Im actually under ddos attack.
I'll be life long grateful is some one can tell me how to allow only my IP address to access the whole vps server, to add ddos protection on it in the end.
I already try, but i'm a dummy already on linux interface.
Applying Plesk firewall changes? I make my change, apply and get to:
Status: Applying in progress. If your browser shows connection error messages, or if this screen does not disappear in more than 30 seconds, go to previous page.
And there things stay. Going back to look at the firewall I can see the change haven't been applied, and going to apply just results in the same. No error, just no anything. It also took numerous attempts to get firewall modification to be swtich on although finally at about the eighth attempt changes were enabled. Only now I can't apply them ...
Plesk 12.x
CentOS 6.5
Any method for copying the Firewall (extension) rules from one server to another.
I am using the plesk firewall and trying to set up SSH rule which only allows from my IP but deny from everywhere else. In previous versions this worked fine by adding an ip selecting Allow from selected sources, deny from others and the icon in the rules would be orange with the lines
allow incoming from xxx.xxx.xxx.xx
Deny incoming from all others
However this no longer works as the deny from all others is not appearing and is not being generated in the iptables by plesk.
I just have installed plesk panel and when i get to the "Firewall" tool, then clicked on "Enable Firewall Rules Management", proftpd has stopped working properly.URLs....I have preinstalled the server 2 times, and every time i try to edit the firewall rules, proftpd got broken.
View 10 Replies View RelatedI would like to know if is possible to export Plesk firewall rules from Plesk 9.5.4 to Plesk 11.5.30 with panel.
View 2 Replies View RelatedI went through my error_log and access_log and found out something really peculiar.
I kept getting multiple requests/second for a document that is non existent from different IPs.
From the way I see it, it is a mild DDOS.
access_log
221.208.181.38 - - [13/Nov/2008:03:11:00 -0500] "GET /testtxt.txt HTTP/1.1" 404 2088
218.26.203.79 - - [13/Nov/2008:03:11:00 -0500] "GET /testtxt.txt HTTP/1.1" 404 2088
76.172.156.49 - - [13/Nov/2008:03:11:00 -0500] "GET /testtxt.txt HTTP/1.1" 404 2088 ....
i want removed all ip that are in firewall rules in csf/cpanel
Chain SPAMHAUS (1 references)
num pkts bytes target prot opt in out source destination
1 0 0 DROP all -- * * 91.146.64.0/18 0.0.0.0/0
2 0 0 DROP all -- * * 91.146.112.0/20 0.0.0.0/0
3 0 0 DROP all -- * * 89.35.0.0/23 0.0.0.0/0
4 0 0 DROP all -- * * 89.32.203.0/24 0.0.0.0/0
5 0 0 DROP all -- * * 89.233.64.0/18 0.0.0.0/0
6 0 0 DROP all -- * * 89.208.122.0/23 0.0.0.0/0
7 0 0 DROP all -- * * 89.187.192.0/19 0.0.0.0/0
8 0 0 DROP all -- * * 89.145.128.0/20 0.0.0.0/0
9 0 0 DROP all -- * * 88.206.80.0/20 0.0.0.0/0
10 0 0 DROP all -- * * 88.206.8.0/21 0.0.0.0/0
11 0 0 DROP all -- * * 88.206.64.0/20 0.0.0.0/0
12 0 0 DROP all -- * * 88.206.0.0/17 0.0.0.0/0
13 0 0 DROP all -- * * 88.206.0.0/21 0.0.0.0/0
14 0 0 DROP all -- * * 86.59.160.0/19 0.0.0.0/0
15 0 0 DROP all -- * * 86.59.128.0/17 0.0.0.0/0
16 0 0 DROP all -- * * 86.111.128.0/19 0.0.0.0/0
17 0 0 DROP all -- * * 86.105.230.0/24 0.0.0.0/0
18 539 37022 DROP all -- * * 85.255.112.0/20 0.0.0.0/0
19 0 0 DROP all -- * * 83.223.240.0/22 0.0.0.0/0
20 0 0 DROP all -- * * 83.223.224.0/19 0.0.0.0/0
21 0 0 DROP all -- * * 81.95.144.0/20 0.0.0.0/0
22 0 0 DROP all -- * * 81.29.240.0/20 0.0.0.0/0
23 0 0 DROP all -- * * 81.17.16.0/20 0.0.0.0/0
24 0 0 DROP all -- * * 78.95.128.0/20 0.0.0.0/0
25 0 0 DROP all -- * * 72.21.128.0/20 0.0.0.0/0
26 0 0 DROP all -- * * 69.8.176.0/20 0.0.0.0/0
27 393 27185 DROP all -- * * 69.50.160.0/19 0.0.0.0/0
28 0 0 DROP all -- * * 69.50.16.0/20 0.0.0.0/0
29 0 0 DROP all -- * * 66.55.160.0/19 0.0.0.0/0
30 0 0 DROP all -- * * 66.37.112.0/20 0.0.0.0/0
31 0 0 DROP all -- * * 66.185.112.0/20 0.0.0.0/0
32 0 0 DROP all -- * * 66.102.32.0/20 0.0.0.0/0
33 0 0 DROP all -- * * 65.255.32.0/20 0.0.0.0/0
34 0 0 DROP all -- * * 64.28.176.0/20 0.0.0.0/0
35 0 0 DROP all -- * * 64.255.128.0/19 0.0.0.0/0
36 0 0 DROP all -- * * 63.246.32.0/20 0.0.0.0/0
37 0 0 DROP all -- * * 58.83.0.0/22 0.0.0.0/0
38 0 0 DROP all -- * * 58.65.238.0/23 0.0.0.0/0
39 0 0 DROP all -- * * 58.65.232.0/21 0.0.0.0/0
40 0 0 DROP all -- * * 217.69.112.0/20 0.0.0.0/0
we have about 100 servers in colocation with a 200mbps connecetion, every server have install a software firewall on, this night we got a DDoS (4 hours down) and naturally we was unable to find the source or destination of attack so now we have think to add a firewall solution on the connection, can u give me a good firewall solution for this structure? we have think on a cisco pix 525 but seem to be expensive 10.000$
View 4 Replies View RelatedMy sites are getting heavy DDoS attacks.
