Security is not a product, but a process.

learn more… | top users | synonyms (2)

4
votes
4answers
4k views

Authenticating Windows 7 against MIT Kerberos 5

I've been wracking my brains trying to get Windows 7 authenticating against a MIT Kerberos 5 Realm (which is running on an Arch Linux server). I've done the following on the server (aka dc1): ...
1
vote
3answers
859 views

ssh port forwarding / security risk

I want to access a web application running on a web server behind my office firewall from an external machine. We have a bastion host running sshd that is accessible from the Internet. I want to ...
6
votes
6answers
291 views

Certificate Authentication

I am currently working on deploying a website for staff to use remotely and would like to make sure it is secure. I was thinking would it be possible to set up some kind of certificate ...
1
vote
2answers
172 views

Using IP Tables to deny packet patterns?

I'm not experienced with IP tables but it's something I'll be looking into if this is plausible. I'm looking to set up a system to inspect packets and look for a pattern similar to korek's chop chop ...
2
votes
6answers
985 views

How can I audit a Linux filesystem for files which have been changed or added within a specific timeframe?

We are a website design/hosting company running several sites and someone was able to write arbitrary data to the file system. We suspect that they still have some scripts installed and need a way to ...
6
votes
5answers
704 views

How to protect an OS X Server from an unauthorized physical connection?

I have an OS X 10.6 server, which I administer via SSH and VNC (via SSH tunnel). I can't leave it at the login window since then VNC connections are refused. Therefore I currently leave it logged ...
4
votes
4answers
158 views

Determining who is running with administrator rights?

I work at a small non-profit organization with about 55 desktop PCs running Windows XP Pro. The domain controller is running Windows Server 2003. I have a two-part question (note that I'm a bit of a ...
2
votes
2answers
511 views

Two way SSH authentication

I have installed ASL and it recommends me that I implement a two way SSH authentication. I have some questions about it. I understand the general idea that you need to login with both a key and a ...
0
votes
3answers
3k views

What is the best way to setup a public and private wireless access point on the same home network? [closed]

For my home network (with internet provided from a cable modem) I would like to setup a secure wireless access point that I use for all of my personal connections (home PC, iPhone, Xbox, etc) and also ...
0
votes
3answers
90 views

What is the rules of ports?

I mean the port to connecting.. just like SSH port, nginx port, etc. Im not clear about the port. So far I can see port running not more than 5 characters (port xxxxx). So, when choosing port ...
0
votes
3answers
3k views

Better way to stop/start Webmin and SSH

it would be a good idea to not have webmin running all the time... just start it via ssh when I need it... so, I just stop webmin,and leaving SSH always running... when I need to access webmin, I ...
7
votes
6answers
4k views

Monitor the shell activity of a user on your Unix system?

Trust, but verify. Let's say I want to hire someone a sysadmin, and give them root access to my Unix system. I want to disable X windows for them, only allow shell usage (through SSH, maybe), so that ...
0
votes
3answers
64 views

Does apache/PHP has overflow problem if the developer doesn't tweak it at all?

Is apache/PHP self secured so that developers don't need to care about it?
0
votes
3answers
67 views

Is it generally a bad idea to have other types of virtual appliances installed along side a firewall appliance?

I want to run my Firewall/NAT software (pfsense) and an internal NAS (looking at freenas right now) for my SOHO on one machine. Right now I have them separated on two different machines, but I'd like ...
0
votes
3answers
595 views

How to avoid apache2 revealing hidden directory and/or file structure

When someone fetches a denied URL that exists, he gets: Forbidden You don't have permission to access /admin/admin.php on this server. Apache/2.2.8 (Ubuntu) PHP/5.2.4-2ubuntu5.9 with Suhosin-Patch ...
1
vote
5answers
117 views

How can someone be running shell commands through my site, and how can I stop them?

