How is this done? from what I gether, there's nothing built into apache which can do this which I personally think is a bit silly as it seems like a common thing. Can anyone offer any help (for apache 2).
View 5 RepliesHow can I Limit connections per IP in IIS6?
For example 10 connection per IP is allowed in a minute.
on setting up some sort of firewall who only allows 10 connections from the same ip to avoid spamming, abuse on the server.
How should i do this?
one of my friend say that if i install an apache module which one limit the users conection can help me to protect from ddos.
becaus one of my users domain is under ddos and i think that if i limit his conection, if sombody wants to do ddos and open conection foraxample up 30 he is attacker and ban.
is it right and how i can do it and limit a one user?
I have a powerful 8 core 8gb ram web server with scsi raid drives running RedHat EL 4. This server handles 2,000 - 3,000 HTTP requests per second via Litespeed httpd without strain (over 60%+ CPU idle time during peak load, under 1% IO wait). As the traffic volume continues to increase I've encountered a strange problem, the symptoms of which are as follows:
- About 1/4 or 1/3 of new connections are not answered by the server - they time out.
- All connections that are answered have exactly 3 seconds added to the time it takes to establish connection with the server (can be seen as "Connecting to ..." phase in FireFox). HTTP response times were tested by Pingdom from multiple locations all over the world.
- The problem is either "on" or "off", it is not gradual.
- Server ping is unaffected during the problem - no delay and no packet drops.
- The problem does not happen during off-peak hours of the day.
If litespeed httpd settings are tweaked to keep as many connections as possible in keepalive state for as long as possible, the problem is avoided, while tens of thousands of connections are kept in keepalive state.
Possible causes that were tested and eliminated: PHP/MySQL load (problem applies to static files exactly the same), CPU / IO / RAM, network uplink, hardware firewall, DNS.
This makes me think that there is some kind of bottleneck of how many NEW connections per second the server can accept. By maxing out keepalive quantity and duration I'm reducing the number of new connections per second. This is a temporary fix that will only work up to a certain point.
After investigation, litespeed staff verified that my litespeed configuration was correct and after some testing said that nothing in litespeed was responsible for this limiting factor. Litespeed process uses relatively little CPU and can definitely handle more volume.
Following sysctl.conf values were increased substantially to see if that will make a difference: tcp_max_syn_backlog, tcp_max_tw_buckets, tcp_max_orphans, netdev_max_backlog, somaxconn, file-max. This didn't produce any results. Disabling syncookies didn't help either. dmesg doesn't have any notices of limits being hit or throttles being applied.
Litespeed staff suggests that likely some limit in linux kernel is being reached. The strange 3 second delay does seem like an "intelligent" DDOS protection strategy of some sort. Perhaps this is some kind of kernel level DDOS protection?
Some limit connection mods can limit max connections per vhost, any mod can limit connections to apache server per IP?
View 3 Replies View Relatedwindows 2003
limit connections per ip to a port
im currently using routix netcom
it can limit the connections( NOT bandwidth) only but not per ip
another firewall which limit connections per ip
When I SSH'd into my box, I received this message:
example.pl is on this server. HTTPD connections have been limited to restrict this script from overloading server. All servers that have hosted this file need to have extremely limited http connections or have this file removed. It is poorly written and intense on CPU/memory.
How do I go and allow example.pl to be run on my server again? I use it solely for personal sites, so I wish to not have this file blocked and be allowed to run. I've searched for almost an hour now so I figured I would go ahead and post to see if any more experienced members could assist.
any good rule to limit Apache (port 80) connections from 1 IP to 15 with iptables/csf?
And total connections to the box to 100?
OS: Linux, on Apache 2.0
=======
Would you know and kindly tell me if there's a way to limit X number of connections per hosted site?
Because I don't want someone with high traffic forum unfairly stealing most connections for himself, which makes other sites suffer in performance.
how i can limit http and mysql connection limit on per domain basis.
View 2 Replies View RelatedI've been having trouble the past few days with someone who's been "attacking" my site so to speak by continuously downloading very large files with as many connections as (he) can open. I operate a large downloads site for computer games, this person has selected the largest files (like 400-500MB). Not sure of the real intent other than to clog up my bandwidth capacity. Also he appears to be using proxies since as soon as I ban one, another shows up seeminly from China.
Anyway, I have mod_bw and I've limited the number of connections in the downloads area to 2. While that works ok, his tool uses threads like a download manager would and he's using up 30-40 child threads for his 2 file downloads.
So 2 questions,
Is there anyway to not only limit file downloads to 2, but limit the number of connections per request? Many of my visitors do use download managers and I'd like for them to continue using them but use a reasonable number of threads like 6 or 8, but not 30.
Also, is there a way to restrict access to someone using a proxy?
I need to do this:
(1) domain1.com limit to 10 connections per IP per 30 seconds but allow if accessing file beginning with x.php such as x.php?981 x.php?o19
(2) domain2.com limit to 10 connections per IP per 30 seconds only if accessing file beginning with x.php but allow if accessing file beginning with y.php y.php?981 y.php?o19 .....
