Security is not a product, but a process.

learn more… | top users | synonyms (1)

0
votes
2answers
531 views

How to use a shared key and certificate for all users with OpenVPN?

I have an OpenVPN server which authenticates to an Active Directory and asks therefore each user for a username and passphrase. On top of that it also requires each user to have a client certificate ...
0
votes
2answers
961 views

Worried that my webserver has been hacked (or compromised) with redirects to 'guide-securesoft.ru' [duplicate]

Possible Duplicate: My server's been hacked EMERGENCY So I am very panicked. I have a Rails application I am building hosted on a VPS for a staging environment. I configured it ...
0
votes
1answer
91 views

Utility that sends an email when usb is unplugged [closed]

I work for large university's IT department. We manage around 500 computers in remote labs around campus and residents halls. As an on going project, we are increasing secruty in our labs through ...
0
votes
2answers
361 views

Opening common ports - does it make a network more vulnerable/susceptible to attack?

Our network admins/security admin make the case that we should keep common (external facing) ports (FTP, XMPP, IMAP, IPSEC) closed as it is a greater security risk and makes us more susceptible to ...
0
votes
3answers
260 views

Which steps to take to protect java server from cpu overload?

I've written a java server application for a software solution I'm fiddling with. The server uses multithreading to handle sockets and postgresql as a database. I'm worried about potential ...
0
votes
2answers
79 views

Security track record of unix programs [closed]

I'm looking for a database with all the noteworthy unix programs with a timeline of vulnerabilities found in that individual product in some categories (remote/local, DoS, privilege elevation, data ...
0
votes
1answer
234 views

allow a user to run command as another user without any password prompt

I'm trying to achieve same result as the answer from that existing SF question without having to enter the password for the original user, that is, I'm userA, and I want to be able to run a command as ...
0
votes
3answers
70 views

Securing data sent to an unencrypted WiFi AP

The business plan of a project I'm involved in assumes selling certain WiFi-enabled devices to end users. All these devices originally have an unencrypted connection and a standard SSID. The problem ...
0
votes
2answers
224 views

force use of specific passwords

We are migrating Active Directory from from Windows Server 2003 to 2008 shortly. With 2008 we would like to be able to use a separate password policy for a particular group of PCs. One suggested ...
0
votes
2answers
1k views

Logwatch: Ignore certain IPs for SSH & PAM checks?

I have a CentOS 5.6 system, which runs Logwatch. If I perform a security scan (Nessus) against this host, it produces unnecessary noise in the Logwatch output. I'd like to run these security scans ...
0
votes
2answers
110 views

ssh - keys and password

I've gotten keys (certificates) working correctly, but as it is, it's more of a "convenience" thing. (which I love). But as far as security, someone can still use a password to login. What's a good ...
0
votes
1answer
136 views

Protect against silent1.pl Perl Script

I operate a small shared hosting area. While I notice that people are unable/struggle to exploit with PHP I have found a small minority of people using Perl in order to obtain server information. So, ...
0
votes
1answer
171 views

Questions about Domain controllers [closed]

I'm starting to work on a security project which includes setting up a domain controller for my company. I have a few questions: Do I need a proxy when having a domain controller on the network? ...
0
votes
4answers
1k views

Check for backdoors in PHP scripts

My shared host got hacked and I need to check my PHP scripts for backdoors. I'm on a dedicated server now so I can use SSH to run scripts. Are there any good scripts out there to do this task?
0
votes
3answers
120 views

Is there a way to tell if there is key stroke logging software installed? [closed]

I have a Windows-XP machine as my desktop system at work. Is there any way to tell if there is keystroke logging software running on my system or any other software that may be monitoring my system ...
0
votes
3answers
136 views

Where would I go to learn to make a really, really secure system that DOES expose external services (out of a standard Windows or Linux OS)

Where would I go to learn to set up a really, really secure system that DOES expose external services (out of a standard Windows or Linux OS). Note that I am not looking for a favorite choice between ...
0
votes
3answers
459 views

logwatch explanation

Could anyone please explain what the various parts of the following LogWatch mean: --------------------- IMAP Begin ------------------------ [IMAPd] Logout stats: ==================== User | ...
0
votes
2answers
273 views

Why isn't this .htaccess file working?

