Security is not a product, but a process.

learn more… | top users | synonyms (1)

0
votes
2answers
409 views

One-App SSH Logins using login shell?

I want to run an application on a Linux machine which will be accessed by most users using PuTTY. I want to start that app and, when it's done, I want it to end the SSH session. Is it ...
0
votes
3answers
3k views

How can I use PAM to restrict telnet login by user?

Regrettably I need to enable telnet for a single user on a Linux machine. Everyone else will have to use ssh. How do I configure PAM to restrict which users may login via the telnet server?
0
votes
1answer
318 views

I think my server was hacked - how do i know what has been changed? [duplicate]

I have read the following posts which didn't answered my questions: - My linux server was hacked. How do I find out how and when it was done? - How do I know if my Linux server has been hacked? - and ...
0
votes
3answers
406 views

Have I just been under attack?

I have set up my Debian server on HP ProLiant 360 G4 yesterday. I started off with minimum services, running only SSH and Apache, all on standard ports with default configurations. About an hour ago, ...
0
votes
4answers
74 views

Detecting if a page has been requested more than a specified no. of times by the same IP and blocking the IP

I'm trying to detect bad bot activity. If the information.php, which is disallowed in robots.txt but is open for normal users, has been requested more than 500 times in a day by same IP address, I'd ...
0
votes
2answers
3k views

Managing /tmp and /var/tmp, and why not globally writeable?

Ive been trying to lock some security vulnerabilities at my server, and I got to the point of the tmp folders. Both of them will store files that are used by other resources, still, reading a little ...
0
votes
2answers
320 views

What is the risk of opening network port?

What can someone do if i write a program to open a TCP port and run, lets say an echo server? Can some one access data on my system? or any other risk of opening port?
0
votes
4answers
3k views

how to protect telnet access to smtp port 25?

Please consider the following: 192-168-1-106:~ michael$ telnet <remote_server_ip> 25 Trying <remote_server_ip>... Connected to li*****.linode.com. Escape character is '^]'. 220 ...
0
votes
2answers
354 views

Linux - Block ssh users from accessing other machines on the network

I have set up a virtual machine on my network for uni project development. I have 6 team members and I don't want them to SSH in and start sniffing my network traffic. I already have set the firewall ...
0
votes
3answers
90 views

What is the rules of ports?

I mean the port to connecting.. just like SSH port, nginx port, etc. Im not clear about the port. So far I can see port running not more than 5 characters (port xxxxx). So, when choosing port ...
0
votes
4answers
2k views

What firewall rules should be used for a home based system [closed]

I'm just setting up a home wireless network with connection to the internet. The router has settings to configure the firewall rules. Currently it's set to INBOUND ALL ANY and OUTBOUND ALL ANY. ...
0
votes
4answers
599 views

Permissions set to 555. How can another user modify the files? [duplicate]

I run an Ubuntu 12.04 x64 VPS with Vesta, and a site in PHP. It has been hacked several times with injected code that looks like this: <?php ...
0
votes
5answers
337 views

Should I change the SSH port to < 1024? [duplicate]

Many server configuration guides recommend that the SSH port should be changed to something > 1024, for obscurity and to avoid conflicts. This is interesting, because it recommends using a port < ...
0
votes
3answers
102 views

Company server setup - security and ssh

I currently manage a server at RackSpace for my company, and am planing on switching to Linode in the next month or so, for a better server and to save some money. In the process of switching, I am ...
0
votes
3answers
86 views

What could be using an HTTP request method of “-”

Got an apache log entry that looks like this, actually I have a bunch of them spread out over time. XXX.XXX.XXX.XXX - - [27/Apr/2012:14:39:52 -0500] "-" 408 - "-" "-" It wasn't a GET or POST, the ...
0
votes
4answers
135 views

SSH: what is the best way to achieve secure connection with dynamic IP?

I'd like to have my own distant server, and to connect to it through SSH. But I'd like to do it through many PCs (i.e. many different IPs), do you have any advice / secure solution for doing this?
0
votes
2answers
143 views

Connecting to a malicious VPN

I am connecting to a VPN that is known to be malicious. Numerous machines on the network including the VPN server its self are all compromised. What precautions should I take to protect myself?
0
votes
5answers
225 views

Have opened a port. Is my server vulnerable?

