Security is not a product, but a process.

learn more… | top users | synonyms (1)

0
votes
2answers
596 views

Multiple POST requests to same file from same IP address

I periodically check my apache domlog to check for anomalies in GET and POST requests. Earlier today I noticed the same POST request to a login php happening two and sometimes three times a second for ...
0
votes
1answer
910 views

Content Security Policy Configuration Problems

I have a server running nginx and I would like to add CSP. However I'm encountering difficulties even after following numerous guides I will either get an error from nginx or they just don't work. ...
0
votes
2answers
79 views

Linux Server where the high security is desired [closed]

I am preparing a JAVA program that will be use to monitor a system. The program uses UDP and TCP sockets to receive and send packets over the Internet by using VPN. I will dedicate a server just for ...
0
votes
1answer
41 views

Protect against inadvertent command entry

I have a couple boxes in production and then some in a test environment. Anyone have any clever ways to protect against typing in inadvertent commands into boxes? i.e. I want to put a confirmation ...
0
votes
1answer
106 views

Iptables to lock down compromised server to a single ip [duplicate]

I have a Linux server which is compromised, I can see nasty looking perl scripts executing with root privileges. I want to get some data off it before I wipe it. How can I block all inbound and ...
0
votes
1answer
104 views

why iptables giving error when using with --src-range

I am using iptables v 1.4.8 and used following command but getting one error message on terminal # iptables -A INPUT -m iprange --src-range 10.0.4.92-10.0.4.99 -j DROP modprobe: module 'ip_tables' ...
0
votes
1answer
99 views

Opening ec2 ports using security groups

I'm trying to open all ports up to a micro instance that I have set up, but it doesn't seem to be working. This is what I have: http://i.imgur.com/PHekagS.png Using paping, I find that port 22 is ...
0
votes
2answers
55 views

https redirect to https (No Cert Warning) [duplicate]

Am I right in thinking that in order to redirect an https URL to another https URL without a certificate warning, the first https URL has to have it's own valid certificate and IP address? Am trying ...
0
votes
3answers
8k views

How to disable SSL/TLS compression in Apache 2.2.16?

I have one sever running on Apache 2.2.16. I run the VA scanner on the server. According to the VA report it is recommended that SSL/TLS compression should be off. I tried to search google, but didnt ...
0
votes
2answers
75 views

Managing security (Java) access in a shared environment

While developing a shared hosting solution for Java applications we have encountered an issue, since users can upload their own jars how do we restrict them from running Linux commands such as df -h ...
0
votes
1answer
406 views

Lot of Apache requests in “L” state, what could be the reason? DDOS?

I am having this in my apache server status message: LLLLLLLLLLLLLLLWLLLLLLLLWLLLLLWLLLLLLLLLLWLLLLLLLWLLLLLLLLLLLLLL WLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLWLWLLLLLLLLL ...
0
votes
3answers
107 views

Tamper-proof AWS AMI

I need to convince my customer that my server to which he submits his sensitive data runs only applications/processes approved by him. Also the customer is not allowed to get access to my server. He ...
0
votes
1answer
118 views

More secure way of sending MySQL commands from a remote server on the command line

What is the most secure way of running SQL commands from a web server to a remote MySQL server from the command line. I can think of two ways: mysql --host mysql.mydomain.com --user admin --password ...
0
votes
1answer
55 views

Security of NameVirtualHost in regard to HTTP request forgery

If I understand the concept of NameVirtualHost correctly it works by reading the Host variable of every HTTP request and matching it to a ServerName in any active VirtualHost directive with the ...
0
votes
2answers
818 views

how to identify & respond to bruteforce attacks

(skip to the end for less context) I have a CentOS 6 box with a few security measures taken - disabled root login, strong passwords, and user whitelist for FTP and SSH, and fail2ban installed. I get ...
0
votes
1answer
168 views

ssh: how do I find out the total bytes send and received by ssh user

In the place I work, there are multiple users who log in to any server through ssh and perform various tasks. In general, they are supposed only to run commands on the servers, not copy files out of ...
0
votes
1answer
816 views

What is the best way to join an internet pc to domain?

