Server :: Secure Ftp - Encrypts Passcode Transaction And Logs Attempted Entry
Jan 22, 2011
I need a single user ftp server on a dedicated machine which encrypts passcode transaction (and preferably everything else) and logs attempted entry. Assume forwarding port stuff / DMZ stuff is already setup.
connecting client will be either command-line tools or winscp, depending on client OS.
I'm a member of ubuntuone-android-hackers team on Launchpad, I work on Ubuntu One Files app. If you would like to see new features in the app, you can post your ideas here. I think the forums is a good and comfortable place to share ideas. We have already received quite a lot of requests via e-mail. Most notably, these have been already requested:
- secure app launch with PIN entry - preserve folder structure when auto-uploading files - real sync (i.e. reupload a file, that has been modified; sync down favorite folders; etc)
We continue to fix bugs and improve on what we already have, this is just to give you a place to share ideas on new features. We will select the best we can take on given available time and resources. I can't guarantee we'll implement them, I can guarantee however that we're doing our best and I'll be keeping track of this official thread.
Several of our servers that do not have direct exposure to the Internet have the following entry appearing in their respective /var/log/secure files.Are these messages harmless? If so, is there any way or reason to suppress their appearing in the log files?
yesterday I ordered some software on the Net.Early this morning, I got a call from my bank someone else tried to charge to my debit card.I called the company I ordered from to alert them and they assured me it had to be my computer security because theirs was checked, upgraded regularly and above reproach.Fortunately, the bank caught it in time and my account wasn't debited. After I assured them I didn't order anything from Bed, Bath and Beyond, the bank shut down my card and I had to apply for another.
I was shocked. You hear about it but never imagine it will happen to you. I began to wonder and worry if it was because I was using Linux and it wasn't as secure as Microsoft.I'm isolated in a very small town in West Texas so I order some things on the Net.I loaded the full version of Ubuntu "Lucid Lynx" 10.04 from a 4 disk set and downloaded all the upgrades; almost five hundred and set everything up the way I wanted. My question is: Are there programs running among the Ubuntu build to assure a secure transaction on the net or do I have to load others and a fire wall like Windows? That's one of the reasons I left Microsoft behind was the "Auntie-viral" programs took over and almost became a competing system.
I'm trying to make ecryptfs work on my GMX Mediacenter share (a service quite popular in Germany). I followed the instructions to include my mediacenter share in my fstab which works pretty well. So now I'm able to connect via Secure WebDAV as a regular user (no sudo needed). When connected, I try to create a ecryptfs transparent layer so everything saved remotely is seamlessly encrypted. Although no error message is thrown during creation, the process fails. When entering the remote share (cd mediacenter) and performing any remote command such as "ls -la", the following error message is thrown:
I was trying to update my Fedora 15 amd64 when a Error Notification popped up saying "An unspecified TRANSACTION ERROR has occured". More details: "could not add package update for fedora-release-rawhide-15-3(noarch)updates: fedora-release-rawhide-15-3.noarch".
I just upgraded Ubuntu 10.04 LTS. Now when I use vpnc to connect from the command line using vpnc-connect, I'm not only prompted for my password as usual, but now also being prompted for a "Passcode". Here's what the login attempt looks like:
Enter password for jegan@some.vpnhost.net: Passcode for VPN jegan@216.23.18.33:
I've been using the same /etc/vpnc/default.conf file for years.Note that I do not have an /etc/vpnc.conf, or any of the other configuration files that vpnc checks for.Here's a modified copy of my /etc/vpnc/default.conf file:
## generated by pcf2vpnc IPSec ID CRL-Qfe IPSec secret XM-j-245Rv[code].............
I have the following error on one of my servers. Is there a way to tell which directory is exactly having the problem? if there is, if i delete that directory, will that resolve the problem or no?kernel: EXT2-fs error (device md(9,0)): ext2_check_page: bad entry in directory #10158084: unaligned directory entry - offset=0, inode=605471640, rec_len=7606, name_len=177
I would like to lock the /etc/hosts file somehow in a way that only someone else can unlock it, possibly using a lock code.I would then give the passcode to someone else.I'm running Ubuntu 10.10.
I want to connect my bluetooth mobile phone as modem with opensuselinux 11.0 to browse internet. After find out my mobile device then I choose setup option. After that os required a passcode. I also tried many combination of key like 0000, 0123, 1234, 1111, 9876 etc. But it is not match.
I installed fedora 12 today...installation went fine. Tried to run the software update ( which includes 415 fixes) and got the following
Transaction error:- an unspecified transaction error has occurred. More information is available in the following report.
More details show:- could not add package update for abrt-plugin-runpp-1.0.4-1fc12(i686)updates:abrt-plugin-runapp-1.0.4-1.fc12.i686
I have unchecked the box in the update list to be installed, but the software update insists that this update is needed. I cannot progress any further than this error message..
