Security is not a product, but a process.

learn more… | top users | synonyms (2)

0
votes
2answers
68 views

opening a port on a router to all WAN ip's or just a range or specific WAN IP

Just trying to see how many people would be in favor for opening a port on a router, like port 22 or something similar for ssh, to all outside WAN connections or just a set of specific WAN ip's for ...
0
votes
2answers
1k views

Analyzing Apache access logs to quickly identify abuse

So someone in China just loves abusing the crap out of my networking tools site up at yougetsignal.com. I've been trying to analyze my access.log files to see exactly what they are so excited about. ...
0
votes
1answer
57 views

Protecting directories on a Apache web server by directory name string match?

Using Apache, is there a way to protect all items beneath directory names that contain a certain string? For example, if I have this structure: wwwroot--> project1--> docs--> ...
0
votes
1answer
592 views

IIS7 web site not working properly after file sharing on wwwroot

I recently tried to add a file share on wwwroot to easily be able to deply some files from a different copmuter on the network. I added the share with full access to my user, but only me. After I had ...
0
votes
2answers
154 views

Why do I need default ACCEPT?

If I leave out this line $IPT -I INPUT -i $WAN_NIC -j ACCEPT from my firewall script below, then I can't SSH to the server. The way I understand $IPT -I INPUT -i $WAN_NIC -j ACCEPT is ...
0
votes
2answers
310 views

User uploaded files on different server with PHP?

If I had a dozen "Work" servers with just PHP-FPM (with other Nginx servers in front), is it possible to setup PHP to store user uploaded files on a different server? I'm looking to avoid syncing ...
0
votes
1answer
38 views

Establish secure channel to domain workstations to transmit password in clear text

I want to use some command line tools for remote administration of Microsoft domain workstations, however some of them transmit the credentials in clear text. Is there a command line utility I can ...
0
votes
3answers
92 views

Getting Some Specific Types of Log [closed]

I'm want to get some logs from my server, but not general logs like syslog that gives me a lot of random logs. I want to know how I can get logs of things like logins(with time, IP and username), ...
0
votes
2answers
825 views

Folder permissions when zip and unzip on Windows

I've a webserver Windows 2003. When I do a backup in a zip of some folders, the permissions of the folder doesnt restore when i unzip the compress file. How can I do a zip saving the original ...
0
votes
3answers
1k views

Mysterious Network Client

When I look at my data network with Windows Explorer My Network Places I see all of my network clients and printers. However, I am seeing an unknown client called tsclient. When I click on it I ...
0
votes
1answer
244 views

How secure is IIS7.5 with Windows 2008 R2 web server?

Very theoretical question, how secure is the mentioned configuration? (IIS7.5 and Windows 2008 R2). I don't mean things like easy passwords, open ports and unsecured c#/.net code. I mean, are there ...
0
votes
1answer
258 views

Have a script which adds Security on share to “Everyone”

[Old post] I have a shared folder on the network which is shared with "Everyone" 'Read' & 'Read & Execute' privileges. A few people have 'Write' access and sometimes somehow when they either ...
0
votes
1answer
73 views

Which brands of wireless routers and DSL modems care about security? [closed]

Which vendors have established a strong security process during development where they educate firmware developers about security issues, arrange security engineers to review the code, accept ...
0
votes
1answer
768 views

Any problems with using a 301 redirect to force https traffic in IIS?

Is there any problem with using a 301 redirect to force all traffic to go to a secure-only site? We originally had redirect rules, but enforcing SSL-only seemed more secure. Here is how we set it ...
0
votes
1answer
365 views

How can I monitor the network on ESXi node for connections and find the source of a ddos attack

I'm looking for something fairly simple to install, that will monitor network traffic on the vswitch for my esxi node as we're getting ddosed and I need to be able to easily see where the traffic is ...
0
votes
4answers
81 views

How can I restore a database such that I can use it on a server where I don't have the security admin role

On a SQL 2008 instance, I have a login with the dbcreator and public roles. When I restore a database onto this server, I am then unable to use that database because all the user -> login mappings in ...
0
votes
1answer
76 views

