Security is not a product, but a process.

learn more… | top users | synonyms (2)

0
votes
3answers
141 views

Google webcache: information leakage despite requirement of login

Been searching like crazy for hours. What happened: While googling my site to check for certain keywords, I used their site preview function (where you get that little popup with an image ...
0
votes
2answers
220 views

Windows server security setup (firewalls, SQL server and other points)

Firstly apologies for this being a non-specific question, I'm not really sure where to look for specifics so this is a general discussion of regular issues I'm faced with. I'm going round in circles ...
0
votes
2answers
98 views

HTTP request hijkacked?

I've installed Tomcat 6 on my first, new VPS. I had added AccessLogValve to server.xml configuration Tomcat file. In tomcat log I saw first this: xxx.xxx.xxx.xxx - - [04/Mar/2011:23:43:12 +0000] "GET ...
0
votes
2answers
337 views

Run as Admin - without being local admin?

Is there any way, on Windows 7, to let users have the "Run as Administrator" option available without giving them full local admin rights? It will grant them the same level of access to the machine, ...
0
votes
2answers
404 views

Block access to every file in the site but index.htm in Nginx

I have a site with just one file: index.htm which have some ajax linked to php files. I'd like to make those php files only accessible via ajax (post and get) coming from this index file and block ...
0
votes
2answers
1k views

How to secure a group of Amazon EC2 instances

I have several Amazon EC2 instances running Ubuntu 10.04 and I've recently started using Amazon's Route 53 as my DNS. The purpose of doing that was to allow the instances to refer to each other by ...
0
votes
1answer
764 views

Report Server: login failed to master database

I noticed from the SQL Server log that every time server restarts (I'm using SQL Server 2008 developer edition) I get an error message into log: Login failed for user 'machine\sqlaccount'. Reason: ...
0
votes
2answers
91 views

Where ACLs are applied

I am trying to understand ACLs and am unsure of where they are applied. Here's my example. I am trying to prevent communication between two VLAN interfaces. My source clients are on VLAN 1, my ...
0
votes
2answers
70 views

Getting started with a blacklist

I blacklisted "213.5.64.179" and wonder if you can recommend how to proceed? Should I do this on an ad-hoc basis just following the instructions and blacklist bad hosts as we go along or take ...
0
votes
3answers
131 views

Prevent acccess to the C drive

Is it possible to prevent regular users from accessing the C drive via Windows Explorer? they should be allowed to execute certain programs. This is to ensure that employees cannot steal or copy out ...
0
votes
2answers
2k views

Best client and server antivirus for 5 user office? [closed]

I'm setting up an Active Directory environment for 5 users (very small) and I'm wondering what is the best antivirus for clients (Windows 7) and servers (Server 2008 R2 x64)? I use Symantec Corp at ...
0
votes
1answer
779 views

A non interactive alternative to makecert

I have a need to create a self signed certificate non interactively. Unfortunately, the only tool that I know of (makecert) is interactive - it uses GUI to ask for a password. My OS is Windows (from ...
0
votes
1answer
150 views

Script to get the Email Alerts for RDP Session

Is there any script to get the Email Alerts when someone logs into the server so that I can increase server security by getting the Email alerts. Any help would be appreciated
0
votes
2answers
335 views

Strange Items in Hosts File and Netstat

I ran a netstat -a on a computer and there were a number of strange items: Proto Local Address Foreign Address State TCP netgym:epmap virusin:0 LISTENING ...
0
votes
1answer
541 views

CISCO: ARP Poisoning Countermeasures

How can I prevent the Cisco Catalysts 2950/2960/3550/3750 from being vulnerable to ARP Poisoning? Can this be avoided with the ARP INSPECTION? Thanks
0
votes
2answers
383 views

Website needs to only be accessible from two specific iPad's and no other devices or IP's (PHP)

The business I work for has a website for employees to clock in and out of their work shifts. This website needs to be only accessible from our two in-house iPads. I tried doing a simple .htaccess ...
0
votes
2answers
181 views

.htaccess regular expressions for optimal performance?

