when I do "yum update" at my centos 5 box, I saw over 40 packages needed to be updated.
For example, there's minor version update for MySQL 5.
so I am wondering how to determine which packages are absolutely needed.
My box is used to serve web applications. I just want to make sure that it's secure.
With Red Hat Enterprise Linux 4 (RHEL 4), are updated packages made available, or are only security patches backported? Specifically I'm interested in vsftpd. Version 2.0.1 is included in the RHEL installation on a server I'm working on, but there is a bug fix in v2.0.4 that I'd like to get access to.
Is there an easy way for me to browse / search what packages are available for RHEL 4, preferably via website?
I am using CPanel. I just made customized features list and want to update all accounts of my reseller with that feature list. But problem is if I update package, this will update account space/bw, I am some account edit direct for space and bw etc. but thats account have same package name.
Is there any option available that update features list without changing current space + BW.
--> Populating transaction set with selected packages. Please wait.
---> Package cadaver.i386 0:0.22.5-1.el5.rf set to be updated
---> Package mtr.i386 2:0.72-1.el5.rf set to be updated
---> Package rsync.i386 0:3.0.2-1.el5.rf set to be updated
---> Package nmap.i386 2:4.20-1.el5.rf set to be updated
---> Package lftp.i386 0:3.7.1-1.el5.rf set to be updated
---> Package syslinux.i386 0:3.63-1.el5.rf set to be updated
---> Package dkms.noarch 0:2.0.19-2.el5.rf set to be updated
---> Package subversion.i386 0:1.4.6-0.1.el5.rf set to be updated
--> Running transaction check
--> Processing Dependency: perl(Crypt:asswdMD5) for package: syslinux
--> Finished Dependency Resolution
Error: Missing Dependency: perl(Crypt:asswdMD5) is needed by package syslinux
when I run yum update
I am asking myself what the best backup strategy for my dedicated server could be. I do not host any commercial website on it (just private ones), but we all know that even losing non-commercial data hurts.
What I already do:
More or less recent backups of the most important websites (just webspace, no email or database) on my local computer
Having hardware Raid-1 on the server and 2 HDs
Using R1Soft Backup Space provided by my server host
I would like to add some FTP space at an external (!) DC to do scheduled cPanel backups.
I think that a further dedicated server or VPS will not be necessary for this task.
Can you recommend a provider of pure FTP Backup Space which is reliable, at least on a 100 Mbps line and affordable?
I guess I need about 100-200 GB of space to keep daily, weekly and monthly backups.
I am writing a website in PHP and just about make the first version live.
I'm a bit concerned with backups at the moment. I don't want to lose all the data, as a lot of effort will be put into adding content to the site. It uses a MySQL database as well as the file system to store data.
I was just going to do MySQL dumps nightly, but I realized that I know nothing about the topic and therefor should ask advice before writing code in PHP ( which only run for 30seconds max? Is that long enough to backup?)
What is the common practices to do backups on a CMS type site? How often? How do you manage backups? Where do you store them too? Does doing backups effect performance? Do you do full backups or just changes? If I write a backup script, should I try do it in perl/python/bash or stick with PHP?
Or any other information which will fill me with confidence.
I'm gonna order my first dedi box. So one question comes up: How should i partition the HD ? It's a low end box with 120gb HD containing CentOS + Plesk, hosting 4-5 websites, nothing special.
Here is my plan:
Quote:
/ - 5gb
/boot - 1gb
/swap - 1gb
/home - 3gb
/tmp - 5gb
/var - 40gb
/usr - 5gb
/backup - 60gb
Surely it is good to have backup, even remote backup, but do you check them on a frequent basis to ensure that they are valid backup ?
What is your backup startegy and how do you verify your backups to ensure they are not corrupt and ok ?
Im interested in cpanel backup strategies.
We are going to host an application for 20 customers. Our application is related to online order system. We will create 20 virtual host on Windows machine. Application developed in dot Net and database is MS SQL 2005. each client have its own database. I Just want to get an Idea from you people about CPU, RAM, Hard Disk, and Bandwidth.
View 1 Replies View RelatedI am working towards launching a site that, among other things, will be a repository for sensitive data on war crimes. As these crimes are ongoing, and occur in a location where assassinations are endemic, I need to develop a comprehensive security strategy that takes into account all levels of the interface between end user / witness and the site / database itself.
