Config Server Firewall
Jun 25, 2009i have just installed Config server firewall on a linux server
i need to enable some ports, how can i do that?
i have just installed Config server firewall on a linux server
i need to enable some ports, how can i do that?
I just want to use a server for file sharing, it will have nginx and that's it. I'm looking at centos, or freebsd, but I been using centos forever now and I'm not sure how to use freebsd, should I just stay with centos?
Do I tell my hosting provider to just install the OS and give me ssh action and that's it? Don't install any control panels or any other stuff? I want one domain and one subdomain on it though and ftp action.
Got a new box, Xeon 3060, 2GB memory, 2x250 SATA II drives. I have 1 mysql/php forum with about 60-70 users online and 1 multimedia download site.
the minimum configuration for Apache httpd.conf ? I just need a starting point to optimize.
What is the best and cost effective way to setup multiple web servers to talk to 1 data base server?
Hardware Load Balancing or software?
I am currently selling hosting from my reseller account. Planning to buy a dedicated server. I will be hosting around 250 hosting accounts with PHP and Mysql on a centos 5 OS with Cpanel. The 250 sites will be controlled by normal terms and conditions that comes with shared hosting. Now I am confused about the configuration to go for:
My Budget is around USD 200 per server.
Here is the config I thought to go for initially:
Xeon 3060 Dual Core
2 x 250 GB SATA II HDD
4 GB RAM
Cpanel/WHM
10 MBPS Port
Then I found this config for 20$ extra.XEON 3220 Dual Core
2 X 250 GB HDD
4 GB RAM
CPanel
10 MBPS Port
will 3060 is a good config or do you think should go for the 3220. Or should I save that extra 20$ and use them to get a hardware RAID 1 for 3060 server...?
I'm about to purchase a new Xeon dedicated server, however I'm unsure whether to opt for a RAID 1 configuration on the two 320GB SATA drives. Can this decrease performance in anyway or only increase? I run an extremely resource hungry site utilising audio/video en/decoding, running vBulletin so anything that might negatively affect performance could have a big impact.
Secondly, I'm unsure on whether to opt for CentOS 5 over 4.5. I'll be using cPanel of which I've heard there have been problems with the latest release of CentOS.
And finally, is it worth upgrading to Apache 2 and MySQL 5 (which I know is installed as default on CentOS 5)? The reason I ask is that I've heard of server load problems after upgrading to these latest versions on high traffic sites.
I'm having a very intermittent PHP error on my dual processor CPanel/CentOS 4x box. And it happens randomly across several domains, so I know it's not a single domain problem.
I can never figure out what causes it. 95% of the time the sites work fine (no error), but ever so often my php includes give me something like this:
PHP randomly fails to find the directory/file. And it requires an Apache restart to make it work smoothly again. It will be fine for a few days, but then it happens again. So I suppose it may not be directly related to PHP, but more of a server/apache issue? Any ideas at all?
after a number of hours I finally got myself an SSH connection to my Linux server. I created an account with bin/bash access, whatever that is, and got in. Phew, this is all new to me!
I can get to the ./configure prompt and all looks well when I type command --enable-magic-quotes but I refresh my phpinfo() and nothing has changed.
All I want to do is install Joomla!
My Joomla! installation tells me to action following: Set PHP magic_quotes_gpc setting to ON
Set RG_EMULATION setting to `ON` instead of `OFF` in file globals.php
Display Errors should be on
Register Globals Emulation should be off instead of on
It's also telling me that the var/lib/php/session is unwriteable. Do I need to get shell access and command to do that too?
Can anyone with previous exp. in Video Hosting/Streaming provide me some info on THE CONFIG AND BANDWIDTH REQUIREMENTS FOR ffmpeg hosting for youtube like site?
Here are the basic things-to-know & Server(s) Funtions:
1. Do Video Conversions from AVI, MKV, etc to FLV/MP4
2. Stream out these videos for viewers.
3. Expected Traffic: Quite High (1 Million Visitors/mo)
So can anyone suggest me the most suitable Server Config, Bandwidth (I'd prefer dedicated-unmetered b.w) and Host for this?
Also can anyone provide me info on the amount of video conversions and traffic a single server (with your recommended config) can handle?
I have a little problem configuring the mail server in Plesk 12. I bought a VPS with Plesk 12 is hosted in OVH.es just for learning. I've got an external domain in OVH.es from 1and1.co.uk. The domain is properly configured and all is working well but the mail server.In OVH.es manager I can't create emails for an external domains (it is not allowed), only redirections. This is how it is in the manager: .domain.com MX 1 Redirecciones redirect.ovh.net.Support OVH.es told me that I can configure within plesk 12. I suposse it is in zone DNS but I don't know how to do it.