I believe that someone is running shell commands on my server via my site. How could a user be doing this? How can I stop stop them from doing this?
6
votes
3answers
4k views

Apache + Tomcat VS Stand Alone Tomcat or GlassFish

I am setting up a Debian server to serve Java web applications. I have done quite a bit of research for several weeks now. Tomcat's web site says it is better to use stand alone Tomcat for speed if ...
1
vote
4answers
392 views

PHP scripts owned by www-data

I use to have owned php scripts on a dedicated server by user "webroot". It would be easier for coding and administration if the scripts were owned by the apache2 user, "www-data" on my system. Also ...
0
votes
4answers
545 views

How to find systems with vulnerability which may later become agent for DDoS?

How to determine the systems with vulnerability, which scanning tool is best. The system should be identified so that it can be used as agent for DDoS. In a test bed environment I want to check ...
0
votes
2answers
170 views

Question about CSF Security Over Plesk

i have vps and i use parallels plesk. I want to give more security to my vps in this case i thinking to install csf security suite. How about that idea or can you suggest another software or trick ?
3
votes
2answers
128 views

Securing an SVN only server

Everything's running off of self-secured https. Aside from setting up user authentication, what steps should I take to be sure we're secured?
3
votes
3answers
446 views

Finding a backup and synchronization solution

I'm having difficulties to find a backup and synchronization solution with the following characteristics: Cross-platform: Windows, Linux, Mac Transfer only new/modified bits of modified files ...
1
vote
3answers
340 views

Blocking a distributed, consistent spam attack? Could it be something more serious?

I will do my best to try and explain this as it's strange and confusing to me. I posted a little while ago about a sustained spike in mysql queries on a VPS I had recently setup. It turned out to be a ...
1
vote
2answers
373 views

How to restrict file system when logged into terminal services

What I need to accomplish: With one login, when user is physically in the building I need them to see everything. When they are using terminal services with same login they should not be able to see ...
0
votes
1answer
103 views

Junos custom-attack signature pattern syntax

I am stuck at a point with the configuration of a custom-attack signature in Junos. According to the Junos Custom Attack Definition documentation page, I can set up a custom attack based upon a ...
2
votes
1answer
3k views

nikto probe warning messages

I have a pretty standard VPS running Ubuntu 8.1, Apache 2.2, PHP 5 etc. -- standard Lamp stack. I am using suhosin and have tried my best to plug the obvious stuff, since I'm the only user-- there's ...
4
votes
3answers
2k views

Comparison of Firewall, Intrusion Prevention, Detection and Antivirus Technologies in Organizational Network Architecture

in these days i'm reading about intrusion prevention/detection systems.When reading i really confused in some points. First, the firewall and antivirus technologies are known terms for years, however ...
1
vote
1answer
2k views

Grant Sharepoint Access to all employees

What's the easiest way to grant access to all the employees of our company to sharepoint portal. There are some general sites which all employees have read access. So Do I have to create an AD group ...
17
votes
6answers
2k views

Is OpenID this easy to hack or am I missing something?

For those Relying Parties (RP) that allow the user to specify the OpenID Provider (OP), it seems to me than anyone that knows or guesses your OpenID could Enter their own OP address. Have it ...
7
votes
5answers
846 views

Why would sshd allow root logins by default?

I'm currently working on hardening my servers against hacking- amongst other things, i'm getting a load of attempts to log on as root over ssh. While i've implemented fail2ban, i'm wondering, why root ...
0
votes
3answers
1k views

Deny directory browsing in a Proftpd / Ubuntu Installation

I used this guide to set up a Proftpd installation an Ubuntu 8.04 server... Works well, but the generic user ( userftp ) can run ls and is able to change to any Directory and browse freely on the ...
62
votes
9answers
65k views

Dealing with HTTP w00tw00t attacks

I have a server with apache and I recently installed mod_security2 because I get attacked a lot by this: My apache version is apache v2.2.3 and I use mod_security2.c This were the entries from the ...
2
votes
3answers
140 views

What kind of server attacks should i be aware of nowadays

I am recently running a web server, and there is a lot of information online, but it can all be a little confusing. I recently opened my logwatch logs and saw that i get attacked a lot by all sorts of ...
0
votes
1answer
382 views

IIS7 authentication

To give our user's the ability to protect content on their IIS6 sites we used a tool called IISPassword which emulates .htaccess to provide Basic authentication. There isn't support for IISPassword ...
14
votes
6answers
4k views

How difficult is it to setup a mailserver?

