Security is not a product, but a process.

learn more… | top users | synonyms (1)

0
votes
1answer
61 views

Do blocking input ports increases security?

1-Do blocking unused input ports in firewall increases system security? How? (as there is no daemon listening on those ports anyway) 2-Do dropping those unused ports will positively or negatively ...
0
votes
1answer
871 views

Powershell script for specifically OU

Need help with hte following, a script that can export all members of a specifically OU with in that multiple security groups. Location of the OU is; OU=Security Groups,OU=Public ...
0
votes
1answer
63 views

Diagnosing heavy bandwidth usage

I run a couple of IIS web servers, one on win server 2008 R2, the other on 2003. Both fully patched and up to date, with AV. Running on a No NAT connection with 8 WAN IP's The 2003 machine seems to ...
0
votes
1answer
162 views

How to change password complexity for mailbox in exchange 2013

I find the default password policy in exchange pretty weak (only 6 char.). Is there a way to change this password policy ? e.g. : Minimum 1 cap, Minimum 8 letters. Thank you !
0
votes
1answer
36 views

What is the name of this “security leak finder” application?

They said that there were some vulnerabilities, and then pointed these results: What is the name of this application?
0
votes
1answer
409 views

Is it possible to create a read-only user account for security auditing purposes?

An organization requires several administrators to have a role of a security auditor. They must have read-only (via network/remote) access to Windows Server 2008 / R2 systems and have permissions to ...
0
votes
1answer
576 views

Nginx Password Protect Directory Downloads Source Code

I'm trying to password protect a WordPress login page on my Nginx server. When I navigate to http://www.example.com/wp-login.php, this brings up the "Authentication Required" prompt (not the WordPress ...
0
votes
4answers
100 views

Email + data server for a small company needed?

I am currently working with a small company (10 people), whose main business has nothing to do with IT. But we have some IT-Infrastructure, namely an aging Small Business 2003 server, which runs ...
0
votes
1answer
73 views

Should I still disable root if I disable password authentication and enable only key authentication?

I'm new to the linux world and I've been reading a few tutorials on security. I've seen some questions on StackExchange tackling this subject, but from what I've seen, none of the answers clarified ...
0
votes
2answers
79 views

Remote login terminal

I have an unusual request. I have a box - running Fedora 19 - that I'm using as a server. I have a crappy Atom netbook - also running Fedora - that isn't good for anything. I was wondering if there is ...
0
votes
1answer
60 views

Authorizing users to SSH into machine - where to configure?

Ubuntu Trusty here. I'm having some trouble deciding where in the system I should configure which users are to be allowed to ssh into the machine, and which keys they're allowed to use. I've ...
0
votes
2answers
87 views

How to restrict access to root to daemon user?

I have Apache 2.4 with PHP 5.5.14 installed on latest Debian. According to Apache security tips&tricks I've set my httpd.conf to this: <Directory /> AllowOverride none Require all ...
0
votes
1answer
44 views

Restricting access using IP address / Network Redirection?

I have a situation where we have a web server (lets call it A) that is hosting a set of HTTP based services. Due to some client requirements, this web server is not open to the outside world but ...
0
votes
2answers
156 views

nginx as reverse proxy on front of Apache - protection and security

I'm just concerned whether to install Nginx WS alone or nginx as reverse proxy on front of Apache based on security and protection. If I had to choose nginx as reverse proxy on front of Apache, would ...
0
votes
1answer
62 views

Host says server is affected by malware, anyone knows this one ? What to do? [duplicate]

My host sent a notification that says server is infected with a malware, it doesn't seem very popular. The Symantec site about this malware shows windows machines as targets, but not CentOS. Anyone ...
0
votes
2answers
115 views

Should munin be password-protected?

We use Munin at work. There is a Munin install - which right now is open to the world. An admin doesn't think he needs to password-protect it. What's the worst that can happen? How can I convince ...
0
votes
1answer
151 views

What are the benefits of having a data center located geographically far away from your customer's office? [closed]

Was just reading through an article on data centers as linked: http://www.theage.com.au/it-pro/business-it/what-to-look-for-in-a-data-centre-20131122-hv3qj.html Appropriate quote from article below: ...
0
votes
3answers
81 views

benefits of iptables on VPS? [duplicate]

Say I have a well updated Linux VPS serving HTTP content on port 80 using apache. What would I gain by enabling IPtables? I can see no obscurity gains since the machine has a port open. Also, since ...
0
votes
1answer
169 views

Why can a local root turn into any LDAP user?

