I have 2 IPs bounded on a Windows 2003 server. These 2 IPs have different network routes (one uses network A, one uses network B). Obviously for outbound traffic I can freely choose which IP to use (I simply choose to use [url]or [url]), however I wonder if it's possible to tell the server which IP it should use for inbound traffic when I need to download something from the internet to the server?
View 1 RepliesImagine you want a set of servers (VPSs would be a cheaper choice, that is why I am posting here) that do not have much outbound traffic but download from other servers (more or less as spiders, but I am not trying to create a web index). Disk space or memory size are not important, but port speed and monthly transfer should be as high as possible. As inbound traffic is less frequently used, I wonder if any provider offer cheaper rates if traffic is like this.
I have been searching the forums and have not found too much about this topic (a quite related post named "I want to download the Internet" or something similar did not get a conclusion).
Why did my inbound traffic jump? Any ideas what could be happening here? I have this server and do not upload anything on the server?
View 12 Replies View Relatedmy server under attack with syn flood and i attach the active connection during attack
View 2 Replies View RelatedWhat traffic monitor would everyone recommend for sites that have as many as 5,000 to 10,000 hits an hour?
View 8 Replies View RelatedWhat is the command I need to issue to block an IP address from my server? I need to block both inbound and outbound access.
I need the rule to append to existing rules so if the server is rebooted the rule will still be in effect.
We have following error when try to start apf in one of our vps:
apf(3126): {glob} opening inbound tcp port 80 on 0/0
apf(3126): {glob} opening inbound tcp port 110 on 0/0
apf(3126): {glob} opening inbound tcp port 111 on 0/0
apf(3126): {glob} opening inbound tcp port 143 on 0/0
apf(3126): {glob} opening inbound tcp port 443 on 0/0
apf(3126): {glob} opening inbound tcp port 465 on 0/0
apf(3126): {glob} opening inbound tcp port 623 on 0/0
apf(3126): {glob} opening inbound tcp port 918 on 0/0
apf(3126): {glob} opening inbound tcp port 993 on 0/0
apf(3126): {glob} opening inbound tcp port 995 on 0/0
apf(3126): {glob} opening inbound tcp port 2082 on 0/0
apf(3126): {glob} opening inbound tcp port 2083 on 0/0
apf(3126): {glob} opening inbound tcp port 2086 on 0/0
apf(3126): {glob} opening inbound tcp port 2087 on 0/0
apf(3126): {glob} opening inbound tcp port 2095 on 0/0
apf(3126): {glob} opening inbound tcp port 2096 on 0/0
apf(3126): {glob} opening inbound tcp port 3306 on 0/0
apf(3126): {glob} opening inbound tcp port 3389 on 0/0
apf(3126): {glob} opening inbound tcp port 6666 on 0/0
apf(3126): {glob} opening inbound tcp port 7776 on 0/0
apf(3126): {glob} opening inbound tcp port 7777 on 0/0
apf(3126): {glob} opening inbound tcp port 7778 on 0/0
apf(3126): {glob} opening inbound tcp port 7779 on 0/0
apf(3126): {glob} opening inbound tcp port 8887 on 0/0
apf(3126): {glob} opening inbound tcp port 8888 on 0/0
apf(3126): {glob} opening inbound tcp port 8889 on 0/0
apf(3126): {glob} opening inbound udp port 21 on 0/0
iptables: Unknown error 4294967295
apf(3126): {glob} opening inbound udp port 53 on 0/0
iptables: Unknown error 4294967295
apf(3126): {glob} opening inbound udp port 161 on 0/0
iptables: Unknown error 4294967295
apf(3126): {glob} opening inbound udp port 465 on 0/0
iptables: Unknown error 4294967295
apf(3126): {glob} opening inbound udp port 623 on 0/0
iptables: Unknown error 4294967295
apf(3126): {glob} opening inbound udp port 873 on 0/0
iptables: Unknown error 4294967295
apf(3126): {glob} opening outbound tcp port 21 on 0/0
iptables: Unknown error 4294967295
apf(3126): {glob} opening outbound tcp port 22 on 0/0
iptables: Unknown error 4294967295
apf(3126): {glob} opening outbound tcp port 25 on 0/0
iptables: Unknown error 4294967295
apf(3126): {glob} opening outbound tcp port 26 on 0/0
iptables: Unknown error 4294967295
apf(3126): {glob} opening outbound tcp port 27 on 0/0
iptables: Unknown error 4294967295
apf(3126): {glob} opening outbound tcp port 37 on 0/0
iptables: Unknown error 4294967295
apf(3126): {glob} opening outbound tcp port 43 on 0/0
iptables: Unknown error 4294967295
apf(3126): {glob} opening outbound tcp port 53 on 0/0
iptables: Unknown error 4294967295
apf(3126): {glob} opening outbound tcp port 80 on 0/0
iptables: Unknown error 4294967295
apf(3126): {glob} opening outbound tcp port 110 on 0/0
iptables: Unknown error 4294967295
