Security is not a product, but a process.

learn more… | top users | synonyms (2)

0
votes
1answer
136 views

Understating certificate authority nesting

Given we have the following network/CA structure: Win2K8R2 - Root CA - no idea where its' certificate is? Win2K8R2 - Sub CA - obtained CA certificate from Root CA Win2K8R2 - OWA 2010 (Basically, a ...
0
votes
2answers
233 views

FTP, Windows server 2008 r2, windows firewall problems

Okay so Google is letting me down just due to the sheer volume of stuff related but not specific to my problem that I could find. I have a c# program that connects to various ftp sites and downloads ...
0
votes
2answers
93 views

reporting ip adresses to ISP? [closed]

i've got someone claiming to have a dump of my database. i'm not sure whether he is talking baloney or not. but just in case, how would i go about reporting such actions to his ISP?
0
votes
1answer
2k views

Linux: disable wtmp/utmp, sshd ip logging and any mentions of ip that does remote access

Any ideas how to do all above? I've disabled LOG_OK_LOGINS and SYSLOG_SU_ENAB in login.defs, but still don't know how to do everything else.
0
votes
2answers
397 views

Configure user login and stored procedures permissions on SQL Server

I'm a software developer finishing a web application. The app uses the database "DB1" in my SQL Server 2008 "SQLServer_1". I would like to create a limited user that the web app will use in its ...
0
votes
1answer
579 views

How To Block Some UNC Paths for Windows 7 In An AD environment

I look after a network where the servers are Server 2008 [Domain controllers] and the client stations are either Windows 7 Pro SP1 64 Bit or Windows XP Pro SP3 32 Bit. I have configured GPOs to ...
0
votes
2answers
145 views

defend dos attack

my website is crippled due to simple request from many ranges of ips, tens of thousands or more request per second. Is there a way to defend this kind of attack? Is there a way to trace back to the ...
0
votes
1answer
116 views

Mirroring my website through a secure subdomain

Attempting to get my site to comply with the limitations of an edge content delivery network, I have been forced to push my security certificate root from https://www.mysite.com to the subdomain ...
0
votes
4answers
342 views

Webserver and PHP File Security

I'm trying to figure the right security settings for the files on my shared webserver and I have a few basic questions that I've not figured out by looking around. How do I stop people reading my PHP ...
0
votes
1answer
119 views

Is it possible to have my AD logon authentication outside of my network?

We run an AD with 2003R2. I am in the process of doing Google Directory Sync, after that the plans are to go with SSO for Google Apps, and than I plan to have all our 3 world sites connected. It just ...
0
votes
1answer
625 views

SharePoint metadata not visible to users

I'm working on a dynamic page that does data lookups based on metadata in the term store. So I have a Managed Metadata column set up and I can use it to query lists and such with no problem. I also ...
0
votes
1answer
94 views

Web Browser Kiosk Temporary Internet Files

For a PC that is set up as a kiosk always running a web browser, are there settings available in the major web browsers to delete the temporary internet files periodically? I know Firefox has ...
0
votes
1answer
62 views

Wireless ARP make network unusable rather than capturing a packet

I try to do arp-poisoning on my wireless network using ethercap (same method as using on wired). It make the victim network unusable rather than forward packet to attacker computer. Why ?
0
votes
1answer
380 views

Protecting server from smtp auth relay attack

Server configuration OS Centos 5.xx SMTP exim / dovecot I would like to know how to protect my server from smtp relay attacks. Currently my server is experiencing smtp relay attack because of ...
0
votes
1answer
129 views

Firewall for private network

Here is my setup: All nodes are running Ubuntu 10.04 LTS I have a machine, node1, that acts as a proxy server for a private network. It forwards all incoming connections on port 80 and 443 to my ...
0
votes
2answers
52 views

Set security on pattern of sub folders (Server 2003)

I have a folder structure similar to the one shown below these paragraphs. How do I change security on every 'Photos' folder without clicking through each individually in Windows Explorer? There are ...
0
votes
1answer
1k views

Enabling remote access to mysql on debian

I need to enable remote access for a specific user on a mysql server, running debian oldstable. Bear in mind I'm no SQL expert nor a real sysadmin. Logging in phpmyadmin and looking at the ...
0
votes
1answer
36 views

How should I govern write access to local Sites directory?