I have two dedicated servers. One which stores all the files (scripting) and the other hosts just the db. In order to connect to the other server I have enabled port 2335 on TCP/IP and added the ...
0
votes
4answers
286 views

IP Masquerading - is it just for email?

For some reason I thought it was a security feature of Ubuntu. Is there anything security related pertaining to it?
0
votes
3answers
947 views

Is it dangerous to allow every user to run nmap as root?

At our university we have some computers in the "networking lab", that are configured to allow everybody to run nmap as root via /etc/sudoers. Could this be a security vulnerability?
0
votes
9answers
308 views

Is it possible for large ISPs to give you the range of IPs you can be assigned?

My company is trying to sign up for LexisNexis services. LexisNexis (or more specifically, a service offered by LexisNexis) restricts logins to either a handful of IPs, or a range of IPs. We just have ...
0
votes
3answers
487 views

How do I tell if my mail system has been compromised?

My webmaster catch-all email address started receiving a lot of "Delivery Status Notification (Failure)" replies from various email systems. In the order of 1 per hour. It's obviously Spam being ...
0
votes
3answers
18k views

Port 22 is closed even with Firewall turned off [closed]

I'm trying to open port 22 on my local machine (Windows 7 32 bit). I'm using a web tool to check if my port is open. It says that port 22 is closed. So I disabled firewall to see if it causes port to ...
0
votes
3answers
118 views

Help on securing WIndows

I have 2 systems running MSWindows Server 2003 and 2008 respectively. I have done all the updates. I am interested in securing them e.g. close all unneeded services. For example my concern is that if ...
0
votes
2answers
3k views

How do proxy servers filter https websites?

With my limited knowledge of HTTPS I started wondering: How do proxy servers filter HTTPS websites? I mean adding a proxy server is essentially a MITM attack which is what HTTPS was explicitly ...
0
votes
3answers
456 views

How to protect a local NTFS folder so only it's owner can access (i.e. not a local / domain admin)

What i'd like to do is to set up such folder permissions so the folder can be accessed only by a user who created it (or one, who knows his password). Is it possible? Is it secure? I tried to set ...
0
votes
4answers
233 views

Security holes in in PHP 5.2.5

My shared hosting provider uses PHP 5.2.5, which was released at the end of 2007. I would like to know the security holes of PHP 5.2.5. Where I can get them? phpinfo
0
votes
6answers
464 views

Secure data transfer from a RHEL 5 box

I have been researching this for a while but cant find and conclusive answeres. FTP - Very insecure. FTP over SSl - Not fully supported everywhere, only a few clients support it? SFTP - This is the ...
0
votes
3answers
184 views

What options do I have if my linux box is compromised? [duplicate]

Possible Duplicate: My server's been hacked EMERGENCY I have put all security meaures and log monitoring tools. Now but i don't know what to do if find out the there is some rootkit on ...
0
votes
3answers
4k views

Better way to stop/start Webmin and SSH

it would be a good idea to not have webmin running all the time... just start it via ssh when I need it... so, I just stop webmin,and leaving SSH always running... when I need to access webmin, I ...
0
votes
1answer
85 views

Are department-wide shares a bad idea?

Let's say an organization has a department with 10-15 users who sometimes need to share files between each other. They currently have an open share, where anyone read read / write to the share. If ...
0
votes
1answer
441 views

Failed PCI DSS Compliance

I got this from my compliance check results. To me it looks like my router is responding to their test but I'm not sure where to go . ( might be off track completely though) Description: PCI DSS ...
0
votes
1answer
148 views

Helpful linux command for do some forensic on compromised linux web server [duplicate]

What are helpful linux command for do some forensic on compromised linux web server for giving out sort of information/evidence/backtrace? for example checking log, checking last file edit, suspicious ...
0
votes
3answers
1k views

Is blocking SMTP ports prevent server from sending emails?

