Security is not a product, but a process.

learn more… | top users | synonyms (2)

0
votes
1answer
950 views

Is someone trying to hack my site? How to block certain URLs in Nginx?

On the past few hours my server is getting pretty loaded, mostly due to a lot of load requests. I've seen this thanks to the StatCounter realtime stats, which shows that the "Came from" page is: ...
0
votes
2answers
321 views

User uploaded files on different server with PHP?

If I had a dozen "Work" servers with just PHP-FPM (with other Nginx servers in front), is it possible to setup PHP to store user uploaded files on a different server? I'm looking to avoid syncing ...
0
votes
1answer
40 views

Establish secure channel to domain workstations to transmit password in clear text

I want to use some command line tools for remote administration of Microsoft domain workstations, however some of them transmit the credentials in clear text. Is there a command line utility I can ...
0
votes
3answers
94 views

Getting Some Specific Types of Log [closed]

I'm want to get some logs from my server, but not general logs like syslog that gives me a lot of random logs. I want to know how I can get logs of things like logins(with time, IP and username), ...
0
votes
2answers
906 views

Folder permissions when zip and unzip on Windows

I've a webserver Windows 2003. When I do a backup in a zip of some folders, the permissions of the folder doesnt restore when i unzip the compress file. How can I do a zip saving the original ...
0
votes
3answers
1k views

Mysterious Network Client

When I look at my data network with Windows Explorer My Network Places I see all of my network clients and printers. However, I am seeing an unknown client called tsclient. When I click on it I ...
0
votes
1answer
249 views

How secure is IIS7.5 with Windows 2008 R2 web server?

Very theoretical question, how secure is the mentioned configuration? (IIS7.5 and Windows 2008 R2). I don't mean things like easy passwords, open ports and unsecured c#/.net code. I mean, are there ...
0
votes
1answer
282 views

Have a script which adds Security on share to “Everyone”

[Old post] I have a shared folder on the network which is shared with "Everyone" 'Read' & 'Read & Execute' privileges. A few people have 'Write' access and sometimes somehow when they either ...
0
votes
1answer
73 views

Which brands of wireless routers and DSL modems care about security? [closed]

Which vendors have established a strong security process during development where they educate firmware developers about security issues, arrange security engineers to review the code, accept ...
0
votes
1answer
799 views

Any problems with using a 301 redirect to force https traffic in IIS?

Is there any problem with using a 301 redirect to force all traffic to go to a secure-only site? We originally had redirect rules, but enforcing SSL-only seemed more secure. Here is how we set it ...
0
votes
1answer
372 views

How can I monitor the network on ESXi node for connections and find the source of a ddos attack

I'm looking for something fairly simple to install, that will monitor network traffic on the vswitch for my esxi node as we're getting ddosed and I need to be able to easily see where the traffic is ...
0
votes
4answers
81 views

How can I restore a database such that I can use it on a server where I don't have the security admin role

On a SQL 2008 instance, I have a login with the dbcreator and public roles. When I restore a database onto this server, I am then unable to use that database because all the user -> login mappings in ...
0
votes
1answer
76 views

Users able to install applications

We have win7. Network users are able to download applications like Mozilla Firefox, and install it. The install folder they are able to install to is c:\users%USERPROFILE%\AppData\Local\Mozilla. If ...
0
votes
2answers
50 views

Close ports only on a specified network interface

I've just checked with nmap a proxy server (ubuntu 10.04 with squid) for vulnerabilities and I decided to start an hardening process... Is it possible to close, for example, ssh port only on eth1? So ...
0
votes
1answer
106 views

make sure openfire does not connect to other jabber servers

This is mostly a security question; i've installed OpenFire jabber service on my office network, but i want to make sure the server is not using federation or any other interactions without outside ...
0
votes
4answers
251 views

Why user logons to Windows always look like the first logon

I have Windows Server 2003 and all the users have windows XP with administrative privileges in local group setting, so I want to reduce them to normal users. i.e. Currently normal user in active ...
0
votes
1answer
89 views

Security of local Ubuntu development server

I'm developing on my laptop which is constantly connected to the Internet while I'm working. I installed Apache2 with Ubuntu default settings, MySQL and PHP. How safe is it for me to develop when I'm ...
0
votes
3answers
348 views

Good Firewalling practice for internet facing servers?

