I am currently using IPB as my forum software. I've enabled admin validation only for registrations, to combat the increasing amount of spam signups. I see a lot of .ru and .cn email signups, or other suspicious signups, which I always delete.
What is the best way to combat these spammers?
I've been considering something like WHT uses, that you need X posts before being able to post links, how can I accomplish this with IPB?
I'm just wondering what a few good techniques to prevent DDoS would be. What causes them? How can I protect my server against them? I noticed that Apache has something called mod_evasive which helps against them. Does lighttpd have something like this?
View 9 Replies View RelatedIs there a way to prevent a certain service from taking up a certain amount of load on the server?
Like, shouldn't there be a way I can tell gzip or exim how much server load they are allowed to take up on my server?
I know it may run them slower, but it will be for the better if I could set each one to only be able to have a max load peak or something.
The images I am trying to block are on page generated by a simple PHP script on my server. The offender has replicated what I am doing with ASP on their server. They are hotlinking to my images for the resulting page. They left my website's name on them, so they must think that giving credit is enough.
I'm going to be contacting them to stop but I also want to see if there is a way for me to prevent it from happening in the first place.
I tried mod_rewrite...
Code:
RewriteEngine on
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^[url].*$ [NC]
RewriteRule .(gif|jpg)$ - [F]
I know mod_rewrite works on my server because I've been using it for some other things.
However, whenever I enable the above code (add it to the directives and restart apache - have also tried just putting it in a .htaccess file in the appropriate directory), I end up with images still being allowed on my domain and the other domain I'm trying to stop from using my images. Do you think it could have to do with an absent referrer? I read that the code doesn't work if the referrer is blank. What else would cause this not to work? Obviously the domain would have to be correct, but it doesn't block from my domain OR the offending domain.
I tried another method:
Code:
<FilesMatch ".(gif¦jpg¦png)$">
SetEnvIfNoCase Referer ^$ allow_image
SetEnvIfNoCase Referer ^[url] allow_image
Order Deny,Allow
Deny from all
Allow from env=allow_image
</FilesMatch>
This one blocked images to the offending domain, but it also blocked mine!
I am running a hosting service. Recently a user put a phishing site on the server, pretending to be an eBay signup page and soliciting passwords. I had all kind of truble with this, because eBay complained to my server company.
I would like to ask if you know any solution what would block such sites automatically?
It could search for some predefined texts on the page (such as "sign in to eBay") and block the page if they are found. I wasn't able to find anything in Apache documentation.
I can't get SELinux to let httpd load the IonCube module for PHP. I've given the CentOS 5 forum a try (here: http://www.centos.org/modules/newbb/...15403&forum=42), talked with WHMCS's support (the app I'm using that needs it), and even opened a ticket with IonCube. Unfortunately nobody seems to know how to tell SELinux to let httpd "exec" modules.
I'm running CentOS 5, and the error I'm getting in /var/log/messages is:
Jul 23 10:15:30 host kernel: audit(1216833330.905:1249): avc: denied { execheap } for pid=22055 comm="httpd" scontext=root:system_r:httpd_t:s0 tcontext=root:system_r:httpd_t:s0 tclass=process
I can disable SELinux and it works fine (setenforce 0), but that's not the solution I'm looking for. Can someone please tell me how to do this the *right* way?
PRODUCT, VERSION, MICROUPDATE, OPERATING SYSTEM, ARCHITECTURE
Plesk Panel 11.5.30#46
Centos 6.5
AuthenticAMD, AMD Opteron(TM) Processor 6272
PROBLEM DESCRIPTION
Upon a shutdown or reboot, the system shuts down sw-collectd. Further along, it will end wdcollect and the following will occur:
init: psa-wdcollect main process (pid) killed by KILL signal
init: psa-wdcollect main process ended, respawning
wdcollect[pid]: Language en-US is used for sending e-mail messages.
wdcollect[pid]: Failed to connect to database server during the startup. New attempts will be made if needed.
wdcollect[pid]: Server started
I believe this is preventing the un-mounting of drives which in the end freezes the shutdown process on:
Please stand by while rebooting the system...