apf(3126): {glob} opening outbound tcp port 113 on 0/0
iptables: Unknown error 4294967295
apf(3126): {glob} opening outbound tcp port 443 on 0/0
iptables: Unknown error 4294967295
apf(3126): {glob} opening outbound tcp port 465 on 0/0
iptables: Unknown error 4294967295
apf(3126): {glob} opening outbound tcp port 623 on 0/0
iptables: Unknown error 4294967295
apf(3126): {glob} opening outbound tcp port 873 on 0/0
iptables: Unknown error 4294967295
apf(3126): {glob} opening outbound tcp port 2089 on 0/0
iptables: Unknown error 4294967295
apf(3126): {glob} opening outbound tcp port 3389 on 0/0
iptables: Unknown error 4294967295
apf(3126): {glob} opening outbound udp port 20 on 0/0
iptables: Unknown error 4294967295
apf(3126): {glob} opening outbound udp port 21 on 0/0
iptables: Unknown error 4294967295
apf(3126): {glob} opening outbound udp port 53 on 0/0
iptables: Unknown error 4294967295
apf(3126): {glob} opening outbound udp port 161 on 0/0
iptables: Unknown error 4294967295
apf(3126): {glob} opening outbound udp port 465 on 0/0
iptables: Unknown error 4294967295
apf(3126): {glob} opening outbound udp port 623 on 0/0
iptables: Unknown error 4294967295
apf(3126): {glob} opening outbound udp port 873 on 0/0
iptables: Unknown error 4294967295
apf(3126): {glob} opening inbound icmp type 3 on 0/0
iptables: Unknown error 4294967295
apf(3126): {glob} opening inbound icmp type 5 on 0/0
iptables: Unknown error 4294967295
apf(3126): {glob} opening inbound icmp type 11 on 0/0
iptables: Unknown error 4294967295
apf(3126): {glob} opening inbound icmp type 0 on 0/0
iptables: Unknown error 4294967295
apf(3126): {glob} opening inbound icmp type 30 on 0/0
I am moving into the world of dedicated servers (from VPS). I just got a server from Serveraday.com /OLM.net.
When I was doing bandwidth tests, I found the server's inbound speed was much slower than outbound. I tried downloading a bunch of different provider's 10MB test files from the command line of my server using wget. They were all around 20-30 Kbps.
When I take those same 10MB files and serve them from my dedicated box, the results are much different. My server can push the files out at over 1Mbps.
Why would my server be set up this way, and is this normal behaviour? I sent a ticket to OLM, but their support seems to take a long time. So I figured I would bounce the question off of all you here on WHT
any good solution for corporates out there?
View 13 Replies View RelatedI'm using the free edition of MailEnable and need to configure each post office to copy all incoming and outgoing email to one of the email accounts on the same post office.
Is there a way to configure this ?
I know I can configure mail forwarding on incoming mail per account but need to do it for all acounts (except the audit account).
e.g. anythinghere@dbnetsolutions.co.uk
incoming or outgoing would be copied to audit@dbnetsolutions.co.uk
With the standard-DNS-Layout every customer has an MX-entry like MX 10 mail.customerdomainexample.com
The problem is, that inbound mailservers get a TLS warning, because the mailhostname does not match mail.companydomainexample.com, which is the domain with a valid SSL-Certificate pointing to the same server.
Wouldn't it make sense to change the default template to mail.companydomainexample.com since it is the same machine anyway?
I am having some problems with the inbound smtp sockets, we are receiving a constant attack from spammers, and they are taking all the sockets we have open for our users. We have enable SPF, greylisting, inbound control access through authentication, relay access with authentication also. but after some weeks we are on the same situation yet. We have spam assasin also installed as power pack from plesk, and we have add DSN black list from b.barracudacentral.org, bl.mailspike.net and bl.spamcop.net but we still suffer from this problem.
We have also try to increase the socket assigned to 200 and after some minutes they used all again and the CPU change increase up to 25% of the total capacity.
I ran the script in KB article 123160 [1] to disable SSLv3 and avoid the POODLE vulnerability, but I recently discovered that this has caused all inbound emails to bounce. The bounce message says, "TLS Negotiation failed."
Here is Plesk version information:
# cat /usr/local/psa/version
11.5.30 CentOS 5 115140407.17
# cat /root/.autoinstaller/microupdates.xml
<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<patches>
<product id="plesk" version="11.5.30" installed-at="20131109T085857">
<patch version="47" timestamp="" installed-at="20141123T162005" />
[URL] ....
