Web Hosting Blog

Blog for Web Hosting Issues, FAQ’s, Tutorials and Troubleshooting, Blogging

Entries for the ‘Server Security’ Category

Harden the TCP/IP Stack Against Denial of Service

Refer to the following link for safeguarding your server against dDOS attakcs….
http://forums.rackshack.net/showthread.php…?threadid=29673
Bookmark Me

Linux: Recover data from the crash disk.

Greetings Micfo members,
If you have Linux based OS installed and if your disk is crashed then try following steps if you want to retrive data from ddrescue commands.
Ddrescue is a program that copies data from one file or block device to another,
it is a tool to help you to save data from crashed partition. It [...]

How to Kill user in Linux

Greetings Guys..!!
Well if you want to kill some users process ( in unix/linux hosting server) or if you want to terminate from the shell access then you can use following commands.
If you want the user jason’s process details
ps -aux |grep jason
from the output just kill the process id of that user and that user [...]

How to Disable Telnet access on server

Telnet should be disabled on all Web Servers, and you should use SSH. Telnet sends password in plain text passwords and usernames through logins, and ‘crackers/hackers’ can obtain these passwords easily as compared to SSH. TELNET server listens for incoming messages on port 23, and sends outgoing messages to port 23.1. Login to your Server [...]

CONFIGSERVER FIREWALL!

FIREWALL:
A simple plug-in appliance that stops spam at its entry point.A system designed to prevent unauthorized access to or from a private network. Firewalls can be implemented in both hardware and software, or a combination of both. Firewalls are frequently used to prevent unauthorized Internet users from accessing private networks connected to the Internet, especially [...]

EACCELERATOR installation

Eaccelerator is a PHP accelerator/encoder/caching utility that is based
off of the old mmcache (which is no longer being maintained).
What Eaccelerator does is: it caches your PHP scripts so that the database
is no longer being queried everytime someone needs a script. This is
particularly useful for large forums, but pretty much anyone can benefit
from it. Since these [...]

If IP address assigned to a server are missing from the drop down list in CREATE ACCOUNT.

1)
Check that ipaddress is in ifconfig
root@[/]# ifconfig
eth0 Link encap:Ethernet HWaddr 00:0D:61:B5:AE:74
inet addr:69.93.237.209 Bcast:69.93.237.223 Mask:255.255.255.224
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:216786947 errors:0 dropped:0 overruns:0 frame:0
TX packets:292861708 errors:0 dropped:0 overruns:0 carrier:0
collisions:0
RX bytes:1968126893 (1876.9 Mb) TX bytes:317887913 (303.1 Mb)
2)
Check the entry of ipaddress in /etc/ips
root@[/]# vi /etc/ips
69.93.237.209:255.255.255.224:69.93.237.223
69.93.237.210:255.255.255.224:69.93.237.223
69.93.237.211:255.255.255.224:69.93.237.223
The [...]

Stop phpbb worms with mod_security

Greetings Micfo members,
If you want to make your accounts secure from the injection that
is usually been done by some of the hackers by writing some code
in your phpbb forum or some of your script then just add the following rule in your .htaccess file. That will stop php injection.
#spam bots SetEnvIfNoCase User-Agent “^EmailSiphon” bad_bot SetEnvIfNoCase [...]

Configuring APF Firewall

cd /usr/local/src
wget http://rfxnetworks.com/downloads/apf-current.tar.gz
tar -zxf apf-current.tar.gz
cd apf-0.*
./install.sh
Now edit config file
vi /etc/apf/conf.apf
Scroll down to the “Common ingress (inbound) TCP ports section. At this point you need to find the correct configuration for your control panel.
IG_TCP_CPORTS=”20,21,22,25,26,53,80,110,143,443,465,993,995,2082,2083,2086,2087,2095,2096″
IG_UDP_CPORTS=”21,53,873″
EGF=”1″
EG_TCP_CPORTS=”21,22,25,26,27,37,43,53,80,110,113,443,465,873,2089″
EG_UDP_CPORTS=”20,21,37,53,873″
save the file
start apf
apf -s
If everything still works then edit the config file and turn dev mode off. Make sure you can start [...]

Upgrade kernel on live servers

Following are steps to upgrade kernel on live web server
.
1. Check current version of kernel on web server using command uname -a, if
its 2.4 then download latest release for 2.4 please do not download 2.6
kernel.
You can download kernel from http://www.kernel.org/pub/linux/kernel/v2.6/
if its 2.4 then http://www.kernel.org/pub/linux/kernel/v2.4/, you can
check latest stable release from http://www.kernel.org
2. wget kernel in /usr/local/src
3. [...]