Do many hosters use Snort (intrusion prevention software) on their servers as means to raise security level?
If not Snort, what other intrusion detection/related tools are currently popular?
It would be great to learn the opinion of hosters as well. Early-warning intrusion detection could be very useful in many cases.
Do you know Nobody Check Security Tool? Do you recommend it?
[url]
to replace the current router/firewall/gateway on my home LAN with a lower-end PC running pfSense. (A FreeBSD-based distro with a web GUI for managing pf and the like.)
Since the system will be passing all the network traffic anyway, I'm interested in the possibility of having it watch for anything suspicious. Snort is the obvious choice: I want it to spot incoming/outgoing suspicious network activity.
What I wonder, though, is if there is really a lot of benefit to running this on a home LAN? If it was a big corporate network, I could see wanting it to keep an eye on things, but we only have a handful of machines, and they're all pretty secure.
It'd be running on a ~1 GHz PC with 512 MB RAM... Given that the machine would already be acting as firewall/router, caching DNS server, and running PHP/Apache for the management interface / graph generation, is piling Snort on top of that asking for trouble?
Is anyone using snort?
Does it really block any web based attacks?
I know I can do port scans, and it can alert you to a whole bunch of false positvies, but is it blocking/detecting any serious attacks on your web server?
If so, which rules are the one is alerting on?
I doubt anyone is writing their own rules so what do you think is the best site for Snort rules for a web server which are strong but also do not result in many false positives.
View 4 Replies View Related[url]
View 0 Replies View RelatedDoes anyone have snort logging to a mysql database?
I am trying to get that to work so I can view the alerts with BASE.
I followed the instructions but snort is not logging to the DB,
I run a web hosting company and one of my servers is a LAMP server running CentOs 5. A user of mine has a Joomla installation running to manage his website and he has run into the following problem that I am puzzled by.
When Joomla adds a component or module to itself, or when a user uses the Joomla upload functionality, Joomla will add the new files under the user name "apache". This makes sense as it is the apache service running PHP that is actually creating the files.
However, when he FTP's into the account to modify these files, he doesn't have the appropriate permissions to do so as he doesn't have a root level login, just permissions on his home directory which is the site. Any help would be much appreciated.
Also, does anyone know how to change the owner/group of a directory and all of its sub directories in Linux without changing the actual permissions? I.e. some of the files in the folder have different permissions (0644 as apposed to 0755) than its parent but if I do a top down user/group change on the folder it will change everything in that folder to 0755.
What DNS tool do you sugest ? Bind/PowerDNS/Etc ?
And where can I find newbie information about DNS set up?
I am trying to use free -m tool to check memory usage and I am having issues with understanding.
>free -m
total used free shared buffers cached
Mem: 1003 987 15 0 147 505
-/+ buffers/cache: 334 668
Swap: 2000 4 1995
How come cached value is 505 since used value is 987, does cached is included in used 987?
What is the best tool against spam for a linux server using cpanel?
View 8 Replies View RelatedI am maintaining a dedicated server ( which have apache,mysql,ftp,dns servers) for my organization , i want to produce a weekly report on server like,
1)Avg Server load for current week
2)Avg Memory usage for current week
3)No.of time apache,mysql,dns was killed in current week
As above i want produce a report ,How can take such kind of report from server? Is there is any tool for report generation?
Is there any tool available which can be used to check permissions of the folders and files. For example, if we run the tool on the server it gives the list of files or folders which have write/modify permissions for everyone or other anonymous users in Windows.
View 0 Replies View RelatedI have a customer who is hosting a website on a dedicated server. The server is a high spec server with Intel Core 2 DUO E8400 processor, 4 GB DDR2 ECC RAM and a SATA Hard Drive. He is running only a single website which has a data entry section. The problem is that a few scripts when run consume 99% of the CPU. In fact, there is a particular script which even if run alone consumes 99% CPU. The code retrieves some records from the database by running an SQL query. The code is never executed. I have checked the sql query in the code and it runs fine if executed in SQL Query Analyzer. I know the problem is somewhere in the code, but cannot find the exact cause. Is there a tool to debug the asp code and find out may be the issue with the code? I have tried the Debug Diagnostics utility,
View 2 Replies View RelatedI have several servers and I need a tool to measure CPU/disk/memory performance.
