how to prevent tomcat from hacker? [closed] - security

Closed. This question is off-topic. It is not currently accepting answers.
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 10 years ago.
Improve this question
Today I recognized that my tomcat 6.0 has been deployed a strange webapp called jFoler 0.9.
After looking around, I realize that this webapp can upload, download, delete file on the server and computer system also. It also can do some cmd control, so I think it's very dangerous to my company if this happens again.
So how can I protect my server against the hacker?

1 install firewall
2 place tomcat box behind firewall
3 configure firewall to only allow access to port 80 on the tomcat machine to external devices and non admin internal devices.

Related

.ogg-files are not working on my website [closed]

Closed. This question is off-topic. It is not currently accepting answers.
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 9 years ago.
Improve this question
". ogg" files will not play on my website. The browser displays a 404.3-error. It has probably something to do with the configuration of the server. When I asked the server administrator, he referred to http://blogs.iis.net/bills/archive/2008/03/25/how-to-add-mime-types-with-iis7-web-config.aspx. But thats a guide that is intended for. NET users - and my website are made in classic ASP. How is the solution implemented in classic ASP - is it possible?
See also: https://developer.mozilla.org/en-US/docs/Configuring_servers_for_Ogg_media
You need to use IIS manager, which means you either need a remote desktop connection to your server or you need to get your server admin to do it for you.
Either way, instructions on how to add a mime type are here
http://technet.microsoft.com/en-us/library/cc725608(v=ws.10).aspx

How to secure remote access to admin/cms end? [closed]

Closed. This question is off-topic. It is not currently accepting answers.
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 10 years ago.
Improve this question
What would be the best way to setup a secure remote access to ADMIN end/CMS of your web. app? - what available tools? configs? ideas? isolating admin end? there is talk of using SSL certs(how?)
Will be using browser on my PC to access Admin end to manage users..
I would run the admin console only on the server’s localhost and use SSH to forward localhost:1234 from the server’s point of view to localhost:5678 from my machine’s point of view with the following:
ssh -L 127.0.0.1:5678:127.0.0.1:1234 user#server
Then you can access the forwarded port via http://localhost:5678/.

IP Restriction In IIS [closed]

Closed. This question is off-topic. It is not currently accepting answers.
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 9 years ago.
Improve this question
I want to deny all IP address in my iis and allow only one IP.How can I make it in iis in windows 2008 server.?
In IIS manager click the server you want to work with. In the features pane click 'Management Service'. When the management service is stopped you can then can then edit the IPv4 Address restrictions.
Take a look at http://technet.microsoft.com/en-us/library/cc730889.aspx and http://support.microsoft.com/kb/324066

SSH Connection Lost [closed]

Closed. This question is off-topic. It is not currently accepting answers.
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 11 years ago.
Improve this question
I have recently started using iptables, and I executed iptables -F without knowledge of what it might do. And suddenly I have lost connection to the node. I can't even ping the node. Any help would be highly appreciated!
Thanks!
You will need physical access to the computer and either restart the firewall script or simply reboot the server (but that's the "rude" way of fixing this).
If this computer is hosted at colocation company you need to either contact their support and ask them to reboot the machine (do not give them your password) or sometimes they have some sort of remote rebooting mechanism. Look through the FAQ of the colocation provider.

How do I allow (remote) IISReset through the firewall on Win Server 2008 [closed]

Closed. This question is off-topic. It is not currently accepting answers.
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 11 years ago.
Improve this question
I'm trying to run the following, to reset IIS on a remote machine.
IISReset <remoteMachine>
If I disable the domain firewall, everything works fine. With the firewall enabled, I get
The RPC server is unavailable.
Initially I tried enabling Remote Administration (RPC-EPMAP) and any other rules that looked even tenuously related. Then I tried enabling all the predefined rules, but with no success.

Resources