I am setting up CentOS linux on a 1U server for colo, a CentOS basic install without graphic interface, just the compilers package and the basic stuff will be installed.
However, before I rack this server up I need to do some things to make it work. I already know that I have to disable IPtables (or clear the firewall rules).
Do you usually have a list of things to do before you colo a linux server? Please share, as I will have to go thru it.
I run a small datacenter, and we are migrating from Cisco to Linux based routers.
This routers should run a firewall, DDOS mitigation rules, CBQ bandwidth limitation, etc..
I know how to mitigate DDOS using tcpdump, also I know how to route..
I just need some advice about the firewall, stopping basic DDOS, fragmented packets, etc..
Should I use APF firewall in this case? Is there a good IPTABLES set of rules I could use?
I'm giving up from Ciscos, as I just discovered there are some UDP packets that can easily break them. I tested it last night, and that was it, nothing secure A few traffic (bogus UDP packets) and the router was down for a few minutes.
PRODUCT, VERSION, OPERATING SYSTEM, ARCHITECTURE
11.5.30 Update #2, CentOS 6.4 (Final) x64
PROBLEM DESCRIPTION
Site isolation settings don’t have any effect.
STEPS TO REPRODUCE
Configure the following in site_isolation_settings.ini:
php = on
php_handler_type = fastcgi
Create a service plan without the permission for "Setup of potentially insecure web scripting options that override provider's policy". Create a customer with subscription and assign the service plan.
ACTUAL RESULT
The customer is able to switch between “CGI-Application”, FastCGI-Application and “Apache-Module”.
EXPECTED RESULT
Customer should not have the permissions to switch the "PHP support"...
I just leased a Godaddy linux dedicated server with a Cisco PIX 501 firewall. Control panel is Plesk 8. Preconfigured with Ferdora 7, mysql, php,etc.
I've tried to configure multiple domains but am having problems.
I currently have several websites each running on their own Godaddy shared hosting account. I'm am trying to migrate all of these websites onto the dedicated server.
My plan is as follows:
Configure the firewall
Configure the server (add IPs)
Configure the domains from within Plesk (add client, domains, dns). But DO NOT change the name servers on the domain. I need to test the websites first.
Copy the webpages, content from the shared hosting accounts to the server.
Test the websites on the server. I am hoping that I can access the websites on the server using ip addresses, since I figure I won't be able to use the domain names without first changing the name server entries on the domains.
Once testing is completed, change the name servers on the domains so they point to the server.
Please assume the following:
Dedicated Server IP: 72.169.55.183
Firewall IP: 72.169.55.184
domain 1 = mydomain1.com
domain 2 = mydomain2.com
domain 3 = mydomain3.com
What I have done:
Configured the firewall interface (outside = 72.169.55.184/24, inside = 10.0.0.254/24)
Configured the firewall IP translation rules (outside = 72.169.55.183, inside = 10.0.0.1)
Configured server (added 3 IPs - 10.0.0.1 [exclusive], 10.0.0.2 [exclusive], 10.0.0.3 [exclusive]). I figure I need a unique ip for each domain?
Created a client called MyDomains. All domains are created under this client.
Created domain mydomain1 (assigned ip 10.0.0.1 [exclusive]). Added services ftp, ssi, php, cgi, etc. DNS 'A' records all set to firewall ip 72.169.55.184
Created domain mydomain2 (assigned ip 10.0.0.2 [exclusive]). Added services ftp, ssi, php, cgi, etc. DNS 'A' records all set to firewall ip 72.169.55.184
Created domain mydomain3 (assigned ip 10.0.0.3 [exclusive]). Added services ftp, ssi, php, cgi, etc. DNS 'A' records all set to firewall ip 72.169.55.184
I might be close, or I might be so far off that my inexperience shows.
Is the above correct? Do I need a unique "inside" ip address (10.0.0.1, 10.0.0.2, 10.0.0.3) for each domain/website? Do I need to add translation rules to the firewall for 10.0.0.2, 10.0.0.3?
How do I test each domain on the server without changing the name server entries on the domain? I have one firewall ip address 72.169.55.184 but 3 different domains. How can I test mydomain1.com, mydomain2.com, mydomain3.com?
If anyone can tell me if I have this correct, or what I have to do to get this correct I'd be immensly appreciative. Just as important is knowing how I can test each domain before I go live with it.
