Security is not a product, but a process.

learn more… | top users | synonyms (1)

0
votes
6answers
967 views

Disable User Account Remotely

I work for a highly distributed IT based consulting firm with approximately 150 users in the field at different client sites at any given time. As we have grown we have needed to ability to disable a ...
0
votes
1answer
55 views

Microsoft patching folders

After extracting a Microsoft security patch, I got several folders containing the updated DLL. For Windows XP SP3 I have two folders: SP3GDR and SPQFE. Does anyone know what is the difference between ...
0
votes
3answers
297 views

Sharing directories in a Windows Workgroup

What is the best way to share and give permissions to certain users/computers in a workgroup? Does each user need the same account/password on every computer to have access to each others shared ...
0
votes
1answer
30 views

Https transparent proxy and SSL certificate validation

If I setup a transparent proxy for https connections using a SSL certificate signed by my local CA and distributed to all my active directory clients by GPO, may the client (browsers) reject or advise ...
0
votes
1answer
44 views

Secure Database Password Contained Inside a File

I've got a Linux based application (Java) that connects to an external database (PostgreSQL) in the same LAN. However, due the sensitiveness of the database contents I would like to avoid the admins ...
0
votes
1answer
43 views

Pricing of Key Pairs and Security Groups on AWS?

My free AWS account expired. I deleted all S3 and EC2 resources, but am wandering if I can leave the Key Pairs and Security Groups without having to pay for them. (My account resources look like this ...
0
votes
4answers
70 views

where should the site root directory be? [closed]

Where should I put my site root directory "my_site"? Any best practice? /var/www/my_site/ /var/local/sites/my_site/ /usr/share/wwww/my_site/ /usr/local/my_site/ /opt/my_site/ /srv/my_site/
0
votes
1answer
44 views

MySQL via SSL on VPC private subnet

Is an SSL connection recommended when connecting to a MySQL database server via a private subnet? SSL provides encryption but SSL causes a performance hit. The MySQL database server only serves ...
0
votes
3answers
85 views

locking up a linux box on a foreign network

I have an app that runs on a Linux server and is accessed via each user's web browser. My app contains proprietary code that I need to keep secure. I want to install the app in a client's private ...
0
votes
1answer
241 views

Windows 2008 r2 not using default security groups (ie Domain Admin) prevented from changing own password

Apologies if I did not find a question similar to mine but i have searched honest! Firstly we have undertaken a no default group approach to our security on active directory. This has been very ...
0
votes
2answers
66 views

IPtables - Sensible and non-contradictory rules?

This is my IPtable rules for my webserver with SSH installed, i've had help to get this far. My question is, are my rules contradictory. For example, I've been recommended to use these two lines: # ...
0
votes
1answer
89 views

Exchange 2010 security audit

Our IT department has received reports from HR that managers are reading their subordinates email, and we've been tasked with identifying if there is a technical way to achieve this. I'm looking for ...
0
votes
2answers
66 views

Is there a use case when traffic needs to be secured between 2 AWS instances?

According to Amazon's security white paper, it is not possible sniff traffic by other tenants http://awsmedia.s3.amazonaws.com/pdf/AWS_Security_Whitepaper.pdf Question: Is there a use case when ...
0
votes
1answer
555 views

Unable to install Network Deployment Enrollment Services (NDES)

I'm trying to install NDES on a Win2k8 R2 server, but I can't see the option. I've already added a user to IIS_IUSRS, and that user as sufficient priveleges since it is a part of the Administrator ...
0
votes
1answer
96 views

How can the mutt shell-escape feature be disabled?

