Is there any sense to upgrade to cent os 5?I mean,is there any critical benefit which will increase server performance if i do that.I noticed i can upgrade over ssh but since that will generate downtime i wonder is there a sense to do that.
I have just taken delivery of a shiny Windows 2K3 server from a2b2.com and wanted to secure it so that only remote desktop and port number 3306 from certan IP address are allowed to connect to it. I would also like to have NO outgoing connections allowed at all.
My questions are 1) Is this able to be done? and 2) Approximatly how much would it cost.
I am about to sign up for a VPS host which doesn't seem to offer hardware based firewalls which means that I am stuck with software based ones. Perhaps I am being old fashioned, but this do make me a bit nervous, as I have the impression that a hardware based firewall is better (of course assuming correct configuration and such)....should I be worried? Is Windows Firewall to be trusted or should I look for something else? My concern isn't only if the firewall will stop any attacks or not, but also at what cost, considering CPU, memory etc. Any comments and recommendations would be apprechiated. I'm not NASA or anything, so I don' really think that the worlds hacker elite is going to come after me, but from what I see in the logs of my current firewall, there is a lot going on on the internet these days and it isn't all good.
I'd like to know what the current "best practice" thinking is with regard to hardware firewalls. Are they really necessary for a Linux server running a solid iptables-based software firewall? Or do they simply add another potential point of component failure?
What are the pros/cons to deploying a hardware firewall vs. going iptables-only on the server?
Filtering packets based on a MAC address and the values of the flags in the TCP header. This is helpful in preventing attacks using malformed packets and in restricting access from locally attached servers to other networks in spite of their IP addresses.
Firewall also keeps track of each connection passing through it and in certaincases will view the contents of data flows in an attempt to anticipate the next action of certain protocols. This is an important feature in the support of active FTP and DNS, as well as many other network services.
How IP Tables works?
All packets inspected by iptables pass through a sequence of built-in tables (queues) for processing. Each of these queues is dedicated to a particular type of packet activity and is controlled by an associated packet transformation/filtering chain.
There are three tables in total. The first is the mangle table which is responsible for the alteration of quality of service bits in the TCP header. This is hardly used in a home or SOHO environment.
The second table is the filter queue which is responsible for packet filtering. It has three built-in chains in which you can place your firewall policy rules.
a) INPUT Table b) OUTPUT Table c) FORWARD Table
General Syntax of the iptables is as follows:
IPTABLES -A {INPUT,OUTPUT,FORWARD} -p {tcp,udp} --sport(dport) -s {ip} -j {DROP,REJECT,ACCEPT}
To Block the incomming ip: IPTABLES -A OUTPUT -p tcp --sport{1..65535} -s {ipaddress} -j DROP {REJECT} To Block the outcomming ip: IPTABLES -A INPUT -p tcp --sport{1..65535} -s {ipaddress} -j DROP {REJECT}
You can also use --dport instead of --sport & you can use -d instead of -s which specifies source or destination respectively.
We are upgrading to a managed server from a VPS. Our main concern is security as we process customers' confidential personal information but don't have large volumes of traffic. Our application developer is recommending the following config: Firewall --> Web/App Server --> Firewall --> DB Server
The logic being that if the first firewall is breached at least they don't have access to the DB.
Is this really critical or do you think we can start with: Firewall --> Web/App/DB server?
Obviously budget is a concern and since we will have low traffic for the next few months it seems silly to pay double if it isn't really needed?
I have a server in our office which is used as a share drive. Puts all accounting docs on it ect. After 6 or so, it will loss all conectivity completely. Yet the server still stays on. We installed everything in all packages on the server including it graphical interface. We havent mucked with any of the powersavings so what could it be. Also there is nothing plugged into it eg screen,keyboard and mouse. All that is connected is the power cable and the ethernet cable. That is it.
It is directly connected to a belkin wireless router
Which operative system you mostly use on your server?Right now i have only centos installations,but it seems ubuntu have larger file repository with their apt system compared to yum.
I noticed with every new cent os server there are different mirrors for cent os repos.Since on each cent os repo file is same,how does it pick which mirror it pick?I ask beacuse latest server has picked one extremly slow edu mirror which is not just slow,it also timeout,and it may extend update to 2 hours instead 5 minutes which usually will take.So how do i change base mirror on base cent os repo?
my friend ordered an vps with a host, he ordered 5.3 - 32bit but some how I feel he has been provided with 5.0 version by the host, I didn't know how to confirm it, when I checked his hypervm, this was the cent os details provided:
Ostemplate: centos-5-i386-hostinabox576
there is rebuild option in the hypervm and in tht when I look out,here it shows the following: [url]
what my friend exactly needs is a cent os 5.3 - 32bit system, so if he selects cent os 5.3-ix386 (full) will it install with cent os 5.3 ?? he doesn't want kloxo to b in there auto, he/I can install tht,
I have been attempting to install Proftpd on linux(cent os 5 32 bit). The issue is i have to use proftpd i can't use vsftp or pure ftp I have downloaded the RPM. I downloaded this one to the server [url]. and i ran the command rpm -ivh proftpd* and it did its thing for a second and told me it was done. But when i run the command /etc/init.d/proftpd start or restart it doesn't wanna start. It just tells me failed. Can anyone help me with this? I'm not sure what else i can do.
