Security is not a product, but a process.

learn more… | top users | synonyms (1)

2
votes
2answers
6k views

ntrights equivalent/replacement for Server 2008

Does anyone know what or if there exists a replacement utility for the Server 2000/Server 2003 command line tool ntrights on Server 2008? More info on this utility (for those that don't know what it ...
2
votes
3answers
314 views

How do I go about securing my rsync backups?

Right now I backup my website/server daily using rsync with cron. What I'm worried about is someone hacking into my server and then gaining access to my rsync account and deleting everything. How do I ...
2
votes
2answers
190 views

Is there a password agent for the mysql command-line client?

I use the mysql command line client frequently. Sometimes I wind up typing in my password dozens of times per day, and I'm getting really tired of it. SSH has a neat utility called ssh-agent which ...
1
vote
2answers
2k views

Logwatch: Ignore certain IPs for SSH & PAM checks?

I have a CentOS 5.6 system, which runs Logwatch. If I perform a security scan (Nessus) against this host, it produces unnecessary noise in the Logwatch output. I'd like to run these security scans ...
1
vote
1answer
1k views

Linux-KVM / iptables: prevent guest spoofing by matching ip+mac address on bridge?

I have my KVM guests on a standard br0 bridge setup: auto br0 iface br0 inet static address 192.168.1.117 netmask 255.255.255.0 network 192.168.1.1 broadcast 192.168.1.225 gateway 192....
1
vote
2answers
1k views

Best way to use large IP blacklist to deny access to a Windows 2008 web server?

Basically, I'm looking for a solution similar to the ones mentioned in a similar (but Linux-focussed thread) located here so that I can deny access to blacklisted IPs. I am specifically focussed on ...
1
vote
1answer
1k views

SQL Server 2005 Accidentally removed a user from public role, can't add user back into role

I'm trying to crearte a DB user account that only has access to a specific database, and can't read or change other databases, and can't alter credentials for any other accounts. I accidentally ...
1
vote
2answers
91 views

Using a package manager vs compiling from source for latest updates

I run a Ubuntu 11.10 server at my house and in the past I have been using apt-get to keep all my packages up to date. Recently I noticed that when I run apt-get update/upgrade the version of some ...
1
vote
2answers
172 views

How to generate keys for clients whilst keeping ca.key safe

I'm setting up a small vpn service for 10 - 100 expats so they can access normally blocked sites. I would like them to be able to sign up via my website, which upon payment the site will generate ...
1
vote
1answer
193 views

What do I need to do to prevent exploitation of my postfix server?

I have a a web server that needs to send emails, but not recieve them. I have installed postfix (it came with nagios, also installed on this server) and now I need to make sure that my server does ...
1
vote
1answer
2k views

Securing MySQL debian-sys-maint

With a fresh (but old) install of Ubuntu and MySQL, I found I could access the MySQL via command line client without being asked for any user or password. This bothered me as the default situation, ...
1
vote
8answers
1k views

Turning off FTP

I'm setting up a new debian server and I don't need FTP so I want to remove it. According to netstat -tap, ftp isn't listening on anything. However when I do a port scan (nmap) externally it says the ...
1
vote
3answers
395 views

Reporting Penetration Attempts to My Server

I need a log file of penetration attempts to my server. Ideally, this log should contain all attempts including logins, HTTPD activities, FTP activities, NFS, and other conventional open ports. ...
0
votes
1answer
183 views

Locking down a box on the Internet [closed]

I'm a developer who is looking to put a new service on the Internet. I am new to administering systems and frankly I seem a little lost at where I should start with putting something on the web. My ...
0
votes
4answers
3k views

What firewall rules should be used for a home based system [closed]

I'm just setting up a home wireless network with connection to the internet. The router has settings to configure the firewall rules. Currently it's set to INBOUND ALL ANY and OUTBOUND ALL ANY. ...
0
votes
2answers
2k views

Only allow ssh connections to a specific domain

I have a server setup with several domains and subdomains. I'd like to limit ssh and sftp access so a user can only connect to xxx.domain1.com but I'm not sure where this is configured. Connecting ...
-1
votes
3answers
289 views

iptables — am I doing this right?

