Security is not a product, but a process.

learn more… | top users | synonyms (2)

0
votes
1answer
121 views

How to configure fail2ban so it bans login attempts based on the structure of the attempted password or username

I want to set up two filters for fail2ban: If the user tries to login with a password that is less than 10 characters ban them. And if the user tries to login with a password that is more than 10 ...
0
votes
1answer
52 views

A way to only allow some ports on windows server

I have been trying to make this work the last few hours but haven't come far. I have a windows server 2008 and a set up Local Security Policy firewall yet "no" inbound rules (yet). My domains look ...
0
votes
3answers
167 views

What compatibility trade-offs do we need to make in order to use a hardened SSL config for Nginx?

I found some hardened SSL settings in github.com/ioerror/duraconf. Here is the header from the config: This is an example of a high security, somewhat compatible SSLv3 and TLSv1 enabled HTTPS ...
0
votes
1answer
113 views

Possible DNS hijacking at ISP

I was about to login to control panel of our hosting provider and it went to some other webpage which was not my hoster's server (I confirmed with them that the IP is not theirs) ...
0
votes
2answers
160 views

Same domain SMTP unauthenticated message relay [closed]

While I was doing some testing on an SMTP server I was able to successfully send mail from knownid@myserver.com to knownid@myserver.com through telnet without any authentication. From a risk ...
0
votes
3answers
72 views

No directory protection for apache

This looks weird, I have an apache httpd server in a CentOS box, which has this security problem: Virtual hosts are enabled, the site is in /data/www/vhost2/index.php It looks like that if I tell ...
0
votes
1answer
188 views

Upgrading NFS/NIS Shared `/home` Setup

I am currently managing a network of workstations running different flavours of Ubuntu. The server (also Ubuntu) runs a NIS server and exports a shared /home directory over NFS (in v3 compatibility ...
0
votes
1answer
1k views

Blocking repeated http requests in Apache behind a load balancer

I have a number of EC2 servers on AWS running apache behind a load balancer (ELB). Every now and then some IP address abuses the API hosted on the EC2 servers and causes a denial of service. I have no ...
0
votes
1answer
636 views

Bastion host for PCI compliance

A client in the retail industry has a network with point-of-sale (POS) terminals that connect to a POS Server. Additionally, most of the Windows workstations in non-sales areas also connect to the ...
0
votes
1answer
116 views

Unsafe to run Apache as LOCALSYSTEM on Windows Server?

On my server (Windows Server 2008 R2), I have installed a couple of programs coming with a web interface. As I want to be able to access those web interfaces from outside my LAN, the relevant ports ...
0
votes
1answer
356 views

Hardening CentOS 6 web server security [duplicate]

There is a web server installed as a virtual machine in the cloud. I've configured it myself, and it has two corporate web sites on it. I'am not planning anything else to be there. So before it goes ...
0
votes
1answer
229 views

Using authority-given .cer file to login on remote servers on OS X

A few months ago I bought a certificate from a popular certification authority (Certum). I used it to sign emails, but today the admin at my work asked me to connect to our main server via ssh. He ...
0
votes
1answer
917 views

new user and problems with ssh key configuration (pub vs pem files)

We access our ubuntu server from outside over ssh this way : ssh -i securityTier.pem -l someUsername serverDnsName I need to create new user which will use separate *.pem file. So far i created : ...
0
votes
1answer
59 views

Linux user permissions setup for monitoring tool

We have external monitoring tool which will access our linux machines through SSH and will read top/ping/netstat/disk activity. As i am creating separated ssh key and separated user for this purpose i ...
0
votes
1answer
191 views

Restrict access to SQL Server backups based on user?

Let's say I have MS SQL Server 2012 Standard installed on Windows Server 2008 R2 Standard. It's a single SQL instance that runs under the windows domain account DOMAIN\sql_user. There's two databases, ...
0
votes
2answers
279 views

Determine windows server attack? Should I monitor the server and block IPs all the day?

