Security is not a product, but a process.

learn more… | top users | synonyms (1)

0
votes
1answer
39 views

IIS6 Server compromised, pages being served which don't exist as asp files?

Started a new job recently which involves some work with an IIS server. We recently found that the server had been compromised as a few websites had pages appearing on Google Webmaster tools which ...
0
votes
2answers
1k views

Solaris non-global zone knowing its global zone

It's my understanding that it is not possible for a non-global zone to determine its global zone, however running this on the global zone creates a file called /etc/global-zone-name in all running ...
0
votes
1answer
2k views

Changing apache user from www-data to another user

I am wondering the security risk of changing apache run user from www-data to another. sudo vi /etc/apache2/envvars Configs: export APACHE_RUN_USER=www-data export APACHE_RUN_GROUP=www-data I have ...
0
votes
1answer
742 views

How do I enable WebDAV write access in WebSphere Portal 8.0?

As an administrator in WebSphere Portal 8.0, I can access and modify theme-related files with a WebDAV client connected to http://servername:10040/wps/mycontenthandler/dav/fs-type1. I now want to ...
0
votes
1answer
144 views

RDP over VPN only

I know this question has been asked many a times here. But i want to gain certain perspective here. I have enabled VPN on certain systems and then can access remote system using rdp. However they can ...
0
votes
1answer
173 views

How to expose securely a Node.js/Express server into the real world?

Essentially I would like to know what the title suggests. Node.js/Express is nice. However, node is a fairly recent thing and hence there may be security risks by exposing the server to the real ...
0
votes
1answer
57 views

Conditional authentication in IIS?

Is it possible to specify conditional authentication methods in IIS (6 or 7) based on http headers? So for example mobile browsers would use a guest account while desktop browsers would need ...
0
votes
2answers
100 views

Amazon EC2 security groups

I'm setting up my first instance on EC2, and trying to find clear information on the security group settings is a bit difficult for a newbie like me. Are there some suggested settings that give a ...
0
votes
2answers
65 views

Mac Encryption and Reporting

We have a requirement at my company to support Macs. The machines need to be encrypted and have some sort of way to check in with a management system to verify the encryption status. This can be ...
0
votes
2answers
1k views

Filezilla or PuTTY: I have “Access granted” followed by “Server unexpectedly closed network connection”. How to troubleshoot?

Here is an extract of Filezilla debug traces : Offered public key from "(...)" Offer of public key accepted, trying to authenticate using it. Access granted Server unexpectedly closed network ...
0
votes
1answer
34 views

Amazon RDS - Create a Security Group NOT in Virginia? [closed]

It seems as though the management console only allows security groups to be created while in the "Virginia" selection. Is there a way to create a security group for an Oregon (or other)-based ...
0
votes
1answer
277 views

OpenVPN and Performance [closed]

From my understanding RDP is encrypted and so is the OpenVPN connection so that is an encryption in an encryption. My Setup: LAPTOP <---> REMOTE SERVER <---> OFFICE SYSTEM Due to ...
0
votes
1answer
38 views

Is it secure to allow users to create “support tickets” via E-Mail?

We are using WHMCS as our support portal which supports the piping of E-Mails into tickets, however, I am wondering if this could become insecure in the event that a forged E-Mail was sent. This is ...
0
votes
1answer
191 views

Is it possible to securely add an NFSv4 share to an ESXi Server?

I just wondered how to connect an NFSv4 share as storage extension to my ESXi. Since NFSv4 supports Kerberos, ESXi could use Username and Password to connect to the share, while no one else could ...
0
votes
1answer
183 views

Securing database server with IPTables

I have my app (WordPress) and database (MySQL) on separate servers; they are connected on a private network provided by the hosting service provider, and I've taken all the preliminary steps (that I ...
0
votes
1answer
139 views

xinetd service: OK to change user? (cvs pserver)

Legacy Source Control: CVS under xinetd We have a team that uses legacy source control: cvs. We run cvs pserver under xinetd (config file below). Audit Flag A security audit raised a flag: "make ...
0
votes
1answer
201 views

dmcrypt container on nfs

I'm setting up an encrypted file storage on a remote server and I want to be able to use it transparently on my system. I want to be able to de-/encrypt them locally so that the server hosting the ...
0
votes
2answers
315 views

How can we restrict access to a web service to specific client computers?