Installed APF on a Fedora Core 6 box, had a problem with one of the modules (Unable to load iptables module (ipt_multiport), aborting) which was sorted by editing the functions file.
But I now get this come up 30 times when I start the firewall:
hostname: Unknown host
Some guides talk about setting a hostname but I dont have a domain name just an IP Address.
Then depending on what guide I look at there are references to different files. So I am not sure which file to edit.
I hope your day is going good. I've been trying to fix a problem I had all week. I receive daily email notification that "example.[url]" does not resolve to any IP. However, when in WHM, it already contains Server Main Ip: 208.53.183.125. I've tried a few solutions from the web, but to no avail:
IMPORTANT: Do not ignore this email.
The hostname (example.mydomainname.com) resolves to . It should resolve to 208.53.183.125. Please be sure to correct /etc/hosts as well as the 'A' entry in zone file for the domain.
Some are all of these problems can be caused by
/etc/resolv.conf being setup incorrectly. Please check this file if you
believe everything else is correct.
You may be able to automaticly correct this problem by using the
'Add an A entry for your hostname' under 'Dns Functions'
in your Web Host Manager
1) Within WHM, I have the following:
-Add an A entry for your hostname (I only have one listed)
Hostname: example.mydomainname.com
Server Main Ip: 208.53.183.125
-Primary/secondary nameserver
Primary Nameserver: ns1.mydomainname.com (A entry = 208.53.181.26)
Secondary Nameserver: ns2.mydomainname.com (A entry = 208.53.181.27)
-Resolver Configuration
Primary Resolver: 66.90.68.25
Secondary Resolver: 66.90.68.26
-Additional IP my webhost gave me to use:
208.53.181.26 (used in primary name server)
208.53.181.27 (used in secondary name server)
208.53.181.28
-Current DNS Zone listing:
example.com (my website URL that is currently working)
example.mydomainname.com (hostname I made myself that contains the server main IP)
ns1.mydomainname.com (A entry = 208.53.181.26)
ns2.mydomainname.com (A entry = 208.53.181.27)
2) My edit "edit /etc/resolv.conf" contains the following:
Search localdomain
nameserver 66.90.68.25
nameserver 66.90.68.26
Issue: I receive daily email notification that "example.mydomainname.com" does not resolve to any IP. However, when in WHM, it already contains Server Main Ip: 208.53.183.125.
Here are the scenarios :
1. This Dedicated Server don't have main domain name but I use something like hostname.domain.com for the hostname.
2. The nameservers I use are something like ns21.domain.com and ns22.domain.com which I registered it already on my domain registrar.
3. Domain.com is use on other Dedicated server
Are these kind of setup okay? or should I really changed the hostname.domain.com to something else that is hosted on the same server?
I have a server with RHEL 5 installed. The problem is that the server shows the output of the hostname command as (none). I checked the /etc/sysconfig/network file and it shows the correct hostname. I also tried to change the hostname in the /etc/sysconfig/network file and restart the server. But hostname command still shows (none).
View 4 Replies View RelatedI have a dedicated server with WHM 11.23.2. I am in the process of "attempting" to change the hostname for a group of websites and also the nameservers.
Let's say for practical senses that these were the old details:
Hostname: abc.example.com
Nameservers: ns1.example.com and ns2.example.com
I changed in the following sections of WHM..
Server Configuration -> Basic cPanel/WHM Setup -> Hostname to
123.newsite.com
and then...
Networking Setup -> Hostname to 123.newsite.com
and then...
Server Configuration -> Basic cPanel/WHM Setup -> Primary Nameserver to ns1.newsite.com and then...
Server Configuration -> Basic cPanel/WHM Setup -> Secondary Nameserver to ns2.newsite.com.
Then...
Networking Setup -> Nameserver IPs. I deleted the old ones and created the two new ones: ns1.newsite.com and ns2.newsite.com.
I have double checked that this information is still there. Obviously newsite.com is listed as a domain/account. However, example.com was naturally the first one associated with this server.
I performed a server reboot, apache reset etc.
This was three days ago. I assumed it had all changed over. Until I (stupidly) remembered that I hadn't changed the goDaddy information to point to these new nameservers. I panicked thinking all the sites (six of them) would be down. However, they weren't. When I tried to change the nameserver information for a domain in goDaddy it came back with errors... it would only accept ns1.example.com and ns2.example.com.
So, I did a tracert to the IP address of the server and indeed it comes back as abc.example.com. Every domain is associated with that static IP.
I can't even find anywhere where abc.example.com is listed within the WHM. All the new values are listed... so, where is it pulling this from? I thought the reset of the server (as a graceful reboot) would resolve this issue.. it hasn't. I've rebooted twice and awaited the thirty minutes for everything to get back online. No success.
Quote:
The zone for the root domain splinteredmedia.net is missing, or could not be read. The ip address will be read from the webserver configuration and a new zone will be created for this subdomain. Bind reconfiguring on smpl using rndc Error reconfiguring bind on smpl: rndc: connect failed: 127.0.0.1#953: connection refused
Created DNS entry for ns1.splinteredmedia.net
Is the error i get when i try to add a entry for one of my nameservers.
