New answers tagged

2

I think you're using non standard terminologies and that is making things confusing for you. I'll define the terms here: Private key: a string that need to be kept secret, used in cryptographic operations to authenticate or encrypt Public key: a string that are mathematically bound to the private key, not a secret. Used in certificate to decrypt and ...


-3

All the cert and keys you are presenting are necessary information for a working openvpn service for the client side. It is nothing wrong to give them in public. The only security weakness is the username:password (if it is weak) and your IP (ddos attacks).


0

When using CloudFlare (like mentioned in one of your comments. Two things happen. The server and application both are not aware that CloudFlare (a reversed proxy) is used. To fix this you need to tell the used software (WordPress and fail2ban) where to find this original visitors IP. Otherwise I'll be working with the CloudFlare IP's (since that's the new ...


3

RAP is very similar to a stack canary, except designed to prevent against ROP. EDIT: After speaking to spender from grsecurity, it turns out that what I'm describing here is a subset of the RAP functionality, specifically the return pointer protection. RAP is actually callled "Reuse Attack Protector", which is designed to protect against all forms of ...


1

I'm guessing you are getting many of the failed logins from other countries outside of the U.S. What I recommend for WordPress is to download an IP Blocker from the plugins and this gives you the ability to block certain countries or all the countries besides the ones you want. In my case I have a website that is only to be viewed in the U.S. so I blocked ...


0

If you have an access to the server then you can install fail2ban. You will need to set up jail for the wordpress /etc/fail2ban/jail.d/wordpress.conf [wordpress] enabled = true filter = wordpress logpath = /var/log/auth.log port = http,https $ service fail2ban restart For more details check here. Make sure that you are not using default username ...



Top 50 recent answers are included