Users able to install applications

We have win7. Network users are able to download applications like Mozilla Firefox, and install it. The install folder they are able to install to is c:\users%USERPROFILE%\AppData\Local\Mozilla. If ...
0
votes
2answers
49 views

Close ports only on a specified network interface

I've just checked with nmap a proxy server (ubuntu 10.04 with squid) for vulnerabilities and I decided to start an hardening process... Is it possible to close, for example, ssh port only on eth1? So ...
0
votes
1answer
100 views

make sure openfire does not connect to other jabber servers

This is mostly a security question; i've installed OpenFire jabber service on my office network, but i want to make sure the server is not using federation or any other interactions without outside ...
0
votes
4answers
248 views

Why user logons to Windows always look like the first logon

I have Windows Server 2003 and all the users have windows XP with administrative privileges in local group setting, so I want to reduce them to normal users. i.e. Currently normal user in active ...
0
votes
1answer
89 views

Security of local Ubuntu development server

I'm developing on my laptop which is constantly connected to the Internet while I'm working. I installed Apache2 with Ubuntu default settings, MySQL and PHP. How safe is it for me to develop when I'm ...
0
votes
3answers
314 views

Good Firewalling practice for internet facing servers?

Does it make sense to firewall an internet facing server, say a webserver? Assuming I did not want to restrict anyone from accessing the webserver in its capacity to serve web pages, I would be ...
0
votes
2answers
2k views

Is there a security concern exposing NTLM authentication over http or should it only be https?

We are setting up a SharePoint 2010 site. Don't worry, this is not a Sharepoint question, just adding it for context. Most of the site will be anonymous, but some users are able to authenticate in ...
0
votes
1answer
44 views

How do I create a new user on AWS?

I want to give developers individual access to AWS Management Console, and have their own security keys for AWS command line tools. Is it possible for me to do this using the command line tools? And ...
0
votes
2answers
196 views

SSL: Page Includes Resources Which are not Secure

I get this error every time I have a request to my SSL server, even when it's a text file. Is it not sending the response via SSL? Apache SSL config: Listen 443 AddType application/x-x509-ca-cert ...
0
votes
2answers
410 views

Should I use my web server firewall to block all traffic from IP addresses that seem to be attempting attacks?

I’ve recently set up a tiny Debian VPS for hosting a couple of personal sites. In the Apache access logs, I’ve noticed quite a few requests for URLs like /phpMyAdmin-2.6.4/scripts/setup.php coming ...
0
votes
3answers
138 views

Google webcache: information leakage despite requirement of login

Been searching like crazy for hours. What happened: While googling my site to check for certain keywords, I used their site preview function (where you get that little popup with an image ...
0
votes
2answers
217 views

Windows server security setup (firewalls, SQL server and other points)

Firstly apologies for this being a non-specific question, I'm not really sure where to look for specifics so this is a general discussion of regular issues I'm faced with. I'm going round in circles ...
0
votes
2answers
92 views

HTTP request hijkacked?

I've installed Tomcat 6 on my first, new VPS. I had added AccessLogValve to server.xml configuration Tomcat file. In tomcat log I saw first this: xxx.xxx.xxx.xxx - - [04/Mar/2011:23:43:12 +0000] "GET ...
0
votes
2answers
326 views

Run as Admin - without being local admin?

Is there any way, on Windows 7, to let users have the "Run as Administrator" option available without giving them full local admin rights? It will grant them the same level of access to the machine, ...
0
votes
2answers
388 views

Block access to every file in the site but index.htm in Nginx

I have a site with just one file: index.htm which have some ajax linked to php files. I'd like to make those php files only accessible via ajax (post and get) coming from this index file and block ...
0
votes
2answers
1k views

How to secure a group of Amazon EC2 instances

I have several Amazon EC2 instances running Ubuntu 10.04 and I've recently started using Amazon's Route 53 as my DNS. The purpose of doing that was to allow the instances to refer to each other by ...
0
votes
1answer
651 views

Report Server: login failed to master database

I noticed from the SQL Server log that every time server restarts (I'm using SQL Server 2008 developer edition) I get an error message into log: Login failed for user 'machine\sqlaccount'. Reason: ...
0
votes
2answers
91 views

