Security is not a product, but a process.

learn more… | top users | synonyms (1)

0
votes
2answers
3k views

Restricting User Access in Debian Squeeze

I've been contemplating ways to restrict user access to their own directories, not allowing them to navigate above their own user directory. I'm using SFTP, and don't want to install regular FTP ...
0
votes
1answer
269 views

Can /etc/hosts.deny/allow be overridden?

I have security measures put in place to keep unwanted users out of my server. I've changed the SSH port, disabled root login, have a software firewall to block portscans, and have entries in ...
0
votes
1answer
2k views

Iptables: Block all countries except my own for specific port

I would like to block all IPs (CIDR 0.0.0.0/0) except for German IPs for the SSH, FTP and SMTP ports. So, the default policy for those ports should be "DROP". I have a list of all German IP ...
0
votes
1answer
1k views

Logwatch httpd - hacks and probes

Sometimes in my daily logwatch report, I notice that there is a section under httpd for "attempts to use known hacks..." and another section about how many sites probed the server. I have a few ...
0
votes
1answer
217 views

How to restrict user to run and use only one program running on my server?

I have a cloud server running windows-server-2008 and i want my customer to log in to the server using remote desktop and the customer can run my own program only , he should not be able to run any ...
0
votes
3answers
682 views

How can I tell which ColdFusion hotfixes are installed?

I saw the new secruity hotfix for ColdFusion on adobe.com, but I'm unsure what is already installed. The version in ColdFusion Administrator is 8,0,1,195765. How can I tell which ColdFusion hotfixes ...
0
votes
4answers
269 views

How to determine the cause of high resource usage for two hours last week?

I know there are several tools I can use to find out what's causing heavy network and CPU usage right now, but every so often on my server I'll check the logs and notice that there were periods of ...
0
votes
1answer
58 views

How to protect file if physicall access to the server is possible? W2008R2

Is there a way to protect exe if server is on colocation hence the physical access is possible for the colo people? I have W2008R2 and was thinking of using BitLocker but it seems encrypting the whole ...
0
votes
1answer
181 views

My website keeps being hit by iPhones…am I being DDOSed?

66.65.71.240 - - [05/Aug/2011:21:56:09 -0700] "GET /api/account_verify?accesstoken=k198nrtc7flswo6qhimuv5pd0 HTTP/1.1" 500 2334 "-" "Geolo 1.0 rv:18 (iPhone; iPhone OS 4.3; en_US)" "at:-" "dt:-" ...
0
votes
2answers
130 views

Scanning Vendors (non-PCI related) - Hype or Not?

For months now, when building websites for clients, I've come across virtually trillions of "Site Security Scanners" supposedly endorsed/approved by various shared web hosts who claim to run XSS, SQL ...
0
votes
2answers
128 views

Oracle Security Update Patch July 2011 - How to know if i am affected?

Oracle Security Update Patch July 2011 I am using JDK 1.4.2_08, 1.4.2_19, 1.4.2_22, and Oracle DB 9.2.0.8. Can any experts tell me how to tell if i am affected, i.e. after installing the patch ...
0
votes
2answers
164 views

Hide SQL Server 2008 from attackers

I am using an MS-SQL Server 2008 instance as back-end DB server for a project. I did some security tests on the machine hosting my project and SQL Server and got the following report on SQL Server: ...
0
votes
4answers
390 views

Safety concerns on allowing connections to MySQL with no password on localhost?

In the case of a Linux system, is there any security concern to let MySQL users with standard privileges (that is, not the root users) connect to the database with no password from localhost? I think ...
0
votes
3answers
1k views

Security: How to check if our server is hacked?

Our server are hosting a website, but we find our database are added some tables, so we suspect if the server was hacked ? How can I confirm this and solve it ?
0
votes
2answers
278 views

Windows Server 2003/2008: Please recommend security software and practices [duplicate]

Possible Duplicate: What do I have to configure on my server to increase security from default? Hello, I am a "returning" MS Windows Server admin, I haven't been in in MS server business ...
0
votes
1answer
430 views

ld library problem

I am getting the below error while checking status of any service or stoping starting any server on my linux server. Its CentOS-5.4 server. sh: /usr/bin/(swapd): /lib/ld-linux.so.1: bad ELF ...
0
votes
3answers
66 views

