Security is not a product, but a process.
0
votes
1answer
830 views
CVE-2011-3389 from a PCI Scan on a LiteSpeed Web Server on cPanel [closed]
So we had a scan kick back with CVE-2011-3389 today and our SSL Cipher Suite is as such:
ALL:!ADH:RC4+RSA:+HIGH:-MEDIUM:-LOW:-SSLv2:-EXP:!kEDH
And it's still kicking back with the same complaint:
...
0
votes
1answer
207 views
SQL Server NETWORK SERVICE account permissions
My SQL Server Windows service is set to use the NETWORK SERVICE account.
The server is installed to C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL.
However looking at the ...
0
votes
1answer
130 views
Advice on PHP version to install 5.3 (hardened) or 5.4 (latest) [closed]
I am setting up a VPS, and was wondering what version would be best to install onto it.
If I go with 5.3 I can choose suhosin hardening, but 5.4 would have to be the standard install.
What would ...
0
votes
0answers
115 views
Why is Reverse Proxy Needed for Lync 2010?
I'm setting up a lab for Lync Server 2010. I can't wrap my head around the idea of using a reverse proxy when, to me, it looks the same as using a firewall and configuring PAT to communicate with the ...
0
votes
1answer
74 views
Making directories visible only by owners
I am in the process of creating a secured shared hosting and, between the hosting features, I want to give SSH access.
I've already chrooted the users via SSH, FTP and PHP (using PHP-FPM), and would ...
0
votes
0answers
105 views
Can ssh-keygen be seeded to generate the same key?
Is it possible to seed ssh-keygen with a fixed string so that it consistently generates the same keypair?
0
votes
0answers
126 views
Is the Security Configuration Wizard Recommended For Use in Server 2008(R2)?
Microsoft has released an updated article regarding the use of security configuration templates in Windows Vista / 2008 and later:
http://support.microsoft.com/kb/313222
In this article, it states:
...
0
votes
1answer
168 views
Apache2 ssl with ecc
Is it possible to configure Apache2 to use elliptic curve crypto (ecc) with SSL? This bug https://issues.apache.org/bugzilla/show_bug.cgi?id=40132 appears (to me) to indicate that this is supported, ...
0
votes
2answers
47 views
Can not create a linked server between SQL Server 2008 on a desktop and my laptop
I'm having an issue getting the linked server to connect between a desktop and my laptop. Both have SQL server 2008 and the link is coming from the desktop to my laptop. Also, both computers have ...
0
votes
1answer
51 views
Is it secure to use apache mod_mono with more virtualhosts?
I am using apache2 with mod_php and mpm_itk_module to run every virtualhost under its user. Now I am looking at mono (mod_mono) and I am not sure, if it is secure to run mono as only one process, whom ...
0
votes
0answers
370 views
What permissions are required to copy folders with security attached on a NAS
What permissions does a user require to copy folders and the folders permissions from one mapped drive to another using explorer?
Our office has a large NAS with a number of shares. These shares are ...
0
votes
1answer
76 views
Is there a way to limit the number of connection made by an IP address to my Windows Server?
Is there a way to limit the number of connection made by an IP address to my Windows Server?
I'm trying to restrict the number of connections used by a single IP address on my server
0
votes
1answer
131 views
Http server security analyser and sanitizer proxy
I'm looking for software that will monitor all https request coming through our proxy server.
We currently use nginx that proxies to our application servers.
Ideally, the solution will sit between ...
0
votes
1answer
175 views
perl application won't start in apache when running as a service
I have installed Netdisco, which is a perl based network discovery tool
When I run httpd from a terminal prompt as root, it works fine.
When I try and start Apache as a service (service httpd ...
0
votes
0answers
613 views
EC2 instance always ask me to enter passphrase for the pem during connection
The pem file is generated by AWS console
I was able to connect using the EC2 remote web interface, using the same pem file
The permission of pem is 600 already
Error..
ssh -i ~/test.pem -v ...
0
votes
3answers
54 views
Wildcard SSL certificate for a domain that may already have other certificates setup - any issues with that?
I'm thinking installing a wildcard cert for a site we are migrating from another company's server to our server.
The domain has many other subdomains, and I'm guessing some of them of single domain ...