What's the best firewall? I'm currently using ACH software firewall but the attacks are getting so bad my site's are going down (apache is shutting down/locking) and sometimes my server even crashes.
Anyone recommend a better software firewall or a really cheap but good hardware firewall?
Could my host just use a router or something as the firewall or would that not do? I'm looking for something really affordable as a solution.
We have an older dual xeon box that we are wanting to use as the edge firewall to our network.
We are currently considering FreeBSD w/ PFSense or Linux w/ IPCop, but from what I see, I don't see that they do too much against DoS.
I saw a thread before on this topic but it didn't really give me any new information.
I would like to hear from users who use a *nix firewall, please let me know which you use, what it has helped you with since you started using it instead of a software firewall on your dedi servers, and have you been successful in filtering out or mitigating DDoS attacks?
We only are planning on pushing ~200mbit through this so we feel a dual xeon should be plenty.
I am trying to purchase either a anti-ddos or firewall machine. My main objective is to prevent from ddos attack.
Do i purchase a anti-ddos hardware (please recommend), or firewall hardware (please recommend)?
anti-ddos and firewall is the same right? is about ip analyse and filter right?
After using the ddoss/firewall , i may also want to subscribe to those third party doss prevention which has big bandwidth, if i have a good hardware anti-ddos/firewall already, do i still need to have subscribe to these services?
Have the following error message:
ProtDir_IIS::update() failed: Add Protected Directory failed: columns siteId, path are not unique (Error code 1)
I have a Real Time Web Application Security Rules Subscription. I change the ModSecurity Rule Setup and add the Atomic LoginData to Plesk. All looks fine but the ModSecurity Log is now empty.
- Debian 7 with all Updates
- Plesk Version 12.0.18 Update #49
Output from: ~# aum -df upgrade asl
[URL] ....
Why isnt Plesk 12 configuring firewalld under CentOS 7 correctly? We have to manuella enable port 8443 and all other ports manually with firewall-cmd..
View 1 Replies View RelatedI am running Plesk 11.5.30 Update #44, Postfix 2.8.14 and Spamassassin 3.3.1 on a Red Hat Enterprise Linux Server 6.5 server. I am looking to update the rules within Spamassassin. I have had a bit of a look and see that a crontab has been created but its a bash script with a comment saying it has been disabled by psa-spamassassin package (/etc/cron.d/sa-update).
Code:
#!/bin/sh
# This task was disabled by psa-spamassassin package
exit 0
Is there a reason why it has been disabled by Plesk? If I update the rules, will it break something?
I have recently added into Postfix RBLs to reduce the amount of SPAM my customers is getting and this is my next step in a list of things that I would like to change.
I need web hosting that I can put 10 sites on with unique ips that the host provides.
How can I find someone who does this here on WHT?
I already have two accounts with other hosts like this but like to break things up through different hosts.
Please advise who would be good for this for $30/mo or less.
I ordered 4 unique IP addresses 2 weeks ago for our server. Have still not had them even though I seem to be constantly chasing the company.
View 13 Replies View RelatedWe're actually hosted at site5.com and our 7 wordpress blogs (+1 wp-mu) get about 2500 unique/day... blogs uses a lot of plugins and costumization, but i think we shouldn't have problem with such number of vistitors.
[about 20gb transfer per month and 1 gb disk space used]
Customer service sometimes write about mysql load, sometimes complain about server problems and so on... we're thinking about move somewhere else.
