Security is not a product, but a process.

learn more… | top users | synonyms (1)

0
votes
1answer
60 views

Where can I find a documented lists of permissions given when adding a user to stock groups in major distributions?

I am trying to work out a strategy to appropriately hand out certain levels of permissions to junior admins on the system across multiple distributions, especially Ubuntu Server and RedHat Enterprise ...
0
votes
2answers
72 views

Moving database to new server

I'm restoring a backup of a production database to a new server. The new server also hosts the application which makes use of the database. As such I'd like to use the same user/pass combination to ...
0
votes
2answers
153 views

Is it Possible to use a Single Certificate for a site which has many different domains

I have an ASP.NET application on IIS(Windows Azure) which has many different domains. All domains are working on http. Now, I need to use https. Whether, a single certificate is fine for all of my ...
0
votes
1answer
163 views

Whats the best way to strip grave accents from bash scripts

I have a bash script which runs as root: #!/bin/bash /var/bin/svn_co -h $1 >> /var/log/svn/status.log If the following should somehow occur, I'm in trouble. /var/svn/hooks.d/post-commit -h ...
0
votes
3answers
60 views

How can I provide secure web content to mobile devices that can't access an intranet?

I'm working with a client on development web content for their intranet. We want users to be able to access a version of the content on their mobile devices, but most of them don't have the VPN ...
0
votes
2answers
577 views

What is the best way to help stop DOS attacks

I am looking for ways to help stop DOS attacks. I'm running a linux server and looking for ways i can help limit the effect of any attacks and possibly set some limits on things without affecting ...
0
votes
2answers
111 views

When running a typical LAMP stack for a public website on EC2, what is the proper firewall setting for port 3306?

I'm reviewing the security groups on my EC2 Ubuntu instance that runs a public website on LAMP. Presently my ports are as follows: 22 (SSH) 0.0.0.0/0 80 (HTTP) 0.0.0.0/0 443 (HTTPS) 0.0.0.0/0 ...
0
votes
2answers
3k views

How to chroot VirtualHosts on a Apache server?

I have a FreeBSD server (company's OS of choice). Currently we run several websites on each of the webservers. Websites are in PHP which is run in Apache Module mode. At the Apache is not chrooted so ...
0
votes
2answers
378 views

Most secure settings for user dedicated for SSH Tunnel

Due to security reasons, I have created a user on my remote VPS only to use it for SSH tunneling. My local PC goes in hands of many others which scares me because I need to leave that SSH session ...
0
votes
1answer
130 views

Windows Copy and permissions

I have copied a which has Everyone permission. The duplicated file doesn't have these permissions other than the default permission. I'd like to know more about how Windows Copy defines the ACLs. It ...
0
votes
1answer
68 views

Common ways of spam files ending up in a web directory

A friend discovered a bunch of spam files in his web directory on his web host the other day. He has no idea where they came from, and I'm not quite sure either. What are common security breaches ...
0
votes
2answers
264 views

Linux or Windows Server as Gateway/Firewall [closed]

In my house, i'm running a server I use for testing purposes, and I'm planning on throwing away my knackered router, and making the server my Gateway to the internet and using it as a server for ...
0
votes
3answers
251 views

Disable, not unisntall, perl on Red Hat Enterprise 5.X?

So we found that some trojan has been the cause of our two web servers crashing once a week as we found that perl was executing dozens of malicious "gif" files spiking the memory and eventually ...
0
votes
1answer
2k views

Is someone trying to hack my site? How to block certain URLs in Nginx?

On the past few hours my server is getting pretty loaded, mostly due to a lot of load requests. I've seen this thanks to the StatCounter realtime stats, which shows that the "Came from" page is: ...
0
votes
1answer
148 views

Fail2ban Custom Port

I have a rule like this in my jail.local file: [ssh-ddos] enabled = true port = ssh,sftp filter = sshd-ddos logpath = /var/log/messages maxretry = 4 If I want to use a custom port for SSH, ...
0
votes
2answers
1k views

Large number of security events in the log

About a week ago we moved the application from one server to another (from Windows Server 2008 to Windows Server 2008 R2, different DCs, but same company). There are 12 websites on this server, but ...
0
votes
2answers
135 views

Should I ever configure a host with a public IP address to accept traffic from a private IP address?

