i has setup CSF
and all things Ok
but i dont know to make any setting for CSF
ITs now
Firewall Status: Enabled but in Test Mode - Don't forget to disable TESTING in the Firewall Configuration
I am running Plesk 12 . Centos 6.5
I have Plesk Firewall Installed.
After the Plesk Firewall was enabled the FTP Stopped working in passive Mode.
I searched the net and found the following :
Code:
/etc/sysconfig/iptables-config and change the line with IPTABLES_MODULES to: IPTABLES_MODULES="ip_conntrack_ftp"
It started working.
I changed the default FTP port from proftpd.conf
Code:
port 2392
and /etc/services
Code:
ftp 2392/tcp
ftp 2392/udp fsp fspd
I allowed the new port in Plesk Firewall in Incoming connection and disabled port 21
Now I am not able to connect to the ftp, I get the following error. Have I missed anything ?
Code:
Response:257 "/" is the current directory
Command:TYPE I
Response:200 Type set to I
Command:PASV
Response:227 Entering Passive Mode (85,25,51,34,216,46).
Command:MLSD
Error:Connection timed out
Error:Failed to retrieve directory listing
I have dedicated server running CentOS 5.2 with the latest release of cPanel.
Every night /scripts/upcp runs and I get e-mail. I am worried about this part:
Checking /dev/sda....S.M.A.R.T does not appear to be enabled for this device.
Checking /dev/sdb....S.M.A.R.T does not appear to be enabled for this device.
How do I enable S.M.A.R.T. (should I?) permanently?
how to know in which mode php running ? CGI or ISAPI
View 2 Replies View RelatedI currently have one server running PHP in suPHP mode. One of my friend told me that if i change the PHP to Apache Mode, this would decrease my server load a lot and thus give more performance.
Anyone can tell me what mean changing PHP to Apache mode? Is that something i can do from WHM? Will this affect the domains currently hosted on my server?
What is the best option in the php setting does keeping the php function safe mode on or off?
View 12 Replies View Relatedi need to enable php safe mode on for my joomla and i came across this
Quote:
When the php safe mode is turned off globally by default at our server end, you can still override the setting to turn it ON for only your domain by just insert the following line inside the ".htaccess" file (at Linux server):
Code:
php_value safe_mode "1"
my joomla .htaccess file:
Quote:
##
# @version $Id: htaccess.txt 10492 2008-07-02 06:38:28Z ircmaxell $
# @package Joomla
# @copyright Copyright (C) 2005 - 2008 Open Source Matters. All rights reserved.
# @license http://www.gnu.org/copyleft/gpl.html GNU/GPL
# Joomla! is Free Software
##
#####################################################
# READ THIS COMPLETELY IF YOU CHOOSE TO USE THIS FILE
#
# The line just below this section: 'Options +FollowSymLinks' may cause problems
# with some server configurations. It is required for use of mod_rewrite, but may already
# be set by your server administrator in a way that dissallows changing it in
# your .htaccess file. If using it causes your server to error out, comment it out (add # to
# beginning of line), reload your site in your browser and test your sef url's. If they work,
# it has been set by your server administrator and you do not need it set here.
#
#####################################################
## Can be commented out if causes errors, see notes above.
Options +FollowSymLinks
#
# mod_rewrite in use
RewriteEngine On
########## Begin - Rewrite rules to block out some common exploits
## If you experience problems on your site block out the operations listed below
## This attempts to block the most common type of exploit `attempts` to Joomla!
#
# Block out any script trying to set a mosConfig value through the URL
RewriteCond %{QUERY_STRING} mosConfig_[a-zA-Z_]{1,21}(=|\%3D) [OR]
# Block out any script trying to base64_encode crap to send via URL
RewriteCond %{QUERY_STRING} base64_encode.*(.*) [OR]
# Block out any script that includes a <script> tag in URL
RewriteCond %{QUERY_STRING} (<|%3C).*script.*(>|%3E) [NC,OR]
# Block out any script trying to set a PHP GLOBALS variable via URL
RewriteCond %{QUERY_STRING} GLOBALS(=|[|\%[0-9A-Z]{0,2}) [OR]
# Block out any script trying to modify a _REQUEST variable via URL
RewriteCond %{QUERY_STRING} _REQUEST(=|[|\%[0-9A-Z]{0,2})
# Send all blocked request to homepage with 403 Forbidden error!
RewriteRule ^(.*)$ index.php [F,L]
#
########## End - Rewrite rules to block out some common exploits
I have a Linux-Debian server, I have Apache2, PHP ect setup for a basic website im running on it too, However I need cURL enabled, I cant seem to find any options in the php.ini files to enable cURL at all.
