Configurations For /etc/security/limits.conf
Dec 23, 2007i Have Server And Hosting In it 275-300 site
and i want limit Resource usage for all sites usin pam limits
good configuration to limits.conf file?
i Have Server And Hosting In it 275-300 site
and i want limit Resource usage for all sites usin pam limits
good configuration to limits.conf file?
How can I limit the amount of processes a user can have open at one time?
View 1 Replies View RelatedI would like to set some hard limits for some developmental testing I am doing using quota tools and what not. In limits.conf I have the following:
--------
@dev hard cpu 0.30
--------
As far as I can see, this would limit all users in the group "dev" from using more than half a minute of CPU time, am I correct?
Assuming I am, once I write these changes no limits seem to be enforced. Are these values cached in the memory and a reboot is needed for them to take effect?
I have been playing around with different virtualization platforms:
- OpenVZ (newer kernels do not support hard-cpu limits for whatever reason)
- Xen Server
- Windows Hyper-V
- Linux KVM
However, none of them seem to be able to stablish HARD limits on resources for a virtual machine. Or am I missing something?
HyperVM supposedly has hard-limits because they use OpenVZ older kernels, right? -- I have not tried Parallels Containers do they have hard-limits enforced?
It started with this error:
Bind reloading on server01 using rndc zone: [ns1.mydomain.net]
Error reloading bind on server01: rndc: connect failed: 127.0.0.1#953: connection refused
so i did the obvious checked the csf firewall to see if port 953 was enabled and it was
so i took a look at rndc.conf
Code:
root@server01 [~]# nano /etc/rndc.conf
#start of rndc.conf
key "rndc-key" {
algorithm hmac-md5;
secret "KLGSBmWZrev0I4fR4Tm4GXxdcYSTFzF23b1f9is1M=";
};
options {
default-key "rndc-key";
default-server 127.0.0.1;
default-port 953;
};
# End of rndc.conf
# Use with the following in named.conf, adjusting the allow list as needed:
#key "rndc-key" {
# algorithm hmac-md5;
# secret "KLGSBmWZrev0I4fR4Tm4GXxdcYSTFzF23b1f9is1M=";
#};
#
# controls {
# inet 127.0.0.1 port 953
# allow { 127.0.0.1; } keys { "rndc-key"; };
# };
# End of named.conf
Then i took a look at named.conf
Code:
options {
/* make named use port 53 for the source of all queries, to allow
* firewalls to block all ports except 53:
*/
//query-source port 53;
/* We no longer enable this by default as the dns posion exploit
has forced many providers to open up their firewalls a bit */
// Put files that named is allowed to write in the data/ directory:
directory "/var/named"; // the default
pid-file "/var/run/named/named.pid";
dump-file "data/cache_dump.db";
statistics-file "data/named_stats.txt";
/* memstatistics-file "data/named_mem_stats.txt"; */
};
logging {
/* If you want to enable debugging, eg. using the 'rndc trace' command,
* named will try to write the 'named.run' file in the $directory (/var/named").
* By default, SELinux policy does not allow named to modify the /var/named" directory,
* so put the default debug log file in data/ :
*/
channel default_debug {
file "data/named.run";
severity dynamic;
};
};
// All BIND 9 zones are in a "view", which allow different zones to be served
// to different types of client addresses, and for options to be set for groups
// of zones.
//
// By default, if named.conf contains no "view" clauses, all zones are in the
// "default" view, which matches all clients.
//
// If named.conf contains any "view" clause, then all zones MUST be in a view;
// so it is recommended to start off using views to avoid having to restructure
// your configuration files in the future.
view "localhost_resolver" {
/* This view sets up named to be a localhost resolver ( caching only nameserver ).
* If all you want is a caching-only nameserver, then you need only define this view:
*/
match-clients { 127.0.0.0/24; };
match-destinations { localhost; };
recursion yes;
zone "." IN {
type hint;
file "/var/named/named.ca";
};
/* these are zones that contain definitions for all the localhost
* names and addresses, as recommended in RFC1912 - these names should
* ONLY be served to localhost clients:
*/
include "/var/named/named.rfc1912.zones";
};
I have been reading various articles on these forums regarding the issue of installing a VNC server on my VPS using GNOME.
I have been following a guide produced by a member called TouchVPS and so far I have had no problems, I have sucessfully completed all of the stages below, although when I connect to my server via UltraVNC Viewer I am presented with a grey screen and a black cross.
Further looking into the issue, I decided to run gnome-session to see whether the application would execute in memory (via SSH) and encountered the following message:
Code:
Gtk-WARNING **: cannot open display
I realise this might be becuase I am trying to launch from the shell, but was wondering whether it had anything to do with the problem.
