Security is not a product, but a process.

learn more… | top users | synonyms (2)

0
votes
1answer
665 views

Report Server: login failed to master database

I noticed from the SQL Server log that every time server restarts (I'm using SQL Server 2008 developer edition) I get an error message into log: Login failed for user 'machine\sqlaccount'. Reason: ...
0
votes
2answers
91 views

Where ACLs are applied

I am trying to understand ACLs and am unsure of where they are applied. Here's my example. I am trying to prevent communication between two VLAN interfaces. My source clients are on VLAN 1, my ...
0
votes
2answers
68 views

Getting started with a blacklist

I blacklisted "213.5.64.179" and wonder if you can recommend how to proceed? Should I do this on an ad-hoc basis just following the instructions and blacklist bad hosts as we go along or take ...
0
votes
3answers
131 views

Prevent acccess to the C drive

Is it possible to prevent regular users from accessing the C drive via Windows Explorer? they should be allowed to execute certain programs. This is to ensure that employees cannot steal or copy out ...
0
votes
2answers
2k views

Best client and server antivirus for 5 user office? [closed]

I'm setting up an Active Directory environment for 5 users (very small) and I'm wondering what is the best antivirus for clients (Windows 7) and servers (Server 2008 R2 x64)? I use Symantec Corp at ...
0
votes
1answer
739 views

A non interactive alternative to makecert

I have a need to create a self signed certificate non interactively. Unfortunately, the only tool that I know of (makecert) is interactive - it uses GUI to ask for a password. My OS is Windows (from ...
0
votes
1answer
146 views

Script to get the Email Alerts for RDP Session

Is there any script to get the Email Alerts when someone logs into the server so that I can increase server security by getting the Email alerts. Any help would be appreciated
0
votes
2answers
322 views

Strange Items in Hosts File and Netstat

I ran a netstat -a on a computer and there were a number of strange items: Proto Local Address Foreign Address State TCP netgym:epmap virusin:0 LISTENING ...
0
votes
1answer
512 views

CISCO: ARP Poisoning Countermeasures

How can I prevent the Cisco Catalysts 2950/2960/3550/3750 from being vulnerable to ARP Poisoning? Can this be avoided with the ARP INSPECTION? Thanks
0
votes
2answers
330 views

Website needs to only be accessible from two specific iPad's and no other devices or IP's (PHP)

The business I work for has a website for employees to clock in and out of their work shifts. This website needs to be only accessible from our two in-house iPads. I tried doing a simple .htaccess ...
0
votes
2answers
180 views

.htaccess regular expressions for optimal performance?

In my .htaccess file I'm trying to block some bots using: RewriteCond %{HTTP_USER_AGENT} ^badbot [NC] But, I want to change these conditions to something more inclusive like: Method #1: ...
0
votes
4answers
2k views

monitoring outbound traffic on port 25

I just started up a new instance that i build using debian squeeze on amazon last night. This morning I just got an email saying that I reached a limit on the volume of email you were able to send ...
0
votes
1answer
336 views

How secure exactly is RDP

I have a few Windows machines I need to open up, but I was wondering: how secure is RDP? I already found documents like this explaining how to improve security, so obviously it is not very secure by ...
0
votes
3answers
3k views

Disable audit of Logon Logoff

I have a SBS 08 with 50 users on my domain. In Event Viewer : Windows Logs > Security, I've got nearly 300,000 events about EventID 4624 Logon, 4634 Logoff, 4776 Credential Validation, 4769 Kerberos ...
0
votes
2answers
66 views

images security

How I can check all my images on server, they don't prepared with maulicious code ? I mean for example Gif PHP exploits and so on...
0
votes
2answers
93 views

got my dedictaed server and my plesk, what are the first things i should do?

i just got my linux dedicated server and running in plesk, coz im new to this, i was wondering before i start uploading and developing my app, what should one do, for example security checks, ...
0
votes
2answers
324 views

HOw to know if files md5 chnaged by virus or system itself centos

I installed OSSSEC to very files have chnaged or not. But sometimes it is giving me false waring and integrity checksums like following files have chnaged. How can i makesure that files are chnaged ...
0
votes
1answer
2k views

How to configure password maximum days before it expires?