In my .htaccess file I'm trying to block some bots using: RewriteCond %{HTTP_USER_AGENT} ^badbot [NC] But, I want to change these conditions to something more inclusive like: Method #1: ...
0
votes
4answers
2k views

monitoring outbound traffic on port 25

I just started up a new instance that i build using debian squeeze on amazon last night. This morning I just got an email saying that I reached a limit on the volume of email you were able to send ...
0
votes
1answer
340 views

How secure exactly is RDP

I have a few Windows machines I need to open up, but I was wondering: how secure is RDP? I already found documents like this explaining how to improve security, so obviously it is not very secure by ...
0
votes
3answers
3k views

Disable audit of Logon Logoff

I have a SBS 08 with 50 users on my domain. In Event Viewer : Windows Logs > Security, I've got nearly 300,000 events about EventID 4624 Logon, 4634 Logoff, 4776 Credential Validation, 4769 Kerberos ...
0
votes
2answers
66 views

images security

How I can check all my images on server, they don't prepared with maulicious code ? I mean for example Gif PHP exploits and so on...
0
votes
2answers
93 views

got my dedictaed server and my plesk, what are the first things i should do?

i just got my linux dedicated server and running in plesk, coz im new to this, i was wondering before i start uploading and developing my app, what should one do, for example security checks, ...
0
votes
2answers
341 views

HOw to know if files md5 chnaged by virus or system itself centos

I installed OSSSEC to very files have chnaged or not. But sometimes it is giving me false waring and integrity checksums like following files have chnaged. How can i makesure that files are chnaged ...
0
votes
1answer
2k views

How to configure password maximum days before it expires?

I want to set Maximum days of a password can be used. So I configure PASS_MAX_DAYS in /etc/login.defs, and PASS_WARN_AGE to warn user before the password expired. In my example, I set PASS_MAX_DAYS = ...
0
votes
1answer
713 views

VMWare virtual switch isolation

Imagine you need several Virtual Machine onto your ESX server. The VMs are composed of two distinct group and those group can only communicate to each others over a physical firewall. Now, what make ...
0
votes
3answers
116 views

Securing Apache directories allowing access only through links on the server

I have an HTML page (on a server running Apache) that basically contains a bunch of links (link menu) to other HTML/PHP pages in VirtualDirectories on the same server. Is there a way to only allow ...
0
votes
1answer
172 views

Securing a “one purpose” server

I don't know much about securing a server. I've heard of iptables, but I've never used it (maybe that's not what I need?). So right now my goal is to have a main webserver, and a separate database ...
0
votes
3answers
122 views

Disallowing user right to edit various settings

I'm going to be installing windows 2008 server R2 and running desktop applications (MS Office, Autocad) for novice users (3). I want to disallow following things ability to change outlook, firefox ...
0
votes
1answer
620 views

hosts.deny not working

Currently I am watching the live auth.log and someone is continuously trying the brute force attack for 10 hours. Its my local server so no need to worry but I want to test. I have installed ...
0
votes
2answers
685 views

why should I chmod 511 /usr/local/apache/bin/httpd?

I'm using Ubuntu 10.04 and installed apache2 HTTP server. On the security page @ apache.org documentation they recommend to change the permissions on the file /usr/local/apache/bin/httpd to 511, but I ...
0
votes
2answers
226 views

Vista cmd.exe fails to run if users and/or auditors group not present

In the current environment there exists a policy where files within %system32% are only allowed to be owned by System and Administrators. An issue has arisen where after converting these ...
0
votes
1answer
202 views

How can I limit a site's access to LAN users only in IIS 5.1?

