Security is not a product, but a process.

learn more… | top users | synonyms (1)

1
vote
1answer
893 views

How can I monitor user access to a shared folder on Windows SBS 2008

I have multiple shared folders on Windows SBS 2008 server. I need to be able to tell if a domain user is accessing these shares and copying large quantities of files to their laptop. Is there a way of ...
1
vote
1answer
728 views

windows 2003 server security audit -logging computer IP

We have a network with 1 primary domain controller and 3 additional domain controllers. We're trying to identify a user who attempted to use someone else's credentials to access some resources in our ...
1
vote
0answers
61 views

how can I prevent system changes w/o Group Policy Object (GPO)?

I'm getting started with running a terminal server on a virtual private hosted site. The host operator disallows many security systems including access to the group policy editor (GPO). The problem I'...
1
vote
2answers
5k views

How to use max_post_size and upload_max_filesize in an Apache <Location> directive?

My users want to upload large files (50-100MB) in the CMS backend of a PHP web application. I could adjust the upload_max_filesize and post_max_size settings for PHP globally in this virtual host, but ...
1
vote
1answer
104 views

NAP solutions for windows network

I am looking for a NAP solution for a network. Either an Appliance or software to run on a windows server. I have played with windows server 2008 r2 NAP but i dont think this is going to be a good ...
1
vote
2answers
850 views

What risks are associated with allowing anonymous access from the LAN to the internet?

I have a network of around 60 users who have access to the internet through ISA Server 2004 and a hardware firewall. As a matter of course I've always blocked anonymous requests to the outside world. ...
1
vote
1answer
166 views

closing ssh ControlPath

I found the instructions on kerneltrap's mail archive: "scp batch mode?" to be insightful an useful, however when I issue the command to close the connection # Bring the connection down. ssh -S /tmp/...
1
vote
1answer
130 views

Security Restrictions Downloading From the Internet

For some reason since we rolled out IE7 to the estate users are unable to download from the Internet, they get an error message "the operation could not be completed due to restrictions on the ...
1
vote
0answers
30 views

How to track when full access rights were issued in Exchange 2007?

Does anyone know if there is a way to see when a user had been issued full mailbox rights in Exchange 2007. Or is there a way to check which commands were issued when and by whom? Thanks ashln
1
vote
0answers
211 views

Window 2003 Server - Logon Failure error message in Event Viewer

I received a lot of event logged in the event viewer with this message. I notice it is always the same user id which encounters this error. The user id is use by an application to access the ...
1
vote
1answer
2k views

XAMPP vs WAMP security and other on Windows XP

Not long ago I found WAMP and thought it was a God send because it had all the things I wanted/needed (Apache, PHP, MySQL, and phpMyAdmin) all built into one installer. One thing about WAMP has been ...
1
vote
2answers
82 views

Used SQL Svr 2008 Config Manager to Set Service Account to Local System: What Did It Change?

Direct shot to foot moment... While setting-up individual non-admin accts for MSSQLSERVER services, I temporarily set Server service login to Local System account. I remembered later that: SQL ...
1
vote
1answer
77 views

Files deleted. What could have happened?

I'm having a weird issue today. I was writing and testing out some simple cgi scripts this morning when I realized that I couldn't run them from one of the other computers on the (windows) network. So ...
1
vote
4answers
394 views

PHP scripts owned by www-data

I use to have owned php scripts on a dedicated server by user "webroot". It would be easier for coding and administration if the scripts were owned by the apache2 user, "www-data" on my system. Also ...
1
vote
0answers
726 views

least privilege account for WinRM remote calls on Windows 2008 Server

ServerFault Windows experts: please consider the following use case: I have 2 Windows 2008 Server SP2 boxes let’s call them – SOURCE, CLIENT. On SOURCE: I create a new user called 'normal'. Just a ...
1
vote
0answers
627 views

Windows Server 2008 Web Edition can't change permissions

I'm used to using Windows Server 2003 but decided to get a Vista Web Edition for IIS7 and to run our MVC applications on. I have installed copSSH that I use for SFTP, and when I upload my files I am ...
1
vote
1answer
211 views

