Security is not a product, but a process.

learn more… | top users | synonyms (1)

0
votes
2answers
76 views

Moving database to new server

I'm restoring a backup of a production database to a new server. The new server also hosts the application which makes use of the database. As such I'd like to use the same user/pass combination to ...
0
votes
2answers
159 views

Is it Possible to use a Single Certificate for a site which has many different domains

I have an ASP.NET application on IIS(Windows Azure) which has many different domains. All domains are working on http. Now, I need to use https. Whether, a single certificate is fine for all of my ...
0
votes
1answer
200 views

Whats the best way to strip grave accents from bash scripts

I have a bash script which runs as root: #!/bin/bash /var/bin/svn_co -h $1 >> /var/log/svn/status.log If the following should somehow occur, I'm in trouble. /var/svn/hooks.d/post-commit -h ...
0
votes
3answers
78 views

How can I provide secure web content to mobile devices that can't access an intranet?

I'm working with a client on development web content for their intranet. We want users to be able to access a version of the content on their mobile devices, but most of them don't have the VPN ...
0
votes
2answers
606 views

What is the best way to help stop DOS attacks

I am looking for ways to help stop DOS attacks. I'm running a linux server and looking for ways i can help limit the effect of any attacks and possibly set some limits on things without affecting ...
0
votes
2answers
118 views

When running a typical LAMP stack for a public website on EC2, what is the proper firewall setting for port 3306?

I'm reviewing the security groups on my EC2 Ubuntu instance that runs a public website on LAMP. Presently my ports are as follows: 22 (SSH) 0.0.0.0/0 80 (HTTP) 0.0.0.0/0 443 (HTTPS) 0.0.0.0/0 ...
0
votes
2answers
4k views

How to chroot VirtualHosts on a Apache server?

I have a FreeBSD server (company's OS of choice). Currently we run several websites on each of the webservers. Websites are in PHP which is run in Apache Module mode. At the Apache is not chrooted so ...
0
votes
2answers
419 views

Most secure settings for user dedicated for SSH Tunnel

Due to security reasons, I have created a user on my remote VPS only to use it for SSH tunneling. My local PC goes in hands of many others which scares me because I need to leave that SSH session ...
0
votes
1answer
172 views

Windows Copy and permissions

I have copied a which has Everyone permission. The duplicated file doesn't have these permissions other than the default permission. I'd like to know more about how Windows Copy defines the ACLs. It ...
0
votes
1answer
71 views

Common ways of spam files ending up in a web directory

A friend discovered a bunch of spam files in his web directory on his web host the other day. He has no idea where they came from, and I'm not quite sure either. What are common security breaches ...
0
votes
2answers
346 views

Linux or Windows Server as Gateway/Firewall [closed]

In my house, i'm running a server I use for testing purposes, and I'm planning on throwing away my knackered router, and making the server my Gateway to the internet and using it as a server for ...
0
votes
3answers
303 views

Disable, not unisntall, perl on Red Hat Enterprise 5.X?

So we found that some trojan has been the cause of our two web servers crashing once a week as we found that perl was executing dozens of malicious "gif" files spiking the memory and eventually ...
0
votes
1answer
163 views

Fail2ban Custom Port

I have a rule like this in my jail.local file: [ssh-ddos] enabled = true port = ssh,sftp filter = sshd-ddos logpath = /var/log/messages maxretry = 4 If I want to use a custom port for SSH, ...
0
votes
2answers
2k views

Large number of security events in the log

About a week ago we moved the application from one server to another (from Windows Server 2008 to Windows Server 2008 R2, different DCs, but same company). There are 12 websites on this server, but ...
0
votes
2answers
139 views

Should I ever configure a host with a public IP address to accept traffic from a private IP address?