I have setup bind in centos 6.5 and then edited /etc/named.conf and added the lines
The extension produced but I am getting the following error when restarting the bind service
Error in named configuration:
/etc/named.conf:2: unknown option '...'
/etc/named.conf:14: unknown option '*'
/etc/named.conf:21: 'options' redefined near 'options'
The following code suggested by plesk slave dns manager extension
Code:
options {
...
allow-new-zones yes;
};
key "rndc-key-mainserver ip" {
[Code] .....
After I removed ... from the options now I get the following error :
/etc/named.conf:51: unknown key 'rndc-key'
I currently colocated at Chicago FDC Servers, OUTSTANDING BY THE WAY! Cheap too! But that is not my area of concern, since I already have a colocation, I was wondering if people could give me ideas what to do with it. I colocated because I found them, they offered me an affordable colocation.
I do not wish to host STEAM GAME SERVERs like counter strike.
If I had a ventrilo license, I could host a huge ventrilo, but I do not. Teamspeak is out of the question.
I have IIS with the default site and a site i created. it appeared to be configured correctly but even from the server if i try to "browse" any of the pages i still get "internet explorer cannot display the page" from my site and "under construction" from the IIS default site.
View 7 Replies View RelatedI have a machine which runs on Desktop board with 1 LAN port built in.
I just bought a new USB-LAN and plug into the USB but I have question about how to configure it. I cannot see eth1 inside /etc/sysconfig/network-scripts, so where can I configure USB LAN?
I got dedicated server with plesk 7.8 installed on it. Can anybody tell me what to do next to add new website.
I have ip through which i can login to plesk control panel.
I want to know how can i create name servers which i will use for my domains like ns1.abc.com ns2.abc.com.
What setting i need to create by use DNS button in control panel to run my sites properly.
I'm over here trying to rebuild php with GD in WHM, I go through the entire motion of Apache Update (with GD selected as a PHP Module) and ummmm... after it's done, I check my phpinfo() and there is no GD section, let alone has the build date been changed.
View 9 Replies View RelatedI am moving my servers this week and my new host doesn't do domain hosting. This is my first time doing it, I need help in pointing my domain to the new server. I just need the basic settings for A, CNAME and MX records.
View 13 Replies View Relatedhow to which will help me to make a correct configuration of mail server. I want to set up a mail server with e.g three domain names and all three domain names will have few similar email addresses like info, sales, marketing and so on. I know that this can be done by using control panels but I am not big fan of control panels I want to do a pure Linux administration using the command line.
View 6 Replies View RelatedI've continually worked on it, but nothing seems to give.
I'll install it in the right place, but not have the config saved properly, or it's in the wrong place but saved right.
Is there somewhere that either has a tutorial or explains how a DR site is setup and activated when the primary site goes down? And how do you configure it to fail-over to the primary site again once it is back up and running?
I'm planning to have a certain hardware configuration in place at a primary site (load balancers/web/app/database/SAN) supporting a service that MUST remain online. Because it's mission critical, I also will need a DR (disaster recovery) configuration at a secondary site. My challenge is how to configure DNS or whatever to fail over the primary site to the secondary site if the primary experiences a failure of some sort. Then fail it back post-recovery.
I am planning to use the secondary site to burn-in development prior to go-live and when ready, migrate the changes to the primary so both sites are identical.
I am doing some investigation regarding NetScaler appliances to understand how they work. At first glance it seems they are able to direct incoming traffic to specific locations based on various criteria (geo, speed, load capacity, etc). I noticed they are also a recommended solution by Citrix for traffic management... but a DR solution is evading me. And something is telling me it's not all about some piece of hardware.
i got DNS and IIS installed and configued DNS completely by the book. I made 2 forward lookup zones ns1 and ns2.mydomain.net
what is this step im missing between that process and being able to tell godaddy to hit my nameserver. it just keeps telling me they are not registered nameservers so i must be missing something here.
I have got a WHM Reseller Account, with a Dedicated IP address and RapidSSL Certificate.
My host has setup the SSL for me, and it works fine when I access [url](where main-domain.com is the Domain associated with my WHM account).
However when I try and access https on any Account which I've made under my Reseller Account, I'm just redirected back to [url]
I was under the impression that if I accessed a Domain on an account I made that shares the same IP as my SSL Certificate, that the SSL Certificate would appear for that Domain name too, but this isn't the case.
Is there any change the my DNS records, or something I can ask my host to do to get it to work?