Recently, my website was hammered with thousands of POST requests from various bots. Instead of taking the approach of blocking these bots based on their user agent, I've decided to find a way to ...
0
votes
2answers
213 views

Mysql remote encryption

I'm using a remote connection to mysql. Both the webserver and the server with mysql on it will use internal ip addresses to connect. 1) Is encrypting necessary? 2) Is their a built in / simple way ...
0
votes
1answer
147 views

Windows file sharing for only 1 NIC

Our Windows 2008 servers are at a Data Center. Both have 2 network cards. One card is connected to the switch that connects to the Internet the other is connected to a switch that serves only our ...
0
votes
4answers
53 views

Is there any application for handling groups and members on Linux?

I have a Linux production server. There are no simple codes for viewing groups, members, how many groups one member is part of etc etc. Is there any good and secure application for this? Thanks
0
votes
3answers
263 views

May the file size returned by stat be compromised?

I want to make sure that nobody changed a file. In order to accomplish that, I want not only to check MD5 sum of the file, but also check its size, since as far as I understand this additional simple ...
0
votes
4answers
2k views

Protected Apache web sub-directory asks for password twice

I have an Apache server with password-protected web directory. That directory has a sub-directory, which requires another password, but anyone who can access the sub-directory should have access to ...
0
votes
2answers
996 views

How to configure mysql to connect via sockets?

My mysql server is installed on the localhost machine where my php scripts are stored. So is what they say right that it's safer to connect to mysql from php that is placed in the same server? If so, ...
0
votes
3answers
5k views

Windows Server 2003 - “The security log on this system is full.” message when logging in

When I remote desktop into one Windows Server 2003 machine, I get a popup message saying "The security log on this system is full." When I open the Event Viewer, the security log size is 512.0 KB, ...
0
votes
6answers
378 views

What is the risk of introducing non standard image machines to a corporate environment

I’m after some feedback from those in the managed desktop or network security space on the risks of introducing machines that are not built on a standard desktop image into a large corporate ...
0
votes
1answer
45 views

Block file browsing on Windows Explorer

I have a Citrix application that open Windows Explorer from a menu. The command invoked to open Explorer is: Explorer "g:\app\folder" What happens when Explorer is opened is that it shows a window ...
0
votes
1answer
61 views

Linux glibc versions 2.18 and older - vulnerability

Server: Red Hat Enterprise Linux Server release 5.9 (Tikanga) I came to know that Linux GNU C Library (glibc) versions prior to 2.18 are vulnerable to remote code execution via a vulnerability in the ...
0
votes
1answer
36 views

OpenSSL certificates

Since the recent surfacing of the heartbleed exploit, I have become curious as to how long openssl certificates are usually kept before they are regenerated? Is it days, weeks, months, years? I can't ...
0
votes
1answer
63 views

An account failed to log on Message on Windows 2008 R2

I'm having hundreds of messages in my Security Event System like: An account failed to log on. Failure Reason: Unknown user name or bad password. Caller Process Name: ...
0
votes
1answer
143 views

A ghost process started automatically and drains CPU [duplicate]

I am running an Ubuntu virtual machine that has few sites installed on it. I think due to my error and wrong permissions a malicious code was uploaded on the server and the "worm" had root access for ...
0
votes
3answers
150 views

How to use `rsync` to securely push to a mirror?

I am using rsync --rsh "ssh" to push to a mirror. Setting the necessary file system permissions on the mirror requires rsync to run with root privileges on the mirror. However, the mirrored files ...
0
votes
1answer
114 views

How open ports in INPUT chain, only for a target IP, with iptables?

I have a server Debian 7 Wheezy, with 2 assigned IPs. I have different service on different port assigned to the IPs. How can i set iptables rule, to work only with one of IP? Example: I Have 2 IPs: ...
0
votes
2answers
69 views

How can i make my all webistes only accessible by browsers and not auto scripts

I have that my websites have been hacked by some auto running libwww-perl BOT/0.1 (BOT for JCE) and Gecko/20100101 Is there any way that my all websites are only avaiable to genuine browsers and not ...
0
votes
2answers
72 views

How Do I Defend WebEx Security?