Oracle Ordcom and Wallet Coexistence Problem

We use Oracle's ORDCOM infrastructure on our 11.1.0.7 database to interact with a COM object. The COM object doesn't do anything with the database. This process has been working fine for several years....
1
vote
1answer
329 views

Tutorial on using Advanced Sharing (instead of Simple Sharing) on Windows XP and 7

We've always used Simple File Sharing. But I'm having some network difficulties with a new Windows 7 PC and I'm thinking we should be using Advanced Sharing. But as I got into it I realized it's far ...
1
vote
0answers
838 views

Securing portmap with multiple interfaces

I have an Ubuntu 9.10 server with a public and private interface. I'd like to run portmap only on the private interface for security, so in /etc/default/portmap I had set: OPTIONS="-i 192.168.122.1" ...
1
vote
2answers
417 views

Disable File Copy between VMs

When I access multiple virtual desktops via VMware View 4, I'm able to copy files between VMs. The VMs are located in different isolated networks. This is a security concern in my organization and how ...
1
vote
2answers
1k views

force security permission through the directory tree?

Currently, there is large directory tree with differnt security permissions. We need to add another Security permission for all of the folders, and files without changing all the inherited ...
1
vote
3answers
2k views

How useful is Bitlocker without a TPM?

When you install Bitlocker on a system without a TPM you need to put the startup key on a flash drive. Since you can hardly expect the user to store his notebook and flash drive separately, would ...
1
vote
1answer
506 views

XML Schema For MBSA Reports

I'm in the process of creating a script to run the command line version of Microsoft Baseline Security Analyzer (mbsacli.exe) against all of our servers. Since the MBSA reports are provided as XML ...
1
vote
2answers
391 views

.htaccess redirect - Is it secure?

This works; I'm not having trouble, but I want to be certain that this is bulletproof. I came up with a neat little .htaccess redirect, but I am not sure if it is secure; do you know? <IfModule ...
1
vote
1answer
255 views

IIS6, NETWORK SERVICE and IIS_WPG

Is it correct that IIS6, by default, runs under the NetworkService account (NETWORK SERVICE)? and that NetWorkService is a member of the IIS_WPG group? Reference: Microsoft TechNet page on IIS6 ...
1
vote
1answer
134 views

Script for checking the nologin accounts and then disable the account

"Could you please share the scripts which does the below ?" I have written a script that scans all the relevent logs daily, makes a list of people that have had any activity that day, and maintains ...
1
vote
2answers
2k views

Turn off “isolation mode” in Vista Task Scheduler?

In Windows Vista (and I assume Windows 7) Microsoft has improved the security of processes that are run through the Task Scheduler, namely http://technet.microsoft.com/en-us/appcompat/aa906020.aspx: ...
1
vote
1answer
126 views

Security issues with Web Services and SSRS

I have a developer who would like to interact with the web services on the SSRS server. The way I understand it is that they would like to populate a list of reports in a folder so that the user can ...
1
vote
1answer
430 views

What user should an application pool bound to a Wordpress site use in IIS? [duplicate]

I've installed a wordpress site in a dedicated server with Windows 2008 server running IIS7 but I'm a little confused on what's the most secure way to set the appropriate file settings. The thing is ...
1
vote
2answers
281 views

ModSecurity Error Entries

Recently, I was passed some error logs to take a look into, since we'd had some network spikes recently. However, I've never worked with modsecurity (I'm a programmer just doing this since we don't ...
1
vote
2answers
91 views

Unknown Directory Shortcut File or Mount | VISTA [closed]

I have this weird mount icon after a trojan cleanup days ago for a client. The icon when clicked takes you to the My Computer guid. The file properties are Type: File, Location: C:\, Size: 6.76. If we ...
1
vote
1answer
657 views

Firewall UDP Flood Dos/DDoS

Recently I have been suffering from what appears to be a UDP query flood attack. I am looking for a way to block the attack using a software firewall such as iptables, this should be possible, as ...
1
vote
2answers
20k views

Event 4625 Audit Failure NULL SID failed network logons

In 3 separate systems, the following event is being logged many times (between 30 to 4,000 times a day depending on the system) on the domain controller server: An account failed to log on. Subject: ...
1
vote
2answers
53 views

How do I drop requests from dig?

