Security is not a product, but a process.
0
votes
0answers
37 views
What does this Apache Log entry mean? [duplicate]
Possible Duplicate:
Can I make Apache drop a connection when matching a URL?
I have this log entry in my logs:
217.20.26.114 - - [15/Aug/2012:16:08:06 +0100] "GET ...
0
votes
0answers
60 views
Right way of installing Windows 8 and Ubuntu with encrypted file system [closed]
Here is problem. for which I am looking for solution
My Current Installation on laptop and HDD Partition is as follows.
500 GB HDD
-- C: 35 GB [Windows 8 Consumer Preview]
-- D: 195 GB
-- ...
0
votes
0answers
21 views
Cannot log in to SQL 2012 - no known login [duplicate]
Possible Duplicate:
How to recover a MSSQL user's password?
We recently installed SQL 2012 on one of our servers, but have been unable to log in. Another tech did the installation so I ...
0
votes
1answer
132 views
snort intrusion detection
Hi im trying to use snort as an IDS on some pcap files I have, I was hoping I would get a log of any intrusions. I know for a fact that there is port scans and ping sweeps etc in the pcap files but ...
0
votes
1answer
132 views
how to limit traffic if port different than 8080?
I'm using this rules to slow down nmap scan
iptables -A INPUT -p tcp -i eth0 -m state --state NEW -m recent --set
iptables -A INPUT -p tcp -i eth0 -m state --state NEW -m recent --update --seconds 30 ...
0
votes
2answers
114 views
Installing a Certificate in IIS 7
I have created a free certificate from https://www.startssl.com. It asked me to export that certificate on the disk. Now i want to install this certificate in IIS 7 on my webserver. How do i do that. ...
0
votes
1answer
313 views
Who should own /var/www? [duplicate]
Possible Duplicate:
How should I structure my users/groups/permissions for a web server?
I've seen a few answers to this on the internet, but I'm looking for a definitive answer. I have a ...
0
votes
1answer
833 views
CVE-2011-3389 from a PCI Scan on a LiteSpeed Web Server on cPanel [closed]
So we had a scan kick back with CVE-2011-3389 today and our SSL Cipher Suite is as such:
ALL:!ADH:RC4+RSA:+HIGH:-MEDIUM:-LOW:-SSLv2:-EXP:!kEDH
And it's still kicking back with the same complaint:
...
0
votes
1answer
207 views
SQL Server NETWORK SERVICE account permissions
My SQL Server Windows service is set to use the NETWORK SERVICE account.
The server is installed to C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL.
However looking at the ...
0
votes
1answer
130 views
Advice on PHP version to install 5.3 (hardened) or 5.4 (latest) [closed]
I am setting up a VPS, and was wondering what version would be best to install onto it.
If I go with 5.3 I can choose suhosin hardening, but 5.4 would have to be the standard install.
What would ...
0
votes
0answers
115 views
Why is Reverse Proxy Needed for Lync 2010?
I'm setting up a lab for Lync Server 2010. I can't wrap my head around the idea of using a reverse proxy when, to me, it looks the same as using a firewall and configuring PAT to communicate with the ...
0
votes
1answer
75 views
Making directories visible only by owners
I am in the process of creating a secured shared hosting and, between the hosting features, I want to give SSH access.
I've already chrooted the users via SSH, FTP and PHP (using PHP-FPM), and would ...
0
votes
0answers
106 views
Can ssh-keygen be seeded to generate the same key?
Is it possible to seed ssh-keygen with a fixed string so that it consistently generates the same keypair?
0
votes
0answers
127 views
Is the Security Configuration Wizard Recommended For Use in Server 2008(R2)?
Microsoft has released an updated article regarding the use of security configuration templates in Windows Vista / 2008 and later:
http://support.microsoft.com/kb/313222
In this article, it states:
...
0
votes
1answer
170 views
Apache2 ssl with ecc
Is it possible to configure Apache2 to use elliptic curve crypto (ecc) with SSL? This bug https://issues.apache.org/bugzilla/show_bug.cgi?id=40132 appears (to me) to indicate that this is supported, ...
0
votes
2answers
47 views
Can not create a linked server between SQL Server 2008 on a desktop and my laptop
I'm having an issue getting the linked server to connect between a desktop and my laptop. Both have SQL server 2008 and the link is coming from the desktop to my laptop. Also, both computers have ...
