My server recently was hacked and the hacker put up a Bank of America subdomain phishing site. My box got unplugged because of it.
I remember months ago there was a company that everyone was recommending to manage servers where they go in and tighten all security vulnerabilities, apply patches, etc etc at a low monthly fee.
Can anyone direct me to what company is the "recommendation of the moment" ?
I initially posted a topic to get help with a problem because I want to fix it myself without wasting the time of the server management company. They however picked up the post and said I should opened a ticket with them.
The problem is however still not resolved to my satifaction after a few days because we differ on some points so can you please air your view on this matter?
-----------------
[url]or [url]
Problem 1) Certificate error that hostname and certificate name don't match.
Problem 2) At some places in WHM or cPanel there is a secure and non secure warning items.
The problem 2 is perhaps to bug in WHM V11 so it is not so important.
However, the server mangement staff insist that problem 1 is because the login is via IP (or other domain name) and not via hostname but I don't agree with them because.
a) During the years I always logged into whm or cpanel via ip or domain names and never got such error.
b) cPanel redirect any whm or cpanel access to the ssl ports under HOSTNAME so it MUST match the certificate even if you use 75.127.69.82:2087
I don't get any error if log in with [url]so it is clear that the redirection to ssl ports under HOSTNAME like above don't work correctly.
That the redirection works can be seen by using [url]because the same error comes up (for mercury.domain.com) despite the site have his own certificate.
What we have here is.
Hostname = mercury.domain.com
Certificate Name = mercury.domain.com
[url] (Works Fine because certificate name is mercury.domain.com)
[url] (Name of site don't match mercury.domain.com despite redirection to hostname IN WHM)
[url](Works fine, Host name = othersite.com and match certificate name)
[url](Name of site don't match mercury.domain.com despite redirection to hostname IN WHM)
What I suspect is that cpanel redirect but NOT to the actual hostname (mercury.domain.com) or otherwise present/display the hostname incorrectly so that it don't match the certificate.
WHM 11 setting: Redirect to ssl ports = enabled
Two further settings, redirect to hostname = enabled
(None of the settings have any effect anyway and I tested hostname, certificate name and origin domain name redirect with the same results)
Seeking to colocate several servers along with an FC based SAN with virtualized software, elsewhere Mysql clustering & combo master/slave setups and require a company you maybe able to suggest that could possibly be our SysAdmins, support & maintain the setup.
Additionally they will need to config sw load balancers & firewalls e.g ipcop
Does any body recommend we3cares server management services?
I need a very simple server management and hardening job and dont want to pay much. (not for a hosting company)
As a longtime member around these parts, I've had the opportunity to use the services of a lot of different companies. Whether it be dedicated providers, software developers and in this specific case -- server administration / management. I have had the opportunity to work with Scott of Admingeekz over the course of the past few months. He's provided me with server optimization, security and most importantly prompt, effective communication.
Link to Admingeekz: Admingeekz
I'll detail the pros, cons & downsides below.
Pre:
I started working with Scott for system administrative needs a few months back for a few one-off jobs, sorting issues that I simply either didn't have time to manage or couldn't handle by my lonesome. The first few times I've used Admingeekz went off without a hitch and so I began delving deeper into their services & recently had an emergency that I had Scott deal with..
Admingeekz Pros:
The pros of admingeekz are instantly obvious the moment you start using them. The team there is attentive, thorough and most of all they're not just robots. Not only will they handle the job but in almost every case they'll make recommendations, outpour some criticism and overall ensure that they're not just taking care of the issue at hand but rather going out of their way for all of your needs.
Pricingwise, I expected to be paying a lot more for the service that Scott & co. are offering. Not only are they inexpensive but they offer a 10% discount for return clients -- something that has continued to bring me back, not only because of the service but because I'm a cheapskate.
Communication, Scott is really on top of things. Frequent updates during the job being performed, effective communication and most of all friendly to work with.
Thoroughness: Admingeekz gets the job done and goes well beyond what's necessary in a lot of cases. Scott handled an emergency for me just yesterday and with most companies you just expect an 'okay, complete'. Scott went above and beyond and sent me a thorough detailed list of issues that he noted on the system, along with an exceptionally precise list of things he had done. Gorgeous, what we need as company owners.
Admingeekz downsides:
Now the downside... and admittedly, they're nasty.
The only downside to admingeekz is that you won't be satisfied anywhere else after you've worked with Scott & co. Not only are they attentive, thorough and fast -- but they know their security, administration and optimization. It will be nearly impossible for me to be satisfied by another security company at this point.
Keep up the great work Scott & thanks for spending hours working with me!
I need to ask, what's best company of Secuity and Safe servers.
So I hope any one can answer my seeking.
I need a good and fast company that are experienced in Linux servers to secure my server, can you recommend anyone?
