Security is not a product, but a process.

learn more… | top users | synonyms (2)

0
votes
1answer
228 views

Possible to see a list + CPU use of all user processes in a locked down Windows environment?

We work in a locked down privilege environment, to the point that we are not able to see the the list of processes and CPU usage of the windows services running on one of our development servers ...
0
votes
2answers
1k views

What tools and/or procedures to use when hardening IIS7?

IIS6 had some tools for hardening, against attacks and holes. Does IIS7 have the same? If not, are there some standard thingst that should be done to protect it?
0
votes
2answers
2k views

Windows Services - Common Ports to Open in Firewall

I've always had trouble finding firewall port information for some windows-based software/services. For example,http://support.microsoft.com/kb/832017 gives me the ports but there's no differentiation ...
0
votes
2answers
600 views

Firewall: How to Allow Application to Access Database at Database Server

I have 2 machines, one is used as to host application ( Application Server), another is used to host database ( database server). Both are windows XP. Now as the App Server needs to access the ...
0
votes
3answers
4k views

DBO role in SQL Server 2005 versus DBA role?

What is the difference between DBO role versus the DBA role?
0
votes
5answers
6k views

How to log all Internet traffic that goes through a server running Windows 2008?

I have a need to find out how to log all Internet traffic of all users on a network that uses a Windows Server 2008 machine to provide Internet access to the entire network. I know, since this server ...
0
votes
3answers
600 views

Postfix can't read ~/.forward files

I have a highly customized home-directory structure which restricts access as follows: The server hosts a number of subdomains, which are grouped into seven "zones" Home directories are ...
0
votes
1answer
124 views

nginx - deny all *.php requests except index.php for security reasons

os: CentOS 7 nginx: 1.6.2 httpd: apache 2.4.6 cms: Drupal 7 After my server was compromised I removed all from server, reinstalled OS and soft, and restored data from backup. Now I configure all ...
0
votes
1answer
27 views

How should a wildcard certificate be used?

I have a wildcard certificate (pfx file) and I have doubts on how to use that. Should I install that on all of my application servers or alternatively create a new certificate and sign it with the ...
0
votes
1answer
16 views

Solaris 11 / OpenSolaris - stop processes from listening?

I would like to write a script to secure Solaris 11 servers in preparation for internet access. In addition to enabling ipfilter, I would like to disable network-accessible services that are not ...
0
votes
1answer
35 views

Apache - Drop connection for anything but HTTP 200 status

Is there a way to configure Apache to drop connection for any request resulting in an HTTP status other than 200 (or possibly a list of status codes)? The idea is that, rather than returning any ...
0
votes
1answer
40 views

iptables setting output default to DROP

I have two servers: one web, one database. The db server is on a private network. I thought I needed to restrict the default OUTPUT on the web server to DROP and created OUTPUT rules to to ACCEPT ...
0
votes
1answer
55 views

Do blocking input ports increases security?

1-Do blocking unused input ports in firewall increases system security? How? (as there is no daemon listening on those ports anyway) 2-Do dropping those unused ports will positively or negatively ...
0
votes
1answer
185 views

Powershell script for specifically OU

Need help with hte following, a script that can export all members of a specifically OU with in that multiple security groups. Location of the OU is; OU=Security Groups,OU=Public ...
0
votes
1answer
48 views

Diagnosing heavy bandwidth usage

I run a couple of IIS web servers, one on win server 2008 R2, the other on 2003. Both fully patched and up to date, with AV. Running on a No NAT connection with 8 WAN IP's The 2003 machine seems to ...
0
votes
2answers
90 views

Is PHP 5.3.3 on RHEL 6.5 receiving security fixes?

I notice that the latest PHP available on RHEL 6.5 is PHP 5.3.3. See Distrowatch and also my own check: $ php -v PHP 5.3.3 (cli) (built: Jul 15 2014 08:48:08) However, the PHP website claims that ...
0
votes
1answer
52 views

How to change password complexity for mailbox in exchange 2013

I find the default password policy in exchange pretty weak (only 6 char.). Is there a way to change this password policy ? e.g. : Minimum 1 cap, Minimum 8 letters. Thank you !
0
votes
1answer
34 views

What is the name of this “security leak finder” application?

