Security
How to check and stop if DDoS attack is going on.
Sep 20th
Distributed denial-of-service attacks
In a distributed attack, the attacking computers are often personal computers
with broadband connections to the Internet that have been compromised by viruses
or Trojan horse programs. These allow the perpetrator to remotely control machines
to direct the attack, and such an array of computers is called a botnet. With
enough such slave or zombie hosts, the services of even the largest and most well-connected
websites can be disrupted.
Installing and configuring Linux CDP Agents
Jun 17th
R1Soft CDP is a easy to install and use continous data protection
system, primarily targeted at the hosting market. It backups up
multiple servers to a central backup server; multiple backup windows
can be performed per day, and files or even the whole disk can be
restored from the image. This tutorial will show you how to install the Linux Agent on a server which you want to be backed up, and how to
configure it.
cPanel Name Server Setup
Apr 16th
It seems no matter which flavor of linux / unix you are running and which control panel software that setting up custom name servers is always a problem. This How-To will be for installing name servers on a Linux CPanel server. Custom Name Servers are great because you can provide your webhosting customers with ns1.yourcompany.com instead of your server / upllink providers name servers. You will also know how to install Custom name servers for your reseller accounts.
More >
DDOS check via number of connections
Mar 26th
A quick and usefull command for checking if a server is under DDOS is
That will list the IPs taking the most amount of connections to a server. It is important to remember that the ddos is becoming more sophistcated and they are using fewer connections with more attacking ips. If this is the case you will still get low number of connections even while you are under a DDOS.
APF firewall. Daily automated email showing firewall status
Apr 27th
Charles Sweeney writes : This is how to get your server to send you a daily email showing the status of your APF firewall. In other words, letting you know if it’s running or not!
APF firewall. Daily automated email showing firewall status
Are you getting nasty errors in your DNS Report
Jan 3rd
If your are getting nasty red errors in your DNS report at http://www.dnsreport.com/
then here we have a few steps of editing your named.conf to fix this.
More >
Syctl.conf Hardening
Mar 26th
The purpose of syctl hardening is to help prevent spoofing and dos attacks. This short guide will show what I have found to be a good configuration for the sysctl.conf configuration file. The most important of the variables listed below is the enabling of syn cookie protection. Only place the bottom two if you do not want your server to respond to ICMP echo, commonly referred to as ICMP ping or just ping requests. More >
Install APF Firewall on a cPanel sever
Mar 24th
To install APF firewall login to your server as root and follow this tutorial
More >
Security Guide for cPanel servers
Mar 24th
You must keep your box secure at all times, getting compromized could lead to dataloss, which means you loose clients which isnt a very good way to run your buisness. You dont have to be an expert, there are just simple instructions you have to follow, check your box daily for any unknown proccesses, cheak on your clients regularly to make sure they are not up to no good. The easiest of steps can make you that one bit more secure which helps.
More >
Dealing With Distributed Denial of Service Attacks
Feb 5th
Distributed denial of service attacks are frustrating — they’re frustrating for the company under attack, and frustrating for the web host. They can also be costly in terms of business and goodwill lost. Fortunately, there are ways to deal with them, if you are willing to prepare for the possibility of a DDoS before it happens.
HELP! My server is under a DDOS attack!
Feb 3rd
Ok first just take a breath, you are getting nothing done by worrying. This guide is meant to try and help mitigate the effects of an attack that is in progresss. I have compiled a lot of the things that I do but it is very possible I have forgotten something. Please feel free to add suggestions at the bottom if you would do it a different way or if this works good for you.
This guide is not meant to take the place of a professional looking at your server but it should give you a very good idea of what is going wrong and point you in the right direction to solving the problem. A lot of this requires you to have an idea of what is happening with your server on a normal basis so you can see what is abnormal with it. It would not be a bad idea to run a few of these tests to see what is normal under your normal busy periods.
More >
PHP optimization How-To: Installing Eaccelerator
Jan 1st
Eaccelerator is a PHP accelerator/encoder/caching utility that is based off of the old mmcache (which is no longer being maintained).
What Eaccelerator does is: it caches your PHP scripts so that the database is no longer being queried everytime someone needs a script. This is particularly useful for large forums, but pretty much anyone can benefit from it. Since these scripts are cached, you’ll notice a decrease in memory use and server load.
More >
Server Security Considerations
Mar 19th
>Server security is as important as network security because servers
often hold a great deal of an organization’s vital information. If a
server is compromised, all of its contents may become available for the
cracker to steal or manipulate at will. The following sections detail
some of the main issues.
More >
Detect and Clean a hacked cPanel server with this T0rnkit Tutorial
Dec 21st
This tutorial is for system admins and will run you through how to Detect and Clean a hacked cPanel server with T0rnkit
More >
How to change your server signature
Dec 9th
Disguising your server signature is always a good idea as you wont reveal the operating system to potential script kiddies and hackers.
More >
HERE ARE SIX SIMPLE THINGS YOU CAN DO TO HELP KEEP SPAM AT BAY
Sep 6th
Check out those basic rules to avoid spam robots to use your email for spaming !
More >
How To Install RKHunter
Aug 18th
RKHunter also known as RootKit Hunter is a scanning tool to ensure you for about 99.9% that you don’t have any rootkits, backdoors, and local exploits but running tests and e-mailing you results.
How To Install CHKROOTKIT
Aug 18th
chkrootkit: shell script that checks system binaries for rootkit modification.
More >
Install BFD (Brute Force Detection)
Aug 17th
BFD is a modular shell script for parsing applicable logs and checking for authentication failures.
More >
Disable Telnet Access
Aug 17th
Telnet should be disabled, and you should use SSH. Telnet sends password in plain text, and ‘crackers/hackers’ can obtain these passwords easily compared to SSH, and then takeover your dedicated web server.
More >