After this occurs, I have to force the VM off and then boot again.
I have tried the following:[URL] .....
I am currently installing lxadmin in my webserver, but during the intallation i received a alert message from my "settroubleshootebrowser" saying:
SummarySELinux is preventing /usr/local/lxlabs/ext/php/php from loading /usr/local/lxlabs/ext/php/lib/mysql.so which requires text relocation.
Allowing AccessIf you trust:
/usr/local/lxlabs/ext/php/lib/mysql.so to run correctly, you can change the file context to textrel_shlib_t. "chcon -t textrel_shlib_t /usr/local/lxlabs/ext/php/lib/mysql.so"The following command will allow this access:chcon -t textrel_shlib_t /usr/local/lxlabs/ext/php/lib/mysql.so
This message was for thwe SQL and Zend optimizer.
My Question is, where do i find the "chcon -t textrel_shlib_t" file allow access?
On my server, users can connect to any database as long as they have the database user and password. This makes it easier to hack any database on the server.
What I want to do is to make the users can only connect to their own databases and not other's.
I tried changing the localhost ip address but it didn't work ( I assume I didn't do it the right way)
just got some sites hacked for a second time by this V4 team.
Quote:
Hack3d
Your System 0wned By V4 TeAm
V.4 Crackers
Contact :
Dj_moad@hotmail.fr
Attack Method : uid=0(root) gid=0(root) groups=0(Root)
Attack Reason : Revenge against that websites
GrEetz To All V4 TeAm Members
==>>V4 TeaM<<==
links to [url]
i've run every security setting i can picture, including CSF, firewalls, restricting php access, suexec and what not.
how these a**holes keep coming in? using WHM11.
Microsoft Windows Server 2008 R2 Service Pack 1
Panel version 11.0.9 Update #59, last updated at Oct 3, 2013 02:06 AM
MailEnable version 5
I see in the plesk documentation that the screen to enable SPAM filtering for an individual there is an option to "Move spam to the Spam folder". I don't see that option so I am wondering if it is only available on some versions of Plesk, or in combination with certain mail servers. How to make that option available?
I just toke a Virtual dedicated server based on linux-vserver technology with 512Mo of ram burstable to 3 Go, to host my ipb active forum (20,000 registred members ~80 simultalinous)..
the probleme is the vds can't handle the forum due to bad memory Usage..
Look at the memstat output :
Quote:
root@xxxxxx:/etc/init.d# memstat
676k: PID 2303 (/dev/zero)
436k: PID 2308 (/lib/tls/libnss_files-2.3.2.so)
11956k: PID 4215 (/SYSV00000000)
244k: PID 4234 (/usr/lib/libdb3.so.3.0.2)
34500k: PID 4280 (/lib/tls/libnss_files-2.3.2.so)
252k: PID 4287 (/lib/tls/libc-2.3.2.so)
396k: PID 4527 (/usr/lib/libdb3.so.3.0.2)
264k: PID 4529 (/lib/tls/libc-2.3.2.so)
