Security is not a product, but a process.

learn more… | top users | synonyms (2)

0
votes
2answers
89 views

Locking netfilter in linux

A few years ago when I was reading something about linux server security (maybe it was a book) I encountered a command or an application that prevented the netfilter (iptables) rules from being ...
0
votes
1answer
136 views

How can I secure CISCO Radius?

Cisco offers a WLAN system that allows admins to restrict WiFi access to authenticated users. However, the following statement bothers me: Use the secure https://1.1.1.1/login.html. .... ...
0
votes
4answers
840 views

Share permissions when accessed locally via UNC

I have a w2k3 server (terminal server) and a domain user. If the user accesses "\\TS\Folder" from another computer, that user can read\write without any problem. If I login to "TS" as the user, they ...
0
votes
1answer
729 views

Wireless guest access with HP ProCurve 420

We have a HP ProCurve 420 wireless access point hooked up to our LAN, which then connects to the internet though a gateway router. Is it possible to set up a guest SSID, which can access the internet ...
0
votes
1answer
611 views

Can't reset user account password in AD due to Policy's restriction

I am deep *** right now and I need your precious help! Yesterday, I change a user account password in AD (Srv2003). The password was 4 letters, no caps, no numbers. It was set to never expires and ...
0
votes
3answers
3k views

Security Tab missing on internet explorer

I have a windows 2003 SBS domain, which I administrate to the best of my limited abilities. I need to install an active X-control for which I must change settings in internet explorer. It surfaced ...
0
votes
2answers
495 views

ssh failed logins /var/log/btmp

On a VPS where I host some blogs /var/log/btmp file is fairly old - but is at 6.2 gigs. I assume this means a lot of failed login attempts? Is this common over the course of a year ? Bots trying ...
0
votes
2answers
331 views

Can dom0 access disks on domU?

We are looking at deploying our application as a Xen image, to a hosting company that we aren't 100% sure about yet. Can they access random data on our virtual hard drive(s)? This page says no: ...
0
votes
3answers
2k views

Problems installing Symantec AntiVirus Corporate Edition 10.2 for Windows Vista

I'm having some problems installing Symantec AntiVirus Corporate Edition 10.2 for Windows Vista. My client requires this exact version. The system on which I'm installing the software is recently ...
0
votes
1answer
531 views

Windows Vista, Win7 ASLR in Kernel land

Is ASLR also implemented for kernel land address space addresses? if yes, since which version of microsoft windows exactly? Thanks for your time.
0
votes
6answers
210 views

Suggestions to improve e-mail security

I work for a lawyer company which has a lot of extremely sensitive data. I would like to step up a notch on security. Especially when it comes to e-mail. So I'd like a lot of recommendations, ...
0
votes
6answers
462 views

Sidewinder Firewall Replacement/Alternative

We own a Sidewinder G2 110D (out-of-stock) and love it. The product was reasonably priced, support was great, and the device was rock-solid. Since McAffee bought out SecureComputing, they have ...
0
votes
4answers
2k views

Alternative to IBM WebSphere DataPower XML Security Gateway XS40

Is there any alternative to this IBM solution for a SOAP security gateway? Maybe open source software or hardware from other vendors?
0
votes
5answers
387 views

encryption support for database [closed]

I am looking for a way to secure my database! I currenctly have a sql server 2000 as my RDBMS, but we are happy to use/change to whatever product that supports proper security. By security I mean both ...
0
votes
2answers
2k views

Create a user with a specific SID?

I have a web server set up with a user 'apache' that has specific rights. I have copied the files over to another server using WinRAR to maintain the NTFS security streams. Now, on the new server I ...
0
votes
2answers
7k views

Why does my site use the IUSR account when configured for pass-through authentication?

I have an IIS7 website that is set to run in its own application pool. The application pool is configured as: Managed Pipeline Mode: Integrated Identity: I_siteuser (account is member of IIS_IUSRS) ...
0
votes
2answers
145 views

MySQL Development machine permissions

I'm administrating two servers who follow the model of development and production machines. The production machine is stripped bare-bone software which runs under restrictive set of rules and limited ...
0
votes
4answers
249 views

Windows 2008 unable to execute c'# powershell app. Retuning access exception

Does anybody know why I can't access the folder where my powershell scripts are in windows 2008 Ent. When I try to create a script with textpad it craps out. When I try and execute a c# powershell ...
0
votes
2answers
1k views

How can one perform TCP hijacking?