I need to connect a PC that has already an Internet connection via on-board LAN to a Windows domain. This domain has no Internet connection, because the data is confidential. I need to do this because ...
0
votes
2answers
493 views

postfix feed to program as root

I'm trying to get postfix to pipe stdin from an email into a script that needs to be run by root (yes I understand the security issues of doing this. no lectures, please). Content of aliases file ...
0
votes
1answer
38 views

Do I need to set up public and private keys for ssh connection

I have just set up ubuntu server. I want it to act as my git repository for my work. I have installed openssh and have been able to connect by just providing the account password. i.e name@ipaddress ...
0
votes
1answer
855 views

Root Locked Out of Ubuntu 12.04?

I may have just locked root out of my server, and am looking for help. I have a VPS web server that has been running 10.04 for the past couple of years. For security, I had disabled root login and ...
0
votes
1answer
178 views

Is there a way to get Apache to blank sensitive data from logs?

We're trying to clean up one of our systems as much as possible & have found that despite our attempts to block, users are accessing a certain part of our system through a HTTP GET with their ...
0
votes
2answers
117 views

Should I choose my hosting company's mail server, or make my own mail server on my Cloud server? (for security) [closed]

I have a commercial website on an Ubuntu web server and my hosting company has a mail server for all its customers. For security reasons, do you think I should rely on my hosting company's ...
0
votes
3answers
3k views

connecting ipads to a windows domain [duplicate]

Possible Duplicate: iPad Management Do iPads (version 1, 2, and/or 3) have the ability to connect to a windows server 2008 or 2008 R2 domain? If not, is there a way to enforce security ...
0
votes
2answers
705 views

Can I use an IP-list include file for iptable blacklisting?

I would like to block all countries except mine in iptables, that is a list with about 100.000 Entries. How can I define this blacklist file in a script, so iptables blocks all those IP ranges? ...
0
votes
1answer
75 views

a safe way to provide multiple ftp credentials?

We have a web development company and have ftp credentials for over 300 customers. Is there a method to provide access to employees without giving them username and password? Kind of how credit card ...
0
votes
2answers
782 views

Practical alternatives to split tunneling?

I have seen some IT security audits that request whether split tunneling is implemented for remote VPN users. I can appreciate the peace of mind benefits from disabling split tunneling, since you ...
0
votes
1answer
82 views

Where can I find a documented lists of permissions given when adding a user to stock groups in major distributions?

I am trying to work out a strategy to appropriately hand out certain levels of permissions to junior admins on the system across multiple distributions, especially Ubuntu Server and RedHat Enterprise ...
0
votes
2answers
1k views

vsftpd whitelisting

How do you whitelist IPs for the service to allow only certain subnets on? Do I use IPTables or is there an easier way like IPWrappers Do you have to register the service for it to work with ...
0
votes
2answers
77 views

Moving database to new server

I'm restoring a backup of a production database to a new server. The new server also hosts the application which makes use of the database. As such I'd like to use the same user/pass combination to ...
0
votes
2answers
159 views

Is it Possible to use a Single Certificate for a site which has many different domains

I have an ASP.NET application on IIS(Windows Azure) which has many different domains. All domains are working on http. Now, I need to use https. Whether, a single certificate is fine for all of my ...
0
votes
1answer
204 views

Whats the best way to strip grave accents from bash scripts

I have a bash script which runs as root: #!/bin/bash /var/bin/svn_co -h $1 >> /var/log/svn/status.log If the following should somehow occur, I'm in trouble. /var/svn/hooks.d/post-commit -h ...
0
votes
3answers
86 views

How can I provide secure web content to mobile devices that can't access an intranet?

I'm working with a client on development web content for their intranet. We want users to be able to access a version of the content on their mobile devices, but most of them don't have the VPN ...
0
votes
2answers
607 views

What is the best way to help stop DOS attacks

I am looking for ways to help stop DOS attacks. I'm running a linux server and looking for ways i can help limit the effect of any attacks and possibly set some limits on things without affecting ...
0
votes
2answers
121 views

When running a typical LAMP stack for a public website on EC2, what is the proper firewall setting for port 3306?

