Security is not a product, but a process.

learn more… | top users | synonyms (1)

1
vote
1answer
250 views

How do I configure a server to stop blocking unzipped files

I have an application running on Windows2008 server. The automated deployment process drops a zipped package onto a folder, and then another script unzips this and copies the executables. The problem ...
1
vote
1answer
122 views

secure L2 connection

Due to some rapid changes I need to also provide vlan(s) in a new location. The topology looks like this: (main location, vlans:id=6(workstations),id=8(phones)) | my_switch01 \ \ ...
1
vote
1answer
926 views

Changing TCP/IP IPID sequence generation algorithm on Windows Server

a recent security review on a customers webserver yielded the following results: "[...] The system under test is using incremental ip ids. This means that every outgoing ip packet has an ...
1
vote
1answer
935 views

LSASS.exe trying to communicate over port 80

We are running a standalone web server (Windows 2008 + IIS 7), and our antivirus is blocking LSASS.exe (C:\Windows\system32\lsass.exe) from making outbound connections over port 80. Why is LSASS ...
1
vote
1answer
1k views

FTP virtual hosting proxy

I'm setting up OpenVZ to divide several of my sites from each other. I have one external ip address which I use to serve my sites. I'm using nginx to proxy http requests to nginx in each container ...
1
vote
0answers
569 views

VPN Error 619: Behind Cisco Router WRT310N

I've researched a lot on all the forums and this error is too generic for any of the proposed solutions to work. I'll try to give as much detail and tried solutions. I'm running a CentOS PPTP server ...
1
vote
1answer
1k views

Apache: disable directory listings

I'm using Apache 2.2. In the var/www directory I've created a .htaccess file that contains this: Options -indexes When I reach my site and want to see the directories and files like this: ...
1
vote
1answer
127 views

IIS and PHP restrict IO permissions

I have php installed trough a fastCGI module. Is there a way to restrict the module (php.exe) read / write permissions to only the directory (+ subdirs) of the IIS site that is calling it? I need ...
1
vote
1answer
271 views

Need advice in setting up server. fastCGI, suExec, speed, security, etc

I am running my own dedicated server with centOS 5 and WHM/cPanel. I would like to configure my server to meet my needs but I need a little help. It will only be my own websites being run on this ...
1
vote
1answer
133 views

How do I apply a security baseline to 2008 R2?

I've setup a Windows 2008 R2 server with an Active Directory Domain Services role. I would like to apply the Specialized Security – Limited Functionality (SSLF) security baseline to it, but am unsure ...
1
vote
1answer
301 views

How to forbid postfix to send to external domains

I have a local postfix server, and i want it to only relay emails to the only local domain (localdomain.be): myhostname = localdomain.be mydomain = localdomain.be alias_maps = hash:/etc/aliases ...
1
vote
3answers
182 views

Securing HTTP traffic between data-logger and website, options

Got some IP data-loggers (that measure temp., humidity, light-level) sitting inside bunch of warehouses / stores with each warehouse / store being a different customer from my standpoint. These ...
1
vote
1answer
111 views

SQL Server 2008 Audit Service

I'm designing an application that will run on SQL Server 2008 R2. There's a requirement to audit any updates to a customer table. The new Audit service that was release as part of SQL Server 2008 ...
1
vote
1answer
1k views

File permissions on web server

I have just read this useful article on files permissions, and I am about to implement a as-strict-as-possible file permissions policy on our webserver. Our situation: we have a web server accessed ...
1
vote
1answer
120 views

Where I can get the SQL-Server 2005 C2 Audit Event List

I couldn't found the list of SQL-Server 2005 C2 Audit Events on google! Any suggestion?
1
vote
1answer
48 views

Securing access to a website on IIS

I've got a website running on IIS7.5. I want to ask for credentials (fixed user/password) on access to the website. I don't need to do anything with those credentials - just to make sure the user ...
1
vote
3answers
124 views

Virtual users on Solaris

Is it possible to recreate the functionality of pam_userdb.so to make an application authenticate virtual users (valid for one specific service only) on Solaris? Situation is: higher-ups have ...
1
vote
2answers
113 views

Protecting PHP packages on server

I am a php developer and have recently decided to make one of my Magento extensions commercial. I have downloaded and configured MageParts CEM Server and that is all working perfectly in regard to ...
1
vote
1answer
446 views

Exchange 2003 default permissions for ANONYMOUS LOGON and Everyone

ANONYMOUS LOGON and Everyone have the following top level permissions in our Exchange 2003 Server: Read Execute Read permissions List contents Read properties List objects Create public folder ...
1
vote
1answer
386 views

Apache and fastcgi - How to secure an Apache server with fastcgi enabled?

