Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [hardening]

75 questions
0
votes
3 answers

Different techniques to secure a server

I am trying to secure a Linux server but i even also want to know the types of vulnerabilities associated and the attacks that happen and how so that i can completely understand securing a server
jhonny blaze
  • 1
0
votes
2 answers

what should be limit to use for IPTABLE rate limiting for a webserver

I see on my webserver some logs as follows 203.252.157.98 - :25:02 "GET //phpmyadmin/ HTTP/1.1" 404 393 "-" "Made by ZmEu @ WhiteHat Team - www.whitehat.ro" 203.252.157.98 - :25:03 "GET //phpMyAdmin/ HTTP/1.1" 404 394 "-" "Made by ZmEu @…
Registered User
  • 1,453
  • 5
  • 18
  • 37
0
votes
0 answers

Printing on hardened windows clients

I have inherited hardened clients with a lot of policies applied to them. There is an application running on this clients, that should show the windows printing dialog, but it does not pop up. There are no policies regarding printers configured, and…
RagedVimClicker
  • 19
  • 1
0
votes
2 answers

Network Security: Hardening IPv6 on Ubuntu Server?

I am familiar with hardening IPv4 on Ubuntu server, but when I use the same rules for IPv6 with ip6tables, the IPv6 connectivity is lost resulting in Destination unreachable: Address unreachable errors during ping. Could you please advise on how to…
lion
  • 13
  • 4
0
votes
0 answers

Is it worth it to install and configure fail2ban for an Bind9 authoritative DNS server?

In our project infrastructure we have a nameserver, based on bind9. This nameserver is configured as primary and authoritative, so it is quite important. The question is, should I install and configure fail2ban for the purpose of protecting this DNS…
hancack
  • 31
  • 2
0
votes
0 answers

OpenLDAP/ds-389 Secure Hardening Guide

I am in the process of setting up an Open Ldap Server (ds-389) however, I cannot find many good resources which define a security or hardening guide which can be applied to the configuration or schema of the directory. Does anyone have any good…
sfalzon
  • 1
0
votes
1 answer

Locally and durably remove some files of a Debian package

Context: On Debian, when hardening PHP I disabled and deleted a few unused PHP modules: for example, for wddx I…
Seb35
  • 250
  • 2
  • 6
0
votes
1 answer

Block IIS GUI sites configuration change for hardening

I am trying to find the configuration settings for this hardening on Windows 2019: Block IIS sites configuration change from the IIS GUI, even for administrators. The sites web.config change should be possible using a text editor. I have this…
jwalker
  • 98
  • 7
0
votes
0 answers

IS this error an Ancient “su – hostile” vulnerability in Debian 8 & 9 ? $ bash: cannot set terminal process group (-1): Inappropriate ioctl for device

Just received this error >> bash: cannot set terminal process group (-1): Inappropriate ioctl for device then the disk partition went into READ-Only mode ; also noticed gnome-software was communicating both upload and download over the…
Marc Cox
  • 1
0
votes
1 answer

iptables policy & saving in RHEL

As part of a "Hardening" task, I need to run iptables -P INPUT DROP iptables -P OUTPUT DROP iptables -P FORWARD DROP On our servers. Normally we would run this command and then run /sbin/iptables-save to implement the new policy. However as soon…
searcot jabali
  • 261
  • 1
  • 2
  • 6
0
votes
1 answer

I am trying to setup some auditd rules but getting error -F missing operation for auid

i am trying to setup the below rule in /etc/audit/audit.rules -a always,exit -S unlink -S unlinkat -S rename -S renameat -F auid>= 1000 -F auid!=4294967295 -k delete which didn't work so i tried executing it directly from command line as so…
user438713
-1
votes
1 answer

When someone gains remote access to a server are there other ways to execute system commands other than the bash shell?

I am hardening a server and attempting to build a restrictive layer to a potential hacker even with root access to the server to do harm. If a user gains root or user access to the shell via say ssh, is there any other way for a user to access…
I'm Root James
  • 202
  • 1
  • 12
-1
votes
1 answer

How do I disable unnecessary Windows services and test for stability?

When I configure a minimal Server (unselecting any role in SCW) I still have quite a number of (obscure) services running or set up as manual. Requirements in my project say that the Server shall only run well-motivated services, i.e. services that…
AHalvar
  • 107
  • 1
  • 2
-6
votes
1 answer

In standalone Windows, safely force all apps to use AppData\Local\ instead of AppData\Roaming\ and Hardening security

In "standalone" or individual windows (vista & above: Vista, Win7, Win8, Win8.1, etc OS based) computers & tablets, which are configured to use only "TCP/IP" network component, each has Internet connectivity, and there is no windows-network…
atErik
  • 101
  • 1
  • 3
-7
votes
2 answers

How strong is parallels plesk 11 inbuilt firewall for linux os? from an newbie

I am new to Linux Dedicated server hosting and plesk panel 11 and i would like to know about inbuilt plesk 11 firewall security features and how harden it is?
Sam
  • 111
  • 7
1 2 3 4
5