Questions tagged [security]
Security is not a product, but a process.
1
vote
0answers
23 views
in pfsense,its possible to secure the the conf.cf (primary configuration file)
I want to give someone a solution based on embedded pfsense. that solution has modificatins in pfsense, which i dont want anyone to steal and use it for their own business. its proprietary solution ...
-3
votes
1answer
38 views
How can I upload an SSH key to a system that doesn't use passwords?
I would like to create a public/private keypair and upload the public key to a server that I want to log onto.
However, that server has already been configured to allow no password authentication of ...
0
votes
2answers
24 views
Application isolation issue on IIS 10 (Windows 2016 Server)
I'm setting up a new machine for hosting multiple asp.net applications. My goal is to isolate the apps as strongly as possible. In case one of the apps is hacked, all other apps should be safe.
I ...
0
votes
1answer
20 views
DNS server with bind in Debian 9
I have a project to do for college. The project is a DNS server with client. I created the DNS server but when i want to see how it works i use the command dig myservername.
1. How can i proceed to ...
0
votes
0answers
16 views
Logstash isn't accepting the self signed certificates and throws a sslv3 alert handshake failure
I have set up an elsatic stack in my laptop and I have configured full stack (filebeat, logstash, elasticsearch and kibana) in it. But now I need to connect filebeat and logstash in a secure manner ...
0
votes
0answers
17 views
AWS Elasticsearch access policy with Kinesis and EC2
I am currently working on an AWS setup where data is pushed to an Elasticsearch service via Amazon Kinesis (Firehose). This data has to be accessible from all EC2 instances that are connected to a ...
0
votes
1answer
25 views
HTTP/2: speed vs. security
As a measure for speeding up of webpage loading times i recommended to switch over from HTTP1.1 to HTTP/2 protocol. And just today, firtsly in my experience since HTTP/2 rising, i've heard as the ...
0
votes
0answers
20 views
Sending explicit auth fail requests to fail2ban
From what I understand, fail2ban parses the log files for regexps matching like authentication failure. Is there a way an application can explicitly notify auth failure information like via a REST ...
1
vote
1answer
29 views
Snort not sniffing any traffic except it's own
I'm currently trying to set up Snort on my local machine. At the moment I have 3 VM's: 1 with snort on it and 2 used to ping eachother.
Whenever I ping from one of the devices to the Snort-machine, ...
0
votes
0answers
28 views
Aptitude: security updates missing in interface mode
I've noticed that some security updates are not shown as such in the aptitude interface.
$ aptitude search "?upgradable ?archive(security)" -F "%p %t %v %V" | awk '$2~/-security/'
tzdata bionic-...
1
vote
1answer
21 views
How to stop sed from breaking when in combination with apg?
I am writing a script that will install WordPress automatically for me, to make my life easier as I have to deploy WordPress installs constantly.
However, I am trying to make it so I never have to ...
0
votes
1answer
52 views
access unexposed services on remote machine
I have services running (in docker containers) on a remote server for which I have ssh access.
These services are admin apis that I'd prefer not to expose to the world(I don't really fancy setting up ...
0
votes
1answer
17 views
Find security packages installation history on Debian
I need your help.
I need to find out the date of the last installation of security packages on debian servers.
I have been looking for a solution based on log files (dpkg.log, history.log) but it ...
0
votes
0answers
29 views
Site redirected to malicious website [duplicate]
First I like to thank this community as I used its help before but its my first post.
I have a very strange problem with my website which is hosted by my own server in the location I rented in a data ...
0
votes
0answers
10 views
tomcat server user login denied instead of providing correct passsword username
I am trying to implement basic authentication in tomcat server (version 8.5.x).
Here is what I have done the changes.
tomcat-users.xsd
<xs:schema xmlns="http://www.w3.org/2001/XMLSchema"
...
0
votes
0answers
40 views
How can I change the initial configuration of IBM Security access manager which is done on CLI?
I have entered wrong host IPv4 address and I want to change that to correct one.
Is there any way through which I can re-configure the ISAM CLI?
0
votes
0answers
35 views
Debian 9 file system CIS-CAT hardening issues
I'm performing a CIS-CAT scan and I'm questioning the results of the scanner being poorly designed. Now I am running on Debian 9 which isn't officially supported by the scanner but I can get it to run ...