I'm currently doing some web dev on osx and I need to give netbeans and apache write access to my local Sites directory, at the moment only one of them has that right (netbeans) should I modify group ...
0
votes
2answers
518 views

Mac OS X Server Secure Log full of failed SSH attempts

Whenever one of our server's admins tries to access our machine running Mac OS X Server 10.5 via SSH, I get the following error exactly every 10 seconds in the security log: sshd[32575]: ...
0
votes
1answer
309 views

iptables logging packets coming from the outside world

I want to log all INPUT packets that do not originate in the LAN for audit purposes, I have a script with tcpdump basically appending to a file the result from this: tcpdump "(dst net 192.168.0.0/24 ...
0
votes
1answer
255 views

openvpn: client access policies

I'm trying to setup client access policies, akin to what is described in openvpn documentation. The configuration will use tun device in the above example, it seems the only thing restricting ...
0
votes
1answer
4k views

authorization: application pool identity cannot access path

I have two very similar ASP Classic apps that both use Windows Authentication and run on the same development PC (Windows 7/IIS 7.5). They've been around for years, and have 'travelled' with me as ...
0
votes
1answer
664 views

Multi-factor authenication at ec2 and in general

I noticed aws has multi-factory authentication: http://aws.amazon.com/mfa/faqs/#How_does_AWS_MFA_work This seems to be only for when you login via the web into the web console etc. In general, could ...
0
votes
1answer
220 views

Shared Hosting: How to Protect from abuse and ~ wildcard folder access? ex domain.com/~username

Many times google alert me that abuse content or phising is installed in my website. But looking about it there is nothing on my public folder on my server. I see that the referral url is on my ...
0
votes
1answer
263 views

Cisco 800 Series Routers and dedicated point-to-point VPN

My company is looking for a solution where two branches can be connected securely. The goal is to have the two branches establish a vpn conection (at the router levels) so anything connected beyond ...
0
votes
2answers
246 views

SQL Server 2008 login failed

I have a virtual machine (vmware) with Windows Server 2008 R2 x64 and SQL Server 2008 R2 installed. I see 2 SQL Server services on this vm : sqlexpress, mssqlserver. Both of them are use the default ...
0
votes
1answer
68 views

Groups & User Conventions for *nix Server

I'm looking for information on best-practices and common conventions for setting up users and groups for a unix-based web server hosting multiple sites. I'm looking for info on things like: how to ...
0
votes
1answer
93 views

Encrypted file server

What I want is about this: Files are encrypted on the server, apache can decrypt it with certificates the client has to have installed and then send it encrypted to the client via SSL. So the files ...
0
votes
1answer
293 views

Reuse of an open TCP/UDP port to handle two simultanious applications

Looking for pointers in the right direction, have seen multiple examples of exploit code allowing shell connections on ANY 'in-use' port, while the original application on that port continues to ...
0
votes
2answers
155 views

apache running as uid 0

Today morning I had powered on one of my machines after 2 months and apache was not running as daemon after digging here and there I found in /etc/init.d/ following files -rwxr-xr-x 1 root root ...
0
votes
1answer
147 views

How to disable yandex in tomcat?

Yandex.ru spiders are known of disobeying robots.txt. In Apache, you can disable yandex in htaccess file. How can I do the same thing with Tomcat? I'm using ubuntu server, so I thoght about ...
0
votes
2answers
206 views

Linux: Where are non-interactive commands logged?

As far as I know, when I SSH to a box, it will add my command history to something like .bash_history. But when I execute a command like rsync and it executes a remote SSH connection, rsync -avz -e ...
0
votes
1answer
115 views

Block SQL 2008 R2 Insert Access on anything for user in MS ACCESS on AD Group

Hi I would like to block access to insert any data on SQL when a User from a determined Active Directory Group access SQL from MS ACCESS. Is this possible? if not is there any alternative? I've ...
0
votes
1answer
147 views

Creating trusts between environments

I have always been a big advocate of complete separation of environments where you manage credentials for all environments separately. Recently I have been asked to think about the ramifications of ...
0
votes
1answer
250 views

AIX /etc/security/user: what happens if the values in a stanza are specified twice?