0
votes
1answer
114 views
What prevents banks from creating money in their database? [closed]
I was wondering: If banks store all the account balances in a database, what keeps them from going into said database and "creating" money by changing the data (Replacing 10 000 $ with 100 000 $ is ...
0
votes
1answer
118 views
Linking RSA with Logstash etc
I was wondering whether we can use logstash or any other open source or free log management tool to collect and index the data and then feed this index into RSA envision or any other enterprise SIEM ...
0
votes
0answers
134 views
Windows Server 2008 R2 Security Log repeated Audit Failure Entries
We seem to be getting a huge load of entries in our security log with the following details:
The Windows Filtering Platform has blocked a connection.
The source IP address and port change for each ...
0
votes
1answer
158 views
Minimum access required for Visual Studio 2010 on SharePoint
Hi we are trying to set up a SharePoint development environment for multiple developers on Windows 2008 server, we do not want to give the developers admin rights to the servers.
Does anyone know ...
0
votes
1answer
314 views
Nginx security schema with multiple users, virtual hosts and FCGI PHP
I want to configure nginx as follows:
There are several registered users on the server.
Every user may own several virtual hosts (they cannot configure them) of two different types: nodejs proxy or ...
0
votes
1answer
293 views
Iptables recent module
iptables -A INPUT -p udp -m state --state NEW -m recent --set --name
alimit --rsource
iptables -A INPUT -p udp -m state --state NEW -m ...
0
votes
1answer
1k views
Fortigate 40c Firewall Configuration
Does anybody know if is it possible to Un-bridge ports on forgiate 40c?
I want to use the fortigate 40c to define and control (block/allow) port traffic for the following 4 ip ranges (each ip range ...
0
votes
1answer
2k views
Fortigate Firewall - DMZ vs Interface ports
I'm considering buying a Fortigate 50b (or Fortigate 60b) firewall to separate my web (iis) machine from the DB machine. (See http://www.fortinet.com/doc/FGT50_100DS.pdf)
Till now the two servers ...
0
votes
1answer
942 views
Use SECEDIT to export “Security Options” from one computer and import on another
Can I use secedit.exe to export out the "Security Options" from the local security policy and then import them on another machine?
I'm trying to do this on Windows Server 2008.
Update
I just tried ...
0
votes
1answer
565 views
PureFTPd : How to have user isolation?
I've installed pureFTPd, with a mysql database on a debian distribution. I used the following tutorial.
But now if I'm logging, I see that I'm in the /Data/www/MyUserDirectory. AND I can browse to /.
...
0
votes
2answers
142 views
Reflect SVN server to /var/www/ directory & 2 other questions
Question 1:
I'm setting up a SVN server on for development, how do I serve the files from the /var/www/ which is my root of my website which I'd like to manage the files via SVN that would reflect ...
0
votes
1answer
148 views
MySQL: Load_file - list files [closed]
Is it possible to list files with MySQL's Load_file()? Is there any meta file that would contain the file names or so? Thanks
0
votes
1answer
59 views
Connecting to a server inside a DMZ
in this scenario
[ net2 / 10.0.1.1 ] ---- [ net1 / 10.0.0.1 ] --- ( Internet )
| |
< pc2 > < ...
0
votes
3answers
2k views
Windows Server 2003 W3SVC Failing, Brute Force attack possibly the cause
This week my website has disappeared twice for no apparent reason. I logged onto my server (Windows Server 2003 Service Pack 2) and restarted the World Web Publishing service, website still down. I ...
0
votes
2answers
58 views
Securing a directory using htaccess but with different levels of access
I am trying to secure a directory by IP address. I need to access the directory from my ip address (through the browser) and no one else. But I also need to access it via cron (cli). I also have ...
0
votes
1answer
736 views
Exchange 2010 OWA with Client Certificates
I have enabled Client Certificate Authentication for Exchange 2010 through IIS7 and the users are prompted to choose their User Certificate when they log in, but they are all then presented with the ...
0
votes
1answer
240 views
Setting up FileZilla to only listen for a certain domain
Somebody had been trying to brute force my FTP server with a username the doesn't even exist, but it got me thinking I should upgrade my security. It would be impractical to filter by IP as the places ...
0
votes
0answers
392 views
How do I check my Linux kernel against root exploits?