1/ What is the difference between maillog and maillog.processed? I want to keep a permanent record of all mail inbound and outbound even if delivery is deferred by the gray listing. I'm not sure which one is the best to keep.
2/ I would like to change the way that the mail logs get log rotated. I am struggling to work out exactly what happens at the moment but I would like to rotate the log out every day regardless of size. I think currently that the maillog.processed is rotated daily if it is over a specific size.
My customer has an external facing Apache server that is acting as a reverse proxy to two internal applications. They have:
- external addresses for each app which resolve to different ip addresses, so app1.their_domain.com and app2.their_domain.com resolve to 77.3.170.10 and 77.3.170.11 respectively.
- the Apache server has two network interfaces with ip addresses 192.168.10.10 and 192.168.10.11
- the external ip addresses resolve to the above internal addresses
- the firewall between the Apache server and the internal app servers is configured to allow traffic from 192.168.10.10 to reach app_server1, and traffic from 192.168.10.11 to reach app_server2, both using port 7777.
I have configured a virtual host in httpd.conf for each ip, i.e.
Code:
<VirtualHost 192.168.10.10:80>
...
ProxyPass /app http://app_server1:7777/app
ProxyPassReverse /app http://app_server1:7777/app
RewriteRule ^/$ /app/app1 [R,L]
...
<VirtualHost>
and
Code:
<VirtualHost 192.168.10.11:80>
...
ProxyPass /app http://app_server2:7777/app
ProxyPassReverse /app http://app_server2:7777/app
RewriteRule ^/$ /app/app2 [R,L]
...
<VirtualHost>
This works fine in that the external address are being routed to the correct application, however the firewall is blocking requests to the second app as it appears the requests are coming from the Apache servers 'primary' ip address 192.168.10.10 instead of 192.168.10.11.
Is it possible to send requests using the ip address from the relevant VirtualHost?
Windows server 2008
Apache 2.2
I am using virtuozzo firewall to secure access.
I enter 58.27.175.211/255.255.255.0 for Source Address and Netmask for port 22.
But still I can connect using 58.181.103.217 or 58.27.151.120.
Second is it possible to enter two different ip address in source address?
I just bought a new ip address and want to setup this new ip as my server's main ip, making the 'existing main ip' as the secondary ip.
Which means, this new ip will be the server's default ip address for all services, including when connecting to other server.
I'm using CentOs 4.5 and swsoft's panels: HSPcomplete & Virtuozzo Power Panel, and Webmin.
I want to redirect a website to a particular URL so that the address bar shows the same URL and not the destination URL. I know it is possible via URL masking, however, I want it in such a way that whenever somebody clicks on any link in the website, the address bar should still show the original URL. To put it in simple words, Suppose I want to redirect [url] to [url]. Now if there is a link named contact/index.htm and somebody clicks on it the address bar should display [url]and not redirect to [url]
How can it be possible using URL Rewrite method in .htaccess file?
The problem usually goes like this:
- I can't access the webserver
- I'll try to restart httpd, and I'll get
Starting httpd: (98)Address already in use: make_sock: could not bind to address [::]:443
To fix this, I run
[root@www1 ~]# lsof -i tcp:443
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
perl 11307 apache 4u IPv6 476943447 TCP *:https (LISTEN)
There is always leftover process that is causing the restart to fail. Once i force kill the process, I am able to restart httpd properly.
Now it is ok if this just occurs once in a while, but this problem keeps repeating itself almost everyday at 4am server time (cron time?). What can I do to permanently fix this?
how can I use to control or cap the traffic on a per server basis ? in other words, I have 15 servers in one cabinet, in this cabinet there is one switch to feed all 15 servers, the swith is a DELL 3448, one of the servers is eatingup almost all the traffic I have fro the cabinet itself, is there a way I can cap or limit traffic quota on a per port basis at the switch level? or what is the best way to manage this?
View 8 Replies View RelatedI'm up Games for Windows VPS servers with VMWare Server ESXi and wonders whether some option to control the traffic of each IP, I thought about using a "Cisco ASA 5500" but I do not know if it has this option:
Example:
IP 192.168.254.1 = 100GB monthly.
IP 192.168.254.2 = 50GB monthly.
Etc. ..
I am not sure if my dedicated server is being attacked or if it is legitimate traffic. I need help figuring out the difference and if it is an attack, how to prevent it, and if it is legitimate traffic, how to configure the server to handle the load.
