Security is not a product, but a process.

learn more… | top users | synonyms (2)

0
votes
1answer
162 views

Should the webserver user have write permission on the uploads/ directory?

I always gave to the webserver user full permissions on these dirs: cache/ logs/ web/uploads/ But now I am wondering if the uploads part is 0K. I was thinking that maybe it would be better if I use ...
0
votes
1answer
197 views

Deny URLs with a parent .. in the path in apache

I was wondering if there was a simple way to make apache httpd deny (403) any URLs which contain a parent .. in the path. So far I have tried (ignoring the flase positives for simplicity) ...
0
votes
1answer
249 views

sshd_config versus authorized_keys command parameter

Background: I added OTP token authentication to my web server. I modified the /etc/ssh/sshd_config file with the ForceCommand /token/script command. Problem: I have a local Jenkins instance ...
0
votes
1answer
220 views

Should we migrate our VPN from MSCHAP V2 to something else?

We bought a new Firewall a couple months back, a Netgear UTM9S, and one of the features we enabled is the PPTP VPN to enable access to SQL, Web and File servers for remote users. But now, after ...
0
votes
1answer
50 views

gather information about packet from malicious ip

I have a glassfish server running some webservice and I noticed that there is an abnormal traffic from japan (150.70.x.x) in my iptables log file and I dont have any user in this country . Until now ...
0
votes
1answer
78 views

Is it safe/secure to use NIS for user and group info (no password hashes)?

I have some systems which currently use Likewise Open to integrate into an AD environment, but this creates UIDs/GIDs which are not compatible with the Unix UIDs/GIDs which some other systems use. ...
0
votes
2answers
898 views

IPTABLES for block sync flood over udp

I'm a victim of a sync flood attack over UDP port. This came from a lot of different IPs. The machine, a dedicated server, is an hlds game server, and the attacker overload the UDP ports, this cause a ...
0
votes
2answers
58 views

Not enough priviliges to edit files on his/her home dirve

Just wondering if anyone could help me out on why a user is unable to edit anything on its mapped Home Drive. This is what I currently did. (OS Windows 2008 Standard R2) In AD I setup a home ...
0
votes
1answer
513 views

PureFTPd and symlinks

I'm running Pure-FTPD on centos 5 with cPanel installed. When somebody upload a symlink file called 1.txt and it's a symlink to /partition for example, He can browse all /partition contents from this ...
0
votes
1answer
80 views

Certificate showing up as invalid even though the domain name matches

We just bought a certificate for files.website.com. We have installed it to the file transfer software we are using (Globalscape EFT) but are still getting an error message saying "The site's security ...
0
votes
2answers
180 views

tunneling VNC port and port forwording

I have two machine say A and B. machine A is a public gateway. machine B is in my network and running VNC server on port 6000. I want people should connect on machine A on VNC port say 5900 ...
0
votes
1answer
92 views

iptables trafic limitation not working properly with http

I'm using those rules to limit/stop port scan. iptables -A INPUT -p tcp -i eth0 -m state --state NEW -m recent --set iptables -A INPUT -p tcp -i eth0 -m state --state NEW -m recent --update --seconds ...
0
votes
1answer
118 views

securing a ruby on rails installation

I successfully used this tutorial: http://techbot.me/2010/08/deployment-recipes-deploying-monitoring-and-securing-your-rails-application-to-a-clean-ubuntu-10-04-install-using-nginx-and-unicorn/ for ...
0
votes
2answers
148 views

way to restrict FTPS ports on both sides of connection?

Is there a way to restrict FTPS ports on both the server & client side of the connection? I've already read this answer and I have vsftpd set to restrict passive port usage to a narrow range on ...
0
votes
2answers
380 views

Apache2 ssl with ecc

Is it possible to configure Apache2 to use elliptic curve crypto (ecc) with SSL? This bug https://issues.apache.org/bugzilla/show_bug.cgi?id=40132 appears (to me) to indicate that this is supported, ...
0
votes
1answer
130 views

How to set Jira default groups for new users?