They said that there were some vulnerabilities, and then pointed these results: What is the name of this application?
0
votes
1answer
258 views

Nginx Password Protect Directory Downloads Source Code

I'm trying to password protect a WordPress login page on my Nginx server. When I navigate to http://www.example.com/wp-login.php, this brings up the "Authentication Required" prompt (not the WordPress ...
0
votes
4answers
94 views

Email + data server for a small company needed?

I am currently working with a small company (10 people), whose main business has nothing to do with IT. But we have some IT-Infrastructure, namely an aging Small Business 2003 server, which runs ...
0
votes
1answer
59 views

Should I still disable root if I disable password authentication and enable only key authentication?

I'm new to the linux world and I've been reading a few tutorials on security. I've seen some questions on StackExchange tackling this subject, but from what I've seen, none of the answers clarified ...
0
votes
2answers
65 views

Remote login terminal

I have an unusual request. I have a box - running Fedora 19 - that I'm using as a server. I have a crappy Atom netbook - also running Fedora - that isn't good for anything. I was wondering if there is ...
0
votes
1answer
59 views

Authorizing users to SSH into machine - where to configure?

Ubuntu Trusty here. I'm having some trouble deciding where in the system I should configure which users are to be allowed to ssh into the machine, and which keys they're allowed to use. I've ...
0
votes
2answers
65 views

How to restrict access to root to daemon user?

I have Apache 2.4 with PHP 5.5.14 installed on latest Debian. According to Apache security tips&tricks I've set my httpd.conf to this: <Directory /> AllowOverride none Require all ...
0
votes
1answer
42 views

Restricting access using IP address / Network Redirection?

I have a situation where we have a web server (lets call it A) that is hosting a set of HTTP based services. Due to some client requirements, this web server is not open to the outside world but ...
0
votes
2answers
137 views

nginx as reverse proxy on front of Apache - protection and security

I'm just concerned whether to install Nginx WS alone or nginx as reverse proxy on front of Apache based on security and protection. If I had to choose nginx as reverse proxy on front of Apache, would ...
0
votes
2answers
89 views

Should munin be password-protected?

We use Munin at work. There is a Munin install - which right now is open to the world. An admin doesn't think he needs to password-protect it. What's the worst that can happen? How can I convince ...
0
votes
1answer
128 views

What are the benefits of having a data center located geographically far away from your customer's office? [closed]

Was just reading through an article on data centers as linked: http://www.theage.com.au/it-pro/business-it/what-to-look-for-in-a-data-centre-20131122-hv3qj.html Appropriate quote from article below: ...
0
votes
3answers
75 views

benefits of iptables on VPS? [duplicate]

Say I have a well updated Linux VPS serving HTTP content on port 80 using apache. What would I gain by enabling IPtables? I can see no obscurity gains since the machine has a port open. Also, since ...
0
votes
1answer
131 views

Why can a local root turn into any LDAP user?

I know this has been asked here before, but I am not satisfied with the answers and don't know if it's ok to revive and hijack an older question. We have workstations that authenticate users on an ...
0
votes
1answer
74 views

what would happen when macchanger to gateway mac address? [closed]

I thought arpspoof GATEWAY_IP -t VICTIM_IP can be prevented by add a static arp entry on victim side, i.e. arp -s GATEWAY_IP GATEWAY_MAC I read ...
0
votes
2answers
2k views

Allow service to interact with desktop

DC OS - Windows Server 2008 R2 Std Client OS - Windows XP, Windows 7 I have implemented Security policy through Network Policy Server and enabled Wired AutoConfig Services Automatically. While ...
0
votes
1answer
54 views

Is a VPN right for restricting server access?

I would like to set up a Few QA servers for a web application, under the app domain, however I would not like these servers to be accessible to just everyone from the Internet. Ideally, the QA team ...
0
votes
3answers
65 views

Limiting the connection source in firewall

I'm new at server management, and wrote an IPTables script for firewall. I'm very concerned about the security of my server, and thus I'm wondering about something that I read often from people using ...
0
votes
1answer
110 views

What are the security benefits of using a proxy server?