Does it make sense to firewall an internet facing server, say a webserver? Assuming I did not want to restrict anyone from accessing the webserver in its capacity to serve web pages, I would be ...
0
votes
2answers
2k views

Is there a security concern exposing NTLM authentication over http or should it only be https?

We are setting up a SharePoint 2010 site. Don't worry, this is not a Sharepoint question, just adding it for context. Most of the site will be anonymous, but some users are able to authenticate in ...
0
votes
1answer
44 views

How do I create a new user on AWS?

I want to give developers individual access to AWS Management Console, and have their own security keys for AWS command line tools. Is it possible for me to do this using the command line tools? And ...
0
votes
2answers
203 views

SSL: Page Includes Resources Which are not Secure

I get this error every time I have a request to my SSL server, even when it's a text file. Is it not sending the response via SSL? Apache SSL config: Listen 443 AddType application/x-x509-ca-cert ...
0
votes
2answers
411 views

Should I use my web server firewall to block all traffic from IP addresses that seem to be attempting attacks?

I’ve recently set up a tiny Debian VPS for hosting a couple of personal sites. In the Apache access logs, I’ve noticed quite a few requests for URLs like /phpMyAdmin-2.6.4/scripts/setup.php coming ...
0
votes
3answers
138 views

Google webcache: information leakage despite requirement of login

Been searching like crazy for hours. What happened: While googling my site to check for certain keywords, I used their site preview function (where you get that little popup with an image ...
0
votes
2answers
220 views

Windows server security setup (firewalls, SQL server and other points)

Firstly apologies for this being a non-specific question, I'm not really sure where to look for specifics so this is a general discussion of regular issues I'm faced with. I'm going round in circles ...
0
votes
2answers
96 views

HTTP request hijkacked?

I've installed Tomcat 6 on my first, new VPS. I had added AccessLogValve to server.xml configuration Tomcat file. In tomcat log I saw first this: xxx.xxx.xxx.xxx - - [04/Mar/2011:23:43:12 +0000] "GET ...
0
votes
2answers
331 views

Run as Admin - without being local admin?

Is there any way, on Windows 7, to let users have the "Run as Administrator" option available without giving them full local admin rights? It will grant them the same level of access to the machine, ...
0
votes
2answers
394 views

Block access to every file in the site but index.htm in Nginx

I have a site with just one file: index.htm which have some ajax linked to php files. I'd like to make those php files only accessible via ajax (post and get) coming from this index file and block ...
0
votes
2answers
1k views

How to secure a group of Amazon EC2 instances

I have several Amazon EC2 instances running Ubuntu 10.04 and I've recently started using Amazon's Route 53 as my DNS. The purpose of doing that was to allow the instances to refer to each other by ...
0
votes
1answer
700 views

Report Server: login failed to master database

I noticed from the SQL Server log that every time server restarts (I'm using SQL Server 2008 developer edition) I get an error message into log: Login failed for user 'machine\sqlaccount'. Reason: ...
0
votes
2answers
91 views

Where ACLs are applied

I am trying to understand ACLs and am unsure of where they are applied. Here's my example. I am trying to prevent communication between two VLAN interfaces. My source clients are on VLAN 1, my ...
0
votes
2answers
69 views

Getting started with a blacklist

I blacklisted "213.5.64.179" and wonder if you can recommend how to proceed? Should I do this on an ad-hoc basis just following the instructions and blacklist bad hosts as we go along or take ...
0
votes
3answers
131 views

Prevent acccess to the C drive

Is it possible to prevent regular users from accessing the C drive via Windows Explorer? they should be allowed to execute certain programs. This is to ensure that employees cannot steal or copy out ...
0
votes
2answers
2k views

Best client and server antivirus for 5 user office? [closed]

I'm setting up an Active Directory environment for 5 users (very small) and I'm wondering what is the best antivirus for clients (Windows 7) and servers (Server 2008 R2 x64)? I use Symantec Corp at ...
0
votes
1answer
755 views

