Security is not a product, but a process.

learn more… | top users | synonyms (2)

0
votes
1answer
3k views

How to backup postfix?

I am putting together a list of things that I need to backup, on my website. I am using postfix for handling my mail. Which files in /etc/postfix (if any) do I need to backup? My goal is that after ...
0
votes
2answers
112 views

How do I configure privileges for a Standard user account?

How do I limit the features of a Standard user account, without affecting the Admin account?
0
votes
2answers
176 views

New Secure Website with Apache Reverse Proxy

I wish to set up a new website that will be accessed by users using HTTPS. I think it is good practise to put the "real" web server in a seperate subnet, and then install an Apache Reverse Proxy in a ...
0
votes
2answers
238 views

security and hacking of mysql-servers

i'm very very new in questions such hacking, security, servers. Where i can read some documentation about security, and hacking of php(mysql) servers. Maybe you will give some links, where can learn ...
0
votes
2answers
3k views

Is adding users to the group www-data safe on Debian?

Many PHP application do self-configuration and self-updating. This require apache to have write access to the PHP files. While chgrp'ing them all to 'www-data' appear like a good practice to avoid ...
0
votes
1answer
106 views

Are there any default security settings I should be worried about in windows Server 2008 R2

I'm running Windows Server 2008 R2 (via Rackspacecloud) and now that I'm going live I'm just curious if there are any security settings I should "turn on" or other settings I should tinker with to ...
0
votes
1answer
360 views

What are the alternatives to using allow.sysvipc in a jail running PostgreSQL in FreeBSD

This question is prompted by this one. I've set up a jail to run PostgreSQL but without allow.sysvipc when creating the jail (or setting the relevant rc.conf entries), the system call to shmget are ...
0
votes
1answer
53 views

network folder share issue in Windows

I am using Windows Server 2008 Enterprise. I want to share a disk folder and I want users to be able to access directly (e.g. using \\10.10.10.123\shared in Windows resource explorer) without using ...
0
votes
1answer
414 views

Windows: Audit/View logins from remote networks?

i want to audit remote connection attempts to a Windows 2003 Server. i've changed the group policy to show logon successes and failures: >gpedit.msc Local Computer Policy Computer ...
0
votes
1answer
1k views

How to set Windows Services permissions from Powershell?

I need to grant a specific account SERVICE_START permissions for a given Windows service. There seems to be some methods for doing so here, but would prefer a method that's native to PowerShell and ...
0
votes
2answers
219 views

Give a domain group full control to the profile folders of all servers and workstations

I have a domain group (called GSG_TECH_USER) which need "full control" right to the folder "document & setting" of all servers and workstation. I made a test with this configuration: On a ...
0
votes
3answers
1k views

Finding outbound connections from Apache/PHP

A client website was recently compromised, and we're analyzing the damage and exposure from the attack. We've found a script that is "calling home" to a URL we can easily find in a log, but is this ...
0
votes
2answers
215 views

Should smtp port be blocked on server?

I have a newbie security related question. Should port 25 (smtp) be blocked by firewall on my server? Or will doing so mean that i cannot send any mail at all? Maxwell: I basically have my own mail ...
0
votes
1answer
107 views

What are the steps needed to achieve EAL4

I read the wikipedia article on EAL (http://en.wikipedia.org/wiki/Evaluation_Assurance_Level) but didn't find it very helpful in laying out the steps needed to achieve EAL4. Can someone please lay out ...
0
votes
2answers
443 views

How to secure Cpanel/WHM from malacious uploads [duplicate]

Recently my site's index.php file was replaced with some malicious javascript code. I really don't know how it was added to the page. Today when I tried to download the file via FTP, my local ...
0
votes
2answers
323 views

Password protect with apache2.conf works on files, but not on ports

I have changed the apache2.conf so that my website requires authentication. This works fine when typing the adress like this: www.domain.com or my_ip/ Problem is, I have Solr, which admin interface ...
0
votes
1answer
1k views

Basic IPTables setup for OpenVPN/HTTP/HTTPS server

I'm trying to get a basic IPTables setup on my server which will allow HTTP/SSH access, as well as enable the use of the server as an OpenVPN tunnel. The following is my current rule setup - the ...
0
votes
2answers
40 views

Ubuntu server users question

I have read this article: https://help.ubuntu.com/9.04/serverguide/C/user-management.html But it doesn't go into depth with the privileges section. I need to know how to set privileges of me (as a ...
0
votes
1answer
266 views

How to set up Drupal Plugin Manager on MAMP in a secure way?

