Security is not a product, but a process.

learn more… | top users | synonyms (1)

0
votes
2answers
75 views

opening a port on a router to all WAN ip's or just a range or specific WAN IP

Just trying to see how many people would be in favor for opening a port on a router, like port 22 or something similar for ssh, to all outside WAN connections or just a set of specific WAN ip's for ...
0
votes
2answers
3k views

Analyzing Apache access logs to quickly identify abuse

So someone in China just loves abusing the crap out of my networking tools site up at yougetsignal.com. I've been trying to analyze my access.log files to see exactly what they are so excited about. ...
0
votes
1answer
59 views

Protecting directories on a Apache web server by directory name string match?

Using Apache, is there a way to protect all items beneath directory names that contain a certain string? For example, if I have this structure: wwwroot--> project1--> docs--> ...
0
votes
1answer
2k views

suexec policy violation: What were these guys up to?

Have just assumed responsibility for a new client's site. OS is Linux. They had a cgi-bin directory below document root. I was looking at my error.log for an issue with a script and found a number ...
0
votes
2answers
196 views

Why do I need default ACCEPT?

If I leave out this line $IPT -I INPUT -i $WAN_NIC -j ACCEPT from my firewall script below, then I can't SSH to the server. The way I understand $IPT -I INPUT -i $WAN_NIC -j ACCEPT is ...
0
votes
2answers
405 views

User uploaded files on different server with PHP?

If I had a dozen "Work" servers with just PHP-FPM (with other Nginx servers in front), is it possible to setup PHP to store user uploaded files on a different server? I'm looking to avoid syncing ...
0
votes
1answer
43 views

Establish secure channel to domain workstations to transmit password in clear text

I want to use some command line tools for remote administration of Microsoft domain workstations, however some of them transmit the credentials in clear text. Is there a command line utility I can ...
0
votes
3answers
96 views

Getting Some Specific Types of Log [closed]

I'm want to get some logs from my server, but not general logs like syslog that gives me a lot of random logs. I want to know how I can get logs of things like logins(with time, IP and username), ...
0
votes
2answers
2k views

Folder permissions when zip and unzip on Windows

I've a webserver Windows 2003. When I do a backup in a zip of some folders, the permissions of the folder doesnt restore when i unzip the compress file. How can I do a zip saving the original ...
0
votes
1answer
266 views

How secure is IIS7.5 with Windows 2008 R2 web server?

Very theoretical question, how secure is the mentioned configuration? (IIS7.5 and Windows 2008 R2). I don't mean things like easy passwords, open ports and unsecured c#/.net code. I mean, are there ...
0
votes
1answer
449 views

Have a script which adds Security on share to “Everyone”

[Old post] I have a shared folder on the network which is shared with "Everyone" 'Read' & 'Read & Execute' privileges. A few people have 'Write' access and sometimes somehow when they either ...
0
votes
1answer
77 views

Which brands of wireless routers and DSL modems care about security? [closed]

Which vendors have established a strong security process during development where they educate firmware developers about security issues, arrange security engineers to review the code, accept ...
0
votes
1answer
982 views

Any problems with using a 301 redirect to force https traffic in IIS?

Is there any problem with using a 301 redirect to force all traffic to go to a secure-only site? We originally had redirect rules, but enforcing SSL-only seemed more secure. Here is how we set it ...
0
votes
1answer
417 views

How can I monitor the network on ESXi node for connections and find the source of a ddos attack

I'm looking for something fairly simple to install, that will monitor network traffic on the vswitch for my esxi node as we're getting ddosed and I need to be able to easily see where the traffic is ...
0
votes
4answers
83 views

How can I restore a database such that I can use it on a server where I don't have the security admin role

On a SQL 2008 instance, I have a login with the dbcreator and public roles. When I restore a database onto this server, I am then unable to use that database because all the user -> login mappings in ...
0
votes
1answer
80 views

Users able to install applications

We have win7. Network users are able to download applications like Mozilla Firefox, and install it. The install folder they are able to install to is c:\users%USERPROFILE%\AppData\Local\Mozilla. If ...
0
votes
2answers
51 views