Basically I'm getting tons of request to my named/bind service, basically those requests are being rejected by named, Those are the messages i get, from tons of ips., How extacly can I drop those ...
1
vote
1answer
1k views

AWS: network ACL blocks outbound traffic

I am implementing a REST service in Amazon AWS. The internal servlets listen on numerous ports like 8080 and 9000, and an Apache configured as a reverse proxy serves them with proper URL schema using ...
1
vote
1answer
106 views

What design considerations should go into a proper Bitcoin exchange (or any other automated online trading system)? [closed]

Following the epic fiascos of the two main Bitcoin exchange sites (Mt.Gox, which went offline due to sheer traffic load during the worst market crash in the history of Bitcoins, leaving people with ...
1
vote
4answers
3k views

Exchange Security Policy and Android

How does one go about changing the Exchange security policy to allow pins and other security options on Android devices?
1
vote
1answer
197 views

TCP forwarding over SSH with socat or any other tcp forwarder, on sshd with tcp forwarding disabled

What I am trying to do is have a user that can port forward, but only to a certain host and port. I've disabled TCP forwarding over ssh for that user, and according to the manpage for sshd_config I ...
1
vote
1answer
75 views

Card Reader and Software

I am looking for a card-reader solution that includes not only the physical card-reader but a method to read/program the cards. The end goal is have to give my end users a card-reader and then an ...
1
vote
4answers
127 views

Security and Protection for Win Server 2003

Is there any Security software recommendation for Windows Server 2003 as a Web Application/Website server? Or any particular settings I should adjust before making a website to be Live.
0
votes
4answers
507 views

Removing malicious scripts

I unfortunately found today that I have a malicious script on my website. It is chmodded 644, but I cannot delete it. Directories above it would permit me to delete it normally. The interface is ...
0
votes
4answers
134 views

Preventing programmer from copying information

Is there a way to block files, coding, etc. from being copied when giving a new programmer ftp access to do research prior to submitting a quote?
0
votes
8answers
604 views

Basic questions about running a web server

I'd like to run a web server to experiment with. I'm going to to use Mongoose because it looks lightweight and simple enough to understand everything that it is doing. I have a Debian box to run it ...
0
votes
7answers
2k views

How to protect myself from promiscuous mode?

I have read that some network adapters can switch to promiscuous mode and get all the packets sent by my router. We have multiple computers here connected to the same router. They all have the WEP ...
0
votes
3answers
77 views

Letting tenants host their own data [closed]

We are developing a web app and planning to deploy it in a multi-tenant model. However, some of our potential customers are having a great deal of discomfort with the idea of not having the control ...
0
votes
2answers
193 views

Is this script nefarious?

This is sitting in my web site's cgi-bin. Should I be concerned about it? #!/usr/bin/perl print <<HTML; Content-type: text/html <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 ...
0
votes
4answers
314 views

New system administrator - Any security suggestions? [closed]

We hired a new system administrator and this will be the first time delegating this sensitive task to a third person. He's a good guy but we are still wondering about security. What do you recommend ...
0
votes
4answers
3k views

What Linux server distro is best for a dedicated webserver and a file server? [closed]

I just wanted to know which Linux server distro is most compatible/stable for a dedicated Web Server and a separate dedicated File server. And also please suggest me for a file server what would be ...
0
votes
4answers
350 views

Security policy: servers without root/administrator password

I am considering running public web and application servers with blank root/Administrator passwords, and I'm wondering whether this might be a bad policy. I see several advantages of having no ...
0
votes
5answers
341 views

Is blocking all traffic to MySql port, EXCEPT from own server IP, a good security measure?

As the title says, would this help? Imagine a classifieds website, where users simply login, logout, post classifieds, delete classifieds etc... All with PHP and mysql. I have my own server, with ...