I have considered, but am open to insight and advice on, the following:
1. Data security laws in given countries, in order to ensure the privacy and integrity, as much as possible and away from political / state interference, of data communications. Concerns include the interception of data in transfer and the security of stored data (the United States and the UK are almost certainly cancelled out in this regard. Canada appears significantly better, though Greece, it appears, has the greatest level of legislative protection).
2. Encryption as a technique to ensure the security of transfered and stored data. I am particularly interested in best practice advice on encryption.
3. Javascript as a means to establish a more secure interface between the end user (i.e., the browser interface) and the secured database into which sensitive data will be inputed. Has anyone used this, or other techniques of overcoming the inherent insecurity of the browser interface?
4. Various best practices concerning php, MySQL and Apache security. Any and all advice, or guidelines, welcome.
5. Considerations relative to dedicated hosting, and also colocation hosting as an option.
In general, my problem is to ensure that the identities of witnesses, so much as is technically conceivable, can be protected from extra-judicial interference or surveillance. Nothing about this site will be illegal in any way. The problem is that the witness testimony will be about the actions of a powerful state that has demonstrated its disrespect for law.
Ideally I'd find in these forums a few individuals with whom I could discuss these technical matters off-forum. At the same time, general responses would be values.
The site that I'm building is non-profit (indeed zero budget) and does not represent any political party. It's a people's initiative, against aggressive violence and in support of international law.
If you are deploying PHP and MySQL along with a site/application, how do you do it? Do you work with the individual components, or do you lean towards ready-made packages?
I use WAMP to develop my applications, and I find it a very simple yet powerful tool for deploying Apache, MySQL and PHP to Windows platforms. I've been looking at the Zend Server today too, which strikes me as very interesting, especially the full version.
ordering a dedicated server package, what else is there to expect as far as running or pointing your domain name to the servers IP? what else is needed to.. lets say get supercoolryan.com up and running.
Would the hosting company provide this setup for me or do i have to do it myself?
i might order windows server 2003 and install apache.
if it's possible to disable the ability to send email for accounts using a certain package in cPanel? I tried searching, I didn't find anything really relevant. Would it be possible to maybe create a rule, or script to add a rule to each account using a package to just block that username or account from sending email?
View 5 Replies View RelatedI have used e2fsck on linux server hard disk (CentOS 5.0) and the result :
=================================
Warning! /dev/sda2 is mounted.
Warning: skipping journal recovery because doing a read-only filesystem check.
/dev/sda2 contains a file system with errors, check forced.
Pass 1: Checking inodes, blocks, and sizes
Deleted inode 19137773 has zero dtime. Fix? no
Pass 2: Checking directory structure
Pass 3: Checking directory connectivity
Pass 4: Checking reference counts
Pass 5: Checking group summary information
Block bitmap differences: -(16332803--16332804) -(16332823--16332826) +(16345421--16345424) +16347209
Fix? no
Free blocks count wrong for group #498 (25950, counted=25949).
Fix? no
Free blocks count wrong (37023218, counted=37023216).
Fix? no
Inode bitmap differences: -19137773
Fix? no
Free inodes count wrong (19162546, counted=19162545).
Fix? no
/dev/sda2: ********** WARNING: Filesystem still has errors **********
/dev/sda2: 137806/19300352 files (2.3% non-contiguous), 1556879/38580097 blocks
=================================
I don't know the exact meaning of the displayed result , does it mean bad sectors? How much the e2fsck is reliable? Is there any better Linux utility to check bad sectors on Western Digital HDD?
I am with 13 servers in the planet. It would like to know it has as it updates them in a way simpler that I am doing. I update 1 for 1.
View 14 Replies View RelatedIn WHM I'm trying to sync the server time with the time server. It displays the new time but it doesn't actually apply the new time to the server.
Also via ssh when I run
rdate -s rdate.cpanel.net
it says
rdate: rdate: could not set system time: Operation not permitted
I'm on a virtuozzo VPS.
I run a dedicated server with WHM/cPanel (10.8.0).
I was recently supposed to update the Apache installation to add a module, but instead of clicking "load previous config" I clicked on "start build" by mistake. This brought the installation back to default.