I want to configure Nagios to monitor Windows and Linux servers and their services. I have to install NSClient in Windows servers and NRPE in Linux servers to collect the data. I don't want to install any plugin in any server. Is there any guide available which describes how to enable Monitoring of servers using SNMP through Nagios?
View 2 Replies View Relatedis it possible for us to set up plesk sp that it monitors bandwidth usage week on week instead of month on month?
View 4 Replies View RelatedI saw an ad on WHT by LimeStone Networks and decided to get a server from them. My server was made within few hours. On the server, I was only able to connect to the SSH on port 22, I could not login to the DirectAdmin or anything.
So, I tried shutting down the "iptables" firewall like this:
Code:
service iptables stop
and then tried to access the directadmin like this:
[url]
and it worked. So, the problem is that, my host only configured ssh on my server and didnt configure the rest.
How do I open the rest of ports, e.g.
2222 (directadmin)
80 (web server)
21 (ftp)
443 (https)
3306 (mysql)
etc... ?
on the welcome email, this is what they said about the firewall, but I don't quite understand
Quote:
Please be advised that your server's firewall is active for your protection and will only accept connections on port 22/tcp by default.
If you modify firewall or IPTable rules on your server, please be sure to have them configured to allow inbound and outbound traffic on all ports (TCP & UDP 1-65535) from 209.130.152.0/28.
I'm trying to install and configure pureFTPD on my VPS which I just got.
Right, here goes one of my stupid questions:
When I try to start pure-ftpd (with the command /usr/sbin/pure-ftpd & ), this is what I get:
[1] 20271
What does [1] 20271 mean (or it may be other random number)?
And I can't see pure-ftpd as a running process (ps -ef command). So what's happening, how do I start pure-ftpd properly? It is installed as far as I understand.
Quote:
...lots of other packages...
ii pure-ftpd 1.0.21-8 Pure-FTPd FTP server
ii pure-ftpd-comm 1.0.21-8 Pure-FTPd FTP server (Common Files)
We check a domain under dnsreport and all seems ok
But, when we assign IP (not the main shared) to the account and check dnsreport we see this error:
Reverse DNS entries for MX records
ERROR: The IP of one or more of your mail server(s) have no reverse DNS (PTR) entries/* (if you see "Timeout" below, it may mean that your DNS servers did not respond fast enough)*/. RFC1912 2.1 says you should have a reverse DNS for all your mail servers. It is strongly urged that you have them, as many mailservers will not accept mail from mailservers with no reverse DNS entry. You can double-check using the 'Reverse DNS Lookup' tool at the DNSstuff site if you recently changed your reverse DNS entry (it contacts your servers in real time; the reverse DNS lookups in the DNS report use our local caching DNS server). The problem MX records are:
**** [No reverse DNS entry (rcode: 3 ancount: 0)
AND
Mail server host name in greeting
WARNING: One or more of your mailservers is claiming to be a host other than what it really is (the SMTP greeting should be a 3-digit code, followed by a space or a dash, then the host name). If your mailserver sends out E-mail using this domain in its EHLO or HELO, your E-mail might get blocked by anti-spam software. This is also a technical violation of RFC821 4.3 (and RFC2821 4.3.1). Note that the hostname given in the SMTP greeting should have an A record pointing back to the same server. Note that this one test may use a cached DNS record.
www.***.com claims to be host host.***.com [but that host is at **** (may be cached), not ****].
-------------------
Actually my DSL provide me 1024 kbps of Internet Access. I am wanna connect computers to that network and rent the pc in my own country.
Here the features of that I have:
- 2 Desktop PC ready for connect.
- 1 router with 4 lan Port.
- 1 Dynamic ip
- 1024 kbps of Internet connection.
the desktop pc will be configuring with Centos 4.x and I wanna install on it a control panel like directadmin.
Here the issues:
- How I can configure 2 statics ip for each desktop pc?
- The desktop pc will be connected every one in the same router?
- How I can know how will be the rendiment with 1024 kbps?
I am using lxadmin on my vps. In a mail system I need to configure pop3 account to fetch mails. I am using it on a folder "main site/folder". Please can any one tell me how to configure POP 3 account in lxadmin for the folder or any subdomain.