Of course we don't want to move to something like dreamhost and have the same problems after a couple of months and we're not rich, but:
- our readers are mostly italians, so we'ld like to move somewhere in europe, but european services are expensive
- we need mysql/php/... bla bla usual stuff
- we have a lot of domains for underdevelopment projects
- we gave a try to MT gridservice but it was really slow
- we need ssh access
- we don't have time to manage hosting configurations and so on
- we need a reliable hosting service but we aren't google.com
- we can spent AT MOST 20$/month
which you think can be the best hosting service for us? is better to think about a VPS solution?? managed bla bla bla service?
any other hosts as rock solid as they are and able to offer small shared accounts with private nameservers?
View 11 Replies View RelatedI have a new website that has a similar feature to tripadvisor's Reviews, where users share detailed thoughts and experiences. They fill in all this information on one form so there is no interaction with the system while they are writing.
I know Apache has the TimOut setting which is set to 5 minutes by default. This ensures that you do not have users using active memory and sessions for a long period of time.
But the problem I have seen is that some users are spending 15-20 minutes writing very detailed experiences and when they hit the submit button obviously their session has timed out and they lose everything and get a system error.
I really don't want to change the TimeOut value in Apache to 20 min due to resource constraints, but is this my only option?
Got a bit of a debate going here because I have a site that is showing wildly varied results for traffic between different trackers.
The three we are watching are:
extreme paid version
awstats
webalizer
Extreme shows 70k uniques for this month while awstats is showing 16,555 then to make things even more confusing webalizer is showing 22564.
So that leads us to the question, what exactly is a unique and is there really any precise definition of how a unique should be counted. is it:
1. one unique IP visit for the whole site
2. one unique IP visit per page on the site
then on top of that we have to factor in the time frame so now is it:
1. one unique IP visit for the whole site per day
1. one unique IP visit for the whole site per month
3. one unique IP visit per page per day
4. one unique IP visit per page per month
Now some may say the above is being picky BUT how many site owners do you hear saying "I get 100,000 uniques per month". This comment alone begs for an answer to this question. I don't think I have ever heard someone come back at a comment like that with "Really, How do you count your uniques?"
With all the trackers out there and all the companies that are relying on accurate statistics to sell advertising and / or value the site this is one of THE grayest areas around ......
So again, the question is:
What the heck is the definition of a unique and for that fact is there one?
which hosts offer unlimited or to "x" amount of unique ip address per shared hosting account
i liked hostgator, but they didn't offer the free unique ip addresses... which are needed so i can add ssl certs to my domains (ecommerce sites are what i plan on launch)... not all domains need a unique ip, just 3-4 per account would be nice...
Can anyone recommend a hosting company that allows multiple unique class C IP's?
View 11 Replies View RelatedI've been doing a lot of research for webhosts lately, and that is how I found this forum. I'll cut right to the chase.
I'd like to order webhosting for my small business soon. My requirements are:
UPTIME, PHP, MySQL (basically, it just has to support Wordpress for now)
Storage isn't a big deal really, but I'd say we'd need at least 50 gigs just in case.
Most hosts seem to be pretty generous in that department.
Traffic is my biggest concern. The business will not be very active until August, when traffic should begin to increase at a rate we just cannot predict. Should an event happen (like being Slashdotted), the traffic could be insane because we would be most likely hosting video content (not adult content). I can picture the overage charges now, and it would be a nightmare. That is what I'd prefer to avoid.
I've looked into Yahoo and their promise of "unlimited" bandwidth. I'm thinking that might be the best choice at this point. It sounds like they will throttle your site but you won't be hit with any overages charges so I'm OK with that. I am not worried if MS buys Yahoo.
Which hosts would you recommend though? My budget is $0-25 per month until the business grows. Then I may consider VPS and dedicated solutions, but that is for the future.
is there a host that lets me add on as many unique ip as i want for extra cost?
for example, i want to test out several prototype .com sites on the same server. however, i want a unique ip for each site.
I was just looking at awstats for a domain that is not in use and only got a max of 10 visits a month till October 08.
Now since November 2008 I have been getting a lot of unique visitors from Italy but there is nothing on the domain, no folders or files.
Here is what AWStats say:
Nov 08: 710
Dec 08: 1593
Jan 09: 4243 (so far)
These are unique visitors 99% coming from Italy
What do you think going on ?
The domain in question is testingurl.com
We've got a client who is using both AWstats and Webalizer and they are claiming the numbers are different between the two and that the numbers reported are not accurate. They need a specific list on how many impressions they are getting on a daily, weekly and monthly time period for advertisers.
View 7 Replies View Relatedi only see page, hits and bandwidth on the weekly report, how come the columns for unique visitors and visits are gone?
View 2 Replies View RelatedHow to activate/enable the firewall by cli, does this is possible?
Firewall module is installed.
Option in plesk GUI working well.
Does this is possible ? If yes how ?
it's come under my attention that dragonara.net has been ddosing me today since morning from the ip:
194.8.75.229
What's so ironic about it is that the ip is from a UK DDOS protection site so i'm expecting some email with their services in the next hour or so. Stay clear of them they are fakes and e-terrorists.