I want a secure mail solution, as I am looking to move away from Google and other parties looking into my private data. How much of a PITA is it to setup my own mailserver? Should I go for an ...
2
votes
2answers
802 views

Apache security for multi-user development web server

I've been searching and reading through documents all morning and understand that I need to use some combination of chown and probably 'jailing' to securely give programmers access to directories on ...
2
votes
2answers
139 views

Is there another way to run Apache2 securely for end users without using CGI mode?

Is there another way to run Apache2 securely for multiple end users (like hosting hundreds of blogs) without using CGI mode as required by suPHP? It just seems so inefficient to use CGI mode for PHP ...
2
votes
2answers
657 views

Has anyone run an objective comparison of Nessus and Skipfish

We recently set up Nessus, but the annual cost is not cheap. Recently Google published SkipFish which appears to compete in the area of webapps. As best I can tell, Nessus operates via a large ...
2
votes
1answer
148 views

Is there a way to check if a user has specific rights?

In my application I'm using ntrights.exe, that is part of Windows Resource Kit, to grant and revoke a specific user right. For example to grant a user "Log on as a server" right, I execute using ...
2
votes
2answers
4k views

“TCP Sweep” - What is it? How am I causing it?

I've just had an email from my hosting company telling me I'm in violation of their Acceptable Use Policy. They forwarded me an email from another company complaining about something to do with a ...
0
votes
2answers
210 views

Group readable cron jobs a security risk?

I was just wondering, is using a cron job that is group readable a security risk? In this case, the script is chmod 755, and the group is basically a group of the sysadmins on the machine. The ...
2
votes
3answers
2k views

repeated failing passwords in linux security log (/var/log/secure)

Recently, I opened up the SSH port through my firewalls (and redirecting to my server) so I could check on the (http) server while on the road. The first week or two there was nothing different. But ...
3
votes
1answer
460 views

is there any valid reason for users to request phpinfo()

I'm working on writing a set of rules for fail2ban to make life a little more interesting for whoever is trying to bruteforce his way into my system. A good majority of the attempts tend to revolve ...
2
votes
3answers
549 views

Pros and Cons of a proxy/gateway server

I'm working with a web app that uses two machines, a BSD server and a Windows 2000 server. When someone goes to our website, they are connected to the BSD server which, using Apache's proxy module, ...
4
votes
3answers
615 views

How to detect which process is doing a port scan

I have Linux server running a unauthorized process (which I do not know the name of) which is doing a port scan from the server out to the internet. How do I find out which process this is and kill ...
3
votes
5answers
217 views

Scanning website for vulnerablities

I have found that the local school's website installed a Perl Calendar - this was years ago, it has not been used for ages, but Google has it indexed (which is how I found it) and it full of Viagra ...
1
vote
2answers
1k views

Use .htaccess to block *All* access to specific folders

I am not sure how to do this, but I want to block all access to a specific set of folders on my web server. Say secret01 and secret 02... homeDir |- data |- www | |- .htaccess (file) | |- ...
7
votes
9answers
758 views

Network vulnerability and port scanning services

I'm setting up a periodic port scan and vulnerability scan for a medium-sized network implementing a customer-facing web application. The hosts run CentOS 5.4. I've used tools like Nmap and OpenVAS, ...
1
vote
0answers
632 views

least privilege account for WinRM remote calls on Windows 2008 Server

ServerFault Windows experts: please consider the following use case: I have 2 Windows 2008 Server SP2 boxes let’s call them – SOURCE, CLIENT. On SOURCE: I create a new user called 'normal'. Just a ...
1
vote
0answers
599 views

Windows Server 2008 Web Edition can't change permissions

I'm used to using Windows Server 2003 but decided to get a Vista Web Edition for IIS7 and to run our MVC applications on. I have installed copSSH that I use for SFTP, and when I upload my files I am ...