If you inspect your server’s error logs, you may see that many visitors (for the most part robots) constantly request access to things they should not be allowed to see. If you see that such access are suspicious and they are trying to spam your forum or hijack your mail program, you may need to deny access from those IP’s. Collecting such offending IP addresses by manually inspecting your logs across your site can become a full-time job. In such cases, you may block access to the site on Country basis (from which the suspicious access was observed) , given that the site have very few legitimate visitors from these regions. It can be done by using the mod_geoip apache …
Server
Subversion (SVN) is an open source version control system. It helps you keep track of a collection of files and folders. Any time you change, add or delete a file or folder that you manage with Subversion, you commit these changes to your Subversion repository, which creates a new revision in your repository reflecting these changes. You can always go back, look at and get the contents of previous revisions. This article will help you for step by step setup SVN server on a cPanel/WHM server. Prerequisite 1. sqlite3 php module 2. Apache mod_dav module. Installing php sqlite3 module Run the following command in the server terminal #php -m | grep sqlite If the module is installed already, …
Spam emails are commonly referred to as unsolicited or junk emails sent in bulk without user consent. In a cPanel server running Exim, spamming usually occurs due to compromised accounts, vulnerable scripts, or improperly configured applications. Common Causes of Server Spamming Spamming generally happens in the following ways: General Fix for Spamming Issues Case 1: Spam Sent via PHP Script Step 1: Check Mail Queue Count A high number indicates possible spam activity. Step 2: View Recent Emails in Queue Step 3: Inspect Email Header Check the auth_id field to identify the account sending spam. Step 4: Locate the Spam Script Identify heavily used mail directories: Step 5: Disable the Script Step 6: Find Malicious IP Accessing Script Block the …
A new vulnerability has been found that potentially affects most versions of the Linux and Unix operating systems, in addition to Mac OS X. Known as the “Bash Bug” or “ShellShock,” the GNU Bash Remote Code Execution Vulnerability could allow an attacker to gain control over a targeted computer if exploited successfully. And because Bash is everywhere on Linux and Unix-like machines and interacts with all parts of the operating system, everyone anticipates that it will have lot of repercussions. How does Shellshock work? Shellshock exploits a flaw in how Bash parses environment variables; Bash allows functions to be stored in environment variables, but the issue is Bash will execute any code placed after the function in the environment variable …
Installation of PECL_HTTP Extension From Source Code in Custom PHP in Cloudlinux
Suppose that your Linux server has PHP version selector installed and configured. As you know alternative php5.x (while using PHP version selector) versions should load /opt/alt/php5x/etc/php.ini file and scan /opt/alt/php5x/etc/php.d directory for modules:: ==== Configuration File (php.ini) Path /opt/alt/php5x/etc Loaded Configuration File /opt/alt/php5x/etc/php.ini Scan this dir for additional .ini files /opt/alt/php5x/etc/php.d additional .ini files parsed /opt/alt/php5x/etc/php.d/alt_php.ini ==== Those are default locations for alt-php. Steps in installing pecl http package in cloudlinux platform: 1. Download the pecl_http package from pecl website http://pecl.php.net/package/pecl_http and compile it. #wget http://pecl.php.net/get/pecl_http-2.0.4.tgz 2. Extract the package #tar -xvzf pecl_http-2.0.4.tgz 3. Now run the ‘phpsize’ command. The phpize command is used to prepare the built environment for a PHP extension #phpize 4. Proceed with the installation of …
How to fix – Error: Account Creation Status: failed,mysql user with the name already exists
While restoring a cPanel account from one server to another server there is a chance for following error: Account Creation Status: failed (Sorry, a mysql user (let’s take ‘dbuser’) with the name already exists To Delete the user : Please login into the mysql and follow the steps mysql mysql > use mysql; mysql > drop user dbuser@localhost; OR mysql> delete from mysql.user where user=dbuser; You can also check this using : select User, Host from user where User like dbuser; Where dbuser is the user mentioned in the error. If the above mentioned steps do not fix the issue,please follow the below steps. Please check for entries of that usernames in the following files and if there is any, …
Denial-of-service attack (DoS attack) or Distributed Denial-of-service attack (DDoS attack) is an attempt to make a machine or network resource unavailable to its intended users. This attack generally target sites or services hosted on high-profile web servers such as banks, credit card payment gateways, and even root nameservers. DoS attacks are implemented by either forcing the targeted computer to reset, or consuming its resources so that it can no longer provide its services or obstructs the communication media between the users and the victim so that they can no longer communicate adequately. This blog provides you an overview on how to identify DDOS attack using netstat command. Display all active Internet connections to the server and only established connections are …
If you manage a website, you’ll likely encounter server migration at some point. This could be due to upgrading to a more powerful server, switching service providers, or updating your software environment for better performance and security. Despite its benefits, server migration often raises concerns – such as data loss, downtime, or website instability. The good news is that with proper planning and execution, you can migrate your web server with zero downtime and no data loss. Let’s walk through the process step by step. 1. Prepare Your DNS When migrating to a new server, your website will typically be assigned a new IP address. However, DNS records are cached globally, which means changes can take up to 48 – …
‘rncd : connection failed : connection refused’ is a common error occurred in cpanel. Inorder to get the name servers work properly we need to eliminate this error. Elimination of this error is a simple process which takes only a few minutes via cPanel /scripts.. The steps to solve the issue is as follows : 1. Login to your server as root via SSH 2. Run: /scripts/updatenow 3. Run: /scripts/fixrndc The above steps should fix most of the cases, but if it does not, do follow the following steps : 1. Login to your server as root via SSH 2. Run: vi /etc/rndc.conf (or vi /etc/namedb/rndc.conf on FreeBSD) replace all instances of “rndc-key” with “rndckey” 3. Run: vi /etc/named.conf (or …
DNS is a critical component of any network infrastructure. It is responsible for translating domain names into IP addresses, making it a prime target for attackers. A compromised DNS server can lead to traffic redirection, data interception, service downtime, and severe reputation damage. The main objective of securing DNS includes ensuring the secure exchange of data between DNS servers, protecting DNS queries, securing zone transfers, and controlling DNS updates. Strengthening DNS security is a foundational step in overall website and server protection, as discussed in SupportPro’s guide on improving website security In this article, we explain one of the most effective DNS-hardening methods: securing DNS using chroot, along with essential configuration considerations. Before proceeding, ensure that you have taken a …