Collaborate Disseminate
I’m running webserver on Debian8 64bit (2.6.32-042stab120.16) with Apache/2.4.10.
Today in Apache access.log I found these entries:
164.52.7.132 – – [26/Jun/2017:07:16:23 -0400] “\x16\x03\x01\x01\”\x01” 400 0 “-” “-”
164.52…. Continue reading Apache – strange requests in logs
I have 2 virtual machines. (Vmware esxi 6)
They are both opensuse 42.3 (tumbleweed)
Firewall (iptables,ipset,dhcpd,dns only)
mail/web server. (apache,dovecot,postfix)
The web server can not communicate with the firewall,… Continue reading What is the most secure communication between firewall, and DMZ
I have 2 virtual machines. (Vmware esxi 6)
They are both opensuse 42.3 (tumbleweed)
Firewall (iptables,ipset,dhcpd,dns only)
mail/web server. (apache,dovecot,postfix)
The web server can not communicate with the firewall,… Continue reading What is the most secure communication between firewall, and DMZ
This question already has an answer here:
How do I deal with a compromised server?
5 answers
My website sever got hacked,… Continue reading Hacked my xampp server [duplicate]
Following advice I’ve seen here and other places, I am trying to remove support on our server for these two suites that flunk the SSL Labs Server test:
TLS_RSA_WITH_3DES_EDE_CBC_SHA
TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA… Continue reading SSLCipherSuite !3DES not working
i make a project in laravel . i want a module built that will prevent a hacker from requesting more than 240 pages per minute. Everytime that happens, i want the ip blocked for 45-1hr
We are using ubuntu server with apache 2.4 For PCI-DSS compliance need to disable 1024 bit Diffie Helman, SHA1, DES-CBS-SHAencryption and hashing ciphers.
currently I am using below settings.
SSLHonorCipherOrder On
… Continue reading How to dissable 1024 bit Diffie Helman, SHA1, DES-CBS-SHA
What is the security problem to use Options FollowSymLinks in the Apache configuration?
We use the following configuration:
AllowOverride None
Options None FollowSymLinks
Continue reading What is the security problem of Options FollowSymLinks in the Apache configuration?
I just installed a new wildcard certificate on my Ubuntu server (there was a single certificate installed before). I modified /etc/apache2/sites-available/000-default.conf which is for one specific subdomain and updated the p… Continue reading Website uses an unsupported protocol. ERR_SSL_VERSION_OR_CIPHER_MISMATCH
We have a privately hosted production system and an AWS machine we use for testing. Both systems have the same structure:
SSL termination with haproxy,
passing to an Apache server hosting a rails website,
plus a load of a… Continue reading Oracle (CVE-2016-2107) vulnerability on haproxy + Apache + (AWS vs private hosting)