I would like to monitor a RedHat via snmp. I would like to make available data via snmp. The data that I would like to graph are only present in logs file. Is it possible to parse data from applicative logs and have them available for my cacti server via snmp? I already monitor CPU, mem, and others with cacti using the standard MIB.What would be the logical step I would need to achieve that?
I'm an Oracle DBA and started working for my current employer about 4 months ago. This past weekend an alert re: FS space brought my attention to /var/spool/clientmqueue (full of mail re: cron jobs) and the fact that sendmail is not running on our Linux servers.I'm told that the IT security team deemed sendmail too vulnerable so we don't run it.Aside from FS filling up and missing notification of issues with crontab entries, I'm concerned that we may be missing notification of potential issues. In other Unix/Linux environments I've seen emails from the print daemon when it experienced problems with specific jobs.
Are there other Linux facilities aside from cron and lpd that use email to advise the users of possible issues? Are there ways to secure sendmail or secure alternatives to sendmail? My primary need/desire is to make sure that emails regarding issues on the server get to the appropriate users. Secondary goal would be to have the ability to use mailx to send mail out. There is No need/desire to receive mail from outside.
we have a remote linux server and its /var/log/secureile is fully filled with unauthorized ssh users,of course they cannot able to log in successfully but they were making continuous ssh requests to log in, it some times results in server down problem. so how to secure our server from their ssh attempts.i know blocking unauthorized ip addresses can solve this problem and we can also change the ssh port numbers but what are the other possible ways of solving this.
In my server i was not able to find any log entries in /var/log/messages,/var/log/secure.there is no entry found in /var/log/messages just the file is empty.i want to know wat would be the problem & solution for the problem.
I now have a windows box connected to the internet via the server.
Question is - how do I know if the linux box is secure?
Are there any things that I have to config now - I am slowly moving on to configuring the dns and dhcp server - but is there anything else I should have done?
I am a M.C.S.E certified professional and i want to become a linux admin, presently i am pursuing rhce from a reputed institute , how can i get entry level job in linux , which topics i should be very clear.
I Have RHEL4 running on IBM X3550 server, we request IBM support regarding issues with this server, they will request for IBM DSA logs. The logs are quite extensive and cover almost all server config & can identify hardware issues with drivers...etc. I want to know if there is a way to analysis those logs offline without sending them to IBM support?
I am having a situation where I do not have DNS server (the person who has that is not me) for a few websites which are running on a reverse proxy. I recently after having a long trouble shooting hours found that my proxy pass entries look as follows
I was wondering how could I specify for how long the logs will be kept. Rsyslog doesn't have such an option (at least I didn't find it).Do I have to use logrotate for this, or is there some other option?
how to check maillogs for previous days. wht is command to check log for yesturday in sendmail8.14 .fedora os i know /var/log/maillog.this gives o/p for today but wht abut yesturday.?
Iam looking security specific event ID on Linux .hear are thousnds of event ID in Microsoft Windows/XP and VISTA etc. Similar way looking for Linux,unix ,Solaries,AIX etc event ID. I would to correlate and implement with Arcsight.
We are forwarding logs (perl script executed logs) to one Red Hat Linux box. We have to get 97 logs for each time the script runs. But we see inconsistent number of logs coming to Linux box. Like one time we got 56, other time 3 , other time 43.. like this.. We are sure that 97 logs are being forwarded. Checked the Rsyslog.config filer any filters and couldn't see any filter dropping them. When we run the tcpdump, we can see 97 connections, but logs are not there in specified location.
I set up my ubuntu server with iptables that only allows ssh in the input chain (and of course established connections) with only the mac adress of my laptop allowed to connect, set up a key with a long passphrase and installed pam_abl plugin. ICMP echo is blocked by default.
The only problem is i log all other attempts to connect to the server and i see a lot of traffic going to ports 445 and 5900.
My question is: Is there a possibility that these attempts could succeed and is there any way to further ensure this server?
I have been doing a whole lot of reading on any kind of home server. I want to have a secure home server that I can access from school by a domain name. At first I was looking at FTP, but I need something secure and it seemed like the software that supported SFTP has to be purchased. Then I started looking at SSH stuff, but I also realized that I want to use a dynamic DNS, so I started reading about that.
Basically, now my head is so information-logged I can't figure out what and how I should do this. If anyone could give me some very step-by-step-procedure links (or information) that show me how to set up a secure home server that I can access with a domain name through the internet that also uses a DDNS, that would solve all my problems.
Ok im new, i know apparmor is running. i was looking for firestarter but their isnt one.....how do i secure this server? i want a good firewall and some virus protection!. also do i need this?
I'm trying to setup an open-source project, I have a couple of developers on the team but nobody has experience with Apache. I would like to setup a simple home server for Bugzilla on Ubuntu 10.04, so my question is, is there a server that comes secure out-of-the-box so that simply adding files to /htdocs would suffice?