One of my VPSes is very sluggish usually past midnight ( 1-5AMish )

I've noticed that on one of my VPSes ( debian 5 lenny ) ( not my linode ones but a host I used prior to linode ), the filesystem is very, very sluggish past midnight. If I try to use the command ...
0
votes
3answers
459 views

Database security guidelines and tips

I have been recently hired by an event-planning company to create a web application that will allow online payment for specific events and keep a list of registrants. My employers are asking for a ...
0
votes
6answers
118 views

Which are services or programs do I need to watch from linux security point of view

I was just watching the log files for my web server and saw a few log entries for SSHD. I can see that someone is continuously trying to connect via ssh with wrong username and password. i just saw ...
0
votes
3answers
3k views

Win2003 Folder sharing : Group permissions not working while user permissions work

I'm very new to windows server. I'm a software engineer but since we don't have a real sysadmin I'm supposed to figure out everything that is slightly computer related (you know how it is...). I need ...
0
votes
1answer
2k views

What is host/computer SID in Windows AD? and what is needed to identify the elements of network with it? [closed]

SID as http://en.wikipedia.org/wiki/Security_Identifier 1) Help me to clarify the concept of computer SID on hypothetical situation: suppose, I want to secure a network cable (for ex., from a ...
0
votes
2answers
601 views

Potentially vulnerable to CVE-2009-3555

When checking my (secure) site https://www.just-great-software.com/ with Firefox 3.6.6 the Error Console shows: www.just-great-software.com : potentially vulnerable to CVE-2009-3555 Is this ...
0
votes
2answers
1k views

Only allow ssh connections to a specific domain

I have a server setup with several domains and subdomains. I'd like to limit ssh and sftp access so a user can only connect to xxx.domain1.com but I'm not sure where this is configured. Connecting ...
0
votes
2answers
357 views

Ubuntu server security; Is this enough?

I have a classifieds website, which uses php5 and mysql, and also java (solr). I am new to linux and VPS... I have installed SSH, and I have installed IPtables, and also I have PuTTY which I use as ...
0
votes
3answers
411 views

Is it good to defense for DOS attacks with 2 request/sec?

Lots of example told me to defense with 5 or 4 request per second. Because usually a visitor clicking about in 1 or 2 links in one second, I think defense with 2 request per second is just fine. But ...
0
votes
2answers
267 views

I found a Ukranian spammer and have the exact query, IP and access time. What next?

Before I turned on comment moderation, these guys would leave comments meant to steal my Google juice (by getting an inbound link). I can still see them visit... the question is what should I do ...
0
votes
3answers
841 views

Is AuthType Basic secure when used over SSL?

I am authenticating clients of an apache2 server using AuthType Basic over SSL secured connections. I imagine these are secure, as the usernames and passwords are encrypted before they are sent to ...
0
votes
2answers
99 views

Accesibility of modified EC2 instances

This page on EC2 documentation site describes how to modify and store an EC2 instance. What it does not specify is whether the resulting instance is publicly available or not. How, and where do you ...
0
votes
2answers
2k views

How do I hide the version of Linux from a port scan?

How do I hide version of Linux I am running when I scan server ports? When I nmap'ed (nmap -A -T4 192.168.40.12) the server's ip from the outside, this is the result: Starting Nmap 4.62 ( ...
0
votes
3answers
867 views

Windows Server 2008 Firewall: Do inbound rules override outbound rules?

I have in inbound rule to allow all communication with MyApp.exe I have an outbound rule to block all traffic to 192.168.0.88 Can MyApp.exe communicate with 192.168.0.88 - I don't understand which ...
0
votes
3answers
7k views

Can I see Folder Permissions on Windows in a Tree View?

