Security is not a product, but a process.

learn more… | top users | synonyms (1)

0
votes
3answers
634 views

Corporate IT have blocked putty [closed]

Before I ask my question I would like to point out I am a web developer who normally uses Stack Overflow and new to Sever Fault, I think this is best place for this question. I have recently started ...
0
votes
2answers
111 views

Run untrusted program from apache

I have a problem to which I already have an implemented solution, but I'm not sure whether it's the best one. In the interests of not biasing any possible responses, I won't say how I've chosen to ...
0
votes
4answers
286 views

Using Windows as a gateway to the internet

My customer currently blocks outbound RDP and SSH, which means that none of their employees can get access to external Windows and Linux boxes (at the console level). However, a need has recently ...
0
votes
2answers
205 views

Registry remotley hacked, Windows 7, need help tracking the perp

I was writing some .VBS code at the office that would allow certain file extensions to be downloaded without a warning dialog on a Windows7x32 system. The system I was writing this on is in a lab on ...
0
votes
2answers
2k views

Setting up PGP FTP

I have a situation where I need to setup a FTP server with PGP encryption. Currently I use FileZilla w/ SSL, but in this case we are required to use PGP. Any recommended products/procedures from ...
0
votes
2answers
1k views

NTFS allow Read/Write/Modify, but not Copy

Is it possible to allow users to modify and read files/folders but not copy them to other locations? Problem is I have a folder that users need to read and modify files in, but I don't want them ...
0
votes
1answer
93 views

Is the data in SQL Azure safe?

I am new to cloud computing. I don't know whether my question is correct. I have an application which has sensitive data. Suppose I had to move the database to the cloud. Is the data in the database ...
0
votes
2answers
50 views

Hosting part of a website under a different domain

I have a website where we want to move the admin portion to a different URL (for security purposes, according to the site owner). So, to make the admin section accessible only from this new domain ...
0
votes
1answer
83 views

You are not authorized to view this page

I had websites in on my server and I stored them in path D:websites... and When I changed the websites to new path D:websites\Pages... this error apear when browse thes websites You are not ...
0
votes
1answer
64 views

Implementing dual control SQL updates in SQL Server

Is there any built in feature in SQL server that allows dual control updates, deletes and inserts? What I mean by dual control is that it requires any two users to collude in order to alter the ...
0
votes
3answers
156 views

Is it safe to use Windows file sharing for copying files to a remote windows server?

I have two servers in different datacenters, connected via a vpn. I want to push very large files from one server to the other. Windows file sharing is easy, but is it safe? I know the data coming ...
0
votes
4answers
461 views

Securing a Linux Server

Normally, I would: Change the SSH to protocol 2, disallow root login, change the port and only allow public keys. Install fail2ban. Install Bastille-Linux and run through it (setting up firewall ...
0
votes
2answers
2k views

How does a proxy server work for anonymous browsing?

I have seen that at many places like colleges and schools block sites like Facebook, Myspace. In some cases people are able to use a proxy sites and proxy softwares(ultrasurf,gpass etc.) to bypass ...
0
votes
3answers
1k views

Limit logins to Drupal to specific IP block

I'd like to allow anonymous from anywhere, while limiting authenticated to one or few IP blocks. Can this be done in drupal 6?
0
votes
3answers
476 views

How do I open private files using a browser through SSH

On my current project I have a few private php scripts and I also have phpMyAdmin in a private area of the server. Is there anyway of opening those files in a browser? I'm currently tunnelling using ...
0
votes
4answers
575 views

Encrypting shell script

We have a few shell scripts for backup/database dump purpose which have username/password info in them. Is there any way do this other than SHC which appears to be having some issues.
0
votes
2answers
141 views

Not exiting out of SSH?