I connect the 'net with a public static IP (my router's IP address for NAT) and a /29 subnet (for machines behind the router). On my router, I have: #sh ip route | inc x.x x.x.0.0/16 is ...
0
votes
2answers
639 views

Apache Uploads and Security

Recently it has become an issue that a user on one of our systems needs the ability to have the apache user have read and write capability to their site so that the upload portion of their site works ...
0
votes
1answer
70 views

Can i take dump of /proc/pid/exe

One of process invaded my system. I traced that process id, and wanted to dump /proc/pid/exe to that i can investigate later. Please advice how i take dump of /proc/pid/exe
0
votes
3answers
242 views

Preventing local network access on wireless network

On our current network, we have a wireless router and a gigabit 16-port switch. If a machine connects to the wireless network, they have access to all of the local machines in the network. This can be ...
0
votes
3answers
465 views

Limiting network access by MAC address and what else?

How can I limit the network access to a physical network from outside computers being plugged in? I know MAC filtering is one way, VPN is another - but it's not going to be used, so what else?
0
votes
2answers
745 views

CentOS: Log entries of /var/log/secure are not ordered by date and time - why?

Can you please tell me what can be the reason of log entries of /var/logs/secure be like this: Mar 30 10:50:02 server2 proftpd: pam_unix(proftpd:session): session opened for user XXXXXXXXXXXXXX by ...
0
votes
2answers
177 views

Clients can access other clients web directories on shared hosting

Allowing clients ftp access or file uploads on a shared server could lead to scripts being run which can scan directories and files outside the clients web root. What can you do to stop this given ...
0
votes
1answer
156 views

Server Administration [closed]

My client asked me for a job description of a system administration because I might be assigned this position along with the other guy I'm working with. To be honest, I do not know much about a System ...
0
votes
1answer
129 views

How effective is a private lan in securing a server for intranet use?

We are building a Intranet using alfresco on Managed servers. We are considering using a private lan to separate the database on to its own server which is only accessible via the main internet facing ...
0
votes
3answers
584 views

Corporate IT have blocked putty [closed]

Before I ask my question I would like to point out I am a web developer who normally uses Stack Overflow and new to Sever Fault, I think this is best place for this question. I have recently started ...
0
votes
2answers
107 views

Run untrusted program from apache

I have a problem to which I already have an implemented solution, but I'm not sure whether it's the best one. In the interests of not biasing any possible responses, I won't say how I've chosen to ...
0
votes
4answers
275 views

Using Windows as a gateway to the internet

My customer currently blocks outbound RDP and SSH, which means that none of their employees can get access to external Windows and Linux boxes (at the console level). However, a need has recently ...
0
votes
2answers
195 views

Registry remotley hacked, Windows 7, need help tracking the perp

I was writing some .VBS code at the office that would allow certain file extensions to be downloaded without a warning dialog on a Windows7x32 system. The system I was writing this on is in a lab on ...
0
votes
2answers
1k views

Setting up PGP FTP

I have a situation where I need to setup a FTP server with PGP encryption. Currently I use FileZilla w/ SSL, but in this case we are required to use PGP. Any recommended products/procedures from ...
0
votes
2answers
1k views

NTFS allow Read/Write/Modify, but not Copy

Is it possible to allow users to modify and read files/folders but not copy them to other locations? Problem is I have a folder that users need to read and modify files in, but I don't want them ...
0
votes
1answer
91 views

Is the data in SQL Azure safe?