I know this has been asked here before, but I am not satisfied with the answers and don't know if it's ok to revive and hijack an older question. We have workstations that authenticate users on an ...
0
votes
1answer
79 views

what would happen when macchanger to gateway mac address? [closed]

I thought arpspoof GATEWAY_IP -t VICTIM_IP can be prevented by add a static arp entry on victim side, i.e. arp -s GATEWAY_IP GATEWAY_MAC I read ...
0
votes
2answers
3k views

Allow service to interact with desktop

DC OS - Windows Server 2008 R2 Std Client OS - Windows XP, Windows 7 I have implemented Security policy through Network Policy Server and enabled Wired AutoConfig Services Automatically. While ...
0
votes
1answer
56 views

Is a VPN right for restricting server access?

I would like to set up a Few QA servers for a web application, under the app domain, however I would not like these servers to be accessible to just everyone from the Internet. Ideally, the QA team ...
0
votes
3answers
66 views

Limiting the connection source in firewall

I'm new at server management, and wrote an IPTables script for firewall. I'm very concerned about the security of my server, and thus I'm wondering about something that I read often from people using ...
0
votes
1answer
147 views

What are the security benefits of using a proxy server?

In Wikipedia is written: Security: the proxy server is an additional layer of defense and can protect against some OS and Web Server specific attacks. However, it does not provide any protection ...
0
votes
1answer
133 views

How to configure fail2ban so it bans login attempts based on the structure of the attempted password or username

I want to set up two filters for fail2ban: If the user tries to login with a password that is less than 10 characters ban them. And if the user tries to login with a password that is more than 10 ...
0
votes
1answer
87 views

A way to only allow some ports on windows server

I have been trying to make this work the last few hours but haven't come far. I have a windows server 2008 and a set up Local Security Policy firewall yet "no" inbound rules (yet). My domains look ...
0
votes
2answers
3k views

fail2ban apache-noscript not working

My debian server has come under attack recently and I've been poring over the logs to see what I can do to harden it. I've been running fail2ban for a while but I've noticed the apache-noscript jail ...
0
votes
3answers
180 views

What compatibility trade-offs do we need to make in order to use a hardened SSL config for Nginx?

I found some hardened SSL settings in github.com/ioerror/duraconf. Here is the header from the config: This is an example of a high security, somewhat compatible SSLv3 and TLSv1 enabled HTTPS ...
0
votes
1answer
172 views

Possible DNS hijacking at ISP

I was about to login to control panel of our hosting provider and it went to some other webpage which was not my hoster's server (I confirmed with them that the IP is not theirs) ...
0
votes
2answers
180 views

Same domain SMTP unauthenticated message relay [closed]

While I was doing some testing on an SMTP server I was able to successfully send mail from knownid@myserver.com to knownid@myserver.com through telnet without any authentication. From a risk ...
0
votes
3answers
75 views

No directory protection for apache

This looks weird, I have an apache httpd server in a CentOS box, which has this security problem: Virtual hosts are enabled, the site is in /data/www/vhost2/index.php It looks like that if I tell ...
0
votes
1answer
212 views

Upgrading NFS/NIS Shared `/home` Setup

I am currently managing a network of workstations running different flavours of Ubuntu. The server (also Ubuntu) runs a NIS server and exports a shared /home directory over NFS (in v3 compatibility ...
0
votes
1answer
1k views

Blocking repeated http requests in Apache behind a load balancer

I have a number of EC2 servers on AWS running apache behind a load balancer (ELB). Every now and then some IP address abuses the API hosted on the EC2 servers and causes a denial of service. I have no ...
0
votes
1answer
763 views

Bastion host for PCI compliance

A client in the retail industry has a network with point-of-sale (POS) terminals that connect to a POS Server. Additionally, most of the Windows workstations in non-sales areas also connect to the ...
0
votes
1answer
73 views

How to securely store sensitive data on a shared-hosting provider while accessible to server-side scripts?