I'm using Jira on demand and I'm trying to change the default groups a new registered user belongs to.
0
votes
2answers
48 views

Safely Execute Stored Procedure Via DMZ Server

I'd like to execute a stored procedure via web application that connects to SQL Server. The procedure is to be activated by clicking a link in an email. The link will have to be accessible from a ...
0
votes
2answers
88 views

Disable Server Login upon Updates Reboot

I have a co-located Dedicated Server running Windows 2008 R2. It is a Live server running my sites (wordpress, joomla, etc) I administer it via Remote Desktop. Everytime I do the Microsoft OS ...
0
votes
1answer
599 views

How to alter inf file to add policies to the Local Security Policy on Windows Vista/7

My research has led to me this point -> open "Security Configuration and Analysis" msc snapin, export template into .inf, open .inf in "Security templates" mmc snapin, but here is where I have slowed ...
0
votes
1answer
161 views

Is it possible to block specific outbound hostnames for SSH SOCKS users?

Is it possible to block connections to specific hostnames for users accessing the web via an SSH SOCKS proxy?
0
votes
3answers
651 views

Purpose of the x509 certificate in metadata files on the IdP side (SSO structure)

In order to implement SSO, I have been working with some IdP and a Shibboleth SP install without being able to answer this question. On the IdP side I have a few metadata files that describes some ...
0
votes
2answers
208 views

What is the best alternative to BFD? Somethings to block DDoS and Brute Force Attacks? [closed]

I have an Ubuntu server which is running Nginx and have a Wordpress site. I need good protection for it. Recently I found that BFD is causing some problems so I had to disable it. Does any one know ...
0
votes
1answer
180 views

Windows Server 2008 R2 Security Log repeated Audit Failure Entries

We seem to be getting a huge load of entries in our security log with the following details: The Windows Filtering Platform has blocked a connection. The source IP address and port change for each ...
0
votes
4answers
575 views

Is it possible to sign email with digital signature on server side?

I have nice iRedMail server (postfix, dovecot, policyd). One of my client apps sends email via this server. And client want to sign it with digital signature on server side. Is it even possible to do ...
0
votes
1answer
1k views

Is a local-only MAMP installation secure?

I just installed a basic MAMP server (on a Macbook Air 11" running OSX Lion) with no settings changed except for some php.ini things like "memory", "file_upload", etc that are more script related. I ...
0
votes
1answer
2k views

socket: Connection refused on NGINX web server

I'm trying to connect NGINX web server using Passenger for a Rails project. I've checked my configuration file, and i gave connection to sites over port 883. This is my configuration file as ...
0
votes
1answer
4k views

Fortigate 40c Firewall Configuration

Does anybody know if is it possible to Un-bridge ports on forgiate 40c? I want to use the fortigate 40c to define and control (block/allow) port traffic for the following 4 ip ranges (each ip range ...
0
votes
1answer
134 views

Best Practice for Remote Development

I posted on webmasters, but someone suggested I ask here... http://webmasters.stackexchange.com/questions/26517/securing-access-to-server We have developers who work remotely and servers at an ISP. ...
0
votes
1answer
406 views

Changing the Internet Explorer's setting Initialize and script ActiveX controls not marked as safe for scripting

We are currently facing a debate regarding the Internet Explorer's setting 'Initialize and script ActiveX controls not marked as safe for scripting'. I have been maintaining an in-house application ...
0
votes
1answer
70 views

Good resource for evaluting AV and anti Malware software?

I am looking for good resources to use to compare the effectiveness of various antivirus/antimalware software solutions. In particular, I am comparing Windows Security Essentials against Symantec ...
0
votes
3answers
3k views

Windows Server 2003 W3SVC Failing, Brute Force attack possibly the cause

This week my website has disappeared twice for no apparent reason. I logged onto my server (Windows Server 2003 Service Pack 2) and restarted the World Web Publishing service, website still down. I ...
0
votes
2answers
929 views

open_basedir and wordpress

Essentially i found out you can prevent one site which has a security hole from modifying/reading another site via "open_basedir". However when i upload media files using wordpress i got the error ...
0
votes
1answer
171 views

Rule to block IP address not working

Looking at my Event Log I see that right now an attempt is being made at brute forcing my 'sa' user for Sql Server on my Windows Server web edition box. I know that firewall rules are not the only ...
0
votes
1answer
186 views

Draytek Vigor 5510 pro blocking attachments un-necessarily

I have installed Draytek vigor pro 5510 which I may say is one of the hardest ones on the planet to configure but I have now gained success with it in blocking URL(s) successfully but when I implement ...
0
votes
1answer
846 views

When is it safe to turn open_basedir off?

