Security is not a product, but a process.

learn more… | top users | synonyms (1)

0
votes
3answers
72 views

watch file to see whos accessing/writing it and log it

I am facing some malware problems on my webserver. I updated third party software such as Wordpress to the latest version, disabled root logins and my users password complex enough but still someone ...
0
votes
1answer
220 views

DNS Reflector Attacks — protection

[~]# /usr/bin/dig +recurs @MYIP www.facebook.com ; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.10.rc1.el6_3.5 <<>> +recurs @MYIP www.facebook.com ; (1 server found) ;; global options: ...
0
votes
2answers
148 views

puppet enterprise node install - Security risk?

I am learning puppet and using this tool install puppet clients on nodes. puppet node install --login=root --keyfile=~/.ssh/id_rsa --install-script puppet-enterprise --installer-payload ...
0
votes
1answer
100 views

Malicous Iframe appearing on website [duplicate]

One of the websites which I look after appears to have been compromised. However I am still trying to locate the source of the problem. A hidden iframe appears on the page, however it only appears ...
0
votes
1answer
66 views

SSL configuration for domain pointing to EC2 instance

I have my custom domain pointing to an EC2 instance. Say mydomain.com -> [Elastic IP address for my EC2] I would like to add SSL certificates so that I can access the site via https - ...
0
votes
2answers
220 views

What types of security threats does a vlan protect against? [closed]

I'm learning about vlans. The literature says that they provide improved performance and security by segrating the physical network into separate "virtual" networks. I understand the performance ...
0
votes
1answer
161 views

Stop server's use as proxy

I have a vps server on which I have configured apache as a webserver. Because of unexpected high usage of bandwidth, I checked the access log of my server yesterday. There were a lot of requests of ...
0
votes
1answer
425 views

Converting the ssh key

to clone my bitbucket project,I changed the /.ssh/authorized_keys content by adding my bitbucket key and I am able to clone into my bitbucket,but after that I was not able to access my server at EC2 ...
0
votes
1answer
122 views

How to ensure a password entered on command line is not stored at all on Linux server?

I've got a web page PHP script which runs p7zip on the server: This passes a user supplied password for encrypting their uploaded files. Secondly the password is then emailed via PHP to the ...
0
votes
2answers
745 views

Nginx - prevent a .php file running on anything but your own server/domain?

We have an mp3 player that runs via an iFrame, not our choice but thats how we're stuck with it. We want to prevent other people simply embedding the iframe on their site. What would be the best way ...
0
votes
2answers
382 views

Linux - Security - Is someone trying to find a way in? [duplicate]

Possible Duplicate: Hundreds of failed ssh logins Recently I have been spending more time on my production servers in efforts to puppetize several configs and I happened to issue a find ...
0
votes
1answer
111 views

unix malicious scripts/ksh execution

I'm wondering whether my architecture poses a security risk. Details: The whole website is not ROOT owned but still, the APACHE user used instead has some pretty advanced permissions. I have a ...
0
votes
2answers
706 views

How to transfer large files between two remotes by using a third machine?

I need to automatically mirror a large amount (terabytes) of files in two unix machines over a slow link (1 Mbps). This needs to be done frequently, but the data doesn't change too much (delta ...
0
votes
1answer
59 views

Hyper-V Role on Server 2008 R2

So I read over a dozen articles regarding Hyper-V and iSCSI (host or VM using software) and they both have pros/cons about each. However, the host-based has better performance. So now that I decided ...
0
votes
2answers
536 views

Could it be that “chkrootkit” just doesn't like .hmac, .packlist, and .relocation-tag files?