If I don't exit out of SSH, what happens? Do the sessions build up over time? Is it a security risk?
0
votes
2answers
115 views

Permissions, rights, roles, user groups, delegations [closed]

I am looking for a good book, Internet resource that can clearly explain these terms. Really, I would not like to read any Microsoft books or any book about windows or other operation systems. I ...
0
votes
6answers
637 views

Remote desktop to a computer not on the network

I have a secure laptop that, for various reasons, is not allowed to be connected to a network. I need to remotely control that laptop from a desktop computer and be able to send files to it. The two ...
0
votes
1answer
326 views

Permissions required to look up a domain user's group memberships

I am writing some code to look up the members of particular domain groups. Does the user that this application runs as need any particular permissions on the domain to get this information? ...
0
votes
3answers
151 views

permissions on upload folder not working

I have a php script which uploads images to a folder. I have these permissions on the upload folder: drwxrwxr-- 4 user user 4096 2010-06-02 16:20 temp_images Shouldn't these permissions be ...
0
votes
3answers
2k views

How do I disable Windows authentication on a SQL Server instance?

How do I disable Windows authentication on a SQL Server instance?
0
votes
2answers
166 views

Site without “www” is hacked ! [closed]

A site with www.site.com (make with php)works normally but without www "site.com" has been hacked. How can I clean injection? Thanks
0
votes
2answers
2k views

SMTP hacked by spammer using base64 encoding to authenticate [closed]

Over the past day we've detected someone from China using our server to send spam email. It's very likely that he's using a weak username/password to access our SMTP server, but the problem is that he ...
0
votes
3answers
1k views

Deny directory browsing in a Proftpd / Ubuntu Installation

I used this guide to set up a Proftpd installation an Ubuntu 8.04 server... Works well, but the generic user ( userftp ) can run ls and is able to change to any Directory and browse freely on the ...
0
votes
2answers
216 views

Group readable cron jobs a security risk?

I was just wondering, is using a cron job that is group readable a security risk? In this case, the script is chmod 755, and the group is basically a group of the sysadmins on the machine. The ...
0
votes
2answers
169 views

Secure communication between Oracle client and server

As per project requirement i need to to secure communication between Oracle server and client. I have oracle version 11g. What are the configuration steps i need to follow in the client and server ...
0
votes
3answers
117 views

Can an external server be used to encrypt all traffic

My work takes me to a number of places with WiFi connection. I want to be able to encrypt the traffic between my laptop and the internet. Can I do this with a VPN server? What is the best way to get ...
0
votes
2answers
76 views

Where is the Windows registry on a server accessible from?

What's the security risk of storing a password in the registry in plain text? How can you get at it unless you already have admin access, in which case it's a moot point? (I'm only asking because ...
0
votes
3answers
1k views

cPanel configuration appears to allow unauthenticated SMTP - how to fix? [closed]

One of my clients is using a cPanel-based Virtual Dedicated Server that appears to allow unauthenticated SMTP: bash$ echo EHLO | nc mail.clientscompany.com 25 ... 250-SIZE 52428800 250-PIPELINING ...
0
votes
3answers
3k views

Secure ldap problem [closed]

I have tried to config my openldap to have secure connection by using openssl on Debian5. By the way, I got trouble during the below command. ldap:/etc/ldap# slapd -h 'ldap:// ldaps://' -d1 ...
0
votes
2answers
190 views

Unexplained spike in web traffic

Question I am suspicious of an unexplained 1600% increase in traffic and massive slow-down that lasted about 10 minutes. I'm not sure if it was an attempted DoS attack, dictionary login attack, etc. ...
0
votes
2answers
225 views

Securing 2 post rack or securing patch bays?

We have a shared 2 post relay rack in a shared room in our building (Chatsworth brand). It only has patch bays on it (using 12U out of 46). We'd like to prevent anyone from just walking into the room ...
0
votes
1answer
3k views

How to reconcile the following error: “JVM cannot use large page memory because it does not have enough privilege to lock pages in memory”?