0
votes
1answer
150 views
Aptitude: list security updates
I'm trying to list and display some info about available security updates on Ubuntu server.
I would use the following command, where ?archive(security) filters packages that contain security in their ...
0
votes
2answers
95 views
local mysql was hacked with ransomware hack. How to check if database data was downloaded?
I had a test mysql database running on Vagrant dev box. Turns out the network wasn't that secure.
All of the databases were deleted (and replaced with a DB ransomware note) and in the logs I can see ...
-1
votes
1answer
19 views
Fail2ban without proactive mode
Is there any way to configure Fail2ban to just log suspicious activities without change my firewall rules?
0
votes
0answers
27 views
ldap pass though authentication
We have a scenario where the local ldap will actually receive all authentication requests and then pass the authentication to SASLauthd module when password is stored as {SASL}username. Thus, the ...
0
votes
0answers
6 views
Will my API key be exposed to network administrators if I use it [migrated]
I'm new to using APIs and I'm concerned about exposing it on a public network. I am at my public library, connected to their public WiFi, and using Rstudio. I want to get some U.S. census data via the ...
1
vote
0answers
18 views
SELinux policy and changing disk ids on Hardened Gentoo
I run a system with hardened Gentoo under a KVM/QEMU. I am new to SELinux and make heavy use of audit2allow to get things working. When doing this I include and carry along the location of the disk, ...
1
vote
1answer
65 views
Several Audit Failures Messages in the Event logs with Even ID 4625
We have 3 VM's (All win 2012 R2) deployed on Azure. Today i noticed that since Dec 9th, there have been several Logon Failures messages getting logged in the Security logs on all the servers. It ...
-1
votes
1answer
50 views
How do I do traceroute/tracepath without any admin privileges?
Basically, I need to "trace a packet from my computer to the host" to diagnose a network issue and I do not need any fancy additional functionality.
Redirect me to the right place if this is not the ...
1
vote
1answer
23 views
How to prevent PHP on a virtualhost/website from writing to another virtualhost's/website's directory on the same Apache server?
I want to prevent virtualhost #1 from writing or reading to virtualhost #2 without losing writing access to the www-data at all (because the applications need to write to the directory).
My current ...
1
vote
1answer
16 views
EC2 Windows server recovery options if disconnected from domain
So, I have these Windows 2016 servers. Everything is domain joined.
They are running in Amazon EC2.
I'm doing some system hardening, using recommendations from CIS. (For reference, the PDF is titled ...
1
vote
1answer
30 views
Sign a document and verify Date of signature (openssl)
First off: openssl's options make my head spin :)
I have a file that I want to sign (foo.doc), and at some point in the future I want to prove the date/time the file was signed. How do I do this?
I ...
31
votes
2answers
5k views
Ctrl + Alt + Del prior to Windows 10 logon no longer needed?
I was running Windows 7 at work; power up the desktop pc and always had to hit Ctrl + Alt + Del before entering your username and password.
I am now running Windows 10 at work, Windows 10 ...
2
votes
0answers
26 views
Email server security [closed]
I am writing an email server from scratch. (For learning and also eventually replace my gmail). I have no plans to send via this server (only for receiving email). My goal is to not miss any non spam ...
1
vote
1answer
41 views
Fixing Cisco Umbrella Root CA Filtering on OpenVPN
I have a personal VPN running OpenVPN 2.3.10 on ubuntu 16.04 that I installed following this guide. It has worked with a few hiccups over the last two months of intermittent use.
Yesterday, I ...
0
votes
1answer
37 views
Updating Expiring Keys - Azure OS Disk Encryption
Whilst day dreaming at my desk this morning, something occurred to me and I have not been able to find an answer of yet. So I am hoping someone may shine some light for me or just have a good ...
0
votes
1answer
17 views
Is it possible to disable in NFS showing name of shared folder?
I have NFS server 192.168.1.1 and two client servers 192.168.1.2 and 192.168.1.3. On nfs server I have one shared nfs folder
/etc/exports:
/nfsshare 192.168.1.2(rw,sync,no_root_squash,no_all_squash)
...