I just cleaned up my hacked CentOS server (due to not updating since versino 5.3). But still, "chkrootkit" says this: Possible t0rn v8 \(or variation\) rootkit installed ...
0
votes
1answer
201 views

Security Risks of catch-all email address [closed]

What additional security issues does an MTA and email client face if a catch-all email address is setup on an sub-domain (that isn't published/publicly listed anywhere) compared with setting up ...
0
votes
2answers
2k views

Scripting Local Security Policy settings

We have a bunch of Windows 7 laptops out in the field. They're not in a domain. We'd like to build a script/batch file that we can send to each machine and, when run, configure screensaver locking, ...
0
votes
1answer
433 views

sshd_config versus authorized_keys command parameter

Background: I added OTP token authentication to my web server. I modified the /etc/ssh/sshd_config file with the ForceCommand /token/script command. Problem: I have a local Jenkins instance ...
0
votes
1answer
795 views

Windows Task Scheduler Security Issue [closed]

Using the Windows Task Scheduler allows non-administrator users to gain access to administrative rights. Normally, Windows prevents execute applications which need to have more rights. A message ...
0
votes
1answer
208 views

Can tcp_wrappers be bypassed?

I utilize TCP wrappers to secure services running on my machine. Things like webmail, cpanel, whostmgrd, and so on. I use the hosts.allow/hosts.deny files to facilitate this. Is it possible for an ...
0
votes
1answer
798 views

Allowing any file to upload on server and security risks

We are having a project that allows users to backup there data to server through php upload,running on Linux server. If users upload any executable file it will be automatically renamed to some ...
0
votes
1answer
2k views

Lots of Logon/Logoff events in the event viewer windows 2003

I seem to be getting a lot of these entries in the Security event viewer. Around 8-12 every hour. I am wondering if a) I should be worried about it? or b) what actually is going on, Can anyone help? ...
0
votes
2answers
603 views

CentOS security for lazy admins

I'm running CentOS 5.5 (basic LAMP with Parallels Power Panel and Plesk) and have thus far neglected security (because it's not my full-time job, there is always something more important on my ...
0
votes
2answers
70 views

Secure every connection between endpoints

Sometimes one has to work with software that hasn't built in security-features for non-local connections. In fact, some client-libraries are sending credentials in clear text over the wire. On the ...
0
votes
1answer
163 views

Securing Erlang / Ubuntu server

I have written a web service in Erlang using mochiweb and jiffy and now face the task of deploying it to production. Since it is going to be open to the public I was wondering how secure Erlang ...
0
votes
1answer
245 views

Weird Apache Error Log [duplicate]

Possible Duplicate: What are these weird access requests? [Thu May 03 11:39:36 2012] [error] [client 200.159.40.31] File does not exist: /var/www/w00tw00t.at.blackhats.romanian.anti-sec:) ...
0
votes
2answers
1k views

Reverse Proxy - should it be a different technology stack?

Got a skeptical question about a reverse proxy setup I'm considering. I've currently got a pair of load balanced application servers in the DMZ (S1,S2 in figure below). These accept inbound requests ...
0
votes
1answer
670 views

Optimized LAMP/LEMP stack scripts

In the "let's try not to reinvent the wheel" perspective, I've been looking for a packaged LAMP (or LEMP) stack for some time now, not only the basic Mysql, Apache , PHP etc... but ideally stuff like ...
0
votes
1answer
2k views

CentOS apache startup config file security error

I am setting up a NetDisco machine on CentOS, which entails adding an include to the apache httpd.conf file. When I start apache by running "httpd" from a root command prompt, the process launches. ...
0
votes
1answer
679 views

ossec email alerts

Just installed ossec and sendmail however can't able to get alerts to my gmail from ossec. I am able to see the alerts on the sendmail localhost, however alerts seem to be not forwarding to gmail.
0
votes
1answer
224 views

PHP Permissions (chmod vs. suEXEC)

I have an application that claims to require chmod 777 permissions for two of its directories (and their subdirectories). Instead of doing that, would suEXEC be a more secure alternative?
0
votes
4answers
1k views

Is it possible to sign email with digital signature on server side?

I have nice iRedMail server (postfix, dovecot, policyd). One of my client apps sends email via this server. And client want to sign it with digital signature on server side. Is it even possible to do ...
0
votes
2answers
2k views

Save any file directly on Windows server instead of the user's PC?

I am using a Windows 2003 R2 server and an XP system. I want to save any file (like- .doc, .xls, audio and video file) directly on the server from XP system. There must be no option to save the file ...
0
votes
1answer
2k views

How to make sure www directory is secure?