I have a Centos server with cPanel on it. Yesterday, some hackers had successfully connected to my smpt server and sent thousand of emails from it. What I want to do is blocking every ports except ...
0
votes
2answers
300 views

Retrieve malicious IP addresses from Apache logs and block them with iptables

Im trying to keep away some attackers that try to exploit XSS vulnerabilities from my website, I have found that most of the malicious attempts start with a classic "alert(document.cookie);\" test. ...
0
votes
2answers
101 views

Can a datacenter read my passwords if I'm using KVM over IP? [closed]

Is it truth that datacenters can read my passwords over KVN over IP interface when I ask them to connect it and I'am forced to enter ssh pass/encryption pass (OS install,etc) ? I colocated the server ...
0
votes
2answers
152 views

Safely transfer files from pc with internet connection to lan without allowing any other form of communication

In the company that I work there are computers that are connected to the Internet and computers that are connected to a Local Area Network. The LAN is considered a "safe zone" and the files that ...
0
votes
3answers
459 views

Security best practice when running process as non-root user

So I'm trying to run Supervisor (http://supervisord.org/) as a non-root user. However the process outputs logs to the /var/log directory which is owned by root and has 755 permissions. Therefore ...
0
votes
1answer
239 views

How do I secure my SSH access?

I'm one of those guys who climbs up the ladder to the high dive and jumps off, then realizes he doesn't know how to swim. So I have a VPS, and I have no idea how to administer it. I understand one of ...
0
votes
4answers
857 views

The more secure iptables script imaginable. Does one exist? [closed]

I plan on buying a server soon. I'd like the server to be as secure as possible, only having POP3, SMTP, SSH and HTTP open. I know how to write an iptables script to only allow those connections and ...
0
votes
3answers
234 views

Windows 2008 Critical Vulnerabilities in Remote Desktop Could Allow Remote Code Execution

A windows server 2008 web edition that hosts some personal blogs of mine have been hacked with all my php files injected whereas the blog wasn't even active. The password is very lengthy about 50 ...
0
votes
3answers
1k views

How to give user root access without giving him root password

The scenario is this: I have a development machine I want (need) to have root access to Our admin setups the machines using his own credentials for the root user. The explanation being that if ...
0
votes
2answers
635 views

How to use a shared key and certificate for all users with OpenVPN?

I have an OpenVPN server which authenticates to an Active Directory and asks therefore each user for a username and passphrase. On top of that it also requires each user to have a client certificate ...
0
votes
2answers
1k views

Encrypting an ODBC connection

Situation: We have a SQL Server 2008 R2 database sitting in a data centre We would like to allow analysts to connect to the database and query the data using desktop based tools (e.g. Tableau) via ...
0
votes
1answer
78 views

Web Server sercurity (used only for web services)

I am using a Virtual Private Server for accessing Web-Services used only on the Mobile devices, there are many entries in the access and error log, even there is nothing on the web server. I am ...
0
votes
1answer
99 views

Win Server 2003/Terminal Services Remote Access

Office users access a win2003 server from within the office using thin clients and terminal services. In reviewing the security settings it seems, by default, all users in the 'Remote Desktop Users' ...
0
votes
2answers
123 views

Is it possible to configure a service to run as a group and add users to that group on Windows XP?

Is it possible to configure a service to run as a group and add users to that group on Windows XP? I need the service to have the permissions of the users in that group so that they can logonn, ...
0
votes
3answers
1k views

Centos Dedicated Server Security [closed]

We have clean CentOS 5.6 setup and virtualmin on it, that's all. What type of security steps would you suggest are appropriate? http://www.wiredtree.com/supportservices/servershield.php this page ...
0
votes
1answer
182 views

Locking down a box on the Internet [closed]

I'm a developer who is looking to put a new service on the Internet. I am new to administering systems and frankly I seem a little lost at where I should start with putting something on the web. My ...
0
votes
2answers
117 views

Methods to ban bots, force attacks on my server

I've been getting some bots trying to get hold of my database by mass attacking /sertup/scripts.php of various database program. I wanna ban such activities. The closest I found was this: ...