I keept hearing about Linux root exploits lately and I'm beginning to become worried. Ever since Linux switched away from the stable-unstable versioning scheme, distributions began to adopt a wide ...
0
votes
1answer
199 views
SSIS package hangs on Setting Source Connection
I have an SSIS package that has been executing successfully for the last 7 years.
All of a sudden the package won't run and hangs at the Setting Source Connection step and has to be closed down via ...
0
votes
1answer
530 views
Nginx : Proper use of limit_req_zone and limit_req
I have 2 website running on VPS.
Their purpose is sharing music files and publishing news. Both of them use wordpress.
What I am trying is that I want to prevent little hackers from flooding the ...
0
votes
2answers
156 views
my share hosting has disabled all socket functions
I have hosted my website with squarebrothers.com
They have disabled curl_exec, fsockopen, socket_create functions.
They say that these are security vulnerabilities and they have blocked.
And they ...
0
votes
1answer
104 views
Event Logs for Remote Share BruteForce
This command is used to access remote shares.
net use \10.31.247.2\share /user:admin password
Is there any way to detect(EventLogs/other tools) if someone is trying to BruteForce into a remote ...
0
votes
1answer
33 views
Apache security [duplicate]
Possible Duplicate:
Apache security
I've been reading up on server/apache security and I've run into a contradiction. I read that you shouldn't serve any files that aren't inside Apache's ...
0
votes
0answers
62 views
Adobe PDF Reader IE Plugins blocks some url
The client opens a pdf file on the corporate web page through the adobe pdf IE plugin to access a video tutorial file whose url resembles like this
mms://the/path/of/video/file.mwv
however, when ...
0
votes
0answers
272 views
Where can I find information about inbuilt registry keys for Windows Server 2008 R2?
Is there a resource for looking up the description and/or usage of W2K8 R2 registry keys?
I need to understand integrity checksum change messages appearing in OSSEC logs on Amazon EC2 instances.
...
0
votes
1answer
358 views
Setting vsftpd to allow me uploading to /var/www, got 500 OOPS: cannot change directory:/root
I'm using an Amazon EC2 istance as developer and testing machine. Since i'm on windows i can't mount the virtual EBS volume for editing purposes. Too bad.
For this reason i've installed and ...
0
votes
1answer
306 views
How to configure IIS 7.5 to host multiple websites with the correct F/S permissions
So, heres my scenario:
Dedicated server running Windows 2008 R2
IIS 7.5
Multiple sites using PHP / .NET 4 / Perl / Python
Need to do:
Ensure that the sites are not able to write/create/read ...
0
votes
1answer
51 views
Directory directive for directory outside doc root - best practice
I have a virtual host which has access to a directory outside of its document root. In the config for this host I specify the directory directive to allow access to this directory.
<Directory ...
0
votes
1answer
175 views
IIS 7, ASP.NET security nightmares
For no apparent reason that I know of, my ASP.NET website on my local development server (IIS 7) started returning Error Code 500 - Internal server error.
After granting the user "Users ...
0
votes
1answer
66 views
How does Dreamhost Restrict User Accounts?
Browsing around my shared hosting account on Dreamhost, I noticed that I could not create users if the name is already taken. I can cd /home/username if I created the username, but I can't cd ...
0
votes
1answer
585 views
How to enable connection security for WMI firewall rules when using VAMT 2.0?
I want to use VAMT 2.0 to install product keys and active software in remote machines. Everything works fine as long as the ASync-In, DCOM-In, and WMI-In Windows Firewall rules are enabled and the ...
0
votes
2answers
552 views
How to secure svn+ssh checkout users?
All our SVN repositories are hosted on a dedicated machine on which all the developers have access. Every now and then we need to checkout a repository on a machine we don't own or operate ourselves. ...
0
votes
2answers
42 views
How do shared hosting servers keep executing code from crossing accounts?
I am kind of curious, how does a hosting server support multiple users with php but keep each user away from the other code?
The 'easy' solution i thought were file permissions. So every user can have ...
0
votes
1answer
87 views
Blocking an IP range on Windows server 2008
How to define a rule in Windows server 2008 firewall to be applied to an IP range. For example blocking IPs which start with 202 I mean all IPs which meet 202...*
There are two options when creating ...