I connect the 'net with a public static IP (my router's IP address for NAT) and a /29 subnet (for machines behind the router). On my router, I have: #sh ip route | inc x.x x.x.0.0/16 is ...
0
votes
2answers
790 views

Apache Uploads and Security

Recently it has become an issue that a user on one of our systems needs the ability to have the apache user have read and write capability to their site so that the upload portion of their site works ...
0
votes
1answer
75 views

Can i take dump of /proc/pid/exe

One of process invaded my system. I traced that process id, and wanted to dump /proc/pid/exe to that i can investigate later. Please advice how i take dump of /proc/pid/exe
0
votes
3answers
371 views

Preventing local network access on wireless network

On our current network, we have a wireless router and a gigabit 16-port switch. If a machine connects to the wireless network, they have access to all of the local machines in the network. This can be ...
0
votes
3answers
614 views

Limiting network access by MAC address and what else?

How can I limit the network access to a physical network from outside computers being plugged in? I know MAC filtering is one way, VPN is another - but it's not going to be used, so what else?
0
votes
2answers
877 views

CentOS: Log entries of /var/log/secure are not ordered by date and time - why?

Can you please tell me what can be the reason of log entries of /var/logs/secure be like this: Mar 30 10:50:02 server2 proftpd: pam_unix(proftpd:session): session opened for user XXXXXXXXXXXXXX by ...
0
votes
2answers
187 views

Clients can access other clients web directories on shared hosting

Allowing clients ftp access or file uploads on a shared server could lead to scripts being run which can scan directories and files outside the clients web root. What can you do to stop this given ...
0
votes
1answer
156 views

Server Administration [closed]

My client asked me for a job description of a system administration because I might be assigned this position along with the other guy I'm working with. To be honest, I do not know much about a System ...
0
votes
1answer
133 views

How effective is a private lan in securing a server for intranet use?

We are building a Intranet using alfresco on Managed servers. We are considering using a private lan to separate the database on to its own server which is only accessible via the main internet facing ...
0
votes
3answers
790 views

Corporate IT have blocked putty [closed]

Before I ask my question I would like to point out I am a web developer who normally uses Stack Overflow and new to Sever Fault, I think this is best place for this question. I have recently started ...
0
votes
2answers
116 views

Run untrusted program from apache

I have a problem to which I already have an implemented solution, but I'm not sure whether it's the best one. In the interests of not biasing any possible responses, I won't say how I've chosen to ...
0
votes
4answers
309 views

Using Windows as a gateway to the internet

My customer currently blocks outbound RDP and SSH, which means that none of their employees can get access to external Windows and Linux boxes (at the console level). However, a need has recently ...
0
votes
2answers
218 views

Registry remotley hacked, Windows 7, need help tracking the perp

I was writing some .VBS code at the office that would allow certain file extensions to be downloaded without a warning dialog on a Windows7x32 system. The system I was writing this on is in a lab on ...
0
votes
2answers
2k views

Setting up PGP FTP

I have a situation where I need to setup a FTP server with PGP encryption. Currently I use FileZilla w/ SSL, but in this case we are required to use PGP. Any recommended products/procedures from ...
0
votes
2answers
1k views

NTFS allow Read/Write/Modify, but not Copy

Is it possible to allow users to modify and read files/folders but not copy them to other locations? Problem is I have a folder that users need to read and modify files in, but I don't want them ...
0
votes
1answer
99 views

Is the data in SQL Azure safe?

I am new to cloud computing. I don't know whether my question is correct. I have an application which has sensitive data. Suppose I had to move the database to the cloud. Is the data in the database ...
0
votes
4answers
5k views

Disable audit of Logon Logoff

I have a SBS 08 with 50 users on my domain. In Event Viewer : Windows Logs > Security, I've got nearly 300,000 events about EventID 4624 Logon, 4634 Logoff, 4776 Credential Validation, 4769 Kerberos ...
0
votes
2answers
53 views

Hosting part of a website under a different domain

I have a website where we want to move the admin portion to a different URL (for security purposes, according to the site owner). So, to make the admin section accessible only from this new domain ...
0
votes
1answer
84 views

You are not authorized to view this page

I had websites in on my server and I stored them in path D:websites... and When I changed the websites to new path D:websites\Pages... this error apear when browse thes websites You are not ...
0
votes
1answer
66 views

Implementing dual control SQL updates in SQL Server

Is there any built in feature in SQL server that allows dual control updates, deletes and inserts? What I mean by dual control is that it requires any two users to collude in order to alter the ...
0
votes
1answer
4k views

How to configure password maximum days before it expires?