View 1 Replies View RelatedI'm on plesk 12.0.18 and i would like to backup my server config. I have an error Logging::error('Available disk space () is less than required by storage bund...', 'fatal') called at /opt/psa/PMM/agents/shared/Storage/Storage.pm line 523
[URL] ....
the function un cat /usr/local/psa/PMM/agents/shared/HelpFuncs.pm is like that
Code:
sub getMountSpace {
my $mount = shift;
my $df = qx( df -P -k $mount) or die $!;
while ( $df =~ /^(S+)s+(d+)s+(d+)s+(d+)s+(d+\%)s+(S+)$/gm ) {
[Code]...
We've unchecked the disk space verification in backup settings with no more results ...
is it a way to launch the function reserveSpace and/or getMountSpace helper in shell ? to see the returned value ?
or can i launch /usr/local/psa/bin/pleskbackup server -c comand line to backup only the config ?
I have plesk11.5 and found a big security bug in my script because plesk11 do a strange behavior:
[REMOTE_ADDR] => 95.*.*.*
[SERVER_PORT] => 80
[SERVER_ADDR] => 91.*.*.*
[SERVER_NAME] => domain.com
[SERVER_SOFTWARE] => Apache
[REMOTE_ADDR] => 2003:67:4b4b:*
[SERVER_PORT] => 80
[SERVER_ADDR] => 127.0.0.1
[SERVER_NAME] => domain.com
[SERVER_SOFTWARE] => ApacheClick to expand...
I have a 2003 SBS server with about 50 users on exchange. It is a standalone DC - all the users connect with 'profiles' and 'docs' on the server and use exchange thru outlook..when they leave the office they VPN in and exchange works like a charm.
Problem is for a quick setup I've used the POP 3 connector and kept the emails hosted on my server - I want to get rid of the POP3 connector setup altogether and have mail delivered directly to the server.
Can someone give me a walk thru of steps to do this - so far I have fgured out that I have to add the domain to the recipient policy - configure it properly and then setup each user to receive email for that username and it will just work....
I want to be sure and was hoping that someone who has done the same thing could point me to an accurate tutorial of sorts.
On a rhel 5.3 + cpanel server, i have a time problem.
Web apps, as joomla show articles with a -2 hours time difference, or even webmail clients like roundcube are showing a wrong time when an email arrives. It seems this apps are not picking up the server time.
Both things (joomla and webmail) should use the configured server time.
I know Joomla can be fixed using the time zone option, and webmail too.. but in a server with over 300 websites, there are many joomlas installations and even more mailboxes...
/etc/sysconfig/clock have the right time zone.
I've added this:
# Added for me
hostlist privaterelay_hosts = lsearch;/etc/privaterelay
And changed this:
accept hosts = +relay_hosts
Into this:
accept hosts = +relay_hosts +privaterelay_hosts
within the Exim Advanced configuration editor. Cause I wish to allow a relay without authentification.
This morning, I've got this:
cPanel was unable to automatically merge your Exim configuration with the new settings that shipped with the build you have installed (11.23.6-RELEASE_27698) because you have a custom ACL configuration which cannot be automatically configured.
To avoid any mail downtime, we thought it was best to leave your previous configuration intact until the new configuration can be properly installed. In order to complete this configuration update, you will need to manually merge your configuration with the new
configuration settings. Please follow the steps below to complete this update:
1. Enter the Advanced Configuration Editor
2. Notate any custom changes you have made in the ACL section. You may also which to make a copy of /etc/exim.conf.local and /etc/exim.conf.localopts as custom settings are contained in these files.
3. Click the 'Reset ACL Config to Defaults' button.
4. Reinstall your advanced custom settings.
Until you manually complete this update, automatic spam filtering may have been rendered inoperable to prevent any mail loss. (This generally only applied is you were upgrading from cPanel 10.x)
Current Config Version: unknown
New Config Version: 4.900000
What can I do to prevent this ? Cause last time, all mail was receiving a 550 (SMTP Protocol Returned a Permanent Error 550 Sender verify failed) which is pretty bad...
I'm running a message board and it looks like I've outgrown the low end xeon 3040 1.86GHz dual core server, and the bulk of the CPU load is going to mysqld. I'm debating between offloading the DB to a dedicated server vs upgrading the existing server and hosting the web server and db on the same machine.
