Reputation
517
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
1 10 25
Impact
~57k people reached

Jan
30
comment I set up a web application server, and a separate server for postgres on the same network. How should I secure the connection?
Ah, yes! So I can just use username & password authentication with a ufw firewall set to reject all connections not validly made from one of my two web servers. This sounds like the easiest to deal with, as ufw makes firewall administration easy for me. Thanks.
Jan
30
revised I set up a web application server, and a separate server for postgres on the same network. How should I secure the connection?
added 4 characters in body
Jan
30
comment I set up a web application server, and a separate server for postgres on the same network. How should I secure the connection?
Is setting the dbserver1 postgresql.conf to listen only to the ips of appserver1 (and any future additional app servers) not enough?
Jan
30
comment I set up a web application server, and a separate server for postgres on the same network. How should I secure the connection?
Yes, exactly so, it's an "internal network" for rackspace servers, which means god knows who could be on there! Damn, I have to set up a VPN just to securely connect to my database on a separate server? sighs I've never messed with a VPN before.
Jan
30
revised I set up a web application server, and a separate server for postgres on the same network. How should I secure the connection?
added 177 characters in body
Jan
30
comment I set up a web application server, and a separate server for postgres on the same network. How should I secure the connection?
Ah, right, I'm using rackspace, and I'm connecting via a rackspace internal network IP, but since rackspace is, like, a cloud-server provider with some million users or servers or whatever, I'm not sure that it's best practice to trust even such an internal connection.
Jan
30
revised I set up a web application server, and a separate server for postgres on the same network. How should I secure the connection?
edited title
Jan
30
asked I set up a web application server, and a separate server for postgres on the same network. How should I secure the connection?
Dec
17
awarded  Notable Question
Nov
14
comment nginx / fpm and PHP_VALUE not working
Based on that bug, it may be an escaping issue for some reason.
Oct
16
comment How to set a favicon.ico for a specific Virtual Host on Nginx?
The permissions issue fixed it for me as well!
Oct
1
awarded  Taxonomist
Sep
19
comment Tried to deny access to apache /server-status module with certain exceptions, but it became exposed everywhere
Hmmm, seemed promising that allow locations might be space delimited instead of comma+space delimited, but in actuality it didn't make a difference.
Sep
18
asked Tried to deny access to apache /server-status module with certain exceptions, but it became exposed everywhere
Aug
22
awarded  Notable Question
Aug
20
revised Apache: Stealth 404 the admin area until authenticated via basic auth, then allow access
deleted 1 character in body
Aug
20
revised Apache: Stealth 404 the admin area until authenticated via basic auth, then allow access
added 391 characters in body
Aug
20
comment Apache: Stealth 404 the admin area until authenticated via basic auth, then allow access
There are two advantages that I can see to not providing the basic auth password & username on every admin url: 1: brute forcing of the basic auth cannot be done until the wp-adminsecretlogin/ url is accessed, and since that url will be a custom one for the site/blog network, that would require prior knowledge of the login url and would generally require tailoring the attack to the unique site/blog network. 2: Returning 404 will mask the standards signals to bots that a wordpress admin section is present, to discourage the frequent brute force scripting attempts that tend to occur.
Aug
20
asked Apache: Stealth 404 the admin area until authenticated via basic auth, then allow access
Jul
23
awarded  Nice Question