My company is an ISV selling software to banks and credit unions. We provide customer support via WebEx but every once in a while we'll have a customer that won't open their firewall to the WebEx ...
0
votes
2answers
414 views

Does open_basedir works recursive?

Does open_basedir works recursive? For example if I write in php.ini something like: open_basedir=/client3/web3/web Does it include all directories in /client3/web3/web (/client3/web3/web/1, ...
0
votes
2answers
45 views

Should my database server offer SSL?

I was installing a renewed SSL cert on my web servers and noticed that my DB server doesn't have one set up, which got me wondering: Should my database server only accept connections via SSL? The ...
0
votes
2answers
354 views

Can I use SSL termination for sensitive data, and if not what is the point of even using SSL with termination?

I have read, namely on Rackspace, that one should not use SSL termination for sensitive information (search the page for "SSL Termination should not be used"). Firstly, why would that be the case. ...
0
votes
3answers
75 views

centos private key and root login

I wanted to know if it's good practice / secure to allow login as root with ppk (private key) file. (no password). This server is only for me and no one else is working on it. Thanks, Danny
0
votes
2answers
109 views

Should I be concerned with seeing this in my logs?

The following requests (this is about half of them) in my Nginx access log have all come over the span of a few minutes from an IP that is registered to an ISP in Vietnam (I could provide the IP, but ...
0
votes
1answer
281 views

How to block an IP, if it is making many http/apache/mysql requests in a second?

If some one tried force burst attack on my website, how can i block their IP address? I mean, I want to block an IP if I am getting many http/Apache/SQL requests per second from it. How can i prevent ...
0
votes
2answers
9k views

ASDM unable to launch device manager from

I can't access to my Cisco asa 5505 from my Windows 7 64bit. The problem is that i can connect on it using the ASDM from another PC (WinXP 32bit), and i can connect using my win7 64bit to another ...
0
votes
1answer
112 views

Microsoft Security Compliance Manager terms

Recently i have installed Microsoft Security Compliance Manager. But i am confused with some terms. As per the print-screen ( which is mark in Red-Colour Round ) 1st - the 'Default' here means the ...
0
votes
3answers
433 views

I think I'm under DoS attack. How can I respond?

My server's CPU has been spiking out for the past few days, to the point that it drops requests. I've been looking through the logs, and see certain IP's in the logs that are just simply downloading ...
0
votes
1answer
117 views

ssyn.c and slow.c used on my VPS [duplicate]

I have noticed some changes on VPS Debian Squeeze and looked with history to see what commands were run. Then I found some which I'm 100% sure I didn't run because I don't know what are they. Somebody ...
0
votes
2answers
312 views

What is the best way to configure Postfix to send mail only on a production server?

I'm digging the web around to find the best way to configure Postfix. I don't want to install a full Postfix server, the only thing I want is to send mail with the PHP mail(). I know this can be ...
0
votes
2answers
236 views

Script to check server for WordPress installs and report version information [closed]

I'm looking for a script that can be run on a linux server that will find all WordPress installs and report their versions, or report if a version is out of date. I've googled for something and it ...
0
votes
1answer
386 views

find common string to block IPs

Currently I have all these IPs coming in. Is there a way to find a common string in the content of the packets and then block the attack via IPTables? Oct 24 16:28:52 host kernel: [ 823.255566] ...
0
votes
1answer
59 views

How to find on the Windows 7 who and when use(d) a certain share?

We have a workstation using Win7 on a LAN with a domain. On that workstation we set up some network shares. Can we find who used (user name and/or computer name) and when the shares? Note that we ...
0
votes
2answers
158 views

Why should I keep the root user if I'm not supposed to use it?

I'm on a fresh VPS with Ubuntu Server 12.04. I wanted to ask you the good practices to apply to enhance security over a stock Ubuntu-server. This is what I did up to now: I added Google Authenticator ...