Any thoughts on the better approach? fwiw, the load from apache seems next to nothing right now, but I am also planning on adding an SMTP server for user registrations and general support email.
I'm also not super familiar with dual-core and dual processor machines. Does shifting mysql to a dual core or dual proc machine help (vs a single core/single proc machine)? since there is just one mysql daemon, does having a second core or proc. buy me anything?
I am trying to do something that I believe is fairly non-standard. What I am looking to do is create a system where I can rapidly deploy web sites without having to restart named and Apache. For example, if a customer completes a process, I want to be able to turn that site on immediately using a temporary domain (somecompany.example.com or othercompany.example.com).
With some programming language (hopefully PHP) I would like to get the customer up and running with their site immediately without having to restart the server. While doing some research I found I could use MyDNS which uses MySQL to manage DNS data instead of configuration files. MyDNS can be updated on the fly.
For Apache I have seen wildcard configurations, but everyone seems to be suggesting the use of mod rewrite. I would prefer that the domain maps directly to a specific folder:
somecompany.example.com -> /sites/somecompany/htdocs
(*.example.com -> /sites/*/htdocs)
Does anyone know how I might do this with Apache. It seems similar to user directories (example.com/~username -> /home/*/htdocs)
Do you recommend a software firewall when behind a hardware firewall?
All of our servers are behind Cisco ASA 5505 firewalls which we rent from Liquidweb. All are being managed correctly and setup to there optimal levels. With hardware firewalls firmly in place, do you still recommend a software firewall such as APF or IPTables (we're talking linux); in our opinion we see it as an extra administration overhead. If this is however untrue, we will change out thinking.
How do you modify a server's firewall? We have a dedicated server with WHM installed and it appears we can't get into mail.domain.com because of a firewall setting (our host disabled the firewall and it worked fine, then of course put it back up).
View 6 Replies View Relatedwhich is the better apf or csf for more security
View 7 Replies View RelatedI want to install APF firewall on my vps server.
My server is OpenVZ based with hypervm.
But i dont know wich port used by hypervm and lxadmin and must be open in firewall.
I'm looking to colo 5 servers, 3 app servers, 1 db, 1 backup/sparedb. I am looking for something to provide a bit of protection in, and it seems like the ASA5505 is a good firewall, but I was wondering if anyone had any other recommendations?
I probably won't need ridiculous features, I wish it had gigE ports (I need to get a separate gigE switch for now, just for internal transfers+backups).
Is there anything else that might be a little cheaper, or do I need to upgrade to the 5510? Myself and one other person are the only people who would be VPNing to the internal server cluster, so we don't need massive connection rights.
I do not think I will be pushing 100mbits of data transfer, so I'm not worried about the throughput of the server.
What's the best firewall to use on a dedicated server? Maybe something free, or at a low cost - it's a necessary expense after all.
View 6 Replies View RelatedSo I requested a total of 5 to 6 times for a reboot from my DC. Whenever I try to start my AFP firewall, it just hang my server. Even after I reinstall AFP and start it, it still hang my server! Is there any log file where I can keep track of the problem?
View 14 Replies View RelatedWe have a Dell 1950 server with WinServer 2003 which is at the moment unprotected and exposing our entire network to the internet. At the moment we don't have a hardware firewall and want to install a software firewall in the meantime for ACL. We could use the default firewall that comes with the server but apparently that's easy to exploit. I tried one called Kerio, however this particular firewall can't be configured from RDP because it needs to be active in order to input the IPs for it to allow. Any suggestions on a software based firewall solution that's easy to install and manage remotely?
View 3 Replies View RelatedIn your opinion what is the best firewall to use on a dedicated server that is running directadmin?
View 6 Replies View RelatedI've found a dedicated server at a great price and plan to stick with it, my first ( already have 2 vps accounts ). I don't have the money for a hardware firewall. However, I do have a chance to renew a Kerio WinRoute Firewall license from way back.
Does anyone think this would be better than the default windows 2003 firewall?
A firewall will run me another $100. Is it worth it? Do any of you run a Windows server w/o a firewall.
View 3 Replies View RelatedI'm getting a server at softlayer, and I am curious, do I need to setup any sort of security on the box like a firewall?
Or is the default install safe enough?
Hi,
can you please tell me how i can clear the firewall in my linux box?
It's CentOS but i'm not sure what type of firewall is installed on my box.
Hpe to get response soon,
toby