If I have PHP with Suhosin running as CGI under Apache SuExec, is open_basedir necessary? I've heard it's good to have in a shared hosting environment where the sites are outside of your direct ...
0
votes
1answer
571 views

Application Pool User Permissions

I've been in the process of updating our web servers recently to use domain accounts for IIS Application Pool identities. I know with IIS7 Microsoft created the idea of the ApplicationPoolIdentity ...
0
votes
1answer
605 views

Allow Non-issued Security Certificate for Localhost Via Group Policy

I have an application at https://localhost:4321 When using Internet Explorer 8 I'm greated with a "There is a problem with this website's security certificate" message with the big red X etc... Two ...
0
votes
1answer
80 views

How can I make UrlScan test extensionless urls?

If I use UrlScan to block common SQL Injection attempts on asp- and aspx-files, I would do something like this: [SQLInjection] AppliesTo=.asp,.aspx DenyDataSection=SQLInjectionStrings ScanURL=0 ...
0
votes
1answer
191 views

Proper way to isolate PHP applications when using Apache and mod_php

I am running some Wordpress blogs for friends/family on a linux box and I would like to prevent the compromise of one from being able to inflict damage to all. It hasn't happened yet, but one of the ...
0
votes
1answer
1k views

suexec policy violation: What were these guys up to?

Have just assumed responsibility for a new client's site. OS is Linux. They had a cgi-bin directory below document root. I was looking at my error.log for an issue with a script and found a number ...
0
votes
2answers
213 views

Best practices for PHP configuration on shared server [duplicate]

Possible Duplicate: Tips for Securing a LAMP Server On a Linux based server, what are some of the best practices for securing PHP? What functions should be disabled (ex. exec, exec_shell, ...
0
votes
3answers
670 views

Batch file and other scripts on windows 2008 r2

is thee a way to make a all the scripts in a specific folder running without the need of the UAC prompt? or maybe using power-shell to run the scripts without using "Set-ExecutionPolicy Unrestricted" ...
0
votes
3answers
475 views

ssh connection being assigned wrong IP address

I have a server running centOS 5; GLAMP. This is a local only setup--no outside access. netstat reveals an ESTABLISHED ssh connection from a machine on the LAN. This machine is running XP, and has ...
0
votes
1answer
32 views

Changing a security template setting in windows

I'm trying to learn about windows security templates on xp. In my example, I want to change a setting on a windows xp machine. I generate the sdb and .ini file then apply it using cmd /c echo y | ...
0
votes
1answer
766 views

Is someone trying to hack my site? How to block certain URLs in Nginx?

On the past few hours my server is getting pretty loaded, mostly due to a lot of load requests. I've seen this thanks to the StatCounter realtime stats, which shows that the "Came from" page is: ...
0
votes
2answers
576 views

Methods to prevent malicious crawlers/scrapers and DDoS Attacks [closed]

From last couple of weeks I have been experiencing bot attacks on my site. Basically crawlers are running on the site at a high frequency rate resulting in load increase. This results in bandwidth ...
0
votes
4answers
1k views

Despite all the information available, I'm stumped on passwordless logins. Help?

So I have my home computer & a server. I want the server to be able to SSH into my home computer w/out a password. I have followed various tutorials and can ssh from home to server with no ...
0
votes
1answer
133 views

Understating certificate authority nesting

Given we have the following network/CA structure: Win2K8R2 - Root CA - no idea where its' certificate is? Win2K8R2 - Sub CA - obtained CA certificate from Root CA Win2K8R2 - OWA 2010 (Basically, a ...
0
votes
2answers
158 views

FTP, Windows server 2008 r2, windows firewall problems

Okay so Google is letting me down just due to the sheer volume of stuff related but not specific to my problem that I could find. I have a c# program that connects to various ftp sites and downloads ...
0
votes
2answers
91 views

reporting ip adresses to ISP? [closed]

i've got someone claiming to have a dump of my database. i'm not sure whether he is talking baloney or not. but just in case, how would i go about reporting such actions to his ISP?