0
votes
1answer
51 views
Is it secure to use apache mod_mono with more virtualhosts?
I am using apache2 with mod_php and mpm_itk_module to run every virtualhost under its user. Now I am looking at mono (mod_mono) and I am not sure, if it is secure to run mono as only one process, whom ...
0
votes
0answers
371 views
What permissions are required to copy folders with security attached on a NAS
What permissions does a user require to copy folders and the folders permissions from one mapped drive to another using explorer?
Our office has a large NAS with a number of shares. These shares are ...
0
votes
1answer
76 views
Is there a way to limit the number of connection made by an IP address to my Windows Server?
Is there a way to limit the number of connection made by an IP address to my Windows Server?
I'm trying to restrict the number of connections used by a single IP address on my server
0
votes
1answer
131 views
Http server security analyser and sanitizer proxy
I'm looking for software that will monitor all https request coming through our proxy server.
We currently use nginx that proxies to our application servers.
Ideally, the solution will sit between ...
0
votes
1answer
175 views
perl application won't start in apache when running as a service
I have installed Netdisco, which is a perl based network discovery tool
When I run httpd from a terminal prompt as root, it works fine.
When I try and start Apache as a service (service httpd ...
0
votes
0answers
620 views
EC2 instance always ask me to enter passphrase for the pem during connection
The pem file is generated by AWS console
I was able to connect using the EC2 remote web interface, using the same pem file
The permission of pem is 600 already
Error..
ssh -i ~/test.pem -v ...
0
votes
3answers
54 views
Wildcard SSL certificate for a domain that may already have other certificates setup - any issues with that?
I'm thinking installing a wildcard cert for a site we are migrating from another company's server to our server.
The domain has many other subdomains, and I'm guessing some of them of single domain ...
0
votes
1answer
115 views
What prevents banks from creating money in their database? [closed]
I was wondering: If banks store all the account balances in a database, what keeps them from going into said database and "creating" money by changing the data (Replacing 10 000 $ with 100 000 $ is ...
0
votes
1answer
119 views
Linking RSA with Logstash etc
I was wondering whether we can use logstash or any other open source or free log management tool to collect and index the data and then feed this index into RSA envision or any other enterprise SIEM ...
0
votes
0answers
134 views
Windows Server 2008 R2 Security Log repeated Audit Failure Entries
We seem to be getting a huge load of entries in our security log with the following details:
The Windows Filtering Platform has blocked a connection.
The source IP address and port change for each ...
0
votes
1answer
158 views
Minimum access required for Visual Studio 2010 on SharePoint
Hi we are trying to set up a SharePoint development environment for multiple developers on Windows 2008 server, we do not want to give the developers admin rights to the servers.
Does anyone know ...
0
votes
1answer
314 views
Nginx security schema with multiple users, virtual hosts and FCGI PHP
I want to configure nginx as follows:
There are several registered users on the server.
Every user may own several virtual hosts (they cannot configure them) of two different types: nodejs proxy or ...
0
votes
1answer
293 views
Iptables recent module
iptables -A INPUT -p udp -m state --state NEW -m recent --set --name
alimit --rsource
iptables -A INPUT -p udp -m state --state NEW -m ...
0
votes
1answer
1k views
Fortigate 40c Firewall Configuration
Does anybody know if is it possible to Un-bridge ports on forgiate 40c?
I want to use the fortigate 40c to define and control (block/allow) port traffic for the following 4 ip ranges (each ip range ...
0
votes
1answer
2k views
Fortigate Firewall - DMZ vs Interface ports
I'm considering buying a Fortigate 50b (or Fortigate 60b) firewall to separate my web (iis) machine from the DB machine. (See http://www.fortinet.com/doc/FGT50_100DS.pdf)
Till now the two servers ...
0
votes
1answer
959 views
Use SECEDIT to export “Security Options” from one computer and import on another
Can I use secedit.exe to export out the "Security Options" from the local security policy and then import them on another machine?
I'm trying to do this on Windows Server 2008.
Update
I just tried ...
0
votes
1answer
570 views
PureFTPd : How to have user isolation?
I've installed pureFTPd, with a mysql database on a debian distribution. I used the following tutorial.
But now if I'm logging, I see that I'm in the /Data/www/MyUserDirectory. AND I can browse to /.
