bogha's questions

i have a website, some folders on the websites contains images and files like .pdf , .doc and .docx . the user can easly just type the address in the url to get the file or display the photo

http://site/folder1/img/pic1.jpg

then boom.. he can see the image or just download the file

my question is: how to prevent this kind of action, how can i guarantee a secure access of the files.

any suggestions

UPDATE TO CLARIFY MY IDEA

i don't want any user who is browsing the website to get access to these files normally by just writing the URL of the file. those files are a CV files, they are being uploaded by the users to a specific folder on the server which we host outside the company. those files are only being viewed by the HR people through a special system. that's the scenario we want. i don't want a WEB GEEK who just wants to see what files has been uploaded to this folder to download them easly to his/her computer and view them or publish them on the internet. i hope you got my idea

we have a Zimbra Mail server that was being used for 2 months now. the last week we faced a problem that the Public IP that was being used for our mail server started to be blacklisted and we couldn't send emails to many other domains.

we found that the Engineers who was responsible for Administrating our Public IP Block didn't configure a reverse DNS PTR.

we have changed the Public IP to another new one, we were able to send to some of the domains that we were blocked at but some others are still blocking, for example we can't send to gmail even that after we configured the New IP and Publish the new DNS reords we were able to send to gmail , but after 1 hour gmail bloked us again with this error message The mail system

: host gmail-smtp-in.l.google.com[173.194.67.26] said: 550-5.7.1 [xxx.xxx.xxx.xxx] The IP you're using to send mail is not authorized to 550-5.7.1 send email directly to our servers. Please use the SMTP relay at your 550-5.7.1 service provider instead. Learn more at 550 5.7.1 http://support.google.com/mail/bin/answer.py?answer=10336 ey7si20778000wib.30 (in reply to end of DATA command)

also below are some other errors we recieve from different domains

The mail system

: host maila.aljazeera.net[213.130.112.86] said: 550 5.7.1 Recipient not authorized, your IP has been found on a block list (in reply to RCPT TO command)

: host relais-ias89.francetelecom.com[193.251.215.89] said: 550 5.7.1 : Client host rejected: Your message was rejected due to spam filtering. Please see http://www.sophos.com/security/ip-lookup?ip=xxx.xxx.xxx.xxx (in reply to RCPT TO command)

any help or suggestion please, and can you please direct us to a place where we can learn how to make our server less likely to be blacklisted.

thanks

this question is always rise. How can i know what ports are currently reserved in windows XP/2003 and what service had reserved them.

for example when i want to install Apache, default port will be 80, but sometimes the Server will have IIS installed on the same port.

so i want to know the way to check the ports and what services had reserved them and also if there is a way to re assign those ports to different services.

thank you

we are in a process to purchase a virtualized solution from HP (c-3000,HP Virtual Connect Flex-10 10Gb Ethernet Module, HP BL 460 G6, SB-40 with PVA ).

my concern is the following: assume i have virtual machines like DNS , WEB and Email which is distributed between 4 ESX Hosts, configured to have a Public IP address and vMotion is enabled with DRS, HA. now one or multiple of these are vMotioned to different ESX host.

1. how to guarantee that the network profile is also moving with the vMotion? i believe if the network profile (Public IP and other virtual nic configuration for that virtual machine ) didn't move as well then those public servers will lose thier functionality and will appear as if they were down.
2. does HP virtual connect switch have the ability to do this or we need to consider other elements?

Thanks

we are planning to install an ESX v4.0 server. we will have a iSCSI SAN. my question is is it ok to install the HP P4000 as a virtual machine inside an esx server or it's better to install it in seperate server outside ESX server. i asked becouse i heard in a training video from training signal that its required to installed the iSCSI server out side ESX

thank you

My question is that my company is thinking of providing a free email account for each of its customers. As a new company we will assume that our corporate email system will be MS Exchange server which will support about 1000 employees.

They are asking why not adding the customer list to be a part of Exchange users. My suggestion was to separate the two systems, for the corporate we can use Exchange but for customers (around 30000) we have to use a Linux based system. My only argument was that Linux can be used for enterprise services like this and Microsoft may fail.

What do you suggest?

And if you are with me on choosing Linux as the server platform, what do you suggest to use as an alternative for Exchange in Linux?

Thank you.

i have some indexed document files ( .doc , .docx and .pdf ) stored in a folder in the website.

when i type the full address of the file ( ex http://www.website.com/folder1/folder2/1.doc ) the visitor or any body who is viewing the website can easily download the file.

are there any way to prevent this. are there any configuration has to be done to the .htaccess file to prevent this from happening.

also if folder2 contains only document file, how can i prevent a listing of the files inside this folder in case apache stoped running.

thank you

when a user sends an email.. what is the procedures that is happening? i mean how the servers is distinguishing between @gmail.com and http://gmail.com for example? are there special configuration has to be done in the DNS server?

thank you.

i know that DMZ should contain servers that acts as a middle point between the trusted area like LAN and the other semi or non trusted area like internet or another DMZ.

based on this declaration our team has started designing these areas in my copmany network. also we are a mobile operator company.

in the DMZ we will install the DNS, HTTP and SMTP servers. now the normal user can use the Webserver to access our website although if he is from trusted or untrusted areas. but at the same time some services in our website need to be accessed from the core network of the mobile. we are worried about the security here. should we put the mobile servers on another DMZ or not.

we thought about not putting it in the DMZ, but we will configure the DNS to forward all of the requests to these services to the required servers in the mobile core servers. we will put these servers as a subdomains for our main domain which is located in the webserver in the DMZ.

now when the user types for example: domain1.com it will go to the main webserver, now there is a link which will require us to move to mobile core servers which is mobile.domain1.com

can this be achived by not putting mobile network into a dmz?

i attached a photo to describe our idea more clearly and i want your suggestions in this issue. thank you.

what is the requirement to be able to run PHP and ASP.net on the same server?

i mean is it possible to provide 2 hosting models one for users that have ASP,NET websites and other for users use PHP and other Apache stuff on the same server or with one HTTP Server

thank you.

right now we host our website in an ISP which is also registers our domain. the company now is entering a mobile operator business which requires that the website to be moved to our internal network to let the user use our website to access some services.

right now i'm still confused of what to do, what are the steps required to move the host and still alow the people when they type my company domain in the browser to be directed to the new location which is inside my company network , how the DNS NS Public IP issues has to be considered ?

thank you.