I have cPanel on a CentOS 5.1 VPS
I am still pretty new to CentOS
how would i go about adding a zone and if somebody cpuld point me to a place where i can read exactly what it is and how to set it up i would be very grateful
I just got a deticated server with cPanel
Hostname: xyz.mydomain.com (example)
I tried to do a traceroute and I get this message
"unable to resolve target system name"
My registrar is GoDaddy. Is there something I need to set up for xyz?
I have my private NS set up, ns1/ns2.mydomain.com with their associated IPs.
on one server we have changed hostname.. and now we receive mail delivery failed as this:
You cannot setup a domain that is the same as the servers hostname
"
SMTP error from remote mail server after end of data:
host mail1.**.com [**.**.***.**]: 557 Your domain sun.***.net does not have a valid MX DNS record.
"
We have check under dnsstuff.com and for sun.***.net there aren't mx dns set
sun. is setting, under whm, into account www.***.net
we have try to add a new account for sun.***.net but system said
"You cannot setup a domain that is the same as the servers hostname"
So, How to set correctly MX DNS record for hostname?
my VPS with Steadcom has been running for about six months now and for the most part I'm very pleased.
I'm not all that skilled at running it yet, still learning.
First, My email was being blocked by some recipients, I am using sendmail. So I had to change the hostname and the hosts file, and the network file to my domain name, instead of the hostname Steadcom gave me. This fixed the email and it seems receipients are okay with the new settings.
However, whenever I restart the VPS, these files and the hostname get reset. How can I make it so these are not changed... is this something I have to bring up with Steadcom or is it a setting I'm not getting quite right?
Second... my webmin seems to have problems. I can log in, but then sometimes I cannot navigate to the areas I need to, as I'll get a page not found error. I have been stopping and restarting webmin, and that sometimes helps, but sometimes not and I have to restart the whole server. Which I really don't want to do just for webmin. I don't really know webmin that well, either, so would love some help on what I can do about this.
Third.. when I have SSH running I often get Brute Force warnings for a bot or someone trying to log in. So I just stop the service all together. But when I restart, it starts up again. How can I keep SSH from starting unless I need it?
I am with a server, I alter the hostname for the command:
root@servidor [~]# hostname newhostname.domain.com
But when I give the command below, it continues the same hostname.
root@servidor [~]# host IP_SERVER
186.18.232.72.in-addr.arpa domain name pointer actualhostname.domain.com
I already altered WHM and /etc/hosts, but anything.
I have one VPS with CentOs and WHm .
No I want to change the hostname for he VPS. So in how many server's configuration files I have to make the changes?
I've set up a few domains in WHM, though I noticed when I use Ping Plotter to do a traceroute on the domain, the result always shows host.mydomain.com as the last stop, instead of just mydomain.com:
Code:
Target Name: mydomain.com
"
"
12 84 ms CWIE-LLC.car1.Chicago1.Level3.net [43.793.208.66]
13 82 ms [80.71.21.100]
14 84 ms host.mydomain.com [23.32.14.91]
I was wondering, how can I configure the DNS in WHM so the last stop is just mydomain.com?
My server is fedora core 4
in whm :
Invalid Hostname. (This account is currently not available.). Hostnames must be
fully qualified domain names and not contain any spaces or tabs.
Say for example I have a cPanel dedicated server, with a hostname> earth.anonymous.com which is where I host several resold shared accounts all using my nameservers, ns2.anonymous.com and ns2.anonymous.com
I am using the cPanel dns, simply pointing the domain namesevers to two IP`s given in my IP allocation.
I wish to lease another server, using the hostname: venus.anonymous.com
This is where I start getting confused with the domain/dns. Would it be easier for me to use a third party dns service such as easydns to host the actual main domain dns?
If someone can understand what I`m getting at here, could they give me a few tips of getting this setup and easy and reliable as possible.
A lot of hosting companies are using anonymous hostnames, is this a good plan?
This is a really stupid question, but I honestly don't know the answer to it. After doing some searches, I'm still not sure what to do.
In Plesk, I have the ability to change my server's hostname.
The default hostname is "localhost.localdomain"
To what can I change this?
If I do...what will be affected?
I have a VPS with the hostname myhost.domain.com, with four IP addresses, one of which is assigned to a shared hosting account (using WHM/cPanel) at sub.domain.com.
For email delivery purposes (I'm sending e-commerce receipts (that MUST be delivered) from PHP apps running on sub.domain.com), do I need to set up reverse DNS entries that say their IP addresses belong to myhost.domain.com, or to sub.domain.com?
I got rvskin with whm and it seems whm create account for itself.But every time when i load whm i getting popup with error Hostname A Entry Missing!
The server was unable to lookup an an A entry for its hostname (ns175.domain.com). This is generally because the entry was never added. However this could also be the result of your nameserver(s) being down. If you would like to attempt to automatically add the entry, And i am sure i have that A entry.Any idea why is that happening ?