Close ports only on a specified network interface

I've just checked with nmap a proxy server (ubuntu 10.04 with squid) for vulnerabilities and I decided to start an hardening process... Is it possible to close, for example, ssh port only on eth1? So ...
0
votes
1answer
127 views

make sure openfire does not connect to other jabber servers

This is mostly a security question; i've installed OpenFire jabber service on my office network, but i want to make sure the server is not using federation or any other interactions without outside ...
0
votes
1answer
5k views

authorization: application pool identity cannot access path

I have two very similar ASP Classic apps that both use Windows Authentication and run on the same development PC (Windows 7/IIS 7.5). They've been around for years, and have 'travelled' with me as ...
0
votes
4answers
280 views

Why user logons to Windows always look like the first logon

I have Windows Server 2003 and all the users have windows XP with administrative privileges in local group setting, so I want to reduce them to normal users. i.e. Currently normal user in active ...
0
votes
1answer
93 views

Security of local Ubuntu development server

I'm developing on my laptop which is constantly connected to the Internet while I'm working. I installed Apache2 with Ubuntu default settings, MySQL and PHP. How safe is it for me to develop when I'm ...
0
votes
3answers
536 views

Good Firewalling practice for internet facing servers?

Does it make sense to firewall an internet facing server, say a webserver? Assuming I did not want to restrict anyone from accessing the webserver in its capacity to serve web pages, I would be ...
0
votes
1answer
45 views

How do I create a new user on AWS?

I want to give developers individual access to AWS Management Console, and have their own security keys for AWS command line tools. Is it possible for me to do this using the command line tools? And ...
0
votes
2answers
251 views

SSL: Page Includes Resources Which are not Secure

I get this error every time I have a request to my SSL server, even when it's a text file. Is it not sending the response via SSL? Apache SSL config: Listen 443 AddType application/x-x509-ca-cert ...
0
votes
2answers
440 views

Should I use my web server firewall to block all traffic from IP addresses that seem to be attempting attacks?

I’ve recently set up a tiny Debian VPS for hosting a couple of personal sites. In the Apache access logs, I’ve noticed quite a few requests for URLs like /phpMyAdmin-2.6.4/scripts/setup.php coming ...
0
votes
1answer
101 views

Exchange 2003 encrypt external relay

I have a Postfix server filtering emails for an Exchange 2003 server. From the firewall, all incoming emails are routed through Postfix, gets filtered before it is delivered to the Exchange 2003 ...
0
votes
3answers
145 views

Google webcache: information leakage despite requirement of login

Been searching like crazy for hours. What happened: While googling my site to check for certain keywords, I used their site preview function (where you get that little popup with an image ...
0
votes
2answers
227 views

Windows server security setup (firewalls, SQL server and other points)

Firstly apologies for this being a non-specific question, I'm not really sure where to look for specifics so this is a general discussion of regular issues I'm faced with. I'm going round in circles ...
0
votes
2answers
108 views

HTTP request hijkacked?

I've installed Tomcat 6 on my first, new VPS. I had added AccessLogValve to server.xml configuration Tomcat file. In tomcat log I saw first this: xxx.xxx.xxx.xxx - - [04/Mar/2011:23:43:12 +0000] "GET ...
0
votes
1answer
569 views

VisualSVN Server self-signed certificate

I asked this question in StackOverflow site but nobody can answer it. I will try here: I am reading VisualSVN doc online and one of them is like this: It's also possible to export a self-signed ...
0
votes
2answers
363 views

Run as Admin - without being local admin?