UPDATE Boy am I glad I asked. OK, I'll try again and post another question. I'd like to set up a CentOS 5.3 host to allow only ping, ssh, httpd, and SSL connections. After reading a tutorial and ...
13
votes
2answers
14k views

What the meaning of “policy ACCEPT” and “policy DROP” in iptables?

When running service iptables status on 2 CentOS server, one server has policy ACCEPT in Chain INPUT, Chain FORWARD, and Chain OUTPUT another server has policy DROP in Chain INPUT and Chain FORWARD; ...
12
votes
3answers
2k views

Has my Linux server been compromised? How do I tell? [duplicate]

Running (X)Ubuntu 10.04.2 LTS behind a router. I just received an email from my root account on that machine, with the following subject: *** SECURITY information for <hostname>: The ...
7
votes
12answers
984 views

Does your company allow Skype in network? [closed]

Does your company allow Skype in network? What are reasons to forbid it, and how it is enforced? Is it done for security concerns?
6
votes
13answers
2k views

Mysterious html inserted into my site's pages (hacked?)

Twice, I've found weird code the top of my index.php. The first time, it was this: <iframe src="http://ntwportal.com/" width="2" height="4"></iframe> Then this: <iframe src="http:/...
6
votes
7answers
3k views

How Could My Website Be Hacked

I wonder how this could happen. Someone deleted my index.php files from all my domains and puts his own index.php files with the next message: Hacked by Z4i0n - Fatal Error - 2009 [Fatal Error ...
6
votes
2answers
2k views

Is CRON secure?

I want to install cron on my live web server to run a daily backup script of a local folder. Are there any security considerations I need to be aware of when installing cron? My web server uses ...
6
votes
2answers
2k views

Virtual host on LAN - VMs on DMZ, separate NICs - is this a bad idea?

Just kicking this idea around, and wanted to see if you'll be so kind as to point out the problems I don't see. If I set up this new HyperV host as a normal domain member, the benefits are obvious. ...
6
votes
1answer
2k views

Possible to limit an EC2 key to just ec2-associate-address?

I have a regular EC2 instance with an elastic IP. The few times the instance has been stopped, I've just manually re-associated the IP with it via the AWS Management console. I'm now thinking about ...
5
votes
7answers
590 views

Configure a “hardened” user account that an attacker would have a hard time abusing

Suppose you have a Windows Server machine running various sensitive services. Suppose that one of these services is pretty simple, maintaining a small amount of information in a text file, but as a ...
5
votes
5answers
515 views

If I use ftp or telnet by accident, to what extent is my password unsafe?

if i use ftp or telnet by accident (usually on the bash shell), to what extend is my password visible? can my coworker see it? can my neighbor see it if i work at home (if not using wireless)? can ...
5
votes
6answers
3k views

fail2ban and denyhosts constantly ban me on Ubuntu

I just got an Ubuntu instance on Linode. To secure the SSH on it, I installed fail2ban (using apt-get), but then had a problem: fail2ban kept banning my IP (for limited durations, thankfully) even ...
4
votes
1answer
714 views

Get SSH fingerprint from remote server securely?

I had thought about this and my host provides out of band support, so I could simply create the key fingerprint out of band and compare it when connecting to that server from home. Is there any other ...
4
votes
4answers
6k views

Authenticating Windows 7 against MIT Kerberos 5

I've been wracking my brains trying to get Windows 7 authenticating against a MIT Kerberos 5 Realm (which is running on an Arch Linux server). I've done the following on the server (aka dc1): ...
4
votes
2answers
4k views

Security issue on Nginx, PHP & fastcgi_split_path_info

According to this post, it was said that if I am using PHP/Nginx, for better security, I should either cgi.fix_pathinfo = 0 or if ( $fastcgi_script_name ~ \..*\/.*php ) { return 403; } In ...
4
votes
3answers
2k views

Comparison of Firewall, Intrusion Prevention, Detection and Antivirus Technologies in Organizational Network Architecture

in these days i'm reading about intrusion prevention/detection systems.When reading i really confused in some points. First, the firewall and antivirus technologies are known terms for years, however ...
4
votes
3answers
3k views

Hosting multiple repositories, each with differing access control

We will need to host a series of Mercurial repositories. For security, we will use SSL encryption in Apache and htpasswd access (required). I tested out a single repository and used hgwebdir.cgi and ...
4
votes
4answers
3k views

can localhost be spoofed?