I'm reviewing the security groups on my EC2 Ubuntu instance that runs a public website on LAMP. Presently my ports are as follows: 22 (SSH) 0.0.0.0/0 80 (HTTP) 0.0.0.0/0 443 (HTTPS) 0.0.0.0/0 ...
0
votes
2answers
4k views

How to chroot VirtualHosts on a Apache server?

I have a FreeBSD server (company's OS of choice). Currently we run several websites on each of the webservers. Websites are in PHP which is run in Apache Module mode. At the Apache is not chrooted so ...
0
votes
2answers
429 views

Most secure settings for user dedicated for SSH Tunnel

Due to security reasons, I have created a user on my remote VPS only to use it for SSH tunneling. My local PC goes in hands of many others which scares me because I need to leave that SSH session ...
0
votes
1answer
178 views

Windows Copy and permissions

I have copied a which has Everyone permission. The duplicated file doesn't have these permissions other than the default permission. I'd like to know more about how Windows Copy defines the ACLs. It ...
0
votes
1answer
72 views

Common ways of spam files ending up in a web directory

A friend discovered a bunch of spam files in his web directory on his web host the other day. He has no idea where they came from, and I'm not quite sure either. What are common security breaches ...
0
votes
2answers
4k views

Analyzing Apache access logs to quickly identify abuse

So someone in China just loves abusing the crap out of my networking tools site up at yougetsignal.com. I've been trying to analyze my access.log files to see exactly what they are so excited about. ...
0
votes
2answers
380 views

Linux or Windows Server as Gateway/Firewall [closed]

In my house, i'm running a server I use for testing purposes, and I'm planning on throwing away my knackered router, and making the server my Gateway to the internet and using it as a server for ...
0
votes
3answers
315 views

Disable, not unisntall, perl on Red Hat Enterprise 5.X?

So we found that some trojan has been the cause of our two web servers crashing once a week as we found that perl was executing dozens of malicious "gif" files spiking the memory and eventually ...
0
votes
1answer
165 views

Fail2ban Custom Port

I have a rule like this in my jail.local file: [ssh-ddos] enabled = true port = ssh,sftp filter = sshd-ddos logpath = /var/log/messages maxretry = 4 If I want to use a custom port for SSH, ...
0
votes
2answers
2k views

Large number of security events in the log

About a week ago we moved the application from one server to another (from Windows Server 2008 to Windows Server 2008 R2, different DCs, but same company). There are 12 websites on this server, but ...
0
votes
2answers
181 views

Should I ever configure a host with a public IP address to accept traffic from a private IP address?

I connect the 'net with a public static IP (my router's IP address for NAT) and a /29 subnet (for machines behind the router). On my router, I have: #sh ip route | inc x.x x.x.0.0/16 is ...
0
votes
2answers
833 views

Apache Uploads and Security

Recently it has become an issue that a user on one of our systems needs the ability to have the apache user have read and write capability to their site so that the upload portion of their site works ...
0
votes
1answer
78 views

Can i take dump of /proc/pid/exe

One of process invaded my system. I traced that process id, and wanted to dump /proc/pid/exe to that i can investigate later. Please advice how i take dump of /proc/pid/exe
0
votes
3answers
412 views

Preventing local network access on wireless network

On our current network, we have a wireless router and a gigabit 16-port switch. If a machine connects to the wireless network, they have access to all of the local machines in the network. This can be ...
0
votes
3answers
671 views

Limiting network access by MAC address and what else?

How can I limit the network access to a physical network from outside computers being plugged in? I know MAC filtering is one way, VPN is another - but it's not going to be used, so what else?
0
votes
2answers
910 views

CentOS: Log entries of /var/log/secure are not ordered by date and time - why?

Can you please tell me what can be the reason of log entries of /var/logs/secure be like this: Mar 30 10:50:02 server2 proftpd: pam_unix(proftpd:session): session opened for user XXXXXXXXXXXXXX by ...
0
votes
2answers
190 views

Clients can access other clients web directories on shared hosting

Allowing clients ftp access or file uploads on a shared server could lead to scripts being run which can scan directories and files outside the clients web root. What can you do to stop this given ...