Where ACLs are applied

I am trying to understand ACLs and am unsure of where they are applied. Here's my example. I am trying to prevent communication between two VLAN interfaces. My source clients are on VLAN 1, my ...
0
votes
2answers
68 views

Getting started with a blacklist

I blacklisted "213.5.64.179" and wonder if you can recommend how to proceed? Should I do this on an ad-hoc basis just following the instructions and blacklist bad hosts as we go along or take ...
0
votes
3answers
130 views

Prevent acccess to the C drive

Is it possible to prevent regular users from accessing the C drive via Windows Explorer? they should be allowed to execute certain programs. This is to ensure that employees cannot steal or copy out ...
0
votes
2answers
1k views

Best client and server antivirus for 5 user office? [closed]

I'm setting up an Active Directory environment for 5 users (very small) and I'm wondering what is the best antivirus for clients (Windows 7) and servers (Server 2008 R2 x64)? I use Symantec Corp at ...
0
votes
1answer
734 views

A non interactive alternative to makecert

I have a need to create a self signed certificate non interactively. Unfortunately, the only tool that I know of (makecert) is interactive - it uses GUI to ask for a password. My OS is Windows (from ...
0
votes
1answer
145 views

Script to get the Email Alerts for RDP Session

Is there any script to get the Email Alerts when someone logs into the server so that I can increase server security by getting the Email alerts. Any help would be appreciated
0
votes
2answers
318 views

Strange Items in Hosts File and Netstat

I ran a netstat -a on a computer and there were a number of strange items: Proto Local Address Foreign Address State TCP netgym:epmap virusin:0 LISTENING ...
0
votes
1answer
510 views

CISCO: ARP Poisoning Countermeasures

How can I prevent the Cisco Catalysts 2950/2960/3550/3750 from being vulnerable to ARP Poisoning? Can this be avoided with the ARP INSPECTION? Thanks
0
votes
2answers
325 views

Website needs to only be accessible from two specific iPad's and no other devices or IP's (PHP)

The business I work for has a website for employees to clock in and out of their work shifts. This website needs to be only accessible from our two in-house iPads. I tried doing a simple .htaccess ...
0
votes
2answers
179 views

.htaccess regular expressions for optimal performance?

In my .htaccess file I'm trying to block some bots using: RewriteCond %{HTTP_USER_AGENT} ^badbot [NC] But, I want to change these conditions to something more inclusive like: Method #1: ...
0
votes
4answers
2k views

monitoring outbound traffic on port 25

I just started up a new instance that i build using debian squeeze on amazon last night. This morning I just got an email saying that I reached a limit on the volume of email you were able to send ...
0
votes
1answer
335 views

How secure exactly is RDP

I have a few Windows machines I need to open up, but I was wondering: how secure is RDP? I already found documents like this explaining how to improve security, so obviously it is not very secure by ...
0
votes
3answers
3k views

Disable audit of Logon Logoff

I have a SBS 08 with 50 users on my domain. In Event Viewer : Windows Logs > Security, I've got nearly 300,000 events about EventID 4624 Logon, 4634 Logoff, 4776 Credential Validation, 4769 Kerberos ...
0
votes
2answers
66 views

images security

How I can check all my images on server, they don't prepared with maulicious code ? I mean for example Gif PHP exploits and so on...
0
votes
2answers
93 views

got my dedictaed server and my plesk, what are the first things i should do?

i just got my linux dedicated server and running in plesk, coz im new to this, i was wondering before i start uploading and developing my app, what should one do, for example security checks, ...
0
votes
2answers
319 views

HOw to know if files md5 chnaged by virus or system itself centos

I installed OSSSEC to very files have chnaged or not. But sometimes it is giving me false waring and integrity checksums like following files have chnaged. How can i makesure that files are chnaged ...
0
votes
1answer
2k views

How to configure password maximum days before it expires?

I want to set Maximum days of a password can be used. So I configure PASS_MAX_DAYS in /etc/login.defs, and PASS_WARN_AGE to warn user before the password expired. In my example, I set PASS_MAX_DAYS = ...