Is it possible for a remote machine to access another machine's localhost data by spoofing the loopback ip? Say if I wanted a setup where if I'm connecting from somewhere outside my own network, I ...
3
votes
2answers
295 views

Windows updates, Anti-virus updates for Air gapped hosts

I just took over as an admin for a network that uses corporate imaged hosts, to manage various special purpose machines. These hosts directly connect to the equipment they are managing via Serial or ...
3
votes
6answers
2k views

Would you install phpmyadmin on a production web server?

I have been playing around with phpMyAdmin and I do think that it is a good tool, but I have read a lot on the internet about security holes. Would you recomend installing/using phpMyAdmin on a ...
3
votes
3answers
2k views

How to encrypt traffic between two Amazon EC2 instances?

We are building a web app using Amazon EC2 instances running Linux. All the traffic to the client browser is encrypted with SSL. What should be used to encrypt the traffic between the instances. The ...
3
votes
5answers
3k views

Apache DDoS Protection in router (pFsense) [duplicate]

I'm soon going to change my infrastructure when I buy a new server. I'm going to replace my D-Link DIR-655 router with an pFsense router (and probably use the 655 as an AP) using my old server ...
3
votes
1answer
15k views

Best practices for hardening/locking down Windows Server 2008 R2 for use as web server?

What actions should be taken to 'lock-down'/harden/secure a windows server 2008 R2 machine, when used as a web server (with remote desktop access)? Are there any elements that are enabled as standard ...
3
votes
3answers
1k views

CentOS PCI Compliance assessment

We are currently working our way through a PCI compliance assessment on our server running CentOS. We are getting a lot of 'severe' issues with suggested fixes. The suggestions to rectify the issues ...
3
votes
3answers
490 views

Looking for a way to audit/monitor removable media on a Mac

We have a client who's requiring that we implement dataloss prevention on workstations that are accessing their project's data. If Alice attaches removable media (USB, FireWire, CD, DVD) to her ...
3
votes
1answer
4k views

Is there an easy way to check SSL cipher preference from the command-line?

CentOS 5.x I want to confirm which SSL ciphers are supported and preferred on my web server. Is there an easy way to do this WITHOUT using third-party audit software/equipment? I was hoping for ...
3
votes
2answers
1k views

Does adding an user to the apache group creates a security hole?

Beginner question. I saw this mentioned on a website, considered a bad practice,but can't remember where and why. So, if I have an user which has access to files that Apache shouldn't have access, and ...
3
votes
2answers
2k views

windows 2008 R2 TS printer security - can't take owership

I have a Windows 2008 R2 server with Terminal server role installed. I'm seeing a problem with an ordinary user who is member of local printer operators group on the server. If the user opens a cmd ...
3
votes
3answers
11k views

Domain User can RDP into Domain Controller?

Vanilla Windows Server 2008 x64 Standard DC (AD, DNS). I was remoting into my DC to do a bit of work and, thru force of habit, logged into the server using a regular domain account, not a domain admin....
3
votes
1answer
899 views

Will you allow NetBIOS into your DMZ?

Is it secure for a firewall to allow NetBIOS connections from the internal network to the DMZ? If not secure, what are the risks? If secure, what is the FUD about and what are the counterarguments?
3
votes
2answers
2k views

Securing PHP via open_basedir based on script path

I have several users running PHP scripts on a server and I'd like to lock it down so that their scripts can only access files in their www directory (it doesn't use linux user accounts, so there isn't ...
3
votes
7answers
310 views

Secure Formatting Disks [closed]

I heard about people that used tools to recover deleted data and found a lot of unusual data, that after discovered that the their brand new pc in truth was used... When discarding HD's, as sysadmin, ...
3
votes
2answers
7k views

Plesk HTTPS setup and directory problems [closed]

We are trying to configure SSL for one of our domains hosted on a Red Hat server running Plesk. Plesk version: 9.5.2 Apache: 2.2.3 Redhat: 2.6.18-194.el5 We created a new SSL certificate entry ...
2
votes
2answers
11k views

How does the Task Scheduler save passwords on Windows 7?

If I save a password for a scheduled task, or in a service's logon credentials, is it safe? It seems to me that Windows saves this password encrypted somehow, but since Windows has to decipher it, so ...