392k: PID 4558 (/usr/lib/libdb3.so.3.0.2)
264k: PID 4563 (/lib/tls/libc-2.3.2.so)
236k: PID 4569 (/usr/lib/libdb3.so.3.0.2)
3560k: PID 4714 (/lib/tls/libnss_files-2.3.2.so)
3556k: PID 4791 (/lib/tls/libcrypt-2.3.2.so)
3476k: PID 4792 (/lib/tls/libcrypt-2.3.2.so)
3588k: PID 4793 (/lib/tls/libcrypt-2.3.2.so)
3468k: PID 4794 (/lib/tls/libcrypt-2.3.2.so)
3564k: PID 4795 (/lib/tls/libcrypt-2.3.2.so)
3620k: PID 4796 (/lib/tls/libcrypt-2.3.2.so)
3472k: PID 4797 (/lib/tls/libcrypt-2.3.2.so)
3468k: PID 4819 (/lib/tls/libcrypt-2.3.2.so)
460k: PID 5064 (/lib/tls/libnss_files-2.3.2.so)
248k: PID 5087 (/lib/tls/libnss_files-2.3.2.so)
248k: PID 5090 (/lib/tls/libnss_files-2.3.2.so)
8532k: PID 6351 (/SYSV00000000)
320k: PID 7933 (/usr/lib/gconv/ISO8859-15.so)
307124k: PID 7969 (/lib/tls/libnss_files-2.3.2.so)
240k: PID 7970 (/usr/lib/locale/locale-archive)
980k: PID 12506 (/lib/tls/libc-2.3.2.so)
752k: PID 13316 (/lib/tls/libnss_nis-2.3.2.so)
664k: PID 17042 (/dev/zero)
404k: PID 17195 (/lib/tls/libnss_files-2.3.2.so)
3328k: PID 24943 (/SYSV00000000)
12248k: PID 25310 (/SYSV00000000)
11128k: PID 25311 (/SYSV00000000)
11772k: PID 25312 (/SYSV00000000)
11072k: PID 25313 (/SYSV00000000)
12028k: PID 25314 (/SYSV00000000)
12028k: PID 25316 (/SYSV00000000)
11688k: PID 25317 (/SYSV00000000)
12340k: PID 25318 (/SYSV00000000)
11224k: PID 25319 (/SYSV00000000)
11796k: PID 25320 (/SYSV00000000)
11548k: PID 25322 (/SYSV00000000)
12012k: PID 25323 (/SYSV00000000)
11736k: PID 25324 (/SYSV00000000)
11440k: PID 25325 (/SYSV00000000)
11540k: PID 25326 (/SYSV00000000)
9344k: PID 25327 (/SYSV00000000)
11164k: PID 25328 (/SYSV00000000)
12080k: PID 25329 (/SYSV00000000)
10136k: PID 25330 (/SYSV00000000)
12084k: PID 25331 (/SYSV00000000)
396k: PID 32054 (/lib/tls/libc-2.3.2.so)
428k: PID 32055 (/lib/tls/libc-2.3.2.so)
428k: PID 32073 (/lib/tls/libc-2.3.2.so)
428k: PID 32074 (/lib/tls/libc-2.3.2.so)
428k: PID 32075 (/lib/tls/libc-2.3.2.so)
428k: PID 32076 (/lib/tls/libc-2.3.2.so)
428k: PID 32077 (/lib/tls/libc-2.3.2.so)
396k: PID 32087 (/usr/lib/libdb3.so.3.0.2)
268k: PID 32090 (/lib/tls/libc-2.3.2.so)
396k: PID 32140 (/usr/lib/libdb3.so.3.0.2)
264k: PID 32142 (/lib/tls/libc-2.3.2.so)
724k: /SYSV00000000 4215 6351 24943 25310 25311 25312 25313 25314 25316 ...
1280k: /dev/zero 17042
1280k: /dev/zero 17042
1280k: /dev/zero 2303
1280k: /dev/zero 2303
68k: /usr/lib/courier/authlib/authdaemond.mysql 32055 32073 32074 32075...
612k: /bin/bash 7933 17195
64k: /usr/lib/libtasn1.so.2.0.10 4215 6351 24943 25310 25311 25312 2531...
1644k: /usr/lib/locale/locale-archive 7933 7970 17195
1124k: /usr/lib/libperl.so.5.8.4 4215 6351 24943 25310 25311 25312 25313 ...
12k: /lib/libcap.so.1.10 2303 13316 17042
8k: /lib/libcom_err.so.2.1 4215 6351 24943 25310 25311 25312 25313 253...