A non interactive alternative to makecert

I have a need to create a self signed certificate non interactively. Unfortunately, the only tool that I know of (makecert) is interactive - it uses GUI to ask for a password. My OS is Windows (from ...
0
votes
1answer
149 views

Script to get the Email Alerts for RDP Session

Is there any script to get the Email Alerts when someone logs into the server so that I can increase server security by getting the Email alerts. Any help would be appreciated
0
votes
2answers
327 views

Strange Items in Hosts File and Netstat

I ran a netstat -a on a computer and there were a number of strange items: Proto Local Address Foreign Address State TCP netgym:epmap virusin:0 LISTENING ...
0
votes
1answer
524 views

CISCO: ARP Poisoning Countermeasures

How can I prevent the Cisco Catalysts 2950/2960/3550/3750 from being vulnerable to ARP Poisoning? Can this be avoided with the ARP INSPECTION? Thanks
0
votes
2answers
343 views

Website needs to only be accessible from two specific iPad's and no other devices or IP's (PHP)

The business I work for has a website for employees to clock in and out of their work shifts. This website needs to be only accessible from our two in-house iPads. I tried doing a simple .htaccess ...
0
votes
2answers
181 views

.htaccess regular expressions for optimal performance?

In my .htaccess file I'm trying to block some bots using: RewriteCond %{HTTP_USER_AGENT} ^badbot [NC] But, I want to change these conditions to something more inclusive like: Method #1: ...
0
votes
4answers
2k views

monitoring outbound traffic on port 25

I just started up a new instance that i build using debian squeeze on amazon last night. This morning I just got an email saying that I reached a limit on the volume of email you were able to send ...
0
votes
1answer
336 views

How secure exactly is RDP

I have a few Windows machines I need to open up, but I was wondering: how secure is RDP? I already found documents like this explaining how to improve security, so obviously it is not very secure by ...
0
votes
3answers
3k views

Disable audit of Logon Logoff

I have a SBS 08 with 50 users on my domain. In Event Viewer : Windows Logs > Security, I've got nearly 300,000 events about EventID 4624 Logon, 4634 Logoff, 4776 Credential Validation, 4769 Kerberos ...
0
votes
2answers
66 views

images security

How I can check all my images on server, they don't prepared with maulicious code ? I mean for example Gif PHP exploits and so on...
0
votes
2answers
93 views

got my dedictaed server and my plesk, what are the first things i should do?

i just got my linux dedicated server and running in plesk, coz im new to this, i was wondering before i start uploading and developing my app, what should one do, for example security checks, ...
0
votes
2answers
328 views

HOw to know if files md5 chnaged by virus or system itself centos

I installed OSSSEC to very files have chnaged or not. But sometimes it is giving me false waring and integrity checksums like following files have chnaged. How can i makesure that files are chnaged ...
0
votes
1answer
2k views

How to configure password maximum days before it expires?

I want to set Maximum days of a password can be used. So I configure PASS_MAX_DAYS in /etc/login.defs, and PASS_WARN_AGE to warn user before the password expired. In my example, I set PASS_MAX_DAYS = ...
0
votes
1answer
702 views

VMWare virtual switch isolation

Imagine you need several Virtual Machine onto your ESX server. The VMs are composed of two distinct group and those group can only communicate to each others over a physical firewall. Now, what make ...
0
votes
3answers
116 views

Securing Apache directories allowing access only through links on the server

I have an HTML page (on a server running Apache) that basically contains a bunch of links (link menu) to other HTML/PHP pages in VirtualDirectories on the same server. Is there a way to only allow ...
0
votes
1answer
171 views

Securing a “one purpose” server

I don't know much about securing a server. I've heard of iptables, but I've never used it (maybe that's not what I need?). So right now my goal is to have a main webserver, and a separate database ...
0
votes
3answers
122 views

Disallowing user right to edit various settings

I'm going to be installing windows 2008 server R2 and running desktop applications (MS Office, Autocad) for novice users (3). I want to disallow following things ability to change outlook, firefox ...