I know that you just uncomment it to enable it however I dont see it at all, even it being disabled. I opened it in notepad and used the SEARCH feature and it couldnt find it eithier.
I have a script that needs safe mode off to run, the script writers have said safe mode is disabled as default and not required and even disabled in php 6
Now I'm not to fimular with Safe mode, all I know is most scripts are wrote to work with this on
Should i switch safe mode on or off . Right now i am using it as on some one told me if i switch it off then server can easily hack but becoz i switch it on im having too much problem specially users of sites having problem of uploading and wordpress also have issue and some more script what you say what should i do?
View 9 Replies View Relatedhow can i make "safe mode on/off" using .htaccess?( in SharedHosting )
View 1 Replies View RelatedI would like to know as to whether or not you have php safe mode turned on? If you do, please specify why, and would you allow your clients to turn it off?
View 13 Replies View RelatedI searched but couldn't find much - should you run PHP with safe mode on or off on a shared (Linux) server?
View 3 Replies View RelatedI cannot enable DMA mode on /dev/hda when attemping to enable it via ssh
Code:
hdparm -d1 /dev/hda
/dev/hda:
setting using_dma to 1 (on)
HDIO_SET_DMA failed: Operation not permitted
using_dma = 0 (off)
Code:
hdparm -tT /dev/hda
/dev/hda:
Timing cached reads: 1632 MB in 2.00 seconds = 814.90 MB/sec
Timing buffered disk reads: 8 MB in 3.42 seconds = 2.34 MB/sec
I am running CentOS 4.7 and cPanel 11. cPanel also shows DMA is not enable on this drive. Kernel: 2.6.9-78.0.13.ELsmp
Code:
cat /boot/config-2.6.9-78.0.13.ELsmp |grep DMA
CONFIG_GENERIC_ISA_DMA=y
CONFIG_BLK_DEV_IDEDMA_PCI=y
# CONFIG_BLK_DEV_IDEDMA_FORCED is not set
CONFIG_IDEDMA_PCI_AUTO=y
# CONFIG_IDEDMA_ONLYDISK is not set
# CONFIG_HPT34X_AUTODMA is not set
CONFIG_BLK_DEV_IDEDMA=y
# CONFIG_IDEDMA_IVB is not set
CONFIG_IDEDMA_AUTO=y
CONFIG_SCSI_SYM53C8XX_DMA_ADDRESSING_MODE=1
CONFIG_PDC_ADMA=m
Code:
hdparm -i /dev/hda
/dev/hda:
Model=WDC WD2500JB-00REA0, FwRev=20.00K20, SerialNo=WD-WMAN542173
Config={ HardSect NotMFM HdSw>15uSec SpinMotCtl Fixed DTR>5Mbs FmtGapReq }
RawCHS=16383/16/63, TrkSize=0, SectSize=0, ECCbytes=50
BuffType=unknown, BuffSize=8192kB, MaxMultSect=16, MultSect=16
CurCHS=16383/16/63, CurSects=16514064, LBA=yes, LBAsects=268435455
IORDY=on/off, tPIO={min:120,w/IORDY:120}, tDMA={min:120,rec:120}
PIO modes: pio0 pio3 pio4
DMA modes: mdma0 mdma1 mdma2
UDMA modes: udma0 udma1 udma2 udma3 udma4 *udma5
AdvancedPM=no WriteCache=enabled
Drive conforms to: device does not report version:
* signifies the current active mode
SNMP enabled thermometer, hopefully one capable of reading both inside and outside temperatures. A fair bit of Googling only turned up the Poseidon 1140, which apparently is not available in the US. I figured that someone here has to be using something like this in their DC.
View 5 Replies View Related/etc/init.d/iptables status
Table: mangle
Table: filter
Table: nat
/sbin/iptables -v -I INPUT -s 1.1.1.1 -j DROP
no "response"
.. this means the iptables are simply empty I guess!
CSF is enabled and working, at least it's sending me mails that it's blocking IP's or if CPU load is too high.