Any how here is the intructional guide I have followed:
Quote:
for centos/fedora:
1. yum -y update
2. yum -y install gnome*
3. yum -y install vnc-server vnc nano
now use:
4. vncserver - set your VNC password the results will be:
====
xauth: creating new authority file /root/.Xauthority
New 'desktop:1 (root)' desktop is desktop:1
Creating default startup script /root/.vnc/xstartup
Starting applications specified in /root/.vnc/xstartup
Log file is /root/.vnc/desktop:1.log
=== that means the VNC is up and running on port 5901 now use:
5. killall -9 Xvnc
6. nano .vnc/xstartup
delete twm & and replace with gnome-session &, save.
7. vncserver results will be like this:
====
Warning: desktop:1 is taken because of /tmp/.X1-lock
Remove this file if there is no X server desktop:1
New 'desktop:2 (root)' desktop is desktop:2
Starting applications specified in /root/.vnc/xstartup
Log file is /root/.vnc/desktop:2.log
===== that means your vnc is up and running on port 5902 and you are ready to go now .
this are easy steps i use them in so many virtual servers with centos fedora and always work without a problem.
or contact me and i will be more than happy to install it for you free.
I have completed all of the steps in this tutorial and I am running CentOS 5 if this helps.
Buying a dedicated server, what configuration would you expect to be as standard memory, hard drive, and raid?
And what would your budget be for this configuration? What do you expect to pay for it?
The CPU would be as the following:
Single CPU Quad Core Xeon 3220
Single CPU Quad Core Xeon 5430
Dual CPU Quad Core Xeon 5430
What standard configuration would you expect on these?
I have a technical question that I cannot figure out.
Right my system spec is:
CentOS 4.4 Server (VPS OpenVZ)
cPanel and WHM
IMAP Server = uwimap
Mail Server = Exim
POP3 Server = cppop
Ok, I have a small business with 20 user, 4 of which are partners. I want all 20 users to have the own mailbox and address.
However I want all email sent and received copied to the 4 partners mailboxes.
So, for example.
Employee 1 (joe.bloggs@domain.com) gets an email into his mailbox, and then he replies to it.
Ideally, all emails to and from joe.bloggs@domain.com get copied into a folder within each of the partners mailbox, but one step at a time ehh.
What I want is the email coming in and the reply copied to all partners mailbox aswell, by default.
Is there a way to set this up via the server, instead of the email client, as this could be tampered with.
at implementing RAID 5 into my RHEL4 box, and am wondering what the best configuration would be. I'm not very familiar with LVM, but I've heard great things about it.
View 3 Replies View RelatedI have two problems regarding Mailman Mailing Lists.
1) The Mailman Interface is usually located under lists.domain.tld/mailman (I changed the config from /cgi-bin/mailman/ to just /mailman/), but it seems the apache confs for this subdomain are not applied – I only see the servers default page when visiting this URL. domain.tld/mailman works, though. It would be great if lists.domain.tld/mailman would actually work and domain.tld/mailman wouldn't work.
How do I change/repair the configurations properly? I've installed the newest MU and already to reinstall mailman.
2) I get an Internal Server Error when visiting the domain.tld/mailman Interface. Reason is mod_suexec, which I need to disable for domain.tld/mailman, but where and how? All the vhost configurations are created automatically.
I could imagine this is related to my first problem and the mod_suexec thing is properly configured in the lists-subdomain config.
I'm having problems setting up email in Outlook with cpanel configurations. I've exhausted google trying to find an answer to this. Maybe someone here can help or has had a similiar problem.
I've set up accounts in cpanel (eg: info @ example.com), have the incoming mail server and outgoing mail server as mail.example.com and I even checked off the "server required authentication" but I still can't receive emails. I changed the outgoing server to smtp.internetprovider.com and it still doesn't work. I get a prompt asking for Network Server Password and click ok with the login and password but it keep popping up.
I recently reinstalled my Plesk Panel 12.0.18 after several failures, which I wasn't able to repair (not even bootstrapper.sh would work). All of my websites weren't accessible, the connection between websites and the Database server didn't work and the Plesk backend was unavailable, too. I used the autoinstaller via command line to make a new Plesk installation.
Now I have a clean panel, the websites are available again, the MySQL database works again, but I don't have all my settings and websites in the Plesk backend anymore.
My question is: How can I get the old settings/configurations, which are still on the server, back in to Plesk?
This is for those who are currently supporting VPS boxes, umm... what would you say the general CPU and Process limits should be per VPS per user?
View 7 Replies View RelatedI am running apf as firewall. How do I limit IPs for ssh ? I want to let only specific IP addresses.
View 10 Replies View RelatedCurrently on my WHM/cPanel servers, I have a hard limit encoded for the amount of mail a client can send per hour. (whm, tweak settings). Is there a way to over ride this for one domain/client, or is it global?
View 4 Replies View RelatedBluehost apparently offers unlimited bandwidth and disk space (so they say). This seems suspicious. Are there any limitations I should be aware of?
View 14 Replies View RelatedIm currently hosted at hostgator and so far they are great.