I want to set Maximum days of a password can be used. So I configure PASS_MAX_DAYS in /etc/login.defs, and PASS_WARN_AGE to warn user before the password expired. In my example, I set PASS_MAX_DAYS = ...
0
votes
1answer
690 views

VMWare virtual switch isolation

Imagine you need several Virtual Machine onto your ESX server. The VMs are composed of two distinct group and those group can only communicate to each others over a physical firewall. Now, what make ...
0
votes
3answers
116 views

Securing Apache directories allowing access only through links on the server

I have an HTML page (on a server running Apache) that basically contains a bunch of links (link menu) to other HTML/PHP pages in VirtualDirectories on the same server. Is there a way to only allow ...
0
votes
1answer
171 views

Securing a “one purpose” server

I don't know much about securing a server. I've heard of iptables, but I've never used it (maybe that's not what I need?). So right now my goal is to have a main webserver, and a separate database ...
0
votes
3answers
122 views

Disallowing user right to edit various settings

I'm going to be installing windows 2008 server R2 and running desktop applications (MS Office, Autocad) for novice users (3). I want to disallow following things ability to change outlook, firefox ...
0
votes
1answer
560 views

hosts.deny not working

Currently I am watching the live auth.log and someone is continuously trying the brute force attack for 10 hours. Its my local server so no need to worry but I want to test. I have installed ...
0
votes
2answers
634 views

why should I chmod 511 /usr/local/apache/bin/httpd?

I'm using Ubuntu 10.04 and installed apache2 HTTP server. On the security page @ apache.org documentation they recommend to change the permissions on the file /usr/local/apache/bin/httpd to 511, but I ...
0
votes
2answers
226 views

Vista cmd.exe fails to run if users and/or auditors group not present

In the current environment there exists a policy where files within %system32% are only allowed to be owned by System and Administrators. An issue has arisen where after converting these ...
0
votes
2answers
394 views

How do I open private files using a browser through SSH

On my current project I have a few private php scripts and I also have phpMyAdmin in a private area of the server. Is there anyway of opening those files in a browser? I'm currently tunnelling using ...
0
votes
1answer
200 views

How can I limit a site's access to LAN users only in IIS 5.1?

I want to limit a site's access to connections from the LAN only. How can I do this? When I go to the Directory Security tab of the website, it looks like I need to use IP address and domain name ...
0
votes
3answers
1k views

Firewalls that block RDP over port 443

I need people to reach my servers over SSH and RDP. Both ports are blocked outbound at many companies, especially the large ones. However, I also suspect that in 90% of companies there is nothing to ...
0
votes
3answers
483 views

How to secure LDAP

Not sure if this belongs more on serverfault or not... BACKGROUND: I am using openldap, and pam/nss/ldap for authentiction on my server (webmail, etc). My files, which work fine: ...
0
votes
1answer
128 views

Is it illegal to modify a cookie to become a chat admin? [closed]

I doubt it is, but I found a site where you can modify a cookie to become admin, is this legally okay? Thanks
0
votes
1answer
183 views

eCryptFS Initialization Issues

I'm having issues with the first mount of eCryptFS. Currently when I attempt to mount it mount -t ecryptfs ~/.Private ~/Private However it's erroring. The error in dmesg is the following: Error ...
0
votes
2answers
327 views

Web server hardware firewall recommendations [closed]

I'm looking for a specific hardware firewall model solutions that best accommodate the following concerns [Cisco models are best, because our colo can get good deals on them reconditioned]: There ...
0
votes
4answers
150 views

Is there a way to secure my server and give 10 untrusted persion my ssh access

Okay here is the situation, I bought a hosting server that gives me version control and ssh access. I'm working on a big project that needs team work so I need at least 10 person around the globe to ...
0
votes
3answers
229 views