/etc/init.d/iptables status is working but not saving anything
My current iptables:
Code:
# Generated by iptables-save v1.2.11 on Tue Feb 19 08:30:06 2008
*mangle
:PREROUTING ACCEPT [11582:3937365]
:INPUT ACCEPT [11582:3937365]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [11881:5171405]
:POSTROUTING ACCEPT [11881:5171405]
COMMIT
# Completed on Tue Feb 19 08:30:06 2008
# Generated by iptables-save v1.2.11 on Tue Feb 19 08:30:06 2008
*filter
:INPUT ACCEPT [11582:3937365]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [11881:5171405]
COMMIT
# Completed on Tue Feb 19 08:30:06 2008
# Generated by iptables-save v1.2.11 on Tue Feb 19 08:30:06 2008
*nat
:PREROUTING ACCEPT [1203:62871]
:POSTROUTING ACCEPT [257:16291]
:OUTPUT ACCEPT [257:16291]
COMMIT
# Completed on Tue Feb 19 08:30:06 2008
i have a cpanel server.. can any one tell me how to allow safe mode to a specific domain?
View 1 Replies View RelatedI am going to run a free host, yes I know I should post this in FWHT but well, they dont answer very fast if at all.
It is very dangerous to have Safe Mode OFF on a free host, but someone was telling me about open_basedir, which makes it so they cant touch any files set outside of open_basedir. Would this be suffiecient to keep them from touching others files? I know I need to disable other functions like exec() and stuff but would open_basedir keep hackers away from others files and hacking them...
how to change phpsafe mode into "off" in cpanel hosting account since Whole server setting is "on" in phpsafe mode? I need for chage it to "off" as reguler cpanel user.
View 6 Replies View RelatedI have 3 75GB HD in R5 mode. Can I add a 4th one to the system?
View 4 Replies View RelatedI require
Disk Space : 100GB
Bandwidth : 2000GB
Optional : FFMPEG enabled.
Semi Managed like Powervps.
Please suggest best VPS provider with good support.
what are the inbound and outbound ports when FTP Passive mode is used for PureFTPd.
View 3 Replies View RelatedI have got a dedicated from 1and1. I could not get it working.
I tried the same htaccess with godaddys hosting, it worked fine.
Code:
RewriteEngine On
RewriteRule ^(index*).html$ /index.php [L]
RewriteRule ^(aaa*).html$ /aaa.php [L]
#php_flag register_globals off
I do not want to send them e-mail because it takes ages to get the answer.
What can it be wrong.
I get 404 error.
To Install www.awbs.com scripts to my server
How Can I Do This Following to one site on My server
safe_mode Off
allow_url_fopen On
session.auto_start Off
tell Me that i can do that from httpd config
I have upload the flashchat scripts on server. Its asking the files to change binary mode.
Files uploaded in binary mode (MD5 cd169d413452620389b2b30e6a902b10)No
to change files the binary mode in shell prompt.
I have found on one webhost that they have very cool feature:
Here is what they say:
Quote:
Browsing through any webhost related forum will reveal that giving safe mode off poses extreme security risk to the server. Because it offers hackers a great advantage to access any other members account or read their sensitive files which usually contain passwords.
But then some genuine scripts won't work with safe mode ON. Meaning you could turn it on per member requests but that takes lots of labor.
So we completely reprogrammed the safe mode PHP source code and recompiled it. As a result ours safe mode OFF is light-years safer & hacker-proof then standard PHP v5 safe mode ON.
So all our members are getting safe mode OFF, with harder security then those hosts who offer Safe Mode ON.
So now I am wondering, how they did that? I have searched forums and Google for lots of different keyword but haven't found anything.
I believe a lot of you running Apache as nobody and having php save mode OFF. It there any way you protect yourself? phpsuexec is not a solution now as it increasing load.
I am currently running the script vshare (youtube clone) on APThost shared. I really need to upgrade. I opened the site on the 28th of May and already using 13gb of space and 26gb of bandwidth in just a few days. I am looking for either a dedicated or VPS host that can at least provide:
- 100gb of space
- 150gb of bandwidth (maybe more?)
- ffmpeg
US based as they are cheaper.
I don't really have a lot to spend, as this was meant to start as a fun site but it is growing rapidly.
I have no idea on how a dedicated or vps server works like is it the same as a shared server?
If FFmpeg Enabled on shared hosting, does it mean that I can use it on other kinds of hosting services of the company that provides this services?
The company I'm talking about is apthost.com.
Sorry if my questions seems not very wise but I'd like to clear up the situation in this way.
That's important for me to know.