View 0 Replies View RelatedCan someone recommend an affordable shop that performs security audits a more specifically network and web-application penetration tests?
View 3 Replies View RelatedI am a web designer, and have been doing this for about 5 years now and have never encountered such a problem. I had a problem come up a few days ago where one of my clients got into an argument with the Mavrick Team web hosting and computer services company's owner regarding services. She has reported to me that he went into her email account, and has emailed her clients false information about her services after their heated discussion. She told him that she was going to press charges. He told her that he had harvested all of her clients email addresses and will email them to her competitors if she does not back down. What can she do? I feel awkward as I am in the middle of it now. I was the one who referred her to Mavrick Team (aka as I host them) for web hosting services, and moved her site to their servers. This man has created such a big problem for this women now. Her clients are doubting her services and he is blackmailing her. She does not owe him any monies. She has forwarded two of the emails that her clients forwarded to her, so I know she is not making this thing up. I advised her to move all of her emails to a personal email account, contact all of her clients to let them know that someone has access to their info, and I am helping her move her site. Who can she report them to?
View 12 Replies View RelatedI run a web hosting company and one of my servers is a LAMP server running CentOs 5. A user of mine has a Joomla installation running to manage his website and he has run into the following problem that I am puzzled by.
When Joomla adds a component or module to itself, or when a user uses the Joomla upload functionality, Joomla will add the new files under the user name "apache". This makes sense as it is the apache service running PHP that is actually creating the files.
However, when he FTP's into the account to modify these files, he doesn't have the appropriate permissions to do so as he doesn't have a root level login, just permissions on his home directory which is the site. Any help would be much appreciated.
Also, does anyone know how to change the owner/group of a directory and all of its sub directories in Linux without changing the actual permissions? I.e. some of the files in the folder have different permissions (0644 as apposed to 0755) than its parent but if I do a top down user/group change on the folder it will change everything in that folder to 0755.
I recently got my hands on a few unmanaged VPS to play around with and learn how to work on them (eventually plan on going dedicated, so this is a preparation for that). I know the basics of working on Linux via command line, but beyond that I'm clueless. Does anyone know of any good guides for setting up and managing a LAMP environment on a VPS?
I'm mostly interested in CentOS and Debian.
I can find guides specifically for 1 or 2 things, but so far the only useful (complete) guide I've found is the one here. I'm not sure if that's still up to date on todays standards as it was written 2 years ago?
Things I'm looking for:
- Installing and setting up a LAMP environment
- Jailing SSH
- User/Group management
- Firewall setup / security hardening (I've read the thread in VPS tutorials as well as the one in Technical and Security Tutorials about securing your hosting company)
2 more questions...
1) Wondering what would be better... webmin or ispconfig? From what I understand webmin is more OS oriented and allows easy configuration of various parts of the OS while ispconfig is more hosting oriented? I take it running both at the same time is not recommended/needed?
2) Still not entirely sure what OS to choose. In my VPS atm I have the following available (along with the likes of Ubuntu, Gentoo and SuSE but I think the list bellow is what I should use). Would love if someone could list some advantages/disadvantages of each.
- centos-5-i386-afull
- centos-5-i386-hostinabox571
- debian-3.1-i386-minimal
- debian-4.0-i386-minimal
Appreciate any input.
Thanks for reading.
any VPS with management provided?
i only used share hosting before, with knowledge in cpanel
however, i am afraid i cannot handle with VPS.
Hence, i would like to ask any VPS with managment or support provided?
my visitor mainly from hongkong, taiwan, USA and china.
My buget is around 30 US per month.
How do i go about setting up a DNS zone using WHM for my new dedicated server? Also, what does record type mean (as in: A, A6, AAAA, CNAME, MX, NS, PTR, TXT, WRK)?
If someone can point me to a good tutorial or reference so that i can get my server up and running with multiple domains, I'd appreciate it.
We run around 300 domains for our clients; in the past we've believed that it was better to outsource DNS hosting, we've used a few different local companies but now we're getting to the stage that I'd like to consolidate all the records to one company.
Does anyone have any reccomendations for ultra reliable, easy to manage? Or is it better to put a dedicated machine in and run our own service?
I've got a few domains with Zoneedit, but I want to way-up some alternatives, I don't think the zoneedit admin is particularly user friendly and it's quite expensive $1000+ a year for what we need.
I'd like to know your opinions about various VPS management systems.
What is the best VPS management system?
1. Virtuozzo
2. VDSmanager
3. HyperVM
4. SolusVM
webinterface or windows app to help manage and compile alter apache/php configs, and install apache modules ext.
Im not a linux tech savy person. So im looking for something to go along with my plesk control panel to help with things that plesk cant do.