I waited till the build was finished and then added all the modules I could remember having installed earlier. This made Apache not wanting to start. I went back to the default and then recompiled apache over and over again, adding 1 o 2 modules every time. Apache booted up fine, but for some reason my mail is suddenly acting up.
I keep getting the following error on one of my domain in my client:
Code:
Unable to connect to POP server mail.example.com.
Error sending password: -ERR Maildir invalid (no 'cur' directory)
When I click OK, I get:
Code:
Unable to connect to POP server mail.example.com.
Error sending password: Operation now in progress
I have a couple of other accounts in the mail client. None of them are receiving mails, even though I can see that there are new mails present in the mailbox via webmail.
My exim is configured to use mbox as far as I know. So I don't understand why I'm getting an invalid maildir message.
I would like to know if Awstats (the software itself, not the data) is updated automatically on cPanel based servers?
If not, is there a way to update it manually?
We wanted to pass along some information that we received from Parallels today. They are planning on releasing a supported Windows2008 Server package for Virtuozzo "in Q3 of this year".
View 0 Replies View Relatedi would like to update my CentOS Linux 5 but i don't want to update mysql and apache i need to use mysql 4. When i entered yum update i can see Total download size: 245 M i can see mysql i386 5.0.45-7.el5 base 4.1 M
how can update my server without updating mysql and apache
I have 2 almost similar webservers:
debian 3.2, P4 3GHZ, 1 Gb ram, kernel 2.6, apache2, php4
Initial apache2.conf:
Code:
Timeout 4
KeepAlive Off
KeepAliveTimeout 2
ServerLimit 1500
<IfModule prefork.c>
StartServers 10
MinSpareServers 10
MaxSpareServers 15
MaxClients 1500
MaxRequestsPerChild 3000
</IfModule>
I update the sources.list on server 1 to mirrors of the new debian 4 etc . I run apt-get update and apt-get dist-upgrade . A whole bunch of things get updated (it was long time ago that I did this anyway). After some troubles with /boot/grub/menu.lst the server boots ok, and everything is well. This server used to have loads of 15-25 at peak times, but after the update its running very smooth with loads of 2-3 at the same peak times. I dont know why exactly, as I noticed updates in OS , kernel version (from 2.6.8x to 2.6.18) , apache2 , php (4.4.4-8+etch1) , and I also needed to update eaccelerator from 0.94 to 0.95 .
A few days later I update server 2. Everything seems to go the same, although the kernel version stays at 2.6.8-3-686. I dont think kernel version at start was exactly same at server 1. But the new php version is the same as server 1, and everything else looks the same too.
But when peak times are coming up, this server starts to have troubles. It is quickly rising to total of 200-300 processes , while server 1 always stays stable at 60-70.
Server 2 also reacts slow if I click somewhere on the site. It takes 5-10 seconds to show a new page. However the load stays pretty low at 1-2 . I see no big cpu usage and also no big memory usage. I have the impression that this server 2 is somehow wasting a lot of apache processes and is making things hard for itself without a real reason.
When I check the seperate mysql database server, I also notice a lot of processes.
Around 200-250 whereas it used to be 40-60. Sometimes this adds up so hard, that all webservers are blocked because mysql has too much processes. When I check the mysql connections, I see a few dozen things like 'unauthen ip:port Connect login' just hanging. All of them have the ip of webserver 2. Those extra apache processes are somehow hanging on to the mysql server without really doing something.
I dont know what is happening, but this server is underperforming very badly now. I managed to limit the problem by drastically lowering ServerLimit and MaxClients on webserver 2 , but this is no real solution. The server is still slow, at least now its not bringing down the others.
My question : what should I check for now ? I noticed a different structure in the conf files in debian etch, maybe something new has a bad influence on my old conf files? Is there something wrong with the combination of kernel+php version? I have no idea, please point me in the right direction so I can learn from this.
I've been running my website for years and now yesterday I update 2 files, the same way I always do, and when I try to load them in a browser I get:
Internal Server Error
The server encountered an internal error or misconfiguration and was unable to complete your request.
The log says this:
[my ip] - - [17/Jan/2015:00:07:55 -0500] "GET /site/index.php HTTP/1.1" 404 - "-" [my agent string]
Permissions are 644, same as for the other files. I haven't encountered anything like this before and am totally stumped.