DoS :: Block IP Address Automatically
May 4, 2008
I manage a website which runs on the cpanel/whm interface and was wondering if there was anything my host could do to prevent DoS attacks on the server...at the moment we are having huge DoS attacks on our website therefore taking the whole website down for quite long periods of time.
My host just seems to be manually blocking the DoS'ers IP's manually but this is just too tedious and not efficient enough.
Is there any program for example that he can install which will block andy ip which sends a certain amount of requests within a given time period?
View 3 Replies
ADVERTISEMENT
May 15, 2009
i install csf/lfd with centos and cpanel,
i find certain waste many use a lot of resource and it does not work now,
is it possible csf/lfd block it?
if possible,how can i check if it is blocking?
View 5 Replies
View Related
Apr 29, 2008
I have blocked this IP 125.115.144.28
/etc/apf/apf -d 125.115.144.28
But
netstat -anp|grep tcp|awk '{print $5}'| cut -d : -f1 | sort | uniq -c | sort -n
It still showing
202 125.115.144.28
Why?
Is it supposed to blocked right away, or need some time to get blocked.
When I checked /etc/apf/deny_hosts.rules
The IP is in the file.
View 12 Replies
View Related
Apr 14, 2008
I am receiving around 7.000 emails from different sources with the subject “Undelivered Mail Returned to Sender” or similar.
It seems someone is using an alias to my email address to send huge amounts of spam. I have checked the mail queue in WHM and the emails are not there. I have turned on the SMTP Tweak in security center, but that doesn’t seem to work.
I have no idea if this person is using my server to send massive amounts of spam,
What I have noticed is that most emails return to msxf@mydomain.com so is there a way to block this?
View 10 Replies
View Related
Oct 18, 2009
Like exceeding 60 connections per minute same IP = automatically blocked.
How do I set it up?
View 4 Replies
View Related
Jun 11, 2008
I have configured qmail+spamassassin. It working find but still I have 2 problem. I am receiving spam mails from my own account to my own account e.g. from=info@domain.com to info@domain.com. How can I block this spam?
View 2 Replies
View Related
May 19, 2014
I'm trying to use spamfilter to block mail from specific address, adding this e-mail to spamfilter in mail account settings, but it doesn't work. In logs I see:
spamc[13430]: skipped message, greater than max message size (256000 bytes).
View 8 Replies
View Related
Feb 6, 2015
My customer has an external facing Apache server that is acting as a reverse proxy to two internal applications. They have:
- external addresses for each app which resolve to different ip addresses, so app1.their_domain.com and app2.their_domain.com resolve to 77.3.170.10 and 77.3.170.11 respectively.
- the Apache server has two network interfaces with ip addresses 192.168.10.10 and 192.168.10.11
- the external ip addresses resolve to the above internal addresses
- the firewall between the Apache server and the internal app servers is configured to allow traffic from 192.168.10.10 to reach app_server1, and traffic from 192.168.10.11 to reach app_server2, both using port 7777.
I have configured a virtual host in httpd.conf for each ip, i.e.
Code:
<VirtualHost 192.168.10.10:80>
...
ProxyPass /app http://app_server1:7777/app
ProxyPassReverse /app http://app_server1:7777/app
RewriteRule ^/$ /app/app1 [R,L]
...
<VirtualHost>
and
Code:
<VirtualHost 192.168.10.11:80>
...
ProxyPass /app http://app_server2:7777/app
ProxyPassReverse /app http://app_server2:7777/app
RewriteRule ^/$ /app/app2 [R,L]
...
<VirtualHost>
This works fine in that the external address are being routed to the correct application, however the firewall is blocking requests to the second app as it appears the requests are coming from the Apache servers 'primary' ip address 192.168.10.10 instead of 192.168.10.11.
Is it possible to send requests using the ip address from the relevant VirtualHost?
Windows server 2008
Apache 2.2
View 1 Replies
View Related
Aug 4, 2008
I am using virtuozzo firewall to secure access.
I enter 58.27.175.211/255.255.255.0 for Source Address and Netmask for port 22.
But still I can connect using 58.181.103.217 or 58.27.151.120.
Second is it possible to enter two different ip address in source address?
View 4 Replies
View Related
Jul 26, 2007
I just bought a new ip address and want to setup this new ip as my server's main ip, making the 'existing main ip' as the secondary ip.
Which means, this new ip will be the server's default ip address for all services, including when connecting to other server.
I'm using CentOs 4.5 and swsoft's panels: HSPcomplete & Virtuozzo Power Panel, and Webmin.
View 1 Replies
View Related
Feb 17, 2008
we compile a php 4 with all the modules that we require. However, after a day or so, it automatically becomes a fresh compilation of php 5. We then recompile to php 4, but same thing, after a day or so it become php 5 again. We've checked cron, and there's nothing to do with recompiling php.
View 5 Replies
View Related
Nov 8, 2007
I want to redirect a website to a particular URL so that the address bar shows the same URL and not the destination URL. I know it is possible via URL masking, however, I want it in such a way that whenever somebody clicks on any link in the website, the address bar should still show the original URL. To put it in simple words, Suppose I want to redirect [url] to [url]. Now if there is a link named contact/index.htm and somebody clicks on it the address bar should display [url]and not redirect to [url]
How can it be possible using URL Rewrite method in .htaccess file?