8k: /usr/bin/logger 7970
248k: /lib/libncurses.so.5.4 7933 17195
20k: /lib/libnss_db-2.2.so 2303 4215 4234 4527 4558 4569 6351 13316 170...
32k: /lib/libpam.so.0.76 2303 4215 5064 5090 6351 13316 17042 24943 253...
28k: /lib/libwrap.so.0.7.6 2303 4215 4287 5064 6351 7969 13316 17042 24...
12k: /lib/security/pam_env.so 2303 17042
12k: /lib/security/pam_limits.so 2303 17042
8k: /lib/security/pam_mail.so 2303 17042
4k: /lib/security/pam_motd.so 2303 17042
8k: /lib/security/pam_nologin.so 2303 17042
44k: /lib/security/pam_unix.so 2303 17042
12k: /sbin/portmap 4287
28k: /sbin/syslogd 4234
408k: /usr/lib/libgnutls.so.11.1.16 4215 6351 24943 25310 25311 25312 25...
80k: /usr/lib/libgssapi_krb5.so.2.2 4215 6351 24943 25310 25311 25312 2...
136k: /usr/lib/libk5crypto.so.3.0 4215 6351 24943 25310 25311 25312 2531...
416k: /usr/lib/libkrb5.so.3.2 4215 6351 24943 25310 25311 25312 25313 25...
1008k: /usr/lib/i686/cmov/libcrypto.so.0.9.7 2303 2308 4215 4280 4714 479...
196k: /usr/lib/i686/cmov/libssl.so.0.9.7 4215 4714 4791 4792 4793 4794 4...
12k: /usr/lib/perl/5.8.4/auto/Cwd/Cwd.so 4215 6351 24943 25310 25311 25...
68k: /usr/lib/libz.so.1.2.2 2303 2308 4215 5064 6351 7969 13316 17042 2...
I own a smf forum with usually 100-150 online users and sometimes it reaches 600-1000. My hosting refuses to host my forum anymore cause there is heavy cpu usage on their server.
So I want to ask you if there is any share web hosting provider that can host my forum with a reasonable prise.
My site has outgrown my current host and I'm strongly leaning towards a vps. I am relatively inexperienced with web hosting as for the last 18 months I've had very few issues with my current host (Stream101.com). They are currently saying my site is very memory and processor intensive which is why I'm going to have to leave them soon(I can't pay the dedicated server prices that would give my site the stability I desire).
About my site:
My site has 18,000+ users, its about 18 months old. 5,632 threads, 78,967 posts. It used about 150gig of bandwidth last month. The site is growing quickly (IMO). The site makes some money, but not enough to justify spending what it would cost for a dedicated server.
I'm happy to provide any other information, but what I am looking for is suggestions on:
1) Is a VPS the right choice for my site in your opinion.
2) What hosting company's would you suggest I look into.
3) How much ram/processor speed should I be looking for
4) any other information you feel I should know about this.
Our forum is under attack...and our host won't do anything except tell us that our load is too high and that they might turn off our account.
But, we've already turned off the forum...the only load is a note that says it's down for maintenance...no database...no html...nothing.
In a very short amount of time it has has over 300,000 page requests for the same three pages.
Is there anything on my side (since I don't run the server) that I can do to stop this or prevent it...etc?
"Can i host a small forum at a 64mb ram vps with lighttpd and mysql? How many users can i have online?" I said that he can do that.Is this answer true?
View 14 Replies View RelatedHow much bandwidth does a forum take to run?
View 14 Replies View RelatedI want to host a invision forum. I have a lot of exp admining and modding but I have never run one myself.
I plan on using 15-30 gigs of material on site and the rest will be offsite storage.
I do not know how many members I will have it could be just a couple of hundred to a couple of thousand.
My question. I was planning on going with WiredTree because of all the great reiviews out there. And buying thier vps512 which has 60 gigs of storage and 800 monthly bandwith.