My server information is below:
HardwareIntel Xeon 3220-Quad Core [2.4GHz
8GB DDR2
SATAII 500GB
SoftwareCentOS 5.3-32
Apache2
MySQL 5
PHP 5
When I do ps aux|grep httpd|wc -l I get the count of current connected clients of 259 which is always maxing out my MaxClients of 256. I had increased it to 512, and it maxed out, I had increased it to 1024 and it maxed out, and lastly I had setup to 2048 and it works, but slows the entire server down.
if anyone knew of anything that maybe could be done to limit this band-width stealing by AVG or are we just going to have to live with this?
[url]
Recently I noticed the load on one of my servers way beyound what I would expect it to be. I run multi processor servers and even during a backup the load is only around 1.5.
But lately I noticed peak loads that high under normal web traffic.
I know 1.5 is low on an multi processor server, but I am hoping to add much more to those machines and with sustained load that high it leaves no room for expansion. The servers are not cheap, so adding another server to the cluster can only be done if I make money from the last one I added.
I checked the traffic levels and they were very high. After further review I had some bots hitting sites at over 1200 pages a minute. Multiply that by a few hundred bots and clearly I could have a load issue. The potential is there to bring any server to its knees when delivering those volumes.
I created programing to watch connections and block the abusive bots. While logging I became aware of over 600 bots crawling my servers. Many bots from, Japan, China, Germany and so on and on, useless to my customers even if they are legit search indexes.
Another problem I see is that the bots are running from many ip addresses and hitting the same sites from multiple ips at the same time. Why would the need to do that?
Among other things I decided to validate googlebot, msn and yahoo with dns lookups so I could determine that they were actually their bots and not imposters. In 24 hours I found valid bots from the big three hitting one server from 1100 different ips.
Now we are looking at thousands of vaild bots and thousands more email harvesters and content theives.
As a host, the number of sites I can host on a server is greatly reduced by the bot traffic. My customers do not want to hear that their website was being crawled at 3,000 pages a minute and that is why they could not access it. Of course they will blame it on me.
I was able to filter the bots at a firewall level and drop connections based on reverse dns lookups and site crawl rates and my server sits around 0.05 most of the time even with hundreds of pages a minute being accessed.
I am wondering how the rest of you hosts deal with this problem. Do you leave it up to your hosting customers? Or do you have some type of filter to get rid of the bots.
When you have a few sites it is not really a problem, but as you grow it grows exponetially out of control.
i need co-location to 5 servers 5U 5 ip adresses 4 TB traffic month i can share the cage with others Price ? my budget is around
Its going to be used to an internet radio
400 700 euro month
I want to be able to monitor (with statistic) and cap traffic on 3+ servers.
how is this done best?
I was thinking of somekind of switch or server set inbetween the servers and the internet monitoring and keeping data on the traffic use etc.
but what do you do?
and how to make such a monitor redundant so if it fails the network is not cut off from the world?
I've got a LAN setup that share an internet connection with some friend but unfortunately we have a "Limit" we can download per day.
One of my friend's seems to enjoy downloading movies day in day out till we reach our cap.
Now I know ingress shaping doesn't change the fact that we are gonna reach our cap earlier but it might discourage him for downloading as much.
how can I shape his traffic to say 50KB/s both in and out for just an IP (so it doesn't affect the rest of us ?)
i've a vps with iptables, but i've too much traffic (RX), there are too many packets received from random ports on both upt and tcp. Today in just 14 hours i've 2.8 gib of traffic, without any connection for web, email, etc (i've stopped all the services). How can i stop this? it's going to burn all my monthly traffic
View 5 Replies View RelatedI've only ever had a shared hosting account with Hostgator, plus a few freebie hosts. However, I'm now pulling some heavy traffic and I'm concerned that Hostgator is going to suspend me soon.
My traffic on Saturday for example was ~2600 unique visitors and ~5000 page views. All of this traffic was from WordPress blogs and a small SMF forum. I've since converted one of the blogs to a static site to limit my CPU usage and I've setup caching for my other WordPress blogs. Advice I've heard on the Hostgator forums is that 7000 page views per day for a database driven site is around the time you should be upgrading and based on my traffic from Saturday (which admittedly was a bit of a spike) I could potentially be receiving 150,000 page views/month, so about 20x the point at which they recommend upgrading at.
Anyhows, in a nutshell I need to upgrade, or risk Hostgator throwing a tantrum at me ... but I don't have a lot of cash to pay for an upgrade Due to my lack of cashflow I've been considering moving to a VPS. The company which has interested me the most is HostV.com who offer a 256 MB (with 1000 MB 'burst' RAM) for only US$39.99 which seems quite reasonable to me.
They say that their 256 MB plan should be able to handle over 5000 page views per day for a WordPress run site, but I'm a little suspect. Do any of you know if this is a reasonable expectation from a 256 MB chunk of a virtual server? I have no idea and am always wary of believing the sales pitch of a random company across the other side of the world.