I am running a headless server on Ubuntu 10.x. I am running Apache 2.2. I am writing a fastcgi application for deployment on the server. I remember reading a while back (I could be wrong) that ...
1
vote
1answer
247 views

Apache2 Virtual Host Restrict to Localhost

So here's the deal. I have multiple virtual host. Each virtual is a separate domain. Each domain is for separate applications. Lets say I have virtual hosts for: http://.abc.com http://.def.com ...
1
vote
1answer
257 views

ESX Firewall Command Troubles

I am working on creating some firewall rules to stop some of the SSH brute-force attacks that we have seen recently on our ESX server hosts. I have tried the following rules from the CLI to first ...
1
vote
1answer
159 views

Searching for a lfd tutorial [closed]

I just got me a new centos server, and fould out it's running lfd. It looks nice, but I need to configure it. It keeps warning me about mysql running, or myself logging in via ssh, and so on. I ...
1
vote
1answer
179 views

Locking down a server for shared internet hosting

Basically I control several servers and I only host either static websites or scripts which I have designed, so I trust them up to a point. However, I have a few customers who want to start using ...
1
vote
2answers
318 views

Why would a php file return 404 while in the bin directory on IIS7?

I'm running IIS7 and I have fastCGI installed and php code works just fine normally. Today I added a php file that contained only code an no html to the bin directory. And when I try to access it via ...
1
vote
1answer
703 views

exploit.so dmesg errors

A server (which has since been pulled offline and is scheduled to be wiped) was compromised through ssh brute force. No root/su/sudo access was gained but I started observing these errors (pasted ...
1
vote
1answer
2k views

IIS 6.0 PCI Compliance - “Information Disclosure Vulnerability”

We're trying to pass PCI compliance on a few of our websites. After an outside scan, we still have this vulnerability: Synopsis : The remote web server is affected by an information disclosure ...
1
vote
1answer
604 views

PGP encryption key with split-knowledge and dual control

An auditor recommends: We recommend that PGP environment be re-keyed using the industry required (ISO x9.8 and x9.24) standards of “split-knowledge and dual control” Is there something that we're ...
1
vote
1answer
1k views

What is the default management state on Netscreen firewall interfaces?

in other words, is the command: unset interface ethernet1/1 ip manageable redundant? I was thinking that for security purposes, it would probably make sense for Netscreens to only enable management ...
1
vote
1answer
888 views

How can I monitor user access to a shared folder on Windows SBS 2008

I have multiple shared folders on Windows SBS 2008 server. I need to be able to tell if a domain user is accessing these shares and copying large quantities of files to their laptop. Is there a way of ...
1
vote
1answer
726 views

windows 2003 server security audit -logging computer IP

We have a network with 1 primary domain controller and 3 additional domain controllers. We're trying to identify a user who attempted to use someone else's credentials to access some resources in our ...
1
vote
0answers
61 views

how can I prevent system changes w/o Group Policy Object (GPO)?

I'm getting started with running a terminal server on a virtual private hosted site. The host operator disallows many security systems including access to the group policy editor (GPO). The problem ...
1
vote
2answers
5k views

How to use max_post_size and upload_max_filesize in an Apache <Location> directive?

My users want to upload large files (50-100MB) in the CMS backend of a PHP web application. I could adjust the upload_max_filesize and post_max_size settings for PHP globally in this virtual host, but ...
1
vote
1answer
104 views

NAP solutions for windows network

I am looking for a NAP solution for a network. Either an Appliance or software to run on a windows server. I have played with windows server 2008 r2 NAP but i dont think this is going to be a good ...
1
vote
2answers
834 views

What risks are associated with allowing anonymous access from the LAN to the internet?