I have a medium size vbulletin forum. 7500 threads, 111,500 post, 12,000 users and about 2,000 active users... most of the time I have 30 to 50 members online and 150 guests (200 users at the time).
Hostgator has never fail to me. but I was wondering what would be the limit of my shared account? how many users at the same time can take my account?
I dont use a lot of BW (80gb per month) and 1gb disk space.. I plan to expand more but I dont know if I gonna need a vps or something...
I want to add visitors limits for my website. Is any way to i do that ? For example i want only 50 visitors to be the same time on my website and if come more to they get a message the website is full, please come back another time.
Is any script or other way to do that?
Is there a way to take the limits off of the timeouts from WHM?
I have a VPS from servint and I'm trying to convert my phpBB 2.0.x to phpBB 3.0.x but I keep getting Internet Explorer Cannot Display the Webpage due to resource limits ...therefore I need to take the limits off for now for converting ....
as a vps customer, how can i check processor, memory and each others resource limits in my vps which allocated for me?
View 5 Replies View RelatedI run a web hosting company and one of my servers is a LAMP server running CentOs 5. A user of mine has a Joomla installation running to manage his website and he has run into the following problem that I am puzzled by.
When Joomla adds a component or module to itself, or when a user uses the Joomla upload functionality, Joomla will add the new files under the user name "apache". This makes sense as it is the apache service running PHP that is actually creating the files.
However, when he FTP's into the account to modify these files, he doesn't have the appropriate permissions to do so as he doesn't have a root level login, just permissions on his home directory which is the site. Any help would be much appreciated.
Also, does anyone know how to change the owner/group of a directory and all of its sub directories in Linux without changing the actual permissions? I.e. some of the files in the folder have different permissions (0644 as apposed to 0755) than its parent but if I do a top down user/group change on the folder it will change everything in that folder to 0755.
I am looking at a VPS purely to outsource email sending to.
I curently use a cloud system - which is great - but they limit my email sending.
I need to send 25,000 a day and 10,000 during a one hour period.
Will any VPS allow this? Who?
Is this recommended.
I have take some weeks ago a VPS with 40 giga space and 386mb dedicated ram and all is managed with WHM/Cpanel. I need to know how I must set the limit of sending email per hours...In fact I see all hosting company limit that to more less 500 email per hour. I know this limit depend of lot factor like number of account on server and activity or users...
I ask that because my users will have Joomla installed with a Newletter component and so something this component will be used for send monthly newletter...
Do you have some experience with that ? How have you set your email limit? How much users have you on your server?
Other question: If for example I set limit to 500 email per hours and a user send 1000 email...what happend to the 500 other email? It will be put on queue and send the next hours or it will be lost?
how to set MAX_CONNECTIONS_PER_HOUR for one of my CPANEL USER (like:
cpaneluser_somesubuser) for all his databases?
I tried:
Quote:
mysql> GRANT USAGE ON *.* TO 'cpaneluser_somesubuser'@'localhost' WITH MAX_CONNECTIONS_PER_HOUR 10;
Not sure of this is the correct forum ,buthere goes.
We're trying to set up a virtual host with many (50+) domains. In the past I've been successful with 20+ domains within the same ServerAlias directive, but on researching this, I'm seeing different answers. We're running Apache 1.3.33.
Some places suggest putting all domains in one ServerAlias line (which of course gets doubled by adding the wild card *.domain.com)
Others say there is a limit and that the solution is to have multiple ServerAlias lines within the same virtual host directive.
I have looked at the apache.org docs and they don't address this question as to line length or multiple ServerAlias lines.
The docs do indicate that wild cards are acceptable (and that would help in my situation), but normal wild card usage in these situations is for subdomains, i.e., "domain.com *.domain.com"
I would need to use "domain*.com *.domain*.com"
Would anyone know if the latter use is permissible for wild cards in the ServerAlias directive, and especially if one may use two wild cards in the same alias, i.e. *.domain*.com?
We just moved to a new colo facility, and we also added some additional servers as part of the move. Our cabinet has 2x 20amps power, which is fed into 2 APC AP7930 PDUs. The PDUs have printed on them a 16a limit, though from looking around the datacenter, I see some people are doing 17a on the same PDU with the same power feed.
How much can you realistically push the limit? Currently we're at 13a on each PDU, but there are still more servers to be powered up. Does the PDU shut down altogether for an overload, or can you have it just power down some ports automatically?
I'm planning on getting Windows Server 2008 Standard edition, but getting confused on the listings.
Some listings display (1-4 CPU), while others dont have anything in that regards.
So my question is for anyone who has purchased Windows Server 2008 Standard -
Is there a CPU LIMIT?
If so is this for physical # of CPU's?
And will this factor in QuadCores as 4 CPUs?
I see several larger cPanel hosts imposing backup restrictions. They disallow backups after X GB of disk space are in use.
I understand why they do it (controlled resource usage) -- How would one go about setting up these restrictions?