We have a web application (Apache/PHP) that currently uses username/password authentication and is currently accessible from anywhere. It has server-side SSL enabled. Our client program is a version ...
0
votes
1answer
248 views

Windows Server 2003 R2 - Who has shutdown this server?

I'm hoping somebody can help me out here. I have a server that has been shutdown on 3 separate occassions but I cannot definitively determine who. I'm hoping somebody can help me figure out the ...
0
votes
2answers
69 views

Enumerating Wifi devices on a network

I'm trying to monitor what devices are active in a Wifi network. This is specifically about mobile phones that connect to a Wifi-Router. While I do know how to enumerate Wifi networks in reach I would ...
0
votes
1answer
284 views

Sending two Content-Security-Policy headers

I current have an nginx server that is sending the Content-Security-Policy header, however I've read that apparently IE only supports "X-Content-Security-Policy". Would it be a good idea to send both ...
0
votes
1answer
3k views

How can I setup an IP whitelist for a subdirectory?

A client of mine complained of an attack. I checked the access log and found a massive number of requests for the admin login page from seemingly random IP addresses. I created an .htacces file in the ...
0
votes
1answer
106 views

fail2ban doesnt permanently block

Fail2ban doesn't seem to block permanently. I have bantime =-1 but if i look a bit later on my iptables its just not there anymore all ill see is Chain fail2ban-ssh (1 references) target prot ...
0
votes
1answer
151 views

Providing root ssh access to virtual servers behind NAT? [duplicate]

We are a web hosting company. We have 4 Servers which are running OpenVZ on top of CentOS. Each of the server has around 50 containers running on top of it. We are planning to provide ssh root ...
0
votes
1answer
69 views

Amazon EC2 - Help setting up security based on how my software works [closed]

I'm currently developing on a project of mine where I need some guidance on securing my server. My server is Ubuntu Server 64bit hosted at Amazon AWS EC2. I have my own software running on it. My ...
0
votes
1answer
655 views

Remove “Act as part of the operating system” policy

On one of our servers we have enabled the "Act as part of the operating system" policy in the Local Security Policy. (Security Settings > Local Policies > User Rights Assignment). Now we would like ...
0
votes
1answer
50 views

How to secure mount NFS folder for read & write access?

I have 4 load balanced apache servers, and all of them can add files to /project/media/ direcotry (different pictures). I want to store all media files in separate server and mount them on apache ...
0
votes
1answer
221 views

Allied Telesis AlliedWare gui http server accepted cipher suites

When configuring a AT-9924T switch running AlliedWare 2.9.2 to serve ssl encryption on the http server as described in the manual like this: create enco key=0 type=rsa length=2048 set system ...
0
votes
1answer
186 views

Is it worth to use chroot when running web applications?

My setup: In production I'm using one virtual server per one web application shard. Shards are behind load balancer. In backstage we run web application + DB on a single virtual server. The ...
0
votes
1answer
43 views

Referrer in access.log is a directory

It seems that the referrer on the following log is a folder. 112.200.208.5 - - [29/Jul/2013:20:43:14 +0800] "GET /sites/default/files/download/argie/pos-code.zip HTTP/1.1" 206 294677 ...
0
votes
1answer
237 views

hacking attempt or something else in IMAP - logwatch logs

In my Logwatch logs I found 3 lines that look weird to me, I speculate that they are hacking attempts. IMAP connect from @ [::ffff:121.183.126.37]DEBUG: Connection, ip=[::ffff:5.102.221.2]: 6 ...
0
votes
1answer
87 views

Securing nginx (user/file permissions)?

I'm just setting up nginx on my web server, and I created a user account for it to use (nginx). However, it runs its worker processes by default as www-data. Is there any disadvantage to using ...
0
votes
1answer
35 views

Setting up SSL at the server level on a VM [duplicate]

Forgive me if this is a trivial question, but I literally have zero experience in hardware administration. I build websites/web apps, but usually use a third party like GoDaddy or Arvixe to ...
0
votes
1answer
56 views

disallow file types (shell script wordpress security)

We recently got our servers into SVN which has been great, but this causes a lot of problems when using things like WP Filebase for CMS file management. It's also hard to keep the uploads folder ...
0
votes
1answer
451 views

Which user should i give permission to in IIS?