Please help!!! I wonder how can I reconcile the following error: "JVM cannot use large page memory because it does not have enough privilege to lock pages in memory"? The settings are: set ...
0
votes
1answer
239 views

Possible to see a list + CPU use of all user processes in a locked down Windows environment?

We work in a locked down privilege environment, to the point that we are not able to see the the list of processes and CPU usage of the windows services running on one of our development servers ...
0
votes
2answers
1k views

What tools and/or procedures to use when hardening IIS7?

IIS6 had some tools for hardening, against attacks and holes. Does IIS7 have the same? If not, are there some standard thingst that should be done to protect it?
0
votes
2answers
3k views

Windows Services - Common Ports to Open in Firewall

I've always had trouble finding firewall port information for some windows-based software/services. For example,http://support.microsoft.com/kb/832017 gives me the ports but there's no differentiation ...
0
votes
2answers
610 views

Firewall: How to Allow Application to Access Database at Database Server

I have 2 machines, one is used as to host application ( Application Server), another is used to host database ( database server). Both are windows XP. Now as the App Server needs to access the ...
0
votes
3answers
4k views

DBO role in SQL Server 2005 versus DBA role?

What is the difference between DBO role versus the DBA role?
0
votes
5answers
7k views

How to log all Internet traffic that goes through a server running Windows 2008?

I have a need to find out how to log all Internet traffic of all users on a network that uses a Windows Server 2008 machine to provide Internet access to the entire network. I know, since this server ...
0
votes
1answer
37 views

Is it a security issue if I have GIT working copy in www?

If I checkout a working copy into the www root of my site, would that be a security vulnerability?
0
votes
2answers
67 views

do i need to filter the OUTPUT with iptables for a dedicated firewall box?

I already know how to setup a firewall using iptables, but after a visit of the IT Security Department, they said i need to filter the OUTPUT, but, it is pointless to me, i really can find an scenario ...
0
votes
1answer
31 views

Blocking requests matching HTTP_X_FORWARDED_SERVER header

Someone has setup a CDN server which is directing traffic to my server and setting the HOST header to match one of my real domains. Because of this, Apache uses the virtual host for my real domain ...
0
votes
1answer
14 views

What are the Security Implications of not fully overwriting a fresh LUKS disk prior to use

I recently read this nice Howto tutorial about doing backups with whole disk encryption using LUKS. Surprisingly for me this tutorial contains as the first part of step #3 a command to overwrite the ...
0
votes
1answer
41 views

How to deny access on files to several groups easily?

Currently I'm working with permissions on files on the network with Windows Server 2012 Active Directory as follows: I set up one domain controller, on the domain controller I create users and groups. ...
0
votes
1answer
43 views

PSAD IPTables logging error

I installed PSAD on my Ubuntu server and then set the IPTables accordingly. But I still get this error by email: You may just need to add a default logging rule to the /sbin/iptables 'filter' ...
0
votes
2answers
65 views

Does Ubuntu 12.04LTS have the OpenSSL heartbleed fix?

Only OpenSSL 1.0.1f or later has the fix for the heartbleed exploit. So does Ubuntu 12.04LTS have the fix? We need to use 12.04LTS for reasons I won't go into, and we can't upgrade. According to this ...
0
votes
2answers
57 views

is there a way from iptables/iproute to forward all traffic to my IDS and also keep the regular flow

The reason of this, is that to catch all packages into my IDS keeping my existing enviroment, so the IDS does not become a single point of failure. If route all my traffic into my IDS and from my IDS ...
0
votes
1answer
77 views

Information regarding netstat output

On netstat, I see my port 22 in connection with 122.225.97.99. Does this mean someone is accessing ssh .. OR is it just something related to ubuntu user@ubuntu:~$ netstat -ntu Active Internet ...
0
votes
1answer
564 views

Getting lots of traffic from russia to an unpublished site

I am currently building a website. Currently nobody knows about it but it is already reachable for testing purposes. Now I saw, that I get a lot of traffic from russia (Its a german website hosted on ...