0
votes
1answer
14 views

Allow www-data to create directories

How would I, with security in mind, allow www-data to create directories within /var/www/html/assets/img and its sub-directories? I have a PHP script that automatically creates directories with 777 ...
0
votes
0answers
12 views

Ubuntu servers protection

Here is my needs : i need to protect data from being stolen on servers and Those servers are not physically secured. First i just wanted to base security solution on root password protection but ...
1
vote
1answer
37 views

PHP script unable to create directory with 777 permissions

I have a script that automatically creates a directory if it doesn't exist and sets permissions to 777. The problem is, it's only setting permissions to 755: if ...
0
votes
1answer
26 views

OpenSSH: hacked before set up?

Today I tried setting up OpenSSH on my computer with the hope of being able to connect to it from a different computer at work. This was my first time attempting to use open-ssh. I did the following ...
0
votes
0answers
13 views

RomPager HTTP server is affected by a cross-site scripting vulnerability

After auditing my ubuntu 14.04 machine with Nessus scanner I received the following message: RomPager HTTP Referer Header XSS Description The remote RomPager HTTP server is affected by a ...
1
vote
1answer
20 views

How to clean data when wiping/reinstalling a compromised server?

I have a server that has been compromised, where the logs have been blown out and I have neither the ability nor the time to discover what actual pieces of the system were modified. The server was ...
0
votes
1answer
45 views

Setting up a secure mail server?

I am looking all over for a guide to setting up a secure mail server to be used with PHP and Apache. Can someone point me to a guide to do just that. I would like to have my own email ...
1
vote
2answers
34 views

Enable to connect to remote server using ssh but i can connect one remote server

When I am connecting to remote server using ip address, I can connect to 192.168.12.141, but I cannot connect to any another remote server. Example: 192.168.12.12, 13, 18 etc... How can I get ...
0
votes
0answers
28 views

Most secure way to install node?

Should I install node as root and then add user permissions to run it, or add a sudo user to the sudoers file and install and run it that way? It seems to me that adding the user to sudo would be a ...
0
votes
0answers
50 views

Why am I getting Runtime Error in browser?

I get the following Error message in my browser: Server Error in '/' Application. Runtime Error Description: An application error occurred on the server. The current custom error settings for this ...
1
vote
2answers
257 views

How can I stop my server being an “open DNS resolver”?

This morning I got a letter from my ISP saying that my Ubuntu Server (13.10) can be used as an "open DNS resolver". They propose 3 possible solutions to fix this problem: Limit access to recursive ...
3
votes
1answer
210 views

basic security tools and packages that should be installed on a public facing web server

I'm a newbie in this world and I do not have a lot of knowledge about how security works on Linux systems. I recently created a droplet on DigitalOcean with Ubuntu 13 and I've been setting it up by ...
2
votes
1answer
587 views

12.04.4 server can't verify common SSL certificates, usual fixes failing

The Problem I've got one server in a farm which is suddenly unable to correctly handle SSL certificates. Attempting to do a curl command like curl -v https://google.com results in: curl -v ...
2
votes
1answer
1k views

linux command to prevent dos attack by using netstat and iptables

I want to DROP more than 200 requests per ip to prevent ddos attack. this is command that i used to detect requests count per ip : netstat -alpn | grep :80 | awk '{print $5}' |awk -F: '{print ...
3
votes
3answers
330 views

Should Ubuntu users be concerned about “Operation Windigo”?

Should desktop users of Ubuntu (and other Linux distros) be concerned about the malware-infection drive described as "Operation Windigo"? What threat does it pose to us immediately and are there any ...
0
votes
0answers
26 views

In sysctl.conf settings, what is the difference between 'all' & 'default'?

In context of sysctl.conf settings, what is the difference between (all vs. default) like net.ipv4.conf.all.accept_source_route & net.ipv4.conf.default.accept_source_route in sysctl settings ? ...
0
votes
1answer
412 views

Do modifications to sysctl.conf take effect in openVZ container?

