Security is not a product, but a process.

learn more… | top users | synonyms (1)

0
votes
2answers
507 views

How to transfer large files between two remotes by using a third machine?

I need to automatically mirror a large amount (terabytes) of files in two unix machines over a slow link (1 Mbps). This needs to be done frequently, but the data doesn't change too much (delta ...
0
votes
1answer
59 views

Hyper-V Role on Server 2008 R2

So I read over a dozen articles regarding Hyper-V and iSCSI (host or VM using software) and they both have pros/cons about each. However, the host-based has better performance. So now that I decided ...
0
votes
2answers
410 views

Could it be that “chkrootkit” just doesn't like .hmac, .packlist, and .relocation-tag files?

I just cleaned up my hacked CentOS server (due to not updating since versino 5.3). But still, "chkrootkit" says this: Possible t0rn v8 \(or variation\) rootkit installed ...
0
votes
1answer
160 views

Security Risks of catch-all email address [closed]

What additional security issues does an MTA and email client face if a catch-all email address is setup on an sub-domain (that isn't published/publicly listed anywhere) compared with setting up ...
0
votes
2answers
1k views

Scripting Local Security Policy settings

We have a bunch of Windows 7 laptops out in the field. They're not in a domain. We'd like to build a script/batch file that we can send to each machine and, when run, configure screensaver locking, ...
0
votes
1answer
326 views

sshd_config versus authorized_keys command parameter

Background: I added OTP token authentication to my web server. I modified the /etc/ssh/sshd_config file with the ForceCommand /token/script command. Problem: I have a local Jenkins instance ...
0
votes
1answer
550 views

Windows Task Scheduler Security Issue [closed]

Using the Windows Task Scheduler allows non-administrator users to gain access to administrative rights. Normally, Windows prevents execute applications which need to have more rights. A message ...
0
votes
1answer
123 views

Can tcp_wrappers be bypassed?

I utilize TCP wrappers to secure services running on my machine. Things like webmail, cpanel, whostmgrd, and so on. I use the hosts.allow/hosts.deny files to facilitate this. Is it possible for an ...
0
votes
1answer
575 views

Allowing any file to upload on server and security risks

We are having a project that allows users to backup there data to server through php upload,running on Linux server. If users upload any executable file it will be automatically renamed to some ...
0
votes
2answers
694 views

vsftpd whitelisting

How do you whitelist IPs for the service to allow only certain subnets on? Do I use IPTables or is there an easier way like IPWrappers Do you have to register the service for it to work with ...
0
votes
1answer
2k views

Lots of Logon/Logoff events in the event viewer windows 2003

I seem to be getting a lot of these entries in the Security event viewer. Around 8-12 every hour. I am wondering if a) I should be worried about it? or b) what actually is going on, Can anyone help? ...
0
votes
2answers
501 views

CentOS security for lazy admins

I'm running CentOS 5.5 (basic LAMP with Parallels Power Panel and Plesk) and have thus far neglected security (because it's not my full-time job, there is always something more important on my ...
0
votes
2answers
69 views

Secure every connection between endpoints

Sometimes one has to work with software that hasn't built in security-features for non-local connections. In fact, some client-libraries are sending credentials in clear text over the wire. On the ...
0
votes
1answer
127 views

Securing Erlang / Ubuntu server

I have written a web service in Erlang using mochiweb and jiffy and now face the task of deploying it to production. Since it is going to be open to the public I was wondering how secure Erlang ...
0
votes
1answer
176 views

Weird Apache Error Log [duplicate]

Possible Duplicate: What are these weird access requests? [Thu May 03 11:39:36 2012] [error] [client 200.159.40.31] File does not exist: /var/www/w00tw00t.at.blackhats.romanian.anti-sec:) ...
0
votes
2answers
961 views

Reverse Proxy - should it be a different technology stack?

