Security is not a product, but a process.

learn more… | top users | synonyms (1)

3
votes
2answers
258 views

Is Windows Server 2008R2 NAP solution for NAC (endpoint security) valuable enough to be worth the hassles?

I'm learning about Windows Server 2008 R2's NAP features. I understand what network access control (NAC) is and what role NAP plays in that, but I would like to know what limitations and problems it ...
2
votes
3answers
283 views

How secure are third party Ubuntu (APT) repository mirrors

We use local Ubuntu repository mirrors, because our external traffic is not free. Whenever I apt-get install "program" it gets from that repository. The question is... can the maintainers of the ...
1
vote
4answers
5k views

Prevent SSH from advertising its version number

The server I am using is Ubuntu 10.10. To ensure security I want to edit the banner the server sends to the client. If I telnet to my host on port 22 it tells me the exact version of SSH I am ...
5
votes
2answers
312 views

SSH Key Reuse Advice

So this is not a very specific question, but how do people reuse their SSH keys? I mean, I wanted to set up a GitHub account. I also have a key pair for logging into a machine at home remotely. ...
1
vote
1answer
259 views

Need advice in setting up server. fastCGI, suExec, speed, security, etc

I am running my own dedicated server with centOS 5 and WHM/cPanel. I would like to configure my server to meet my needs but I need a little help. It will only be my own websites being run on this ...
3
votes
4answers
465 views

Recommended way to restrict Apache users

Following on why should we restrict Apache users, another two questions arises: What is the recommended method of restricting the places Apache users can traverse & read in the file system? ...
2
votes
1answer
515 views

What is the EGG environment variable?

A user on our (openSuSE) linux systems attempted to run sudo, and triggered an alert. He has the environment variable EGG set - EGG=UH211åH1ÒH»ÿ/bin/shHÁSH211çH1ÀPWH211æ°;^O^Ej^A_j<X^O^EÉÃÿ ...
0
votes
2answers
1k views

How to secure a group of Amazon EC2 instances

I have several Amazon EC2 instances running Ubuntu 10.04 and I've recently started using Amazon's Route 53 as my DNS. The purpose of doing that was to allow the instances to refer to each other by ...
-2
votes
3answers
109 views

java scripts deleted now what [closed]

i discovered that my web site has all java scripts are now deleted!!!! what should i do???
0
votes
1answer
176 views

What could cause random files being uploaded without permission?

I have been having issues lately with a certain directory. It seems someone is placing files into it, or something of that sort, and any attempt to delete them is successful, HOWEVER they reappear ...
0
votes
2answers
805 views

How to secure a Windows 2008 R2 server + SharePoint 2010 to be internet facing?

Need to use SharePoint 2010 as a public facing website. The standalone server will be plugged directly into DMZ. What steps do I need to take to secure it for this type of environment?
1
vote
1answer
282 views

How to forbid postfix to send to external domains

I have a local postfix server, and i want it to only relay emails to the only local domain (localdomain.be): myhostname = localdomain.be mydomain = localdomain.be alias_maps = hash:/etc/aliases ...
13
votes
9answers
6k views

SSH server zero-day exploit - Suggestions to protect ourselves

According to the Internet Storm Center, there seems to be a SSH zero-day exploit out there. There is some proof of concept code in here and some reference: ...
1
vote
1answer
256 views

Device can't start error code 10

My (office) Desktop PC have some restrictions to USB devices. From the domain server there are some policies imposed. If I insert USB Mass Storage device like a memory stick, my system is able to ...
0
votes
3answers
256 views

Securing up ubuntu on Amazon ec2

let's say you create a new instance on Amazon ec2 and you choose a default Ubuntu AMI. What things would you recommend for making the instance as secure as possible? Elias
2
votes
1answer
106 views