I am developing with an ASP.NET application that uses Windows Authentication. I have setup the web.config file to deny all unauthenticated users, and only allow users from a certain role. Using ...
0
votes
3answers
2k views

Outlook 2003 Profile needs to prompt for password

In outlook 2003 running on windows xp multiple profiles have been added for tellers. So when outlook starts up its asks the tellers which profile they want to use. for all but one users it then ...
0
votes
3answers
2k views

How do I prevent IIS from serving a type of file?

I don't want to remove entries from MIME lists, I just want to tell IIS to stop serving files with a particular extension. Why is it so difficult to get IIS to do something so simple as stop serving ...
0
votes
3answers
2k views

Java cannot resolve DNS address from AIX: UnknownHostException

I'm having this strange error. On AIX, I can reach my server from the command line ( using ping / telnet ) But If I try using java I've got UnkownHostException This is because Java cannot somehow ...
0
votes
2answers
258 views

Secure way to monitor and restart services that require password

Sometimes when the power goes out and the UPS dies before it goes back on, some services on our servers don't come back up. Namely some VMware virtual machines. I was thinking of setting up a ...
0
votes
3answers
886 views

Using a Security Group to Manage MS SQL 2005

I want to add an AD security group to my MS SQL 2005, which will contain the personal allowed to fully manage all aspects of the server. I have created the group (DOMAIN\SQL Admins) and added it to ...
0
votes
1answer
1k views

sshd_config GatewayPorts

Is there any reason why I shouldn't set GatewayPorts yes in my sshd_config file if the hosts are only going to be internal to the network?
0
votes
1answer
149 views

Windows Admin can not change the time

On my work laptop I have a local admin account that is in both the administrator group and the backup operators group. This the account cannot install windows updates or change the time. I've asked ...
0
votes
1answer
10 views

Obtain an offline image of an Xserve disk

We have an Intel Xserve with Mac OS X 10.4. It seems to have been infected by a virus. We want to obtain the disk image without booting into the OS. Preferably, we would want to boot via a USB disk ...
0
votes
2answers
57 views

SecAst: Failing to Ban IP ''

To Generation D: This was the setup at time this issue was observed: secast-1.0.1.0-x86_64-ub12 on Ubuntu 12.04.4 Server LTS with Asterisk 11.10.2. The following events were captured and observed in ...
0
votes
1answer
27 views

SecAst: Premature Exit in Daemon Mode

To Generation D: This is a new problem with build secast-1.0.4.0-x86_64-ub12 that didn't happen with the previous build, secast-1.0.1.0-x86_64-ub12. When secast is run as a service (service secast ...
0
votes
1answer
15 views

Fixing Apache Struts XSS vulnerability

A recent network scan revealed the following vulnerability: Apache Struts s:a / s:url Tag href Element XSS. Here is a link with more info about this vulnerability: http://osvdb.org/show/osvdb/54122 I ...
0
votes
1answer
42 views

Computers in-scope for PCI DSS [closed]

I am trying to determine what servers & workstations, etc. that are in-scope for PCI compliance. PCI DSS SAQ-D states that any devices that "store, process or transmit cardholder data" are in ...
0
votes
2answers
74 views

Protecting my Bind dns server from slow kaminsky-style cache poisoning attacks

Dan Kaminsky described how DNS servers could be poisoned with spoofed DNS responses [1]. As I understand it, the problem was that Kaminsky found a way to account for most other sources of randomness ...
0
votes
2answers
52 views

Blocking geographic cities from accessing Asterisk using Secast

I am using Secast (www.generationd.com) for intrusion protection on my Asterisk PBX. It’s working great, and I now want to start blocking specific geographic regions. My system is getting hammered ...
0
votes
1answer
69 views

IIS Webserver hosting intranet and public sites in DMZ

We have a webserver (VM) hosting several sites. One of the applications has a part intranet and a part public. (archiving/docflow = intranet, customer invoices = public) This webserver is currently ...
0
votes
2answers
29 views

If a web root directory has a simlink that points to a folder one-level up, does that pose a security risk?

