannot list principals “requires list privileges”

I can authenticate fine via kadmin however cannot list principals? [root@server ~]# kadmin -p admin Authenticating as principal admin with password. Password for admin@org.domain.com: kadmin: ...
1
vote
5answers
149 views

How to get an early warning to someone logging into a server

I like to be notified when someone is logged into one of my Linux servers, and also be able to find out what the location of the login attempt. How can I do this?
0
votes
0answers
14 views

Securing web application used for core business process

I am writing an application which will be used for our core business workflows (client registration and management etc). I have partners and employees who are spread across the globe, so I want to ...
4
votes
4answers
777 views

Is enabling https on a Cisco router a considerable security risk?

I would like to use Cisco's Network Assistant to manage my Cisco routers (I know there are other solutions for this, but for now I've decided to use CNA). It requires the HTTP or HTTPS service to be ...