I have a vps using centos5 and plesh 9.2.1
i have few dedi servers from one Us company, i am currently using their DNS service, we are into small level hosting, i want to run my own DNS, is it necessary to run a separate server for DNS?
Actually how the hosting companies do the name server pointing, for an example if i am buying a server and want to host a few domains in that server, what normally we do is we will change the name server to that companies name server
ns1.domain.com
ns2.domain.com
my question is if i am pointing my domains name server to the name server
ns1.companydomain.com
ns2.companydomain.com
how that company points the domain to my server for an example its ip is 72.xx.52.xx i am bit confused in this.
Also i have a doubt how they are creating this for n number of domains?
We are working on our pci certification ( fun times right? ) and i was wondering what other people do for server management in the dmz. Few things we are looking at listed below. We will be doing cisco zbfw for firewalling and using NAT.
#1
Servers have 2 nics, 2 ips, gateway ect. One of the networks would be considered a "management vlan/network". Other network would be for all other traffic, including natting to the internet, and traffic to the "internal" zone but locking down traffic to source,destination, and protocol level.
On windows you really on have 1 true default gateway, and because windows doesnt just send traffic out the interface it came in, but looks at the routing table, some network routing issues popped up.
#2
Use only 1 nic/vlan/ip/gateway. Lock down traffic to source,destination, and protocol level for dmz to "internal" traffic and do an "inspect" statement to allow all necessary traffic back in and drop everything else. "Internal" to dmz would just be an inspect all because this traffic wouldnt need to be firewalled so management traffic would work just fine.
Does anyone know of any software applications available of which would allow staff/employees to log into SSH while actively logging all input and prohibiting certain commands from being run?
A list of applicable servers to log into would be amazing as well, although that might be reaching too far.
I have 4 ip addresses.
74.63.67.146 - my main server. I have also configured my main domain to "own" this IP address and have installed an SSL cert. The domain and the cert work correctly but when you type in the IP address in, it shows "Apache is functioning normally".
74.63.67.147 - this is owned by a client. Same thing happens as above except that the domain name and the IP address point to the Apache message.
74.63.67.148 - this is the shared IP. Everything works correctly.
74.63.67.149 - this is another owned IP and it works correctly.
The only thing that is different from 146, 147
I just want to know what is the best way to run a hosting solution remotely. I.E have OS re-installed without having someone to do this for us in the DC for example?
I've heard KVM over IP but unsure to where that would lead us.
Anyone know of any service that will provide 24/7 support for colocation servers I own?
By support I mean regular system updates, monitoring server stability, and be available 24/7 if problems were to occur.
I plan to colo with steadfast networks.
So far I had only dealt with shared hosting. Now I think it is high time to move to a VPS server. But before I migrate, I want learn how to manage a VPS server. Can anyone plz tell me how I can setup a VPS on my system, so that I can learn how to work with it.
View 12 Replies View Related[url]
Anyone used it? One of my friends showed me it, looks pretty neat actually.
My mickey mouse company just bought a new server recently. However, all our email send from the new server went to our client's junk mail. Is there a solutions to this? How to prevent going to people's junk mail?
View 4 Replies View Related1-On a VPS if I have 128 RAM guaranteed and 512 Burst, when I do top I can see the 471856k, it means at that moment I can use 471856k RAM, or this memory show is something I cant trust?
2- If I have 128 guaranteed and for some reason a a process tries to eat more than that(like 1 gig for exaple) it will be not allowed? Do I have to pay anything for that leak? DO the leak affects the ENtire host?
I believe I kno all those answer but is better to double check them....
file/folder management system where I can upload files thought the system of FTP program and setup accounts that can access that folder with various permissions.
The goal is to be able to create any amount of folders and sub folders and assign unlimited amount of users to individual folders with permissions to upload (with or without over-right privileges), and download files in the folder they have access to.
I am open to using a third party, if Yahoo! or some similar file hosting company offers such a service.
Does anyone know of any good IP management software that will handle subnets and all?
I want to be able to add a range and then control what is taken and not and etc.
We saw the special offer of ThePlanet here on banner advertisement and tried to get a special promo but since the last 3 days, I am running after them and every sales person is telling something different about promo and my deal even it's confirmed by management...
View 8 Replies View RelatedJust curious if there are any decent control panels to manage Hyper-V VPS containers besides DotNetPanel...
I've been trying to find a viable alternative, but I am striking out on my search.
I just cannot seem to understand why DotNetPanel is so expensive, $70/month for the enterprise edition, plus $50/month for 10 VPS containers.
Best management with Lots of bandwidth...
I am going to be starting a filehosting site soon and i need a dedicated server fully managed one. With that i also need alot of bandwidth.
Budget: $150-200
I was looking at [url]but didnt like it much.