Will that be enough do you think? More, less? I would like to stay within 50-100 dollars. since I am mainly running this for recreation and not looking to make a profit.
I have never hosted a website or such before, but after reading here and doing research I do not really want a shared server.
After several stressful hours of reading these forums I have finally decided to post my own question. I have lurked and read here for months and picked my own reseller hosting after reading up on here.
I have a client with a problem with her SMF forum...
She set it up 6 months ago and needs to upgrade her hosting. Her current host is Ausweb and she has been suspended for abuse.
The scenario I need help with is SMF forum v.1.1.5
Traffic per month: 11-15 gbs
Hits per month: 10,000
Storage: 1084.8/2000 MB
Members: >200
She has been suspended 3 times last month, charged apparently for an upgrade and has forked out almost $1500 for 12 months from April, which I calculate to be $125 per month for 12 months... which should be a dedicated server!
Does she need a dedicated server?
Would a VPS suffice?
If she does.. who is economical as at this point it is non profit site although we are looking at changing that, through advertising.
What is the best scenario with the least added expense for this disillusioned forum owner who has a successful site but has had a horrendous experience with hosting?
I've got my new hosting provider choice narrowed down to two providers (ServIt & WiredTree) for a Managed VPS. From the reviews here they both seem to be very similiar in customer support and reliability. The only difference I have found is that ServIt does have a community forum and WiredTree does not have a forum. It's wierd to be choosing a hosting provider based on this, so I thought I would come get your opinions on this.
View 14 Replies View RelatedI am trying to create a phpbb3 forum that can hold like 100 members. I am looking for hosting that will support my forum, is a decent price, and if I don't have to lock in any months thats an added bonus.
View 11 Replies View RelatedWe're setting up a vBulletin forum, and I'd like to know what we'll need from a vps. We expect 5000-10000 hits a day, maybe 30-60 users on at a time, and we'd like to keep quick load speeds.
So how much ram would we need to achieve fast speeds?
How many mysql database might we need (just roughly for such a sized forum)?
How much bandwidth will we need?
Plus any other info you can give!
I could also do with some VPS hosting recommendations. We'll be adding other sites (with less traffic) in the VERY near future, so we'd like them to be accomodated. A host with good support/ response time is a must, and one with excellent uptime to!
I have no experience in MySQL / database.. But I want to open a forum to learn some stuffs.
View 11 Replies View Relatedinstall a phpbb3 or a SMF forum on my template html file for my web hosting company, i basically just want the forum to be under my site banner
View 7 Replies View RelatedWhat kind of webhost will I need for phpBB forum?
Here are the requirements :
A webserver or web hosting account running on any major Operating System with support for PHP
A SQL database system, one of:
FireBird 2.0 or above
MySQL 3.23 or above
MS SQL Server 2000 or above (directly or via ODBC)
Oracle
PostgreSQL 7.x or above
SQLite
PHP 4.3.3 or above with support for the database you intend to use. The optional presence of the following modules within PHP will provide access to additional features, but they are not required.
zlib Compression support
Remote FTP support
XML support
Imagemagick support
Of course free hosts are preferred, but nothing too expensive will do fine aswell. n_n
I want to create a forum and have not got any idea in where to start. All I have at the moment is a PhpBB2 template which I would like to use.
The few questions I have are:
1: Do I need to purchase Webspace, if so which are recommended?
2: How would I install the template to the webspace and would the users login information get stored in a seperate database or would that come with the web hosting?
All help would be very much appriciated as i have no idea where to start and how to get it up and running.
I transfered my forum from one server to another. ips changed. Before the transfer, I closed the board and put an announcement. After the transfer I opened the board and started posting.
Now, there are other members who've posted after the transfer but I've noticed decrease in activity. One of the members emailed me and told me that the board is still closed for him with the announcement shown. That message is from the old and not the new server. So how is this happening? What should he or I do? I and some other members can access and post normally.
The forum is is the one in my sig.
Just see if it's closed for you or not.