I want to set Maximum days of a password can be used. So I configure PASS_MAX_DAYS in /etc/login.defs, and PASS_WARN_AGE to warn user before the password expired. In my example, I set PASS_MAX_DAYS = ...
0
votes
3answers
158 views

Is it safe to use Windows file sharing for copying files to a remote windows server?

I have two servers in different datacenters, connected via a vpn. I want to push very large files from one server to the other. Windows file sharing is easy, but is it safe? I know the data coming ...
0
votes
4answers
466 views

Securing a Linux Server

Normally, I would: Change the SSH to protocol 2, disallow root login, change the port and only allow public keys. Install fail2ban. Install Bastille-Linux and run through it (setting up firewall ...
0
votes
2answers
2k views

How does a proxy server work for anonymous browsing?

I have seen that at many places like colleges and schools block sites like Facebook, Myspace. In some cases people are able to use a proxy sites and proxy softwares(ultrasurf,gpass etc.) to bypass ...
0
votes
3answers
1k views

Limit logins to Drupal to specific IP block

I'd like to allow anonymous from anywhere, while limiting authenticated to one or few IP blocks. Can this be done in drupal 6?
0
votes
1answer
1k views

hosts.deny not working

Currently I am watching the live auth.log and someone is continuously trying the brute force attack for 10 hours. Its my local server so no need to worry but I want to test. I have installed ...
0
votes
3answers
554 views

How do I open private files using a browser through SSH

On my current project I have a few private php scripts and I also have phpMyAdmin in a private area of the server. Is there anyway of opening those files in a browser? I'm currently tunnelling using ...
0
votes
4answers
583 views

Encrypting shell script

We have a few shell scripts for backup/database dump purpose which have username/password info in them. Is there any way do this other than SHC which appears to be having some issues.
0
votes
2answers
141 views

Not exiting out of SSH?

If I don't exit out of SSH, what happens? Do the sessions build up over time? Is it a security risk?
0
votes
2answers
117 views

Permissions, rights, roles, user groups, delegations [closed]

I am looking for a good book, Internet resource that can clearly explain these terms. Really, I would not like to read any Microsoft books or any book about windows or other operation systems. I ...
0
votes
6answers
640 views

Remote desktop to a computer not on the network

I have a secure laptop that, for various reasons, is not allowed to be connected to a network. I need to remotely control that laptop from a desktop computer and be able to send files to it. The two ...
0
votes
1answer
329 views

Permissions required to look up a domain user's group memberships

I am writing some code to look up the members of particular domain groups. Does the user that this application runs as need any particular permissions on the domain to get this information? ...
0
votes
3answers
153 views

permissions on upload folder not working

I have a php script which uploads images to a folder. I have these permissions on the upload folder: drwxrwxr-- 4 user user 4096 2010-06-02 16:20 temp_images Shouldn't these permissions be ...
0
votes
3answers
2k views

How do I disable Windows authentication on a SQL Server instance?

How do I disable Windows authentication on a SQL Server instance?
0
votes
2answers
173 views

Site without “www” is hacked ! [closed]

A site with www.site.com (make with php)works normally but without www "site.com" has been hacked. How can I clean injection? Thanks
0
votes
2answers
2k views

SMTP hacked by spammer using base64 encoding to authenticate [closed]

Over the past day we've detected someone from China using our server to send spam email. It's very likely that he's using a weak username/password to access our SMTP server, but the problem is that he ...