I want to store some sensitive data on my hosting provider which is a shared-hosting, lets say for example on MySQL, and i want it to be accessible to the website(server-side languages like PHP) ...
0
votes
1answer
138 views

Unsafe to run Apache as LOCALSYSTEM on Windows Server?

On my server (Windows Server 2008 R2), I have installed a couple of programs coming with a web interface. As I want to be able to access those web interfaces from outside my LAN, the relevant ports ...
0
votes
1answer
389 views

Hardening CentOS 6 web server security [duplicate]

There is a web server installed as a virtual machine in the cloud. I've configured it myself, and it has two corporate web sites on it. I'am not planning anything else to be there. So before it goes ...
0
votes
1answer
242 views

Using authority-given .cer file to login on remote servers on OS X

A few months ago I bought a certificate from a popular certification authority (Certum). I used it to sign emails, but today the admin at my work asked me to connect to our main server via ssh. He ...
0
votes
1answer
1k views

new user and problems with ssh key configuration (pub vs pem files)

We access our ubuntu server from outside over ssh this way : ssh -i securityTier.pem -l someUsername serverDnsName I need to create new user which will use separate *.pem file. So far i created : ...
0
votes
1answer
60 views

Linux user permissions setup for monitoring tool

We have external monitoring tool which will access our linux machines through SSH and will read top/ping/netstat/disk activity. As i am creating separated ssh key and separated user for this purpose i ...
0
votes
1answer
238 views

Restrict access to SQL Server backups based on user?

Let's say I have MS SQL Server 2012 Standard installed on Windows Server 2008 R2 Standard. It's a single SQL instance that runs under the windows domain account DOMAIN\sql_user. There's two databases, ...
0
votes
1answer
148 views

Global Authority for Blacklisting IPs

I know that there are few common ways to block attacking IPs (such as deny in htaccess). Additional to that, we could get a huge list of IPs to block from misc sites such as : ...
0
votes
1answer
149 views

DB Detection: MySQL >=5 (Auto Detected) Method: GET Type: Integer (Auto Detected)

Could someone please tell me which penetration-testing tool leaves behind a page that looks like this? DB Detection: MySQL >=5 (Auto Detected) Method: GET Type: Integer (Auto Detected) ...
0
votes
2answers
4k views

Windows: disable remote access of local drive, even by domain admin

We have a network of Windows 7 PCs that are managed as part of a domain. What we want is for the domain admin to be unable to view the PC's local drive (C:) unless he is physically at the PC. In ...
0
votes
2answers
303 views

Determine windows server attack? Should I monitor the server and block IPs all the day?

While Viewing the windows server 2008 event log, I always find many security events 4625/logon as follows: **An account failed to log on.** Subject: Security ID: SYSTEM Account Name: ...
0
votes
3answers
844 views

iptables rule to stop DDOS [duplicate]

My server is undergoing a ddos attack with the traffic in my apache logs appearing like: ip address - - [11/Apr/2013:01:01:04 -0600] "POST / HTTP/1.1" 416 31 "-" "Microsoft Internet Explorer" ip ...
0
votes
1answer
317 views

Network setup on AWS for NFS

I have a number of servers which all need external IP addresses, as they provide different services and need to be invidually accessible: server1.mydomain.com > 1.2.3.4 server2.mydomain.com > ...
0
votes
1answer
41 views

Limit SNMP access to VPN

I need to deploy about a thousand machines across the US later this year. I'm hoping to use SNMP to monitor their (collective and individual) status. The whole block will be connected via OpenVPN so ...
0
votes
3answers
70 views

watch file to see whos accessing/writing it and log it

I am facing some malware problems on my webserver. I updated third party software such as Wordpress to the latest version, disabled root logins and my users password complex enough but still someone ...
0
votes
1answer
194 views

DNS Reflector Attacks — protection

[~]# /usr/bin/dig +recurs @MYIP www.facebook.com ; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.10.rc1.el6_3.5 <<>> +recurs @MYIP www.facebook.com ; (1 server found) ;; global options: ...