I'm running a windows 2012 server with IIS 8 installed, I have a php script which complains about not having write permission on a specific folder. If I grant permissions to this IUSR user, It works ...
0
votes
1answer
531 views

Ramnode was hacked SolusVM zero day exploit (what should I customer do?) [duplicate]

So, ramnode was compromised, some kid used zero day exploit to gain access and rm -rf. I'm really happy how ramnode team handled situation, finally my VPS was restored and it is back online. I've a ...
0
votes
1answer
260 views

How can I allow traffic only from my load balancer, if the private IP of the load balancer changes all the time?

I'd like to limit (via iptables or otherwise) inbound traffic on 80/443 to traffic coming from my load balancer. I have the public IP (which doesn't change, of course), but the only private IP info I ...
0
votes
1answer
578 views

How to unblock exe-file and windows-help-chm-file on a mapped network drive using Windows Server 2008 Active Directory group policy?

We have a mapped drive M: in our Server 2008 R2 64 AD Domain. There is an important exe and a windows help file on the drive that all users need to access from there. How can I remove the security ...
0
votes
1answer
60 views

How to ensure all public mirrors contain same content?

Basically I plan to have some files mirrored on multiple servers on different providers. A unique cname will auto-balance the traffic across all available mirrors and will serve from the closest to ...
0
votes
2answers
331 views

Should I use openVPN or something Else?

I'm in charge of setting up a "walled network" set of servers for a group of employees, but I have no clue where to start. Posted below are the initial requirements, my line of thoughts, and my ...
0
votes
1answer
615 views

Errors whilst installing kolab

i'm struggling for the past 2 days please help me anyone... [root@mail /]# setup-kolab Please supply a password for the LDAP administrator user 'admin', used to login to the graphical console of 389 ...
0
votes
1answer
25 views

How do you deny a user access to a certain collection in mongo?

I have several collections that I would not like certain users to see. How would I go about "hiding" them or blocking a user from viewing?
0
votes
1answer
171 views

Allow either password or private key SSH authentication

I set the lines PasswordAuthentication yes and PubkeyAuthentication yes in /etc/ssh/sshd_config. I also disabled root login for security purposes. I can now SSH with a user's password without ...
0
votes
1answer
326 views

How can I configure a Ubuntu LAMP web server with permissions like CPanel? [closed]

I know how to set up a LAMP stack on Ubuntu pretty well for a single website / single user, but I'd like to allow multiple users to host multiple sites on a single server. This is for different ...
0
votes
2answers
346 views

apache: restricting access by network

Im working on a (linux based) device that has 4 network interfaces: two wired, one wireless and a VPN. The device has a web 'control panel' of sorts that I want to restrict access to. Ideally it ...
0
votes
3answers
5k views

How to disable SSL/TLS compression in Apache 2.2.16?

I have one sever running on Apache 2.2.16. I run the VA scanner on the server. According to the VA report it is recommended that SSL/TLS compression should be off. I tried to search google, but didnt ...
0
votes
1answer
67 views

How to update/maintain a patched kernel?

If I patch my linux kernel with grsecurity, will I still be able to update my system with yum (or apt-get)? Won't the updates available via yum be incompatible with my patched "non standard" version ...
0
votes
2answers
448 views

-bash: www.mydomain.com.pem: Permission denied

I have these three files in /etc/nginx/ssl folder: www.mydomain.com.csr www.mydomain.com.key www.midomain.com.key.nopass I bought and downloaded the positive ssl certs in ...
0
votes
1answer
29 views

Limit access to an EC2 instance from different instances

I have an EC2 instance set up called Machine1. I specified the security group to be Group1. How can I allow access in Group1 to any machine that comes from an internal EC2 request? Do I have the ...
0
votes
1answer
512 views

Cisco asa 5500 series - Logging VPN connections to easily search connection history

We have a fresh requirement to log information to do with vpn connections. The ultimate goal would be facilitating IT management being able to easily review when someone had been connecting / ...