We are thinking of offering mutt for our member's email client. The user's shell is instead the mutt application launched on their Maildir folder. It works great so far but one huge problem is the ...
0
votes
1answer
33 views

Protection of a dns server

I recently started to host my own domains on my servers. I can already see a fair bit of bogus queries arriving to my servers. Some dns amplification attacks, etc. What can I do in order to further ...
0
votes
2answers
163 views

S/MIME certificate to minimize email bounce

I have a website hosted in a vps that sends informative emails to my clientes, maybe 20-40 emails per day. Since few weeks ago some sent emails are bouncing with the following error: This message ...
0
votes
1answer
2k views

LDAP throws Event ID 2887 warnings even after enabling “require signing”

I am running an AD LDS directory and, ever since configuring it, I have been seeing 2887 warning messages, so I have decided to follow this guide to have the server require LDAP signing. The problem ...
0
votes
1answer
44 views

What are the recommended internet security measures to take? [closed]

I have built a speical-purpose server, the only purpose of this server is to download some data from a remote(internet) data feeder and do some data processing in the server as well. The only ...
0
votes
1answer
45 views

How communication works to connect server with or without VPN [closed]

When I ssh into my companies server without using VPN, then I get then quite understandably it cannot connect. Once I log into the companies VPN, I am able to connect. Breaking my questions down: ...
0
votes
2answers
126 views

Is mac address based security for single user Web Application a good idea?

I made my first web application dedicated to a single user. Being a system administrator it would be simpler for me to lockdown security on the operating system side rather than on the session side. ...
0
votes
1answer
103 views

Way to script Local Intranet settings?

There's a dialog in the "Internet Options" control panel applet if you go to the Security Tab, highlight "Local Intranet" and press "Sites" that looks something like [X] Automatically detect intranet ...
0
votes
1answer
50 views

Allow HTTP packet from specific hosts on an ec2 instance strictly

I have an ec2 instance (proxy) which is being used as http proxy server. There are some other hosts (hostA, hostB, hostC), I want the proxy server will only allow connection from those hosts. For ...
0
votes
2answers
95 views

Understanding Auth Logs on Ubuntu Server [duplicate]

I have a web application that I'm hosting on an Amazon Ubuntu server, and it has a public IP address - and very little traffic. I was observing the authorization logs in /var/log, and noticed several ...
0
votes
1answer
508 views

Is there an open source equivalent of Windows software restriction policies for Linux?

For a presentation I am doing, I am trying to find out if there is a Linux based open source application whitelisting service for Linux, Similar to software restriction policies in Windows since 2002. ...
0
votes
3answers
108 views

proftpd is accessing my.cnf

I use proftpd for virtual FTP hosting with MySQL. I've started writing fine-grained SELinux policies and found that it's trying to access my.cnf files. Question is what for and why? type=AVC ...
0
votes
2answers
331 views

Multiple POST requests to same file from same IP address

I periodically check my apache domlog to check for anomalies in GET and POST requests. Earlier today I noticed the same POST request to a login php happening two and sometimes three times a second for ...
0
votes
1answer
478 views

Content Security Policy Configuration Problems

I have a server running nginx and I would like to add CSP. However I'm encountering difficulties even after following numerous guides I will either get an error from nginx or they just don't work. ...
0
votes
2answers
79 views

Linux Server where the high security is desired [closed]

I am preparing a JAVA program that will be use to monitor a system. The program uses UDP and TCP sockets to receive and send packets over the Internet by using VPN. I will dedicate a server just for ...
0
votes
1answer
41 views

Protect against inadvertent command entry

I have a couple boxes in production and then some in a test environment. Anyone have any clever ways to protect against typing in inadvertent commands into boxes? i.e. I want to put a confirmation ...
0
votes
1answer
93 views

Iptables to lock down compromised server to a single ip [duplicate]

I have a Linux server which is compromised, I can see nasty looking perl scripts executing with root privileges. I want to get some data off it before I wipe it. How can I block all inbound and ...
0
votes
1answer
84 views

why iptables giving error when using with --src-range

I am using iptables v 1.4.8 and used following command but getting one error message on terminal # iptables -A INPUT -m iprange --src-range 10.0.4.92-10.0.4.99 -j DROP modprobe: module 'ip_tables' ...
0
votes
1answer
86 views

Opening ec2 ports using security groups

I'm trying to open all ports up to a micro instance that I have set up, but it doesn't seem to be working. This is what I have: http://i.imgur.com/PHekagS.png Using paping, I find that port 22 is ...
0
votes
2answers
47 views

https redirect to https (No Cert Warning) [duplicate]

Am I right in thinking that in order to redirect an https URL to another https URL without a certificate warning, the first https URL has to have it's own valid certificate and IP address? Am trying ...
0
votes
2answers
67 views

Managing security (Java) access in a shared environment

While developing a shared hosting solution for Java applications we have encountered an issue, since users can upload their own jars how do we restrict them from running Linux commands such as df -h ...
0
votes
1answer
172 views

Lot of Apache requests in “L” state, what could be the reason? DDOS?