I'm following a security guide(http://www.thefanclub.co.za/how-to/how-secure-ubuntu-1204-lts-server-part-1-basics) to strengthen my OpenVZ based VPS webserver running Ubuntu 12.04 , a part of that ...
1
vote
1answer
34 views

how to limit resources to a shared ubuntu 10.04

The title might not be explanatory enough but I couldn't find any better way to formulate it. I will be running a server for office use. It will host applications on tomcat. 2 differents people would ...
0
votes
1answer
145 views

mysterious files and possible virus on ubuntu 12.04.2 server

IT services at my institution discovered our server sending out SPAM emails and flagged it as compromised. Further investigations suggest that it is indeed infected with a virus. For instance, there ...
1
vote
0answers
2k views

How to setup Squid Proxy Server on ubuntu 12.04 LTS?

I had tried using the ubuntu wiki guidelines to set it up on test server, and it worked. Though I would appreciate if anyone can provide me with few other links as this time I am going to install it ...
1
vote
1answer
22 views

is denyhost central database stored locally?

I was tasked to write a security policy to apply to any ubuntu server we deploy at a client's site. Knowing how some of the corporate are restrictive on what resource is available to what box on their ...
1
vote
2answers
343 views

How to protect from cloning?

I have no experience using Ubuntu before I'm doing a point of sale project for a restaurant which will run in local Lan (offline not online). I will setup one mini PC as an Ubuntu web server. and my ...
2
votes
0answers
222 views

Upgrade Apache 2.22 to a version that supports ECDHE

I'm trying to setup my Ubuntu 12.04 server installation to support perfect forward security. It seems that the default Apache 2.2.22 build does not support ECDHE. Any suggestions on a good way to ...
0
votes
1answer
63 views

Are there any security problems to running an http server using Python's built in module?

I have a presentation to make to a few people. It's interactive with python CGI scripts. Are there any security problems with using python3 -m http.server --cgi 8000? Each person will be using their ...
0
votes
0answers
241 views

Get root access to an ubuntu server

Hacking doesn't really interest me (You're not allowed to brag about what you've achieved!) but I still don't want to neglect server security. Is there a good book, tutorial or document on hacking an ...
0
votes
0answers
33 views

Looking for monitoring softwares for webserver

I am looking for tools to monitor my Ubuntu 12.04 LTS web server. I am interested in being notified when suspicious activities are detected. For instance, when postifx sends more than a given amount ...
0
votes
0answers
295 views

VSFTPD and “chroot_local_user=YES” does not work properly

I have the VSFTPD service installed on my linux server. I am using a ftp connection through FileZilla and by default, the user home directory is opened. The problem is that with this user, I can also ...
0
votes
0answers
25 views

What are the Ubuntu “well-configured defaults”?

I often see Ubuntu referred to as having "well-configured defaults" or "sensible defaults" (such as, among other places, in a couple comments on this question, Debian Stable vs Ubuntu LTS for Server?) ...
1
vote
0answers
294 views

Apache shows blank white page after 2 to 10 hours

I am using ubuntu 12.04, it has to network cards, A = internal 10.0.0.0 and B public Ip , I have only apache2 installed, after 2 to 10 hours the website shows as a blank white page on the public ...
0
votes
1answer
266 views

How can Shared Memory be dangerous in server environments & how to secure it?

I just understand somewhat about what's the purpose of shared memory which is for faster exchange or use of data among several programs. But having seen a lot of people trying to or talking about ...
0
votes
1answer
282 views

basic security ubntu 12.04 LAMP server quesrions [closed]

I have a few questions about security on my ubntu 12.04 LAMP server (newbie) This is what I´ve done so far: Install and configure Firewall - ufw Secure shared memory - fstab SSH - Disable root ...
0
votes
1answer
31 views

Are there any packages that do all the recommended configuration settings for a secured server environment?