I use MAMP PRO as global webserver. First of all, is it a good idea? Secondly, my objective is to run a Drupal website with as easy management as possible. Now I want to use Plugin Manager module to ...
0
votes
1answer
65 views

Users in ubuntu; Cant figure it out

I am the only one who will have access to my website. Just installed my VPS and managed to get most stuff working. However, stuck on the "members" part. Currently, everything has been done as ...
0
votes
2answers
520 views

AWS EC2: How to determine whether my EC2/scalr AMI was hacked? What to do to secure it?

(See update below) I received notification from Amazon that my instance tried to hack another server. there was no additional information besides log dump: Original report: Destination IPs: ...
0
votes
6answers
2k views

Is my dns server being attacked? And what should I do about it?

I've been having some intermittent dns problems with a web server, where certain isp's dns servers don't have my hostnames in cache and fail to look them up. At the same time, queries to opendns for ...
0
votes
2answers
765 views

Protecting DNS entries from duplicate hostnames entering network

Given a Windows domain, with DNS provided by a server on that domain, I am curious about what happens if a guest joins the network attempting to use the same hostname as an existing server, and then ...
0
votes
3answers
747 views

SharePoint extranet security concerns, am I right to be worried?

We are currently running MOSS 2007 internally, and have been doing so for about 12 months with no major issues. There has now been a request from management to provide access from the internet for ...
0
votes
1answer
294 views

Blocking IP Range in .htaccess Problem

I'm trying to block the access of one of my webapps using IP Filter in the .htaccess, the problem is that after updating the file with: order allow,deny deny from 58.14.0.0/15 allow from all I get ...
0
votes
1answer
202 views

Is it a bad idea to run an asp.net app pool with the same identity as IIS's anon user?

Subject says it all really, Thinking on security terms, I want to give each site on my server its own user account, so that they can't access each other's data. I also want to use integrated ...
0
votes
1answer
168 views

Lock down SFTP access on OpenSolaris

I have an OpenSolaris 2009.06 server and I'd like to enable a user to remotely change files in a specific directory, ideally via SFTP or FTP-via-SSH. This user does not yet have an account on the ...
0
votes
1answer
589 views

How can I have APF block script kiddies that mod_security detects?

In one of the vhosts' error_log I found thousands of lines like these, all from the same IP: [Mon Apr 19 08:15:59 2010] [error] [client 61.147.67.206] mod_security: Access denied with code 403. ...
0
votes
2answers
115 views

protect my web server

how can I know who enter web server and how can I protect my IP from others?
0
votes
1answer
268 views

Moving file security from one server to another (asp.net sites, IIS)

I am running windows server with asp.net websites and sql server 2008 and IIS 6. It is working fine. Now I need to move my asp.net websites to another windows server and I have hard time setting ...
0
votes
1answer
255 views

Which Linux Distro has TARPIT out of the box?

I need TARPIT. Im worried to patch the kernel as it may result in unexpected problem. So, Which Linux Distro has TARPIT out of the box? thanks.
0
votes
4answers
521 views

How to find systems with vulnerability which may later become agent for DDoS?