0
votes
1answer
16 views
Wildfly Cluster w/S3 Ping and IAM Instance Role?
I've successfully managed to deploy a Wildfly cluster in AWS, using the jGroups S3_Ping functionality rather than the normal broadcast method. However, all of the documentation I've seen requires me ...
-1
votes
0answers
22 views
sssd certificate_verification is not working
In Ubuntu and RedHat I am using sssd to let user login through OpenLDAP Server. Users are trying to login to the sssd client using ssh and sssd in tern sending the user's credential to OpenLDAP. The ...
0
votes
2answers
77 views
Convenient way to dump Azure SQL DB database
Using geo-replication is a nice way of duplicating data but it requires the two servers to be registered on the same Azure account. That could be a potential security risk if an employee decides to ...
0
votes
1answer
36 views
iptables and limit requests per IP per minute
I'm running Debian and iptables and are trying to limit users to accept my site more than 10 times per minute.
This is my original attempt:
# Max connection in seconds
TIME_PERIOD=60
# Max ...
0
votes
0answers
26 views
Security Scan causing weird logs
So some time ago, I coded a website(PHP) and wanted to check for common web security vulnerability. I used Nessus and Burp Suite to scan for vulnerabilities in my website. The scan result showed no ...
1
vote
1answer
46 views
How to export GPG key without user interaction?
I use GPG keys to encrypt backups with duplicity, so I would like to export the key after it is generated, so I can move it to a backup location in case the server burst into flames.
Is there any way ...
0
votes
0answers
89 views
Netstat showing python services listening to multiple ports
In my search to reduce the vulnerabilities of a server, I used netstat to check which ports are listening and stumbled upon a cascade of python services listening to a large number of ports, as shown:
...
0
votes
0answers
42 views
Enterprise customer seems to remove or break HTTP headers
Our web application makes HTTP requests to our API hosted on the same domain as the app assets. We use JWTs for authentication (encrypted token attached in a HTTP header included with every API ...
0
votes
1answer
23 views
Ensuring SSH Idle Connection TimeOut
In response to ClientAliveInterval and ClientAliveCountMax restrictions server side, a client can choose to send null packets by setting ServerAliveInterval and ServerAliveCountMax values ...
3
votes
1answer
45 views
What happens when someone gets to know the secret key (of the web server / a CA)?
basically, I have three questions and I would be grateful for a brief explanation of the differences in the consequences of these thefts:
What happens when someone gets to know the secret key of the ...
1
vote
1answer
25 views
Revoke ex-clolaborator's access to ubuntu server
I have an ubuntu server with django website named hello running on it.
This is how I created user access here:
mkdir /hosting/hello
groupadd --system hosting
useradd --system --gid hosting --shell /...
-1
votes
2answers
64 views
Can a web server be left to work alone without constant monitoring on it?
Does a web server need to be monitored all the time even after securing it and updating it, or can i leave it to work alone after doing that ??
1
vote
1answer
12 views
Why the 'uptime' command showing the load output faster than the 'w' command
Why the 'uptime' command showing the load output faster than the 'w' command. I am unable to use the 'w' command in high load environment but the 'uptime' shows the results more faster..
0
votes
1answer
33 views
Fail2ban mail customisation
I didn't find where to customise the fail2ban mail messages, i want to change the subject.
i know i need to see the action hook like this :
action_mwl = %(banaction)s[name=%(__name__)s, port="%(...
0
votes
1answer
35 views
Configure Kibana web page (only) to require a login
I have Elasticsearch 6.4.3 and Kibana 6.4.3 installed on Debian 8 Jessie.
I've looked into X-Pack and Shield, which both seem to be mostly concerned with security within Elasticsearch, and how to ...
1
vote
1answer
81 views
Systemd PrivateTmp=true security implications
I monitor the available disk space on Ubuntu servers using Nagios Core, NRPE and check_disk.
With previous Ubuntu versions, I used to get an output similar to this:
DISK OK - free space: / 43754 MB (...
1
vote
1answer
20 views
Get internal data from an external server
I don't know if this is the right forum.
Let's say I have an SQL Server on my internal network. Let's also say I have an external web server that's not on the same network but I want it to be able to ...