I am new to cloud computing. I don't know whether my question is correct. I have an application which has sensitive data. Suppose I had to move the database to the cloud. Is the data in the database ...
0
votes
2answers
50 views

Hosting part of a website under a different domain

I have a website where we want to move the admin portion to a different URL (for security purposes, according to the site owner). So, to make the admin section accessible only from this new domain ...
0
votes
1answer
81 views

You are not authorized to view this page

I had websites in on my server and I stored them in path D:websites... and When I changed the websites to new path D:websites\Pages... this error apear when browse thes websites You are not ...
0
votes
1answer
62 views

Implementing dual control SQL updates in SQL Server

Is there any built in feature in SQL server that allows dual control updates, deletes and inserts? What I mean by dual control is that it requires any two users to collude in order to alter the ...
0
votes
3answers
156 views

Is it safe to use Windows file sharing for copying files to a remote windows server?

I have two servers in different datacenters, connected via a vpn. I want to push very large files from one server to the other. Windows file sharing is easy, but is it safe? I know the data coming ...
0
votes
4answers
458 views

Securing a Linux Server

Normally, I would: Change the SSH to protocol 2, disallow root login, change the port and only allow public keys. Install fail2ban. Install Bastille-Linux and run through it (setting up firewall ...
0
votes
2answers
2k views

How does a proxy server work for anonymous browsing?

I have seen that at many places like colleges and schools block sites like Facebook, Myspace. In some cases people are able to use a proxy sites and proxy softwares(ultrasurf,gpass etc.) to bypass ...
0
votes
3answers
1k views

Limit logins to Drupal to specific IP block

I'd like to allow anonymous from anywhere, while limiting authenticated to one or few IP blocks. Can this be done in drupal 6?
0
votes
3answers
445 views

How do I open private files using a browser through SSH

On my current project I have a few private php scripts and I also have phpMyAdmin in a private area of the server. Is there anyway of opening those files in a browser? I'm currently tunnelling using ...
0
votes
4answers
561 views

Encrypting shell script

We have a few shell scripts for backup/database dump purpose which have username/password info in them. Is there any way do this other than SHC which appears to be having some issues.
0
votes
2answers
141 views

Not exiting out of SSH?

If I don't exit out of SSH, what happens? Do the sessions build up over time? Is it a security risk?
0
votes
2answers
115 views

Permissions, rights, roles, user groups, delegations [closed]

I am looking for a good book, Internet resource that can clearly explain these terms. Really, I would not like to read any Microsoft books or any book about windows or other operation systems. I ...
0
votes
6answers
637 views

Remote desktop to a computer not on the network

I have a secure laptop that, for various reasons, is not allowed to be connected to a network. I need to remotely control that laptop from a desktop computer and be able to send files to it. The two ...
0
votes
1answer
324 views

Permissions required to look up a domain user's group memberships

I am writing some code to look up the members of particular domain groups. Does the user that this application runs as need any particular permissions on the domain to get this information? ...
0
votes
3answers
149 views

permissions on upload folder not working

I have a php script which uploads images to a folder. I have these permissions on the upload folder: drwxrwxr-- 4 user user 4096 2010-06-02 16:20 temp_images Shouldn't these permissions be ...
0
votes
3answers
2k views

How do I disable Windows authentication on a SQL Server instance?

How do I disable Windows authentication on a SQL Server instance?
0
votes
2answers
163 views

Site without “www” is hacked ! [closed]

A site with www.site.com (make with php)works normally but without www "site.com" has been hacked. How can I clean injection? Thanks
0
votes
2answers
2k views

SMTP hacked by spammer using base64 encoding to authenticate [closed]

Over the past day we've detected someone from China using our server to send spam email. It's very likely that he's using a weak username/password to access our SMTP server, but the problem is that he ...
0
votes
2answers
213 views

Group readable cron jobs a security risk?

I was just wondering, is using a cron job that is group readable a security risk? In this case, the script is chmod 755, and the group is basically a group of the sysadmins on the machine. The ...