How to determine the systems with vulnerability, which scanning tool is best. The system should be identified so that it can be used as agent for DDoS. In a test bed environment I want to check ...
0
votes
1answer
375 views

IIS7 authentication

To give our user's the ability to protect content on their IIS6 sites we used a tool called IISPassword which emulates .htaccess to provide Basic authentication. There isn't support for IISPassword ...
0
votes
1answer
204 views

Running .net application over a network

I need some advice please. I need to enable a .Net application to run over a network share, the problem is that this will be on clients network shares and so the path will not be identical. I've had ...
0
votes
2answers
84 views

Secure data hosting

I've looked online and can't seem to find a proper answer. We have a client that requires very sensitive data be stored in a database. Is there a hosting company that provides high-level database ...
0
votes
1answer
225 views

Safe UNIX permissions on Ubuntu / ProFTP install

I've got a python script running on some client machines that calls home to an Ubuntu 8.04 LTS server running ProFTP.. I created a user called userftp on the server and have hopefully denied it shell ...
0
votes
1answer
269 views

ESET Remote Administrator Console showing infected files on a client, but threat log is empty

We recently deployed ESET NOD32 Antivirus on our small domain network and use the Remote Adminstrator to manage everything remotely. On a recent full system scan, one of the clients shows 10 infected ...
0
votes
1answer
1k views

Apache service server demon priviiges (with respect to web directory structure, permissions and security)

I have installed Apache on Ubuntu 9.10. I have installed a web framework (Symfony), which requires the server to be able to: Create a directory structure under a folder named 'cache'. If the cache ...
0
votes
1answer
68 views

Why can't I modify the contents of this folder when I'm part of the group with full permissions?

dsmith@ip-xx-xxx-xxx-xx:~$ groups dsmith dsmith sudo py dsmith@ip-xx-xxx-xxx-xx:~$ sudo chmod -R g+rwxt /usr/local/virtualenvs dsmith@ip-xx-xxx-xxx-xx:~$ ls -al /usr/local ... drwxrwxr-x 2 root py ...
0
votes
2answers
547 views

How to tell credentials used for a Network Mapping?

I have a networking mapping that doesn't appear to work. When I connect to the mapping I get access denied when I try to create a folder. When I created the mapping I told it to login as another ...
0
votes
1answer
71 views

Enforcing security restrictions on table rows via default schema and views on SQL Server

We have an application which database relies on SQL Server 2000. A specific area of this application let users access rows from a table that they shouldn't: they should only access rows from ...
0
votes
1answer
98 views

Locking down a SQL Server that can be connected into remotely

If a SQL Server is has remote access open, what steps should one take to lock it down? strong password restrict the user to the database Anything else? Should I disable the sa account?
0
votes
2answers
213 views

XP Missing AD in security location

I have a few Windows XP clients that are part of a domain, when trying to set the permissions on the security tab and pressing location to search the AD for users it only presents the local machine... ...
0
votes
2answers
1k views

prevent the browser from downloading doc docx and pdf

i have some indexed document files ( .doc , .docx and .pdf ) stored in a folder in the website. when i type the full address of the file ( ex http://www.website.com/folder1/folder2/1.doc ) the ...
0
votes
2answers
489 views

network share encryption

what is the best practice to share network drives (samba or windows share based) with encryption? Simple PGP based key encryption? Or maybe with RSA token? Anybody, share your experience on this!
0
votes
1answer
157 views

Unexplained spike in web traffic

Question I am suspicious of an unexplained 1600% increase in traffic and massive slow-down that lasted about 10 minutes. I'm not sure if it was an attempted DoS attack, dictionary login attack, etc. ...
0
votes
1answer
325 views

Security concerns about giving the apache user a tty

I need to invoke sudo from a PHP script (web-triggered) so as to run a command as another user. However, I get the message "sudo: sorry, you must have a tty to run sudo". Would there be any security ...
0
votes
3answers
377 views

Securing an NFS file share without access to the exports file

How would you go about configuring security on an NFS file share if it was impossible to edit the exports file (due to the NAS configuration not exposing it to the administrator)?
0
votes
3answers
67 views

Email sent upon Login in Windows Server

Is it possible to configure in Windows Server 2008 to have an email sent to a specified address when a specific user account has successfully logged in? We want to be notified of when a particular ...
0
votes
2answers
339 views

VPS Server Thousands of Security Audit Failure Events

I am new to managing a hosted Windows vps and in the past 4 days my security event log shows about 35,000 Events as: Audit Failure "An account failed to log on." These appear to be recurring attempts ...