View 2 Replies
View Related
Aug 4, 2007
The problem usually goes like this:
- I can't access the webserver
- I'll try to restart httpd, and I'll get
Starting httpd: (98)Address already in use: make_sock: could not bind to address [::]:443
To fix this, I run
[root@www1 ~]# lsof -i tcp:443
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
perl 11307 apache 4u IPv6 476943447 TCP *:https (LISTEN)
There is always leftover process that is causing the restart to fail. Once i force kill the process, I am able to restart httpd properly.
Now it is ok if this just occurs once in a while, but this problem keeps repeating itself almost everyday at 4am server time (cron time?). What can I do to permanently fix this?
View 5 Replies
View Related
Oct 24, 2008
reboot my vps every 30 min automatically in my hypervm control panel. How can i do that?
View 12 Replies
View Related
Sep 16, 2008
I'm not 100% sure where to ask this, so feel free to move it to a more appropriate place if necessary.
At present, my webhost provides me with some statistics about my website through "AWStats". The problem I have is that if I don't update the 'stats' everyday, then I lose that day's records and I have a gap in my statistics.
is there a way I can automate the updating of the AWStats?
View 10 Replies
View Related
Jul 2, 2008
I use rfxnetworks.com/sim.php on my cpanel server and it all worked fine until the last week where each morning 6am GMT I get a status warning telling me that XINET was down and that it had to restart it.
Has something changed? Is there now something weird about XINETD and cpanel? My cpanel is stable and set to automatically update.
In fact it looks like something ALWAYS shuts it down and then SIM restarts it looking at a section of messages:-
Jul 2 05:57:02 tkey-29dd xinetd: xinetd shutdown succeeded
Jul 2 06:00:01 tkey-29dd xinetd: xinetd shutdown failed
Jul 2 06:00:01 tkey-29dd xinetd: xinetd startup succeeded
What is causing my server to shutdown xinetd in the first place?
View 0 Replies
View Related
Feb 21, 2008
Is there a way to start apache in linux if it goes down automatically?
View 10 Replies
View Related
Oct 11, 2007
Is there a way to automatically remove files from a folder on a schedule, say daily, and move them to the Recycle Bin? Can the Recycle Bin files be deleted daily on a schedule? If so, how?
I have Microsoft Office Professional 2007 running on a Windows 2003 Server.
View 2 Replies
View Related
Jan 16, 2013
How to restart apache automatic every 12 hours ?
View 6 Replies
View Related
Apr 2, 2009
my hd is little and the /var partition is full twice this days,
and it make my server down.
i try to run "yum clean all" and it empty some space.
i want to ask if any way i can stop the automatic yum ?
or the space will be full again and my server will down again.
View 7 Replies
View Related
Jun 11, 2009
I have a server in a country (Location 1) and I have my company website on it and in this country the connection is very fast but not very stable so I have the same website on another server (Location 2) as a backup server so I want to do is as the following:
- www.mywebsite.com > Website loads from my Server at Location 1.
- Server at Location 1 is down.
- www.mywebsite.com > Website loads from my Server at Location 2.
- Server at Location 1 is back working.
- www.mywebsite.com > Website loads from my server at Location 1.
How can I do this in DNS options?
Also Can you suggest an easy way to do realtime backup from the server at Location 1 to Location 2 so that any changes made on Location 1 are cloned on Location 2?
View 14 Replies
View Related
Jul 18, 2009
I am facing a problem with one of my Windows 2003 servers. The websites hosted on the server use IUSR_computername user for anonymous authentication for the websites. Please note that I have anonymous authentication disabled for FTP. The problem is that every night the IUSR_computername user gets deleted automatically and all the websites start asking for password as there is no user for the anonymous browsing of the websites. I checked the event log, but could not find anything. How do I find why the user is getting deleted automatically?
View 1 Replies
View Related
Jul 31, 2008
i just can't get this app to start up automatically.
i've put a script with execute permissions into my /etc/init.d/ folder, and ln'ed it to my rc.d/rc5 directory as S50myscript.
no go. and i don't even know where to look in the server logs to see what the issue is?
View 2 Replies
View Related
Feb 14, 2008
We are facing apache problem on one of our server.
It is getting restarted automatically within 30 seconds.
Below are the logs.
Please let us know the solution if any asap.
=================================================
Feb 14 04:57:00 server monit[5113]: 'apache' failed, cannot open a connection to INET[127.0.0.1:80] via TCP
Feb 14 04:57:00 server monit[5113]: 'apache' trying to restart
Feb 14 04:57:00 server monit[5113]: 'apache' stop: /etc/init.d/httpd
Feb 14 04:57:01 server monit[5113]: 'apache' start: /etc/init.d/httpd
==================================================
View 3 Replies
View Related
Feb 17, 2008
almost daily my VPS httpd failed and restart automatically, after that all services show UP but my sites not working.. Only start working when I restart DNS Server (BIND).
I am using CPanel
View 7 Replies
View Related
Feb 20, 2008
Is there any way to start plesk services automatically?
As my plesk control panel needs to be restarted every day..
View 5 Replies
View Related
Jul 16, 2008
I have postifix mail server running. I want to create a junk folder as and when new user is added. How can I do that?
View 2 Replies
View Related