I have a network of around 60 users who have access to the internet through ISA Server 2004 and a hardware firewall. As a matter of course I've always blocked anonymous requests to the outside world. ...
1
vote
1answer
165 views

closing ssh ControlPath

I found the instructions on kerneltrap's mail archive: "scp batch mode?" to be insightful an useful, however when I issue the command to close the connection # Bring the connection down. ssh -S ...
1
vote
1answer
129 views

Security Restrictions Downloading From the Internet

For some reason since we rolled out IE7 to the estate users are unable to download from the Internet, they get an error message "the operation could not be completed due to restrictions on the ...
1
vote
0answers
30 views

How to track when full access rights were issued in Exchange 2007?

Does anyone know if there is a way to see when a user had been issued full mailbox rights in Exchange 2007. Or is there a way to check which commands were issued when and by whom? Thanks ashln
1
vote
0answers
211 views

Window 2003 Server - Logon Failure error message in Event Viewer

I received a lot of event logged in the event viewer with this message. I notice it is always the same user id which encounters this error. The user id is use by an application to access the ...
1
vote
1answer
2k views

XAMPP vs WAMP security and other on Windows XP

Not long ago I found WAMP and thought it was a God send because it had all the things I wanted/needed (Apache, PHP, MySQL, and phpMyAdmin) all built into one installer. One thing about WAMP has been ...
1
vote
2answers
82 views

Used SQL Svr 2008 Config Manager to Set Service Account to Local System: What Did It Change?

Direct shot to foot moment... While setting-up individual non-admin accts for MSSQLSERVER services, I temporarily set Server service login to Local System account. I remembered later that: SQL ...
1
vote
1answer
77 views

Files deleted. What could have happened?

I'm having a weird issue today. I was writing and testing out some simple cgi scripts this morning when I realized that I couldn't run them from one of the other computers on the (windows) network. So ...
1
vote
4answers
394 views

PHP scripts owned by www-data

I use to have owned php scripts on a dedicated server by user "webroot". It would be easier for coding and administration if the scripts were owned by the apache2 user, "www-data" on my system. Also ...
1
vote
0answers
723 views

least privilege account for WinRM remote calls on Windows 2008 Server

ServerFault Windows experts: please consider the following use case: I have 2 Windows 2008 Server SP2 boxes let’s call them – SOURCE, CLIENT. On SOURCE: I create a new user called 'normal'. Just a ...
1
vote
0answers
625 views

Windows Server 2008 Web Edition can't change permissions

I'm used to using Windows Server 2003 but decided to get a Vista Web Edition for IIS7 and to run our MVC applications on. I have installed copSSH that I use for SFTP, and when I upload my files I am ...
1
vote
1answer
210 views

Oracle Ordcom and Wallet Coexistence Problem

We use Oracle's ORDCOM infrastructure on our 11.1.0.7 database to interact with a COM object. The COM object doesn't do anything with the database. This process has been working fine for several ...
1
vote
1answer
329 views

Tutorial on using Advanced Sharing (instead of Simple Sharing) on Windows XP and 7

We've always used Simple File Sharing. But I'm having some network difficulties with a new Windows 7 PC and I'm thinking we should be using Advanced Sharing. But as I got into it I realized it's far ...
1
vote
0answers
801 views

Securing portmap with multiple interfaces

I have an Ubuntu 9.10 server with a public and private interface. I'd like to run portmap only on the private interface for security, so in /etc/default/portmap I had set: OPTIONS="-i 192.168.122.1" ...
1
vote
2answers
415 views

Disable File Copy between VMs

When I access multiple virtual desktops via VMware View 4, I'm able to copy files between VMs. The VMs are located in different isolated networks. This is a security concern in my organization and how ...
1
vote
2answers
1k views

force security permission through the directory tree?

Currently, there is large directory tree with differnt security permissions. We need to add another Security permission for all of the folders, and files without changing all the inherited ...