Assuming a Linux/Unix system. Not asking about any particular server software, just wondering in general. I want to use this to include javascript libraries or things like that in multiple sites or ...
0
votes
1answer
50 views

How to autoban IPs that request URLs with a .php extension?

I've noticed in my linux/apache server logs that bot computers running muieblackcat are periodically trying to access all forms of phpmyadmin.php on my server. It's interesting, because I have a ...
0
votes
1answer
27 views

Linux package management and security flaws

Is there a mechanism built into rpm or apt that will warn (or prevent) a user from installing a package contains a known security threat? I'm thinking of an RPM like ...
0
votes
1answer
238 views

SSL on AWS? Cert installed but still having issues

We bought an SSL certificate (From Comodo) and when I visit the page in Chrome I see the green padlock and it has the following information: Your connection to ...... is encrypted with 128-bit ...
0
votes
1answer
77 views

Lean but effective linux IDS / IPS / WAF? [closed]

I'm looking for a lean but effective IDS/IDP/WAF solution for my tiny VPS webserver. Currently I already use iptables and psad but a lot of the web server scanning attempts slip through. I use ngingx ...
0
votes
2answers
36 views

Security Help? Is this a safe way of doing things?

I am running Apache with Debian. At the moment to share my site I am just setting up my router to foward my local ip on port 80. So anyone who wanted to look at my site can just type in my router's ...
0
votes
1answer
31 views

In apache how do you validate that the logged in username matches the directory name?

Sometimes you want to setup a directory structure in apache such that logged in users can only see their own directory. (i.e. the directory name and the username match.) What do you put in the ...
0
votes
1answer
51 views

DDoS Attack Mitigation Techniques [duplicate]

Our hosting is set up on Amazon EC2 servers, which have been performing great. The problem we run into are spikes in requests for invalid URLs from scripts/bots looking for security holes. When ...
0
votes
1answer
70 views

Configure Apache to allow the access for the specific URL under VPN [closed]

Here is the case, I want to configure the Apache server so that some of the URLs can be accessed under VPN and some of them should be accessible with/without VPN. Here is my scenario Without VPN ...
0
votes
1answer
48 views

Changing file permissions on web server to follow Least Privilege Security Principle: chmod 750 -R /

I'm not sure what details are relevant, but here is some general context. I'm configuring a Ubuntu 12.04 web server on AWS to process customer payment info before redirecting them to a hosted ...
0
votes
1answer
47 views

Is a VPN right for restricting server access?

I would like to set up a Few QA servers for a web application, under the app domain, however I would not like these servers to be accessible to just everyone from the Internet. Ideally, the QA team ...
0
votes
1answer
39 views

removing process (and child process) access to file systems? [closed]

is there a unix-type free OS that allows me to remove all disk access for a specific process and any of its children? #!/usr/bin/perl -w use strict; use Perl6::Slurp; my $infile= ...
0
votes
2answers
77 views

Control IP to access a server , which use iptables

I would like to use linux command iptables to control to only allow the same subnet IP to access a server , what I would like to do is to allow any services from 10.168.1.0 to this server , could ...
0
votes
1answer
121 views

Whitelisting valid URL patterns on a NGINX webserver

I want to whitelist only valid URL-patterns on our RESTful webserver / API, using regexs or something. But when googling for some examples I get a little bit suspicious since there is not much ...
0
votes
1answer
244 views

Why is OpenVZ less secure than KVM and XEN [closed]

I've read many forums and blogs and articles comparing OpenVZ, KVM and XEN. And I have seen many times that one of the negatives of OpenVZ is that its less secure. However, I have yet to see an ...
0
votes
1answer
52 views

Mount a Symlink Directory to Document Root for Deployment

Trying to establish a secure multiuser environment with limited user permissions and automated deployment. The example has been made simple to express the idea. Docroot: ...