i have a central log server, running kiwi syslog service manager
and in windows servers im using datagram syslog agent
now i have a linux machine, im lookin for a free tool which will send...
...even though the internal lan ip range is specified and the snort rule is to only log external_net accesses to that port.
any ideas as to why this is happening? it's generating 50-100M...
ftp: 1095 bytes received in 0.00Seconds 1095000.00Kbytes/sec.
ftp> ls
200 PORT command successful.
550 No files found.
ftp> ls -l
200 PORT command successful.
150 Opening ASCII mode data...
I would like to install ClamAV on a Debian Sarge machine. I have read some sites that help but I am not completely sure how it gets installed and how to configure it. One suspected issue was...
Hi:
I have a Linux Server, running the last version of RedHat, with Apache, Sendmail, MailScanner and Spam Assassin, among others. I have now a big problem with a kinf of virus, and I need ...
Recently, one of our systems running CentOS got hacked due to an oversight in security. From what we were able to determine, it would appear that they may have installed rootkits on the system...
Hi,
I've readed this post http://www.experts-exchange.com/Security/Linux_Security/Q_20683396.html, the code posted works fine if I only want to add one ip. One ip at bad.txt.
If there mo...
How can I make my Linux server files as 4777 by default? At present it is at 455.
I am providing access to a VNC server via a debian box on our DMZ. The idea is that users will ssh (or plink) a connection to the box and then vnc to localhost. I therefore need to provide th...
Guys,
Was running SuSE9.0 and had the following custom iptables rules on a 2.4.x kernel:
iptables -I INPUT -j DROP -p tcp -s 0.0.0.0/0 --dport 80 -m string --string "SEARCH"
iptables -I...
I have installed Fedora Core 3, with SELinux enabled. I have Apache running in ssl mode. That is all working fine.
I have qmail installed as is normal for qmail. Qmail is sending mail fine ...
I have a virtual host running UML. I see a lot of password trying by bad people so I thought to using ssh keys to access the system. I am accessing it from an openbsd 3.6 box. There in is a...
Hi,
I have no idea about Linux, so my apologies if this is a dumb question.
I'm being pressured to install a CVS server running on Redhat 4 ES. The server will be available both inside ...
hi
i have been looking for an application that will monitor windows servers and alert the user by TEXT if a server is down, or even if a service or process is not running
can anyone advise...
HI
Is it at all possible to have a system that auto-detects password crack attempts and then auto-lock any further access from that IP for a period of time (configurable, so you can say that ...
I need some advice on NAT & iptables. Actually, what i need is monitoring IP traffic
A internet connection is shared by multiple computers behind NAT. There are eth0 -> internet, eth1 lan and...
How can I secure SSH so that only RSYNC can be run through it?
I do not want users to be able to access the OS or root areas or read any configs they shouldnt - just want ssh to use as secure...
This question is concerning an Intel server running Redhat 9 and Plesk.
When Redhat was installed, the default "medium" firewall option was taken.
Now that plesk has been installed (to...
We currently have a 40-bit SSL Certificate installed on our webserver. We need to create a custom "make a donation" form for my company that accepts name/address/credit card/exp date, etc and...
I found the following lines in my access log. Does anyone know if this may be an hacking attempt? As you can tell I am new to security as far as servers go. Maybe just my paranoya. I do not ha...
Hello,
I have Fedora 3 installed and I have configured sendmail and dovecot for mail server and pop3 imapd purposes .Now when I try to use outlook express and specify the ip address of the ma...
Redhat ES4. In the Secure log file I keep seeing this line:
server1 login: WARNING! Could not relabel /dev/pts/1 with user_u:object_r:devpts_t, not relabeling.
What does it mean and how ...
I have a local wired network in my lab connecting two computers: 1 is Linux Fedora Core 6 and the other is windows XP. Linux IP is 192.168.1.12 and windows IP is 192.168.1.24
I wrote two ve...
Hi,
Firstly i am VERY new to this kind of thing, so please PLEASE bear with me.
I run a small VPS which suffered a DoS attack recently so my provider implemented some security measures (...
On a debian box, which command(s) should I use to add a single route to the routing table for a stratum 2 time server, say tick.mit.edu?
I'm trying to avoid default routes, thinking (possi...