While Viewing the windows server 2008 event log, I always find many security events 4625/logon as follows: **An account failed to log on.** Subject: Security ID: SYSTEM Account Name: ...
0
votes
3answers
817 views

iptables rule to stop DDOS [duplicate]

My server is undergoing a ddos attack with the traffic in my apache logs appearing like: ip address - - [11/Apr/2013:01:01:04 -0600] "POST / HTTP/1.1" 416 31 "-" "Microsoft Internet Explorer" ip ...
0
votes
1answer
275 views

Network setup on AWS for NFS

I have a number of servers which all need external IP addresses, as they provide different services and need to be invidually accessible: server1.mydomain.com > 1.2.3.4 server2.mydomain.com > ...
0
votes
1answer
40 views

Limit SNMP access to VPN

I need to deploy about a thousand machines across the US later this year. I'm hoping to use SNMP to monitor their (collective and individual) status. The whole block will be connected via OpenVPN so ...
0
votes
3answers
69 views

watch file to see whos accessing/writing it and log it

I am facing some malware problems on my webserver. I updated third party software such as Wordpress to the latest version, disabled root logins and my users password complex enough but still someone ...
0
votes
1answer
186 views

DNS Reflector Attacks — protection

[~]# /usr/bin/dig +recurs @MYIP www.facebook.com ; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.10.rc1.el6_3.5 <<>> +recurs @MYIP www.facebook.com ; (1 server found) ;; global options: ...
0
votes
2answers
120 views

puppet enterprise node install - Security risk?

I am learning puppet and using this tool install puppet clients on nodes. puppet node install --login=root --keyfile=~/.ssh/id_rsa --install-script puppet-enterprise --installer-payload ...
0
votes
1answer
56 views

SSL configuration for domain pointing to EC2 instance

I have my custom domain pointing to an EC2 instance. Say mydomain.com -> [Elastic IP address for my EC2] I would like to add SSL certificates so that I can access the site via https - ...
0
votes
2answers
174 views

What types of security threats does a vlan protect against? [closed]

I'm learning about vlans. The literature says that they provide improved performance and security by segrating the physical network into separate "virtual" networks. I understand the performance ...
0
votes
1answer
136 views

Stop server's use as proxy

I have a vps server on which I have configured apache as a webserver. Because of unexpected high usage of bandwidth, I checked the access log of my server yesterday. There were a lot of requests of ...
0
votes
1answer
350 views

Converting the ssh key

to clone my bitbucket project,I changed the /.ssh/authorized_keys content by adding my bitbucket key and I am able to clone into my bitbucket,but after that I was not able to access my server at EC2 ...
0
votes
1answer
117 views

How to ensure a password entered on command line is not stored at all on Linux server?

I've got a web page PHP script which runs p7zip on the server: This passes a user supplied password for encrypting their uploaded files. Secondly the password is then emailed via PHP to the ...
0
votes
2answers
435 views

Nginx - prevent a .php file running on anything but your own server/domain?

We have an mp3 player that runs via an iFrame, not our choice but thats how we're stuck with it. We want to prevent other people simply embedding the iframe on their site. What would be the best way ...
0
votes
2answers
246 views

Linux - Security - Is someone trying to find a way in? [duplicate]

Possible Duplicate: Hundreds of failed ssh logins Recently I have been spending more time on my production servers in efforts to puppetize several configs and I happened to issue a find ...
0
votes
1answer
104 views

unix malicious scripts/ksh execution

I'm wondering whether my architecture poses a security risk. Details: The whole website is not ROOT owned but still, the APACHE user used instead has some pretty advanced permissions. I have a ...
0
votes
2answers
462 views

How to transfer large files between two remotes by using a third machine?

I need to automatically mirror a large amount (terabytes) of files in two unix machines over a slow link (1 Mbps). This needs to be done frequently, but the data doesn't change too much (delta ...
0
votes
1answer
59 views

Hyper-V Role on Server 2008 R2

So I read over a dozen articles regarding Hyper-V and iSCSI (host or VM using software) and they both have pros/cons about each. However, the host-based has better performance. So now that I decided ...
0
votes
2answers
362 views

Could it be that “chkrootkit” just doesn't like .hmac, .packlist, and .relocation-tag files?