Simplehelix offers a 128/256 bit RapidSSL Certificate for just $99.95/year. In addition, this certificate comes with a year of dedicated IP address with free installation.
Gathering header information file(s) from server(s) Server: CentOS-3 - Addons retrygrab() failed for: http://mirror.centos.org/centos/3/ad...rs/header.info Executing failover method failover: out of servers to try Error getting file http://mirror.centos.org/centos/3/ad...rs/header.info [Errno 4] IOError: <urlopen error >
when I run /etc/easyapache it too fails
Quote:
root@server1 [~]# /scripts/easyapache Testing connection speed...(this could take a while)............Done Ping:32.076 Testing connection speed to 69.90.250.35 using pureperl...(120500.00 bytes/s)...Done Ping:32.179 Testing connection speed to 69.90.250.34 using pureperl...(120500.00 bytes/s)...Done Ping:49.545 Testing connection speed to 69.72.164.152 using pureperl...(76681.82 bytes/s)...Done Ping:49.605 Testing connection speed to 69.72.164.155 using pureperl...(70291.67 bytes/s)...Done Ping:51.603 Testing connection speed to 198.66.92.147 using pureperl...(76681.82 bytes/s)...Done 5 usable mirrors located Fetching http://layer1.cpanel.net/buildapache.sea (0)....@69.90.250.35......connected......receiving...1%...2%...3%...4%...5%...6%...7%...8%...9%...10%...11%...13%...14%...15%...16%...17%...18%...19%. ..20%...21%...22%...23%...25%...26%...27%...28%...29%...30%...31%...32%...33%...34%...35%...36%...38%...39%...40%...41%...42%...43%...44%...45%...46%. ..47%...48%...50%...51%...52%...53%...54%...55%...56%...57%...58%...59%...60%...62%...63%...64%...65%...66%...67%...68%...69%...70%...71%...72%...73%. ..75%...76%...77%...78%...79%...80%...81%...82%...83%...84%...85%...87%...88%...89%...90%...91%...92%...93%...94%...95%...96%...97%...98%...100%...... Done Creating directory buildapache Verifying archive integrity... All good. Uncompressing buildapache........................................................................................................................................... ...................................................................................................................................................... ...................................................................................................................................................... ................................................................. Checking Update System........Your operating system's rpm update method (yum) was not able to locate the glibc package. This is an indication of an improper setup. You must correct this error before you can proceed. Please correct the conflicts and try again! initfpsuexec: using apache 1.x support Waiting for httpd to restart..............finished.
I cancelled a VPS ages, ago, and they stopped charging me, but it's still up, and I can use it. I emailed them saying they hadn't stopped it, but they haven't replied in 2 days. Should I just keep using it?
Think I might just set up a CS server and leave it
I've made my first website and I'm trying to find web hosting that is free and that it will also allows me to transfer my files through ftp directly through an ftp server. (ftp.example.com)
I've tried using the one for freewebpage.org but it doesn't work.. I tried it using port 21, 22, and 80 in both frontpage and filezilla and they didn't work.. I guess it's the ftp server that isn't really working, or the information they provide is inaccurate.
The buffer has 2375 MB of free ram. However this is a heavy mysql server. I want the empty ram be used by mysql so it becomes faster.
We are currently moving to a 8GB ram server, and the free ram will be around 7 GB if we use the exact same configuration. I want the free ram to be 1 GB at most, why pay for 8 GB ram if I'm going to use a fraction of it?
What optimizations should I attempt?
I know about harddisk I/O bottlenecks, I have two SATA drives in the system, and a SAS drive dedicated to mysql, that's all we can afford currently.
All mysql databases are for SMF forums, and currently using MyISAM tables. Switching to another storage engine is a possibility, if it won't create problems in restarts and hot backups.
i have seen one website ad on internet, offering free web hosting for 1 year (500 mb) with the purchase of any domain name.
I would like to confirm. Is these types of Ads are original or they are offering a fake offer (hidden cost). Because as i know, the domain hosting cost is very high as compare to buy a domain...