The security of AWS access keys is paramount for safeguarding your cloud infrastructure and maintaining the integrity of your deployed AWS services. These keys grant programmatic access to your AWS environment, making them critical assets that must be handled with utmost care. In the unfortunate event that access keys are exposed or compromised, swift and strategic action is essential to mitigate risks and prevent unauthorized access, data breaches, or service disruptions. This comprehensive guide outlines the critical security measures and best practices to follow when managing an access key exposure incident. From immediately revoking exposed credentials, auditing AWS CloudTrail logs, and rotating keys, to reinforcing Identity and Access Management (IAM) policies, each step is crucial to restoring and securing your …
Server
Email migration is the process of transferring mailbox data from one email account or server to another. Organizations often perform migrations when switching hosting providers, upgrading mail servers, or consolidating email infrastructure. One of the most reliable tools for performing email migration on Linux servers is imapsync. This command-line utility allows administrators to transfer emails between two IMAP servers efficiently. It supports incremental synchronization, meaning that only new or missing messages are transferred, which helps reduce bandwidth usage and migration time. Imapsync also preserves message flags and folder structures, ensuring that the migrated mailbox remains identical to the original one. What is the Imapsync Command? Imapsync is a powerful tool designed for transferring email messages between two IMAP servers. It …
CyberPanel Migration
CyberPanel is a modern, fast, and secure hosting control panel powered by OpenLitespeed. CyberPanel provides a graphical interface for Linux server management, and a one-click installation of LSCache, WordPress, Prestashop, Joomla, and git. It automates the initial setup for components like DNS, Mail service, and SSL certificates to reduce the time it takes to get set up for hosting. CyberPanel is free and Opensource running on the OpenLiteSpeed web server and can add multiple domains. CyberPanel arrives in two versions CyberPanel and CyberPanel Ent. This article focus on steps to perform Migrations with CyberPanel. CyberPanel to CyberPanel Migration If you need to transfer your website between two CyberPanel without losing any data, follow these steps. Backup Creation | Source server …
We are glad to inform you that SupportPRO added another jewel to our crown recently as we achieved cPanel SafeAdmin Accreditation. The Certification is to ensure that the sysadmin companies have a resistant awareness of safe, secure, and effective Linux and cPanel & WHM server administration methods. It is very important to mention that cPanel Certification gives the opportunity to acquire an admirable value for our company from our current and future clients. The best thing about the cPanel certification process is that it follows industry standards and their training materials are inline with their new releases. At SupportPRO, we regularly go through cPanel training programs and hence our staff is up-to-date with their new features, add-ons, and any security …
Network configuration in Ubuntu 18.04 LTS using netplan
With Ubuntu 18.04 onwards, configuring IP addresses stands different from the older versions. When comparing with the previous versions the Ubuntu is using a new utility called Netplan – another order line arrange design utility, to arrange an IP address. Netplan has been presented by Ubuntu engineers in Ubuntu 17.10 where we no longer use the “interfaces” file to configure IP address but does the task using a YAML file with all default arrangement documents found under /etc/netplan/ directory. In this blog, we will check on how to design static and dynamic IP address in Ubuntu 18.04 LTS server. (more…)
Datadog is a monitoring platform for cloud applications which automatically detects potential application and infrastructure issues as it observes trends and patterns in application metrics like error rate, request rate, and latency—and unexpected behavior. (more…)
AWS Cloudwatch
AWS Cloudwatch is an AWS monitoring tool that will help us to monitor the cloud resources. Also, it gives a detailed report for the cloud resource usage. Amazon CloudWatch has an open application programming interface (API) support with customized reports, notifications, and alarms. In Amazon CloudWatch, there is no up-front commitment or minimum fee. It will be charged at the end of the month for what we use. Using cloudwatch, we can track the below metrics. AWS also provides access application logs and it allows to create alarms when the metrics reach near to the pre-defined hit limit. Dashboards can also be created to display graphs and statistics for both up to the minute and historical data. Here is an example of …
Munin
Monitoring our systems, networks and server’s performance and activity is one of the duller aspects of administration, and often something that is overlooked until there is a problem. Fortunately, there are many tools that can be used to monitor our system resources with differing levels of complexity and difficulty to configure. One of the simpler tools for getting the details for all the above can be simply derived from the monitoring tools called “Munin”, which is considered as one of the most flexible network resource monitoring systems available for UNIX and UNIX-like operating systems including Linux, FreeBSD, NetBSD, Solaris.
EasyApache 3 to EasyApache 4 Migration Process =============== Easy Apache version 4 introduced by cPanel version 11.52. EasyApache web-based Graphical User Interface helps to configure all the back-end activities. Easy Apache Graphic tool allows you to enable multiple PHP extensions and multi-processing modules. The new user interface allows you to change Apache handlers for the installed PHP versions. We can install a default version of PHP in the server and per-host basis.
Apache Struts 2 is an open-source framework widely used for developing Java web applications. On March 6, 2017, a critical security vulnerability identified as CVE-2017-5638 was publicly disclosed. This flaw allowed attackers to execute remote code on vulnerable servers by sending specially crafted malicious requests. The vulnerability occurs when a server processes file uploads using a Jakarta-based multipart parser. Attackers can exploit this weakness by embedding malicious commands within the Content-Type header of a file upload request. When processed by affected versions of Apache Struts 2, the server may execute these commands, leading to unauthorized access or complete system compromise. The issue specifically affects Apache Struts 2.3.x versions prior to 2.3.32 and 2.5.x versions prior to 2.5.10.1, where improper handling …