In Wikipedia is written: Security: the proxy server is an additional layer of defense and can protect against some OS and Web Server specific attacks. However, it does not provide any protection ...
0
votes
2answers
2k views

mod_security configuration issue: Error parsing actions: Unknown action: ver

I am trying to install / configure mod-sec using this tutorial, which uses the OWASP ModSecurity Core Rule Set. However when I go to restart apache, I get the following error: Syntax error on line 53 ...
0
votes
1answer
119 views

How to configure fail2ban so it bans login attempts based on the structure of the attempted password or username

I want to set up two filters for fail2ban: If the user tries to login with a password that is less than 10 characters ban them. And if the user tries to login with a password that is more than 10 ...
0
votes
1answer
50 views

A way to only allow some ports on windows server

I have been trying to make this work the last few hours but haven't come far. I have a windows server 2008 and a set up Local Security Policy firewall yet "no" inbound rules (yet). My domains look ...
0
votes
1answer
110 views

Possible DNS hijacking at ISP

I was about to login to control panel of our hosting provider and it went to some other webpage which was not my hoster's server (I confirmed with them that the IP is not theirs) ...
0
votes
2answers
156 views

Same domain SMTP unauthenticated message relay [closed]

While I was doing some testing on an SMTP server I was able to successfully send mail from knownid@myserver.com to knownid@myserver.com through telnet without any authentication. From a risk ...
0
votes
3answers
70 views

No directory protection for apache

This looks weird, I have an apache httpd server in a CentOS box, which has this security problem: Virtual hosts are enabled, the site is in /data/www/vhost2/index.php It looks like that if I tell ...
0
votes
1answer
174 views

Upgrading NFS/NIS Shared `/home` Setup

I am currently managing a network of workstations running different flavours of Ubuntu. The server (also Ubuntu) runs a NIS server and exports a shared /home directory over NFS (in v3 compatibility ...
0
votes
1answer
991 views

Blocking repeated http requests in Apache behind a load balancer

I have a number of EC2 servers on AWS running apache behind a load balancer (ELB). Every now and then some IP address abuses the API hosted on the EC2 servers and causes a denial of service. I have no ...
0
votes
1answer
581 views

Bastion host for PCI compliance

A client in the retail industry has a network with point-of-sale (POS) terminals that connect to a POS Server. Additionally, most of the Windows workstations in non-sales areas also connect to the ...
0
votes
1answer
107 views

Unsafe to run Apache as LOCALSYSTEM on Windows Server?

On my server (Windows Server 2008 R2), I have installed a couple of programs coming with a web interface. As I want to be able to access those web interfaces from outside my LAN, the relevant ports ...
0
votes
1answer
344 views

Hardening CentOS 6 web server security [duplicate]

There is a web server installed as a virtual machine in the cloud. I've configured it myself, and it has two corporate web sites on it. I'am not planning anything else to be there. So before it goes ...
0
votes
1answer
221 views

Using authority-given .cer file to login on remote servers on OS X

A few months ago I bought a certificate from a popular certification authority (Certum). I used it to sign emails, but today the admin at my work asked me to connect to our main server via ssh. He ...
0
votes
1answer
875 views

new user and problems with ssh key configuration (pub vs pem files)

We access our ubuntu server from outside over ssh this way : ssh -i securityTier.pem -l someUsername serverDnsName I need to create new user which will use separate *.pem file. So far i created : ...
0
votes
1answer
59 views

Linux user permissions setup for monitoring tool

We have external monitoring tool which will access our linux machines through SSH and will read top/ping/netstat/disk activity. As i am creating separated ssh key and separated user for this purpose i ...
0
votes
1answer
180 views

Restrict access to SQL Server backups based on user?

Let's say I have MS SQL Server 2012 Standard installed on Windows Server 2008 R2 Standard. It's a single SQL instance that runs under the windows domain account DOMAIN\sql_user. There's two databases, ...