I came across questions & articles like these: 1.) What Can Be Done To Secure Ubuntu Server? , 2.) How to prevent your website from getting hacked. which speak of many configuration settings for ...
1
vote
1answer
404 views

Secure OpenERP Server

I use a Ubuntu 12.10 Desktop as a server 'only' for OpenERP 7.0. This OpenERP server is used by both, the team as well as clients. I've checked out posts that help someone secure a 'web-server' (i.e a ...
2
votes
0answers
202 views

Setting Up Users and Permissions for a Multi-purpose Home Server

I have decided to repurpose an old grey box computer to be a combination NAS/home media server, headless torrent server, and minecraft server. I am using this both as a practical piece of equipment ...
1
vote
0answers
123 views

Securing Amazon EC2 Ubuntu server

I'm about to launch a product I'm working on into alpha phase but before that I'd like to ask a bit about securing my Ubuntu server 64bit which is hosted at Amazon AWS EC2. The problem is my software ...
2
votes
2answers
43 views

is there some sort of all-purpose logging tool I can download as a package?

As in, a tool that will give me easy to read logging information all in one convenient place, divvied up into categories. Logs for say, ssh daemon, user logins/logouts and other activity, installed ...
1
vote
0answers
92 views

Running a VPN server off Ubuntu Desktop?

I am unfamiliar with Ubuntu and Linux in general. I bought 3 old Dell PowerEdge 2650 servers off eBay for £20. I didn't really know what I was going to do with them, but for the price, they seemed ...
4
votes
1answer
283 views

How to make my server email me when there are security updates?

There's obviously a way to check to see when an update is a security update. I often get greeted by a motd that says "there are N security updates." What I'd like to do is have my server email me a ...
1
vote
1answer
211 views

Is it worth uninstalling the GUI to lower the attack surface of my Ubuntu server?

I note that there are similar questions on how to remove the GUI from an Ubuntu install, so I know the technique, I'm just wondering is it worth doing? To explain, I have a Ubuntu server hosting ...
2
votes
1answer
123 views

What features should I check on my VPS in order to have a secure box?

I have a VPS with Ubuntu 12.10 server edition, an I connect to it from public/university. I host some web applications on it. I have always been concerned with security issues. What features is needed ...
3
votes
1answer
355 views

How to manage security cameras in Ubuntu?

I am setting up a server and chose ubuntu for the OS. The system will have 3 purposes, storing my wife's photography work, storing music for quick access to our entertainment system (will be running ...
3
votes
1answer
898 views

why samba share files are not able to access by some user for some time?

I'm running samba on Ubuntu Server 10.04 LTS, I've some folders on samba share and created some user to access it, but suddenly some of the user are not able to access it for a certain time only. For ...
2
votes
1answer
155 views

How do I make a proxy server? [duplicate]

Possible Duplicate: Where are the system-wide proxy server settings? How do I make a proxy server that allows other computers to access my internet connection through the proxy, but will ...
1
vote
3answers
9k views

Cannot create file/directory in home directory

I have a headless Ubuntu 12.10 server. I'm logged in as administrator via SSH. I cannot create a directory in my home directory: administrator@Leo:~$ cd ~ administrator@Leo:~$ mkdir Test mkdir: ...
5
votes
1answer
3k views

blackhole exploit kit - Linux Server Script

It has come to our attention when scanning some of our hosted server websites that they have been infected with Blackhole Exploit Kit (top dollar hacking program - ...
20
votes
6answers
15k views

What Can Be Done To Secure Ubuntu Server?

I have a project to secure Ubuntu Server as much as I can. The server is a web hosting server. The server will be running LAMP , Mail , and DNS.
1
vote
2answers
146 views

what packages to uninstall for better security?

I have read a recommendation which was stating that after installing one should remove some packages from the default Ubuntu installation, in order to have a more secure server. What are your ...
2
votes
1answer
280 views

Handling old kernels with automated upgrades

For security purposes I've been a fan of unattended-upgrades, Using something like this: Unattended-Upgrade::Allowed-Origins { "Ubuntu lucid-security"; }; ...
2
votes
1answer
158 views

Could rsyslog be purging log files?

Today I found a lot of log files empty, these were: /var/log/auth.log /var/log/syslog /var/log/daemon.log /var/log/kern.log /var/log/mail.log /var/log/user.log /var/log/mail.info /var/log/mail.warn ...
1
vote
1answer
276 views

Is it possible or a good idea to run a more or less secure minecraft server without having pre-experience in Ubuntu?

Hello Dear Ubuntu Questions Community, This is my first on this site and is very important to me! I currently run a Minecraft Server that runs on a server that I have to move aways from, and that in ...