I am having this in my apache server status message: LLLLLLLLLLLLLLLWLLLLLLLLWLLLLLWLLLLLLLLLLWLLLLLLLWLLLLLLLLLLLLLL WLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLWLWLLLLLLLLL ...
0
votes
3answers
97 views

Tamper-proof AWS AMI

I need to convince my customer that my server to which he submits his sensitive data runs only applications/processes approved by him. Also the customer is not allowed to get access to my server. He ...
0
votes
1answer
93 views

More secure way of sending MySQL commands from a remote server on the command line

What is the most secure way of running SQL commands from a web server to a remote MySQL server from the command line. I can think of two ways: mysql --host mysql.mydomain.com --user admin --password ...
0
votes
1answer
52 views

Security of NameVirtualHost in regard to HTTP request forgery

If I understand the concept of NameVirtualHost correctly it works by reading the Host variable of every HTTP request and matching it to a ServerName in any active VirtualHost directive with the ...
0
votes
2answers
313 views

how to identify & respond to bruteforce attacks

(skip to the end for less context) I have a CentOS 6 box with a few security measures taken - disabled root login, strong passwords, and user whitelist for FTP and SSH, and fail2ban installed. I get ...
0
votes
1answer
146 views

ssh: how do I find out the total bytes send and received by ssh user

In the place I work, there are multiple users who log in to any server through ssh and perform various tasks. In general, they are supposed only to run commands on the servers, not copy files out of ...
0
votes
2answers
2k views

How do I apply special group Exchange calendar permissions?

I've got an Active Directory Security Group with a number of people in it. I'd like anyone in that group to be able to update each other's calendars. How do I go about telling Exchange (2010) to do ...
0
votes
1answer
478 views

What is the best way to join an internet pc to domain?

I need to connect a PC that has already an Internet connection via on-board LAN to a Windows domain. This domain has no Internet connection, because the data is confidential. I need to do this because ...
0
votes
2answers
314 views

postfix feed to program as root

I'm trying to get postfix to pipe stdin from an email into a script that needs to be run by root (yes I understand the security issues of doing this. no lectures, please). Content of aliases file ...
0
votes
1answer
35 views

Do I need to set up public and private keys for ssh connection

I have just set up ubuntu server. I want it to act as my git repository for my work. I have installed openssh and have been able to connect by just providing the account password. i.e name@ipaddress ...
0
votes
1answer
678 views

Root Locked Out of Ubuntu 12.04?

I may have just locked root out of my server, and am looking for help. I have a VPS web server that has been running 10.04 for the past couple of years. For security, I had disabled root login and ...
0
votes
1answer
132 views

Is there a way to get Apache to blank sensitive data from logs?

We're trying to clean up one of our systems as much as possible & have found that despite our attempts to block, users are accessing a certain part of our system through a HTTP GET with their ...
0
votes
2answers
110 views

Should I choose my hosting company's mail server, or make my own mail server on my Cloud server? (for security) [closed]

I have a commercial website on an Ubuntu web server and my hosting company has a mail server for all its customers. For security reasons, do you think I should rely on my hosting company's ...
0
votes
3answers
2k views

connecting ipads to a windows domain [duplicate]

Possible Duplicate: iPad Management Do iPads (version 1, 2, and/or 3) have the ability to connect to a windows server 2008 or 2008 R2 domain? If not, is there a way to enforce security ...
0
votes
2answers
583 views

Can I use an IP-list include file for iptable blacklisting?

I would like to block all countries except mine in iptables, that is a list with about 100.000 Entries. How can I define this blacklist file in a script, so iptables blocks all those IP ranges? ...