Recognizing a HTTP access vulnerability scan

I am trying to automatically monitor my apache logs and recognize if someone is doing a vulnerability scan on my web server. The point of this will be to then route the source IP to a honeypot server ...
0
votes
2answers
97 views

monitoring a /21 for potential bad guys with snort and port mirroring

I want/need to start monitoring our network a bit better. Its an odd network in that it comprises 2 /22 public IPs and a slew of private admin IPs. I do have one point in the network where it all ...
0
votes
1answer
365 views

Security Configuration Wizard or Security Compliance Manager

When securing Windows 2008 R2 do I need to use both the Security Configuration Wizard and Security Compliance Manager or does the SCM do everything the SCW does?
8
votes
5answers
1k views

Using gmail as your primary mail server

I have read that there is an option of using Gmail as your primary mail server. In the sense that you can add mx records etc and you do not have to do it on your own server. Do you think this is a ...
0
votes
2answers
63 views

mysql and unix users control

Let's say I have two users on my UNIX machine - user1 and user2. I also have two MySQL databases - db1(mysql_user1) and db2(mysql_user2). I want to prevent user1 from connecting to db2 even if it ...
3
votes
3answers
6k views

Nesting Distribution Group within Security Group

Quick sanity check - If I nest an Active Directory distribution group within an Active Directory Security group, will permissions assigned to the AD Security group cascade to the members of the ...
6
votes
1answer
442 views

Where is the best place for LUKS to sit in a RAID/LVM/LUKS stack?

I am implementing a server storage setup making use of software RAID, LVM and LUKS. I can think of three combinations this configuration could take: RAID, LVM, LUKS RAID, LUKS, LVM LUKS, RAID, LVM ...
1
vote
1answer
422 views

Exchange 2003 default permissions for ANONYMOUS LOGON and Everyone

ANONYMOUS LOGON and Everyone have the following top level permissions in our Exchange 2003 Server: Read Execute Read permissions List contents Read properties List objects Create public folder ...
0
votes
1answer
122 views

Backup and Restore privilege

I have a windows server 2008 r2 and I want to give the built in Administrator acount backup and restore previllige how can i do this? Greetz
0
votes
3answers
81 views

what info can you find out by knowing an IP, how and what tools/ sites are needed for this?

I put up a site and saving all the IP addresses of users is adding some overhead. I am trying to figure of this benefit is justified. I never used an IP address for anything other than correlating ...
1
vote
3answers
4k views

Does VPN secure web traffic? Or: will a home VPN prevent Firesheep attacks?

I use public Wifi constantly when I'm away from home/office. I'm contemplating setting up a home VPN, which my ipod touch and laptop could communicate with via VPN to protect my requests from prying ...
1
vote
2answers
1k views

Where are the Microsoft downloaded app compat updates stored?

Where are the Microsoft application compatibility update settings stored on a Windows XP, Windows Vista, and Windows 7 computer? Microsoft periodically release application compatibility updates (e.g. ...
1
vote
1answer
87 views

How to secure a VM while allowing customer RDS (or equivalent) access to its desktop

We have a Windows Client/(SQL-)Server application which is normally installed at the customer's premises. We now need to provide a hosted solution, and browser-based isn't feasible in the short term. ...
0
votes
0answers
678 views

changing ssh port. Useful?

i will buy a dedicated server soon. I would like to know if changing the default port of ssh may be useful for security or it's completly useless. And if it's useful which ports range should I change ...
0
votes
2answers
7k views

Default Domain Policy Overriding Custom GPO even though Custom GPO is Enforced

I'm trying to apply a custom GPO to an OU with a specific account in it. Even though I enforce the GPO, the default domain policy is still overriding my custom GPO and settings are not being applied ...
8
votes
5answers
628 views

Is open id secure?

Is open ID secure, for example can you use it to log into bank accounts?
0
votes
1answer
130 views

How effective is a private lan in securing a server for intranet use?