Does a 1 year break in career hinders the chance of new job IT job

I have 3 years experience as web developer as small Linux /window server networking. I had to go to overseas (home country) for some reason for about 1 year. I was thinking of doing some ...
0
votes
1answer
87 views

Symantec End Point Protection

We are planning a mass rollout of Symantec Endpoint protection. We currently have Symantec antivirus version 10 running on the systems. From testing the roll out works fine but it does not take affect ...
0
votes
3answers
333 views

secure data transport between web server and database server

I asked this question in stackoverflow and it was suggested to try here so here goes... I'm planning on provisioning a web server and database server in a server farm environment. They will be in the ...
0
votes
1answer
130 views

What type of security problems are mitigated by this .NET architecture?

Given the following physical layout for a .NET web application: DB (sql server, windows) - No public route (no table access, only stored procs) Web Service DAL (iis, windows) - No public route (can ...
0
votes
1answer
101 views

Should windows services be created with custom users, or should I use one of LocalSystem/LocalService/NetworkService

I'm asking the question in general for the average custom developed NT service or unix OSS daemon ported to windows with SCM support. However, at the moment my immediate concern is for mongodb. From ...
0
votes
1answer
49 views

What is the difference between setting permissions with these two methods?

Method 1: Via apache2.conf (or httpd.conf): <Directory "/var/www/html"> Options Indexes FollowSymLinks -MultiViews AllowOverrides None Order allow,deny Allow from all </Directory> ...
0
votes
4answers
1k views

Thoughts on MPM-ITK?

I have several sites on my server set up as virtual hosts. What are your thoughts on MPM-ITK? Are the tradeoffs and the potential root exploit vulnerability worth the security of internal system ...
0
votes
3answers
170 views

Apache Request IP Based Security

I run an Apache server on my home system that I've made available over the internet as I'm not always at my home system. Naturally I don't want all my home server files public, so until now I've ...
0
votes
2answers
703 views

win2008 r2 IIS7.5 - setting up a custom user for an application pool, and trust issues

Scenario: blank win2008 r2 install the goal was to have a couple of sites running with isolated pool and dedicated users A new folder for a new website - c:\web\siteA\wwwroot, with the app (asp.net) ...
0
votes
3answers
64 views

Does apache/PHP has overflow problem if the developer doesn't tweak it at all?

Is apache/PHP self secured so that developers don't need to care about it?
0
votes
3answers
577 views

How to avoid apache2 revealing hidden directory and/or file structure

When someone fetches a denied URL that exists, he gets: Forbidden You don't have permission to access /admin/admin.php on this server. Apache/2.2.8 (Ubuntu) PHP/5.2.4-2ubuntu5.9 with Suhosin-Patch ...
0
votes
1answer
100 views

Junos custom-attack signature pattern syntax

I am stuck at a point with the configuration of a custom-attack signature in Junos. According to the Junos Custom Attack Definition documentation page, I can set up a custom attack based upon a ...
0
votes
3answers
1k views

Deny directory browsing in a Proftpd / Ubuntu Installation

I used this guide to set up a Proftpd installation an Ubuntu 8.04 server... Works well, but the generic user ( userftp ) can run ls and is able to change to any Directory and browse freely on the ...
0
votes
4answers
145 views

Collect private information online and store on intranet?

I have to collect private info and store it. What I'd like to do is collect the info and have it get stored on an intranet server. The data collected is for user in the United States, and would be ...
0
votes
1answer
922 views

copSHH how to restrict user from going back from there main root

I have installed SFTP on a windows servers using copSSH and all is good and it works well however you can go back from the main root. For example when i use C:\copSSH\home{username} as that user i ...
0
votes
6answers
524 views

How to make sure my apache config is secure?

How can i make sure that my apache config is secure? i mean against attacks and so on...
0
votes
2answers
618 views

Securing access through specific ports on public IP address

We have public IP address hosted on FreeBSD router. We have also a lot of service running inside our LAN network, some of our services need to be accessible outside our home network trough public IP ...