Got a skeptical question about a reverse proxy setup I'm considering. I've currently got a pair of load balanced application servers in the DMZ (S1,S2 in figure below). These accept inbound requests ...
0
votes
3answers
1k views

Purpose of the x509 certificate in metadata files on the IdP side (SSO structure)

In order to implement SSO, I have been working with some IdP and a Shibboleth SP install without being able to answer this question. On the IdP side I have a few metadata files that describes some ...
0
votes
1answer
533 views

Optimized LAMP/LEMP stack scripts

In the "let's try not to reinvent the wheel" perspective, I've been looking for a packaged LAMP (or LEMP) stack for some time now, not only the basic Mysql, Apache , PHP etc... but ideally stuff like ...
0
votes
1answer
1k views

CentOS apache startup config file security error

I am setting up a NetDisco machine on CentOS, which entails adding an include to the apache httpd.conf file. When I start apache by running "httpd" from a root command prompt, the process launches. ...
0
votes
1answer
427 views

ossec email alerts

Just installed ossec and sendmail however can't able to get alerts to my gmail from ossec. I am able to see the alerts on the sendmail localhost, however alerts seem to be not forwarding to gmail.
0
votes
1answer
180 views

PHP Permissions (chmod vs. suEXEC)

I have an application that claims to require chmod 777 permissions for two of its directories (and their subdirectories). Instead of doing that, would suEXEC be a more secure alternative?
0
votes
4answers
842 views

Is it possible to sign email with digital signature on server side?

I have nice iRedMail server (postfix, dovecot, policyd). One of my client apps sends email via this server. And client want to sign it with digital signature on server side. Is it even possible to do ...
0
votes
2answers
1k views

Save any file directly on Windows server instead of the user's PC?

I am using a Windows 2003 R2 server and an XP system. I want to save any file (like- .doc, .xls, audio and video file) directly on the server from XP system. There must be no option to save the file ...
0
votes
1answer
1k views

How to make sure www directory is secure?

I managed to order a new VPS account from linode I have installed Ubuntu 10.04 LTS with 'LAMP Stack' StackScript. I notice the website directory is located in /srv/www/ and I thought this is quite ...
0
votes
2answers
5k views

Fortigate 40c Firewall Configuration

Does anybody know if is it possible to Un-bridge ports on forgiate 40c? I want to use the fortigate 40c to define and control (block/allow) port traffic for the following 4 ip ranges (each ip range ...
0
votes
1answer
86 views

Good resource for evaluting AV and anti Malware software?

I am looking for good resources to use to compare the effectiveness of various antivirus/antimalware software solutions. In particular, I am comparing Windows Security Essentials against Symantec ...
0
votes
2answers
122 views

Who executed that particular command on my centos VPS

I have noticed that an unknown mysqldump command is being executed on my system. But I have not configured my system to issue that command. Following is the output when I do ps aux | grep mysqldump ...
0
votes
1answer
764 views

Custom www-data user in Ubuntu

I use apache2-mpm-itk to run one of my web applications with a custom uid and gid, both for audit and security reasons. This works nicely, however I am not sure what kind of privileges this user would ...
0
votes
2answers
2k views

How to allow just one user to login in special computer in Server 2003

I want to just allow one user to login to a special computer in domain. how can i do that ?
0
votes
1answer
346 views

Securing windows 7 based kiosk on network

What steps should be taken to secure a kiosk running windows 7 and a proprietary application on a network? The kiosk requires the ability to make outgoing calls over port 443. I am looking for advice ...
0
votes
2answers
71 views

opening a port on a router to all WAN ip's or just a range or specific WAN IP

Just trying to see how many people would be in favor for opening a port on a router, like port 22 or something similar for ssh, to all outside WAN connections or just a set of specific WAN ip's for ...
0
votes
2answers
2k views

Analyzing Apache access logs to quickly identify abuse

So someone in China just loves abusing the crap out of my networking tools site up at yougetsignal.com. I've been trying to analyze my access.log files to see exactly what they are so excited about. ...
0
votes
1answer
57 views

Protecting directories on a Apache web server by directory name string match?

Using Apache, is there a way to protect all items beneath directory names that contain a certain string? For example, if I have this structure: wwwroot--> project1--> docs--> ...
0
votes
1answer
2k views

suexec policy violation: What were these guys up to?