I managed to order a new VPS account from linode I have installed Ubuntu 10.04 LTS with 'LAMP Stack' StackScript. I notice the website directory is located in /srv/www/ and I thought this is quite ...
0
votes
2answers
6k views

Fortigate 40c Firewall Configuration

Does anybody know if is it possible to Un-bridge ports on forgiate 40c? I want to use the fortigate 40c to define and control (block/allow) port traffic for the following 4 ip ranges (each ip range ...
0
votes
1answer
88 views

Good resource for evaluting AV and anti Malware software?

I am looking for good resources to use to compare the effectiveness of various antivirus/antimalware software solutions. In particular, I am comparing Windows Security Essentials against Symantec ...
0
votes
2answers
128 views

Who executed that particular command on my centos VPS

I have noticed that an unknown mysqldump command is being executed on my system. But I have not configured my system to issue that command. Following is the output when I do ps aux | grep mysqldump ...
0
votes
1answer
884 views

Custom www-data user in Ubuntu

I use apache2-mpm-itk to run one of my web applications with a custom uid and gid, both for audit and security reasons. This works nicely, however I am not sure what kind of privileges this user would ...
0
votes
2answers
4k views

How to allow just one user to login in special computer in Server 2003

I want to just allow one user to login to a special computer in domain. how can i do that ?
0
votes
1answer
371 views

Securing windows 7 based kiosk on network

What steps should be taken to secure a kiosk running windows 7 and a proprietary application on a network? The kiosk requires the ability to make outgoing calls over port 443. I am looking for advice ...
0
votes
2answers
77 views

opening a port on a router to all WAN ip's or just a range or specific WAN IP

Just trying to see how many people would be in favor for opening a port on a router, like port 22 or something similar for ssh, to all outside WAN connections or just a set of specific WAN ip's for ...
0
votes
2answers
4k views

Analyzing Apache access logs to quickly identify abuse

So someone in China just loves abusing the crap out of my networking tools site up at yougetsignal.com. I've been trying to analyze my access.log files to see exactly what they are so excited about. ...
0
votes
1answer
63 views

Protecting directories on a Apache web server by directory name string match?

Using Apache, is there a way to protect all items beneath directory names that contain a certain string? For example, if I have this structure: wwwroot--> project1--> docs--> ...
0
votes
1answer
3k views

suexec policy violation: What were these guys up to?

Have just assumed responsibility for a new client's site. OS is Linux. They had a cgi-bin directory below document root. I was looking at my error.log for an issue with a script and found a number ...
0
votes
2answers
205 views

Why do I need default ACCEPT?

If I leave out this line $IPT -I INPUT -i $WAN_NIC -j ACCEPT from my firewall script below, then I can't SSH to the server. The way I understand $IPT -I INPUT -i $WAN_NIC -j ACCEPT is ...
0
votes
2answers
523 views

User uploaded files on different server with PHP?

If I had a dozen "Work" servers with just PHP-FPM (with other Nginx servers in front), is it possible to setup PHP to store user uploaded files on a different server? I'm looking to avoid syncing ...
0
votes
1answer
43 views

Establish secure channel to domain workstations to transmit password in clear text

I want to use some command line tools for remote administration of Microsoft domain workstations, however some of them transmit the credentials in clear text. Is there a command line utility I can ...
0
votes
2answers
942 views

Apache2 mod_security simple default deny rules for specific directory

How to configure the simplest useful default-deny rule set for mod_security? I want to configure mod_security to allow only very specific queries to single directory: In short: I use Apache as a ...
0
votes
3answers
97 views

Getting Some Specific Types of Log [closed]

I'm want to get some logs from my server, but not general logs like syslog that gives me a lot of random logs. I want to know how I can get logs of things like logins(with time, IP and username), ...
0
votes
2answers
2k views

Folder permissions when zip and unzip on Windows

I've a webserver Windows 2003. When I do a backup in a zip of some folders, the permissions of the folder doesnt restore when i unzip the compress file. How can I do a zip saving the original ...