I no nothing about hardware (and I also don't want/need to know).
The tools is to compare only - I don't care about the measure unit, I just need a way to compare the performance between my servers like which one as a faster CPU and so on...
Anyone knows such a FREEWARE (and not bloatware) tool?
If the tool has some kind of hardware report... well.. even better.
as far as i know cacti is the only script that can provide logs of the bandwidth consuming per month. I need to know how much bandwidth my server consumeto avoid overage fees.
But cacti got php function that is reuired to be enabledand its pontentional dangerou to renable some php functions, so i prefer script that is more cgi or any safer script
I recently build a server. I was wondering what tool can i use to test the stability of the hardware and the OS. (Windows2003/CentOS)
View 4 Replies View Related[url]
shows time in which a file of a certain size is sent from a chosen webhosting server to several other servers in US, Germany, UK, Hongkong, Shanghai and AU.
I want a professional opinion: Can I, from Alertra results, make a conclusion about how fast will my site hosted on a chosen server open for my US, Germany...
I'm testing modsecurity2.1.0 and I want to find out if there is a tool that I can use to test different rules i will be using. Like a tool that can generatean SQL injection or some kind of DDoS attack so I can fully test the rules.
View 3 Replies View Relatedsoftware that monitoring an web site such as: I add an url and every 5 minutes he access the site if http server is down he send email notifications.
View 4 Replies View RelatedWhich free server admin tool do you prefer? As far as I can tell Webmin and DirectAdmin are the major players (correct me if I am wrong). I am the only one with access, so their is no need for other accounts or hosting sites from others.
View 5 Replies View RelatedI have just moved to a VPS server from my shared hosting server and I am suddenly finding it tough to code equally well by just using the vim command. I have become more used to the CPanel code editor probably.
Can anyone suggest a nice tool for the same. I have installed webmin, but its code editor just sucks.
What is the equivalent to yum in the latest Redhat releases? I just got a VPS but it doesn't come with yum.
View 6 Replies View Relatedwhere can I have free network monitoring software. because I want to monitor my LAN computers when they connecting to internet like wich site browsing.
View 3 Replies View RelatedI am having a lot of trouble with spammers and hackers. I am currently hosting my site on a windows server.
[FONT='Calibri','sans-serif']What is the best tool that I can use to protect my web-site? The tool should be easy to use and require no JAVA or Pearl and other programming languages as I am not familiar with them.
i'v see a subject for Nmap tool and how to scan servers for any Vulnerability and ports ...
so please some Expert in this to help me in install it here ...
I thought I should share this among all.
You will find many Anti spam blocker tools available in market. I recently come to know about[url]
. It’s an excellent tool to encrypt your email account if you use to display it on your website.
Generally, spammers uses robots (some kind of crawler) to get email accounts from websites. Once they get it they start selling it to other spammers and will start sending spoofing emails.
This tool will help you to encrypt your email address and stop spam coming from your website
What do you use to manage all of your hosted accounts?
We have 2 servers, and about 95 clients. We bill our clients yearly. I cant seem to rely on plesk or cpanel for billing renewal dates, owner, etc.
IS there a program out there to help me see what account is due when, etc? Also who the owner is.
Ideally, Id love it o track by server, or view all, as well as show expiration notifications.
We are just to the point where managing these on excel is getting messy.
What tool is there for me to copy a lots of file from one webhost (FTP site) to another webhost? Like in for migrating to another host.
I'm thinking of a tool where I can specify the FTP access information for both sites, and it would perform the copy without needing to store the files on my local hard disk first.
MRTG outputs the value in premade HTML file, is there another tool available to measure bandwidth (how much traffic is being used mbit/s) but outputs the data to a file?
View 0 Replies View RelatedDoes anyone know of a tool (I've seen it before but forgot the name) which is a bar like 100x30 in pixel and when you click it, a box popups allowing you to select facebook, orkut, myspace, wordpress, etc etc, and you can blog the current site url you are surfing?
View 4 Replies View Related