Have just assumed responsibility for a new client's site. OS is Linux. They had a cgi-bin directory below document root. I was looking at my error.log for an issue with a script and found a number ...
0
votes
2answers
161 views

Why do I need default ACCEPT?

If I leave out this line $IPT -I INPUT -i $WAN_NIC -j ACCEPT from my firewall script below, then I can't SSH to the server. The way I understand $IPT -I INPUT -i $WAN_NIC -j ACCEPT is ...
0
votes
2answers
363 views

User uploaded files on different server with PHP?

If I had a dozen "Work" servers with just PHP-FPM (with other Nginx servers in front), is it possible to setup PHP to store user uploaded files on a different server? I'm looking to avoid syncing ...
0
votes
1answer
40 views

Establish secure channel to domain workstations to transmit password in clear text

I want to use some command line tools for remote administration of Microsoft domain workstations, however some of them transmit the credentials in clear text. Is there a command line utility I can ...
0
votes
3answers
95 views

Getting Some Specific Types of Log [closed]

I'm want to get some logs from my server, but not general logs like syslog that gives me a lot of random logs. I want to know how I can get logs of things like logins(with time, IP and username), ...
0
votes
2answers
1k views

Folder permissions when zip and unzip on Windows

I've a webserver Windows 2003. When I do a backup in a zip of some folders, the permissions of the folder doesnt restore when i unzip the compress file. How can I do a zip saving the original ...
0
votes
3answers
2k views

Mysterious Network Client

When I look at my data network with Windows Explorer My Network Places I see all of my network clients and printers. However, I am seeing an unknown client called tsclient. When I click on it I ...
0
votes
1answer
258 views

How secure is IIS7.5 with Windows 2008 R2 web server?

Very theoretical question, how secure is the mentioned configuration? (IIS7.5 and Windows 2008 R2). I don't mean things like easy passwords, open ports and unsecured c#/.net code. I mean, are there ...
0
votes
1answer
389 views

Have a script which adds Security on share to “Everyone”

[Old post] I have a shared folder on the network which is shared with "Everyone" 'Read' & 'Read & Execute' privileges. A few people have 'Write' access and sometimes somehow when they either ...
0
votes
1answer
76 views

Which brands of wireless routers and DSL modems care about security? [closed]

Which vendors have established a strong security process during development where they educate firmware developers about security issues, arrange security engineers to review the code, accept ...
0
votes
1answer
927 views

Any problems with using a 301 redirect to force https traffic in IIS?

Is there any problem with using a 301 redirect to force all traffic to go to a secure-only site? We originally had redirect rules, but enforcing SSL-only seemed more secure. Here is how we set it ...
0
votes
1answer
402 views

How can I monitor the network on ESXi node for connections and find the source of a ddos attack

I'm looking for something fairly simple to install, that will monitor network traffic on the vswitch for my esxi node as we're getting ddosed and I need to be able to easily see where the traffic is ...
0
votes
4answers
81 views

How can I restore a database such that I can use it on a server where I don't have the security admin role

On a SQL 2008 instance, I have a login with the dbcreator and public roles. When I restore a database onto this server, I am then unable to use that database because all the user -> login mappings in ...
0
votes
1answer
78 views

Users able to install applications

We have win7. Network users are able to download applications like Mozilla Firefox, and install it. The install folder they are able to install to is c:\users%USERPROFILE%\AppData\Local\Mozilla. If ...
0
votes
2answers
50 views

Close ports only on a specified network interface

I've just checked with nmap a proxy server (ubuntu 10.04 with squid) for vulnerabilities and I decided to start an hardening process... Is it possible to close, for example, ssh port only on eth1? So ...
0
votes
1answer
120 views

make sure openfire does not connect to other jabber servers

This is mostly a security question; i've installed OpenFire jabber service on my office network, but i want to make sure the server is not using federation or any other interactions without outside ...
0
votes
1answer
4k views

authorization: application pool identity cannot access path

I have two very similar ASP Classic apps that both use Windows Authentication and run on the same development PC (Windows 7/IIS 7.5). They've been around for years, and have 'travelled' with me as ...