Is there a way to see folder/file permissions in a collapsable tree view in Windows? What I think I need is something like: + folder1 - EntAdmins[RWX],JoeBloggs[R--],Administrators[RWX]] + folder2 - ...
0
votes
6answers
952 views

Disable User Account Remotely

I work for a highly distributed IT based consulting firm with approximately 150 users in the field at different client sites at any given time. As we have grown we have needed to ability to disable a ...
0
votes
1answer
54 views

Microsoft patching folders

After extracting a Microsoft security patch, I got several folders containing the updated DLL. For Windows XP SP3 I have two folders: SP3GDR and SPQFE. Does anyone know what is the difference between ...
0
votes
3answers
297 views

Sharing directories in a Windows Workgroup

What is the best way to share and give permissions to certain users/computers in a workgroup? Does each user need the same account/password on every computer to have access to each others shared ...
0
votes
1answer
43 views

Secure Database Password Contained Inside a File

I've got a Linux based application (Java) that connects to an external database (PostgreSQL) in the same LAN. However, due the sensitiveness of the database contents I would like to avoid the admins ...
0
votes
1answer
32 views

Pricing of Key Pairs and Security Groups on AWS?

My free AWS account expired. I deleted all S3 and EC2 resources, but am wandering if I can leave the Key Pairs and Security Groups without having to pay for them. (My account resources look like this ...
0
votes
4answers
60 views

where should the site root directory be? [closed]

Where should I put my site root directory "my_site"? Any best practice? /var/www/my_site/ /var/local/sites/my_site/ /usr/share/wwww/my_site/ /usr/local/my_site/ /opt/my_site/ /srv/my_site/
0
votes
1answer
40 views

MySQL via SSL on VPC private subnet

Is an SSL connection recommended when connecting to a MySQL database server via a private subnet? SSL provides encryption but SSL causes a performance hit. The MySQL database server only serves ...
0
votes
3answers
83 views

locking up a linux box on a foreign network

I have an app that runs on a Linux server and is accessed via each user's web browser. My app contains proprietary code that I need to keep secure. I want to install the app in a client's private ...
0
votes
1answer
195 views

Windows 2008 r2 not using default security groups (ie Domain Admin) prevented from changing own password

Apologies if I did not find a question similar to mine but i have searched honest! Firstly we have undertaken a no default group approach to our security on active directory. This has been very ...
0
votes
2answers
55 views

IPtables - Sensible and non-contradictory rules?

This is my IPtable rules for my webserver with SSH installed, i've had help to get this far. My question is, are my rules contradictory. For example, I've been recommended to use these two lines: # ...
0
votes
1answer
68 views

Exchange 2010 security audit

Our IT department has received reports from HR that managers are reading their subordinates email, and we've been tasked with identifying if there is a technical way to achieve this. I'm looking for ...
0
votes
2answers
58 views

Is there a use case when traffic needs to be secured between 2 AWS instances?

According to Amazon's security white paper, it is not possible sniff traffic by other tenants http://awsmedia.s3.amazonaws.com/pdf/AWS_Security_Whitepaper.pdf Question: Is there a use case when ...
0
votes
1answer
432 views

Unable to install Network Deployment Enrollment Services (NDES)

I'm trying to install NDES on a Win2k8 R2 server, but I can't see the option. I've already added a user to IIS_IUSRS, and that user as sufficient priveleges since it is a part of the Administrator ...
0
votes
1answer
33 views

Protection of a dns server

I recently started to host my own domains on my servers. I can already see a fair bit of bogus queries arriving to my servers. Some dns amplification attacks, etc. What can I do in order to further ...
0
votes
2answers
141 views

S/MIME certificate to minimize email bounce

I have a website hosted in a vps that sends informative emails to my clientes, maybe 20-40 emails per day. Since few weeks ago some sent emails are bouncing with the following error: This message ...
0
votes
1answer
1k views

LDAP throws Event ID 2887 warnings even after enabling “require signing”

I am running an AD LDS directory and, ever since configuring it, I have been seeing 2887 warning messages, so I have decided to follow this guide to have the server require LDAP signing. The problem ...
0
votes
2answers
2k views

mod_security configuration issue: Error parsing actions: Unknown action: ver

I am trying to install / configure mod-sec using this tutorial, which uses the OWASP ModSecurity Core Rule Set. However when I go to restart apache, I get the following error: Syntax error on line 53 ...
0
votes
1answer
44 views

What are the recommended internet security measures to take? [closed]

I have built a speical-purpose server, the only purpose of this server is to download some data from a remote(internet) data feeder and do some data processing in the server as well. The only ...
0
votes
1answer
44 views

How communication works to connect server with or without VPN [closed]

When I ssh into my companies server without using VPN, then I get then quite understandably it cannot connect. Once I log into the companies VPN, I am able to connect. Breaking my questions down: ...