I just cleaned up my hacked CentOS server (due to not updating since versino 5.3). But still, "chkrootkit" says this: Possible t0rn v8 \(or variation\) rootkit installed ...
0
votes
1answer
151 views

Security Risks of catch-all email address [closed]

What additional security issues does an MTA and email client face if a catch-all email address is setup on an sub-domain (that isn't published/publicly listed anywhere) compared with setting up ...
0
votes
2answers
2k views

How To Set iptables log rules for PSAD with UFW?

For PSAD to work, I need to add the following iptables rules and enable packet logging : iptables -A INPUT -j LOG iptables -A FORWARD -j LOG ip6tables -A INPUT -j LOG ip6tables -A FORWARD -j LOG I ...
0
votes
2answers
1k views

Scripting Local Security Policy settings

We have a bunch of Windows 7 laptops out in the field. They're not in a domain. We'd like to build a script/batch file that we can send to each machine and, when run, configure screensaver locking, ...
0
votes
1answer
500 views

Windows Task Scheduler Security Issue [closed]

Using the Windows Task Scheduler allows non-administrator users to gain access to administrative rights. Normally, Windows prevents execute applications which need to have more rights. A message ...
0
votes
1answer
113 views

Can tcp_wrappers be bypassed?

I utilize TCP wrappers to secure services running on my machine. Things like webmail, cpanel, whostmgrd, and so on. I use the hosts.allow/hosts.deny files to facilitate this. Is it possible for an ...
0
votes
1answer
545 views

Allowing any file to upload on server and security risks

We are having a project that allows users to backup there data to server through php upload,running on Linux server. If users upload any executable file it will be automatically renamed to some ...
0
votes
2answers
590 views

vsftpd whitelisting

How do you whitelist IPs for the service to allow only certain subnets on? Do I use IPTables or is there an easier way like IPWrappers Do you have to register the service for it to work with ...
0
votes
1answer
2k views

Lots of Logon/Logoff events in the event viewer windows 2003

I seem to be getting a lot of these entries in the Security event viewer. Around 8-12 every hour. I am wondering if a) I should be worried about it? or b) what actually is going on, Can anyone help? ...
0
votes
2answers
461 views

CentOS security for lazy admins

I'm running CentOS 5.5 (basic LAMP with Parallels Power Panel and Plesk) and have thus far neglected security (because it's not my full-time job, there is always something more important on my ...
0
votes
1answer
263 views

How to set Jira default groups for new users?

I'm using Jira on demand and I'm trying to change the default groups a new registered user belongs to.
0
votes
2answers
69 views

Secure every connection between endpoints

Sometimes one has to work with software that hasn't built in security-features for non-local connections. In fact, some client-libraries are sending credentials in clear text over the wire. On the ...
0
votes
1answer
121 views

Securing Erlang / Ubuntu server

I have written a web service in Erlang using mochiweb and jiffy and now face the task of deploying it to production. Since it is going to be open to the public I was wondering how secure Erlang ...
0
votes
1answer
149 views

Weird Apache Error Log [duplicate]

Possible Duplicate: What are these weird access requests? [Thu May 03 11:39:36 2012] [error] [client 200.159.40.31] File does not exist: /var/www/w00tw00t.at.blackhats.romanian.anti-sec:) ...
0
votes
2answers
902 views

Reverse Proxy - should it be a different technology stack?

Got a skeptical question about a reverse proxy setup I'm considering. I've currently got a pair of load balanced application servers in the DMZ (S1,S2 in figure below). These accept inbound requests ...
0
votes
1answer
495 views

Optimized LAMP/LEMP stack scripts

In the "let's try not to reinvent the wheel" perspective, I've been looking for a packaged LAMP (or LEMP) stack for some time now, not only the basic Mysql, Apache , PHP etc... but ideally stuff like ...
0
votes
1answer
1k views

CentOS apache startup config file security error

I am setting up a NetDisco machine on CentOS, which entails adding an include to the apache httpd.conf file. When I start apache by running "httpd" from a root command prompt, the process launches. ...
0
votes
1answer
398 views

ossec email alerts

Just installed ossec and sendmail however can't able to get alerts to my gmail from ossec. I am able to see the alerts on the sendmail localhost, however alerts seem to be not forwarding to gmail.