View 0 Replies View Relatedfor setting up my ASA 5510? I'm assuming I'll configure it for just permit ip any any and let it do inspections. I wouldn't want to have to create a permit statement for every one of my customers'
View 8 Replies View RelatedI have setup php and mysql on a windows IIS 6 server. php has installed fine and works but I have 2 problems
1. When i browse to http://localhost i get a 403 error but when browsing to http://localhost/index.php it works fine. It makes me think that the server does not know what extension to default to when doing a directory listing
2. I have phpmyadmin installed and the cfg file is set to do a 'config' authentication. That works but everytime i go to submit a form to create a new database or anything i get prompted with an HTTP user/pass. I'm not sure if this is a phpmyadmin issue or a php configuration issue
let's say I have 2 vps (ns1.myhost.xxx and ns2.myhost.xxx) running dnsonly cpanel and 2 dedi server running cpanel (srv1.myhost.xxx and srv2.myhost.xxx).
is it possible to have dns server only on the vps?
I was talking to my host the other day about configuring multiple servers as a private LAN. I was wondering if anyone has successfully set up a configuration of using separate servers for each task for shared hosting accounts. I.E. Having certain servers as web servers and others dedicated as MySQL servers, e-commerce servers, mail servers etc.
Does anyone do this? I can see it boosting performance.
i couldn't find a more suitable category to put this post in: I am setting up a development server local to my office here, so that we can develop projects using an SVN app, but the SVN system needs SSL for logging in. i am now going round in circles where httpd.exe cannot start as a service from the apache monitor, with the following error:
The Apache service named reported the following error:
>>> httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.1.84 for ServerName
in the windows event viewer.
I'm using:
Windows XP Home edition, SP3
Apache 2.2.9
full computer name is devserver
workgroup is WORKGROUP
I used openssl bundled with this version of apache to generate the SSL certificate, and they all seem to be ok. When i change the line
SSLEngine on
in the httpd-ssl.conf file, the apache service starts when the SSLEngine is off, but not when the SSLEngine is on.
i have trawled the internet but not found any answer. ive checked thru httpd.conf and httpd-ssl.conf several times but i just can't see anything wrong (although im not entirely experienced!).
I am tried of not finding a good documentation on now to configure netscreen-25 firewall.
This is the current setup;
Ethernet Drop -> Netscreen (connected via straight RJ-45)
NetScreen -> Switch (Connected via cross-over cable)
This is the what I want to be able to do...
I am assigned a 76.36.57.32/27 subnet
Netmask 255.255.255.224
Gateway 76.36.57.33
1) Make Netscreen accessible via IP 76.36.57.34 for remote management.
2) I dont want netscreen to assign IPs for my wired devices because I've already set all their IPs and those are the ones I want to use.
Now, I did read the manual [url] and went to Network -> Interfaces -> Ethernet 1 Trust *edit* and in the "IP address" box I typed 76.36.57.34 and netmask "/27".
In the "Manage IP" box, I typed 76.36.57.39/27 according to the manual.
After doing all that, I cant access any of my "wired" devices behind firewall and neither can I access the firewall itself with the IP I assigned.
I provide webhosting services (mycompany.com) to clients and I need some help regarding setting up my second server.
Till the domain name resolves, new clients are given the temporary url mycompany.com/~accountname where the A record of mycompany.com points to the main server i.p. of the first server
I am in process of setting up my second dedicated server.
mycompany.com/~accountname will not work on the second server as the I.P. of mycompany.com points to the first server.
How do I setup my company's url on the second server so that clients can access their accounts by mycompany.com/~accountname?
How do you setup accounts on both servers under mycompany.com.
I'm using Windows XP and installed Apache, PHP 5 and MySql 5. They were all working before, but recently I had to format my hard drive. Fortunately, I had an image of my computer created from before but MySql was not installed when that image was created.
After deploying that image, everything seems to be working fine. The server is running and PHP scripts are executing as well. But I can't seem to have MySql to work. I've followed many tutorials online, but have no luck.
I have edited the php.ini file to point to the correct directory that holds the extentions or dll's. I also enabled the following:
extension=php_mbstring.dll
extension=php_mysqli.dll
extension=php_mysql.dll
I already tested to see if MySql was correctly installed by using the command line client and it seems to be installed. I was able to log in and see the default databases created.
But when I run the following php script
<? phpinfo() ?>
I don't see the MySql section anywhere and that's why I'm assuming that PHP is not currently working with MySql for me. However, interestingly, I do see the "mbstring" section, which I assume should show only if MySql is working with PHP. But nothing else related to MySql info shows up. I've attached part of the screen shot if it helps you.