We are building a Intranet using alfresco on Managed servers. We are considering using a private lan to separate the database on to its own server which is only accessible via the main internet facing ...
0
votes
1answer
1k views

Report Server: login failed to master database

I noticed from the SQL Server log that every time server restarts (I'm using SQL Server 2008 developer edition) I get an error message into log: Login failed for user 'machine\sqlaccount'. Reason: ...
2
votes
1answer
151 views

Security - Run apps with other users

OS: Fedora 14 i386 It's used as a ""normal desktop laptop"". "USER A" - it's the mainly used user, i log in with GDM with it, etc. Goal: I need a little more security - separate a few apps! How: ...
2
votes
3answers
2k views

.htaccess to deny access to most xml files

I recently had a Joomla site hacked, so I'm trying to harden the site a bit. There's a section in the recommended .htaccess that restricts outside access to the xml files that come with extensions. ...
2
votes
3answers
1k views

How can I detect attacks / probes / portscans on my server?

I'm writing a script to monitor attacks and probes on my server. But I'm primarily just grepping /var/log/messages for interesting information. Where else do I look?
0
votes
2answers
350 views

Security and Windows Login

I'm not entirely sure this is the right place for the is question but I cannot think of another so here goes. In order to login to the windows machines at my office one must press the almighty ...
0
votes
3answers
65 views

Does apache/PHP has overflow problem if the developer doesn't tweak it at all?

Is apache/PHP self secured so that developers don't need to care about it?
0
votes
2answers
612 views

How to setup separate MySQL and PHP VPS servers

Someone recommended I should have my MySQL server separate from my Apache/PHP server in case of hacking and such. By visiting linode, slicehost and various articles here on serverfault I've managed ...
0
votes
3answers
648 views

Corporate IT have blocked putty [closed]

Before I ask my question I would like to point out I am a web developer who normally uses Stack Overflow and new to Sever Fault, I think this is best place for this question. I have recently started ...
0
votes
2answers
113 views

Run untrusted program from apache

I have a problem to which I already have an implemented solution, but I'm not sure whether it's the best one. In the interests of not biasing any possible responses, I won't say how I've chosen to ...
0
votes
1answer
60 views

Restrict email attachment access

I'm in a situation where I need to force the recipients of email attachments to accept an agreement before being able to download/read the attachment. So ideally, I would send an email, and then ...
0
votes
2answers
26 views

Web Accessible Customer Data - Security

The company I work for has everything based online, ie: customer data, order information, stock etc. It's possible to log in from their website and see all of this. Moving everything is not possible. ...
2
votes
1answer
151 views

Why restricting Apache users from executing scripts?

When Apache users are allowed to executes bash scripts via PHP - why it's considered dangerous? I understand that the users can traverse the whole file system and even see which additional users are ...
0
votes
1answer
2k views

Split tunnelling for Site to Site VPN on Cisco ASA

Is it possible to do split tunnelling with a site to site VPN connection using Cisco ASAs? We have a Cisco ASA 5510 at head office, and Cisco 5505 in our branch office, currently connected via a ...
0
votes
1answer
779 views

VMWare virtual switch isolation

Imagine you need several Virtual Machine onto your ESX server. The VMs are composed of two distinct group and those group can only communicate to each others over a physical firewall. Now, what make ...
1
vote
1answer
245 views

eCryptFS Initialization Issues

I'm having issues with the first mount of eCryptFS. Currently when I attempt to mount it mount -t ecryptfs ~/.Private ~/Private However it's erroring. The error in dmesg is the following: Error ...
2
votes
2answers
209 views

Simulate DOS/High Workload on IIS

I want to simulate a DOS attack, or a very high workload on a simple IIS web site. The purpose is testing SCOM responses with IIS. Any suggestions for a tool and/or script? Thanks!
2
votes
2answers
2k views

Setting NTFS ACLs over the network - Is there a faster way?

In my environment, I have several projects that involve running NTFS ACL audit reports and various ACL cleanup activities on a number of file servers. There are two main reasons why I cannot perform ...
3
votes
3answers
506 views

Logins with only HTTP - are they as insecure as I'm thinking?

Recently I was thinking about how websites like gmail and amazon use HTTPS during the login process when accessing your account. This makes sense, obviously, since you're typing in your account ...