I have an /etc/security/user file on AIX and I have a stanza that looks like this: someuser: expires = 0912154623 account_locked = false expires = 0116202437 account_locked = false Which of the ...
0
votes
1answer
1k views

different levels of security configuration for Apache SOLR

this is what we need for our SOLR instance 1) all urls except for select need ip as well as password restrictions 2) select url can be accessed from any ip but needs a password to be accessed. this ...
0
votes
2answers
209 views

TrueCrypt to protect Windows server and web application

As an additional layer of security on a windows server (stored on-site) I am considering to use TrueCrypt. However my concern is if my webapp will still work as expected? I dont want anyone to ...
0
votes
1answer
79 views

Is UNIX process accounting useful for security purposes?

acct logs execution of all processes, and the users that execute them, recording statistics such as real time elapsed, and CPU time elapsed. I have seen it suggested that this might be useful in a ...
0
votes
2answers
123 views

proxy server for virtual machines

I run a series of virtual machines on a server in which people connect to via Vnc. The computers are mostly used for penetration testing so the people involved are pretty techy. My dilemma is that ...
0
votes
1answer
108 views

Squid service has been running for days without any auth

Today I found plenty of malicious requests in Squid access log: http://119.161.9.14/config/pwtoken_get? I think it's safe for me and other users as websites use cookies to track visitors, so the ...
0
votes
1answer
62 views

How strict are the firewalls between your cluster nodes communicating on the backend?

I have 3 apache servers in a cluster using HAProxy. Currently I allow all traffic on the backend IPs between the 3 servers - I thought about only allowing internal packets on the HTTP ports (and the ...
0
votes
1answer
244 views

Apache trailing slash added to files problem

I am having a problem with Apache. What it does is this: Take /index.php file containing an code with src set to relative path myimg.jpg, both in the root of my server. So, www.mysite.com would show ...
0
votes
2answers
789 views

How to secure a Windows 2008 R2 server + SharePoint 2010 to be internet facing?

Need to use SharePoint 2010 as a public facing website. The standalone server will be plugged directly into DMZ. What steps do I need to take to secure it for this type of environment?
0
votes
2answers
664 views

.htaccess htpassword protect, safe enough?

I'm blocking my site via .htaccess, htpassword. I heard from a friend that it's really a joke and it can be bypassed in a minute. Is that true? What are other methods that I can use to prevent ...
0
votes
2answers
62 views

mysql and unix users control

Let's say I have two users on my UNIX machine - user1 and user2. I also have two MySQL databases - db1(mysql_user1) and db2(mysql_user2). I want to prevent user1 from connecting to db2 even if it ...
0
votes
1answer
168 views

How to effectively secure a dedicated server for intranet use?

I need to secure a dedicated server for intranet use, the server is managed so will have software based security, but what other security should be considered for enterprise level security? The ...
0
votes
2answers
536 views

How to setup separate MySQL and PHP VPS servers

Someone recommended I should have my MySQL server separate from my Apache/PHP server in case of hacking and such. By visiting linode, slicehost and various articles here on serverfault I've managed ...
0
votes
1answer
59 views

Restrict email attachment access

I'm in a situation where I need to force the recipients of email attachments to accept an agreement before being able to download/read the attachment. So ideally, I would send an email, and then ...
0
votes
2answers
26 views

Web Accessible Customer Data - Security

The company I work for has everything based online, ie: customer data, order information, stock etc. It's possible to log in from their website and see all of this. Moving everything is not possible. ...
0
votes
1answer
1k views

Split tunnelling for Site to Site VPN on Cisco ASA

Is it possible to do split tunnelling with a site to site VPN connection using Cisco ASAs? We have a Cisco ASA 5510 at head office, and Cisco 5505 in our branch office, currently connected via a ...