...
0
votes
2answers
142 views
Reflect SVN server to /var/www/ directory & 2 other questions
Question 1:
I'm setting up a SVN server on for development, how do I serve the files from the /var/www/ which is my root of my website which I'd like to manage the files via SVN that would reflect ...
0
votes
1answer
148 views
MySQL: Load_file - list files [closed]
Is it possible to list files with MySQL's Load_file()? Is there any meta file that would contain the file names or so? Thanks
0
votes
1answer
59 views
Connecting to a server inside a DMZ
in this scenario
[ net2 / 10.0.1.1 ] ---- [ net1 / 10.0.0.1 ] --- ( Internet )
| |
< pc2 > < ...
0
votes
3answers
2k views
Windows Server 2003 W3SVC Failing, Brute Force attack possibly the cause
This week my website has disappeared twice for no apparent reason. I logged onto my server (Windows Server 2003 Service Pack 2) and restarted the World Web Publishing service, website still down. I ...
0
votes
2answers
58 views
Securing a directory using htaccess but with different levels of access
I am trying to secure a directory by IP address. I need to access the directory from my ip address (through the browser) and no one else. But I also need to access it via cron (cli). I also have ...
0
votes
1answer
739 views
Exchange 2010 OWA with Client Certificates
I have enabled Client Certificate Authentication for Exchange 2010 through IIS7 and the users are prompted to choose their User Certificate when they log in, but they are all then presented with the ...
0
votes
1answer
242 views
Setting up FileZilla to only listen for a certain domain
Somebody had been trying to brute force my FTP server with a username the doesn't even exist, but it got me thinking I should upgrade my security. It would be impractical to filter by IP as the places ...
0
votes
0answers
392 views
How do I check my Linux kernel against root exploits?
I keept hearing about Linux root exploits lately and I'm beginning to become worried. Ever since Linux switched away from the stable-unstable versioning scheme, distributions began to adopt a wide ...
0
votes
1answer
201 views
SSIS package hangs on Setting Source Connection
I have an SSIS package that has been executing successfully for the last 7 years.
All of a sudden the package won't run and hangs at the Setting Source Connection step and has to be closed down via ...
0
votes
1answer
531 views
Nginx : Proper use of limit_req_zone and limit_req
I have 2 website running on VPS.
Their purpose is sharing music files and publishing news. Both of them use wordpress.
What I am trying is that I want to prevent little hackers from flooding the ...
0
votes
2answers
156 views
my share hosting has disabled all socket functions
I have hosted my website with squarebrothers.com
They have disabled curl_exec, fsockopen, socket_create functions.
They say that these are security vulnerabilities and they have blocked.
And they ...
0
votes
1answer
104 views
Event Logs for Remote Share BruteForce
This command is used to access remote shares.
net use \10.31.247.2\share /user:admin password
Is there any way to detect(EventLogs/other tools) if someone is trying to BruteForce into a remote ...
0
votes
1answer
33 views
Apache security [duplicate]
Possible Duplicate:
Apache security
I've been reading up on server/apache security and I've run into a contradiction. I read that you shouldn't serve any files that aren't inside Apache's ...
0
votes
0answers
62 views
Adobe PDF Reader IE Plugins blocks some url
The client opens a pdf file on the corporate web page through the adobe pdf IE plugin to access a video tutorial file whose url resembles like this
mms://the/path/of/video/file.mwv
however, when ...
0
votes
0answers
273 views
Where can I find information about inbuilt registry keys for Windows Server 2008 R2?
Is there a resource for looking up the description and/or usage of W2K8 R2 registry keys?
I need to understand integrity checksum change messages appearing in OSSEC logs on Amazon EC2 instances.
...
0
votes
1answer
362 views
Setting vsftpd to allow me uploading to /var/www, got 500 OOPS: cannot change directory:/root
I'm using an Amazon EC2 istance as developer and testing machine. Since i'm on windows i can't mount the virtual EBS volume for editing purposes. Too bad.
For this reason i've installed and ...
0
votes
1answer
306 views
How to configure IIS 7.5 to host multiple websites with the correct F/S permissions
So, heres my scenario:
Dedicated server running Windows 2008 R2
IIS 7.5
Multiple sites using PHP / .NET 4 / Perl / Python
Need to do:
Ensure that the sites are not able to write/create/read ...