I want to limit a site's access to connections from the LAN only. How can I do this? When I go to the Directory Security tab of the website, it looks like I need to use IP address and domain name ...
0
votes
3answers
1k views

Firewalls that block RDP over port 443

I need people to reach my servers over SSH and RDP. Both ports are blocked outbound at many companies, especially the large ones. However, I also suspect that in 90% of companies there is nothing to ...
0
votes
3answers
530 views

How to secure LDAP

Not sure if this belongs more on serverfault or not... BACKGROUND: I am using openldap, and pam/nss/ldap for authentiction on my server (webmail, etc). My files, which work fine: ...
0
votes
1answer
130 views

Is it illegal to modify a cookie to become a chat admin? [closed]

I doubt it is, but I found a site where you can modify a cookie to become admin, is this legally okay? Thanks
0
votes
2answers
344 views

Web server hardware firewall recommendations [closed]

I'm looking for a specific hardware firewall model solutions that best accommodate the following concerns [Cisco models are best, because our colo can get good deals on them reconditioned]: There ...
0
votes
4answers
151 views

Is there a way to secure my server and give 10 untrusted persion my ssh access

Okay here is the situation, I bought a hosting server that gives me version control and ssh access. I'm working on a big project that needs team work so I need at least 10 person around the globe to ...
0
votes
3answers
229 views

Does a 1 year break in career hinders the chance of new job IT job

I have 3 years experience as web developer as small Linux /window server networking. I had to go to overseas (home country) for some reason for about 1 year. I was thinking of doing some ...
0
votes
1answer
88 views

Symantec End Point Protection

We are planning a mass rollout of Symantec Endpoint protection. We currently have Symantec antivirus version 10 running on the systems. From testing the roll out works fine but it does not take affect ...
0
votes
3answers
343 views

secure data transport between web server and database server

I asked this question in stackoverflow and it was suggested to try here so here goes... I'm planning on provisioning a web server and database server in a server farm environment. They will be in the ...
0
votes
1answer
132 views

What type of security problems are mitigated by this .NET architecture?

Given the following physical layout for a .NET web application: DB (sql server, windows) - No public route (no table access, only stored procs) Web Service DAL (iis, windows) - No public route (can ...
0
votes
1answer
102 views

Should windows services be created with custom users, or should I use one of LocalSystem/LocalService/NetworkService

I'm asking the question in general for the average custom developed NT service or unix OSS daemon ported to windows with SCM support. However, at the moment my immediate concern is for mongodb. From ...
0
votes
1answer
51 views

What is the difference between setting permissions with these two methods?

Method 1: Via apache2.conf (or httpd.conf): <Directory "/var/www/html"> Options Indexes FollowSymLinks -MultiViews AllowOverrides None Order allow,deny Allow from all </Directory> ...
0
votes
4answers
1k views

Thoughts on MPM-ITK?

I have several sites on my server set up as virtual hosts. What are your thoughts on MPM-ITK? Are the tradeoffs and the potential root exploit vulnerability worth the security of internal system ...
0
votes
3answers
171 views

Apache Request IP Based Security

I run an Apache server on my home system that I've made available over the internet as I'm not always at my home system. Naturally I don't want all my home server files public, so until now I've ...
0
votes
2answers
719 views

win2008 r2 IIS7.5 - setting up a custom user for an application pool, and trust issues

Scenario: blank win2008 r2 install the goal was to have a couple of sites running with isolated pool and dedicated users A new folder for a new website - c:\web\siteA\wwwroot, with the app (asp.net) ...
0
votes
3answers
64 views

Does apache/PHP has overflow problem if the developer doesn't tweak it at all?

Is apache/PHP self secured so that developers don't need to care about it?
0
votes
3answers
594 views

How to avoid apache2 revealing hidden directory and/or file structure

When someone fetches a denied URL that exists, he gets: Forbidden You don't have permission to access /admin/admin.php on this server. Apache/2.2.8 (Ubuntu) PHP/5.2.4-2ubuntu5.9 with Suhosin-Patch ...
0
votes
1answer
103 views

Junos custom-attack signature pattern syntax

I am stuck at a point with the configuration of a custom-attack signature in Junos. According to the Junos Custom Attack Definition documentation page, I can set up a custom attack based upon a ...
0
votes
3answers
1k views

Deny directory browsing in a Proftpd / Ubuntu Installation

I used this guide to set up a Proftpd installation an Ubuntu 8.04 server... Works well, but the generic user ( userftp ) can run ls and is able to change to any Directory and browse freely on the ...