FirewallD is a new firewall suite being introduced to Linux distribution. At present, the all-new popular CentOs 7 has it as the default firewall suite which in near future will be implemented in servers. FirewallD, as usual, was developed by the Fedora community and was implemented in the 20th version of the same. It is also being used in arch Linux and others till the date. FirewallD is a dynamic firewall, dynamic in the sense that any change in the firewall will be implemented as soon as the amendment is made. That is unlike the previous firewall suite (iptable) where no hard reset or restart is needed to implement the rule amended or included. Iptables is deprecated in the early …
Linux
Portsentry is a tool to detect port scans and log it. Once a host is targeted by an attacker, a port scan is almost always performed. PortSentry detects such scans by monitoring the unused ports on the host. Upon a connection attempt to one of the unused ports, PortSentry is alerted and has the ability to issue a number of commands in response to the scan. Installation # cd /usr/src/ # wget http://sourceforge.net/projects/sentrytools/files/latest/download
The Redirect feature allows you to send all of the users that access a domain or a particular page to a different URL. This can be done by using cPanel’s “Redirects” feature or by using .htaccess file if the cPanel redirection does not work properly. In here we shall discuss few helpful .htaccess codes Non-www to www Redirection RewriteEngine on RewriteCond %{HTTP_HOST} ^domain.com [NC] RewriteRule ^(.*)$ http://www.domain.com/$1 [L,R=301]
When we own a website, we may want to analyze on how many people visits our website. cPanel has several in-built statistical analysis programs and one of the most important ones is Awstats. Awstats produces visual statistics about visitors of your site. Awstats gives details about the count of people visiting your website, and other information like: > Monthly history > Countries visiting your website (Top 25) > Visits duration > Operating Systems that accesses your website (Top 10) > Browsers (Top 10) etc.,
ZPanel is a free and complete web hosting control panel for Microsoft Windows and POSIX (Linux, UNIX and MacOSX) based servers. It is written in PHP and uses several open-source (or freely available) software packages to provide a secure, web hosting system. ZPanel flawlessly integrates with MySQL, hMailServer (on Windows), Posfix (on Linux etc.) and Filezilla (on Windows) or ProFTPd (on Linux etc.). Installation can be completed with following steps : # wget https://raw.github.com/zpanel/installers/master/install/CentOS-6_4/10_1_1.sh# chmod +x 10_1_1.sh# ./10_1_1.sh You can then follow the configurations needed from the terminal for completing the installation. Default user and password User :zadminPass :password Important File Paths and OS Specifics in ZPanel: ZPanel virtual host : /etc/zpanel/configs/apache/httpd-vhosts.confApache log files : /var/log/httpd/error_log: /var/log/httpd/access_logZPanel users : /var/zpanel/hostdata/zadmin/public_html/domain.comZPanel …
In this article we will be discussing a few basic commands we could use in our daily server terminal interaction. Generally Linux commands have the following syntax. command [options] [arguments] Each item is separated by space. >> Options modify a commands behavior. Single letter options usually preceded by “ – ” Full word options usually preceded by “ — ” >> Arguments are file names or other data needed by the command. >> Multiple commands can be separated by “;” Lets have a check with few of the most commonly used commands below:
IP address spoofing, or IP spoofing, is the creation of Internet Protocol (IP) packets with a source IP address for the purpose of concealing the identity of the sender or impersonating another computing system. It’s a phenomena in which attackers changes or replicate IP packets. To dig deep, let’s understand some basic concepts. On the Internet, communication between two computers uses TCP/IP. In which data needed to be sent from one computer to another is broken down into pieces known as packets. These packets are numbered when broken down so they can be reassembled at the end or by the receiver. Each packet has two parts: header and body. The body carries the message, and the header stores metadata for the packet, such …
Important configuration files and directories on the Linux cPanel/WHM server
cPanel/WHM keeps the location of key files in the same place across all of the various cPanel versions. Due to this consistency, we could always know where to look for logs files for all services running on a cPanel server. You may find below the location of important configuration files and directories on the Linux cPanel/WHM server. Web server ( Apache ) : Apache HTTP server configuration file : /usr/local/apache/conf/httpd.conf Apache directory Structure : (more…)
Logstalgia is a visualization tool that visualize web access logs as a game simulation (as a pong like battle game between web server and requests). Requests are appeared as colored balls and travel across the screen to reach requested location. The colored ball hits the paddle if it is a successful request otherwise it misses (for e.g. if it is an error) Requirements: > Its works with OpenGL (Open graphic Library) and need an accelerated 3D display to visualize > A web server with logs such as Apache, Lighttpd, Nginx (a busy server gives interesting result) > Linux operating system (eg: Ubuntu, Fedora)
If you inspect your server’s error logs, you may see that many visitors (for the most part robots) constantly request access to things they should not be allowed to see. If you see that such access are suspicious and they are trying to spam your forum or hijack your mail program, you may need to deny access from those IP’s. Collecting such offending IP addresses by manually inspecting your logs across your site can become a full-time job. In such cases, you may block access to the site on Country basis (from which the suspicious access was observed) , given that the site have very few legitimate visitors from these regions. It can be done by using the mod_geoip apache …