Content related to computer security.
3
votes
2answers
942 views
How can I block a range of IP addresses with an Amazon EC2 instance?
I know a certain range of IP addresses are causing problem with my server, 172.64.*.* what is the best way to block access to my Amazon EC2 instance? Is there a way to do this using security groups or ...
1
vote
2answers
70 views
How to find out out WHEN an user account was locked
With passwd -S user_name one can find out, if an account is locked, but is there a way to find out when it was locked and who it locked?
Further links:
http://serverfault.com/a/485760/78439
Disable ...
1
vote
2answers
59 views
Checking integrity of my server data
I want to make a log to detect the nature of intrusions into my Unix/Linux based server.
For that I want to learn some tools like Open Source Tripwire and OSSEC. Please suggest to me similar tools.
...
4
votes
1answer
89 views
Why Nmap fragmented scan on Linux is only working from virtual environment?
OLD QUESTION AND TITLE (Look further down for the updated question):
Why Nmap fragmented scan is only working on Backtrack?
I spent quite a few hours today trying to capture and study some ...
2
votes
1answer
21 views
How can I use ForwardAgent with keychain, or detect a new login?
My scenario:
I have Server A at home, and Server B at my parents house. I also have Laptop A and Laptop B at home. I do all sorts of strange ssh hops - I might connect Laptop A -> Server A -> ...
1
vote
1answer
342 views
SSL handshake failure with Shibboleth
I am using Shibboleth for single user authentication and it needs a ssl configuration which facilitates the user authentication process. Before it was working fine but now I am facing a SSL handshake ...
1
vote
1answer
169 views
Make bluetooth device invisible / disable incoming pairing
I am using the bluez package for my bluetooth usb dongle on ubuntu server. I want to be able to initiate bluetooth connection from the dongle to a device, however a device itself shall not be able to ...
-1
votes
1answer
394 views
What is the security impact of not using tls-remote with OpenVPN
Is it a security issue not using the tls-remote option in OpenVPN? That is not verifying the server's common name. Is a MITM attack possible? Could this be an issue, especially with services like ...
2
votes
0answers
137 views
How many rings does OpenBSD use?
Usually a Windows/Linux operating system uses afaik max 2 rings
But how many rings does OpenBSD use?
2
votes
0answers
95 views
Why do I get a different RSA fingerprint when multihopping using ProxyCommand
I'm using the following config to connect to multihop to the target host (gw2 and target have my public key stored in the authorized_keys file ; no netcat on all systems):
Host gw1
HostName ...
2
votes
0answers
581 views
Security of xhost (local) and sudo xauthority forwarding
Context: launch a GUI application as a linux service. I considered making a headless daemon with a GUI front-end but there is too much code involved to do it now. This service must start on user ...
1
vote
0answers
13 views
ufw in laptop running Ubuntu
I installed ufw and enabled it. The status is:
Status: active
Logging: on (low)
Default: deny (incoming), deny (outgoing)
New profiles: skip
But, I am able to navigate the web, get emails and ...
1
vote
0answers
48 views
How to add my own created certificate authority to system trusted repositories
I was told that I can add my created CA to trusted repositories/authorities in my system instead of adding it from browser and configuring in in ssl.conf.
Yet I can't find anything similar on the ...
1
vote
0answers
77 views
Deny/allow a user's access to a port dynamically
I have stumbled upon this little tech dilemma yesterday, and know that there is a solution to it (IRC BNC resellers have it implemented already). However, the exact details and implementation elude ...
1
vote
0answers
273 views
Using metasploit with 3G USB modem
I have a computer with Linux BackTrack 5 as host and Windows XP as guest on virtual box. I am using Host-Only-Adapter to create virtual LAN and to share USB modem internet as well so that both host ...
1
vote
0answers
71 views
Running Tomcat MySQL and Apache under a group
I am trying to set up a web server at home using Ubuntu, but prefer my bash scripts to be platform agnostic hence why I am asking here. I also dislike apt-get everything. I am trying to create a ...
1
vote
0answers
71 views
Information about the 1630/master app
When I run
$ sudo netstat -a --programs | grep LISTENING | grep 1630
I will get this output. Do you know what good are processes running under this app name? Why they I running on my system and if ...
1
vote
0answers
304 views
How to make dnsmasq avoid DNS cache poisoning?
Some domain gets DNS cache poisoning if dnsmasq is the nameserver.
But the problem is gone if switch to BIND (named).
Is there a easy configuration of dnsmasq so that DNS cache poisoning can be ...
0
votes
0answers
27 views
Installing Ossec on an existing centos 6.4 machine
I have an existing machine running centos 6.4. Is it ok to install now the Ossec or it's not worth any more as the machine is already running for few months.
Which is the best mechanism to install ...
0
votes
0answers
33 views
Ossec Installation Error
While installing Ossec Hids 2.6 on Redhat 5.5 installed on Virtual Machine, I got this error message.
Whats wrong here.
0
votes
0answers
45 views
Usage of stunnel for configuring secure services as a default?
Ok, I am aware nothing will beat manual security configuration through your standard daemon config files, but is it bad practice to configure stunnel for all services on say, a production ...
0
votes
0answers
268 views
Symbolic link to a socket
From a security point of view, is it safe to create a symbolic link to a socket file? The following bits of context refer to the deployment of a web application on a shared hosting service.
$ ls -al ...
0
votes
0answers
422 views
Any better alternative to chroot on an OpenVZ VPS?
Are there any better alternative to chroot environment?
I'm thinking about running nginx on a jailed environment.
BTW, I'm on OpenVZ VPS, so modifying the Kernel is a no-no.
(I think that prevents ...