Is there any way, on Windows 7, to let users have the "Run as Administrator" option available without giving them full local admin rights? It will grant them the same level of access to the machine, ...
0
votes
3answers
373 views

DDoS Network Protection Devices

In our office we're running a Cisco ASA 5510 firewall. Is this device enough if we want to protect against DDoS attacks? What devices (like cisco guard, etc) do you recommend and what's the user ...
0
votes
2answers
453 views

Block access to every file in the site but index.htm in Nginx

I have a site with just one file: index.htm which have some ajax linked to php files. I'd like to make those php files only accessible via ajax (post and get) coming from this index file and block ...
0
votes
2answers
1k views

How to secure a group of Amazon EC2 instances

I have several Amazon EC2 instances running Ubuntu 10.04 and I've recently started using Amazon's Route 53 as my DNS. The purpose of doing that was to allow the instances to refer to each other by ...
0
votes
1answer
1k views

Report Server: login failed to master database

I noticed from the SQL Server log that every time server restarts (I'm using SQL Server 2008 developer edition) I get an error message into log: Login failed for user 'machine\sqlaccount'. Reason: ...
0
votes
2answers
92 views

Where ACLs are applied

I am trying to understand ACLs and am unsure of where they are applied. Here's my example. I am trying to prevent communication between two VLAN interfaces. My source clients are on VLAN 1, my ...
0
votes
2answers
80 views

Getting started with a blacklist

I blacklisted "213.5.64.179" and wonder if you can recommend how to proceed? Should I do this on an ad-hoc basis just following the instructions and blacklist bad hosts as we go along or take ...
0
votes
3answers
135 views

Prevent acccess to the C drive

Is it possible to prevent regular users from accessing the C drive via Windows Explorer? they should be allowed to execute certain programs. This is to ensure that employees cannot steal or copy out ...
0
votes
2answers
2k views

Best client and server antivirus for 5 user office? [closed]

I'm setting up an Active Directory environment for 5 users (very small) and I'm wondering what is the best antivirus for clients (Windows 7) and servers (Server 2008 R2 x64)? I use Symantec Corp at ...
0
votes
1answer
963 views

A non interactive alternative to makecert

I have a need to create a self signed certificate non interactively. Unfortunately, the only tool that I know of (makecert) is interactive - it uses GUI to ask for a password. My OS is Windows (from ...
0
votes
1answer
167 views

Script to get the Email Alerts for RDP Session

Is there any script to get the Email Alerts when someone logs into the server so that I can increase server security by getting the Email alerts. Any help would be appreciated
0
votes
2answers
394 views

Strange Items in Hosts File and Netstat

I ran a netstat -a on a computer and there were a number of strange items: Proto Local Address Foreign Address State TCP netgym:epmap virusin:0 LISTENING ...
0
votes
1answer
611 views

CISCO: ARP Poisoning Countermeasures

How can I prevent the Cisco Catalysts 2950/2960/3550/3750 from being vulnerable to ARP Poisoning? Can this be avoided with the ARP INSPECTION? Thanks
0
votes
2answers
614 views

Website needs to only be accessible from two specific iPad's and no other devices or IP's (PHP)

The business I work for has a website for employees to clock in and out of their work shifts. This website needs to be only accessible from our two in-house iPads. I tried doing a simple .htaccess ...
0
votes
2answers
191 views

.htaccess regular expressions for optimal performance?

In my .htaccess file I'm trying to block some bots using: RewriteCond %{HTTP_USER_AGENT} ^badbot [NC] But, I want to change these conditions to something more inclusive like: Method #1: ...
0
votes
4answers
3k views

monitoring outbound traffic on port 25

I just started up a new instance that i build using debian squeeze on amazon last night. This morning I just got an email saying that I reached a limit on the volume of email you were able to send ...
0
votes
1answer
343 views

How secure exactly is RDP

I have a few Windows machines I need to open up, but I was wondering: how secure is RDP? I already found documents like this explaining how to improve security, so obviously it is not very secure by ...
0
votes
4answers
4k views

Disable audit of Logon Logoff

I have a SBS 08 with 50 users on my domain. In Event Viewer : Windows Logs > Security, I've got nearly 300,000 events about EventID 4624 Logon, 4634 Logoff, 4776 Credential Validation, 4769 Kerberos ...
0
votes
2answers
313 views

Cannot select from new view in MySQL (can select from everything else)

I am a newbie to MySQL, being more accustomed to MSSQL. However, we have recently purchased the LabTech management software, which uses a MySQL back end. While writing a custom report to keep track ...
0
votes
2answers
68 views

images security

How I can check all my images on server, they don't prepared with maulicious code ? I mean for example Gif PHP exploits and so on...