Unix Server Security
Nov 6, 2009My server has been hacked, I need you please to help learn about Unix server security to protect my server.
View 6 RepliesMy server has been hacked, I need you please to help learn about Unix server security to protect my server.
View 6 RepliesI`ve been playing with Debian and FreeBSD for couple weeks so far. As a noobie I`d like to ask you what distribution you prefer for web server? I know that it is said "the best is the one you know better" but in my situation it is hard to say that I really know either Debian or FreeBSD.
So what would you recommend in my situation (new to *unix topic) if I have to set web server for a company site?
I`m mostly interested in security, relatively easy to configure/secure/find info how-to, easy to update soft apache/php/mysql.
I see a company that support asp in linux server. i search and i found that a mod in apache server do it.
who know about this mod?
install it in my server?
I wonder which virus scanner software is useful for Unix server(Centos 4.5). One of my client install SMF forum and when visitors access the forum,their virus scanner warn that site is affected by trojan. I used Clamav to scan entire home directory but seem nothing found.
View 4 Replies View RelatedI am trying to find out how to install VPS on HP Unix OS and which one to chose.
Can you set me on right track?
Any Unix FTP tool to get all files (files+subdirectories) from remote server with 1 line command?i'm using FreeBSD
View 1 Replies View RelatedIve recently switched from PC to OSX, i now own '2' Macs, a laptop and a G4 Quicksilver, although its CPU speed is slower and the Ram is lesser then my old PC, it performs much much quicker and more efficient.
The question is, i'm a web developer, i know very little about the back end goings on, such as System Administration, but i've got a few books on the subject which are aimed at Unix system administrators. Does UNIX cover both OSX and Linux (Debian mainly).
Eventually i want to be able to run my own server, i own a debian dedicated server, but its not my own, its the datacenter's and i dont really know enough to get down and dirty in the back end. Id like to be able to set up servers from scratch in the long run.
So would learning UNIX cover both OSX and Linux, im not bothered about Windows, i don't plant to use a Windows machine again.
is there any performance difference using php on unix and (isapi)windows platform?
View 13 Replies View RelatedBeside Parallels Virtuozzo, what other commercial VPS Panel do you prefer to use on Linux/Unix?
View 7 Replies View RelatedI thought this was interesting.
AT&T Shared Unix Hosting
Anyone have any experience w/ this?
Is there a way where i can view which IP connected to my server the most? I need to find out if there is certain IP keep hitting my mail server until it crashed.
Preferably the software could sort out the highest hit IP then to the lowest.
which hosting is better - Windows, Unix or Linux?
View 9 Replies View RelatedI'm a Unix newbie so please forgive me if this is a really dumb question but I haven't quite been able to figure it out...
I'm trying to set up a form script to replace formmail on the server. I've set it up in the cgi-sys bin. I chmod the script 755, but when I try to call it I get 500 error messages.
I was looking at the permissions and I noticed that all the other scripts have the "wheel" setting.. such as:
197633 -rwxr-xr-x 4 root wheel 3479620 Dec 22 03:04 _formmail.cgi*
The new form I added as "root" instead of "wheel":
1280150 -rwxr-xr-x 1 root root 12342 Mar 1 21:46 mycontactform.pl*
How do I change it so that "mycontactform.pl" is in the "wheel" group so that it works? Anything else I should know/do to make this secure? I don't know enough about the permissions to change this. I want all the customers on the server to be able to use the new form.
I have a perl shell script usr/bin/ken.pl
this script need to run whenever the server starts and must never stop running,
I am currently starting it as follows
./nohup /use/bin/ken.pl
does anyone know how to make this script at startup?
I currently have a script with code below that works great when the permissions on the dbconnect.php file are 755. The problem with this is that anyone on the web can see this config file which contains passwords DOH! If I change it to 751, then it tells me "cannot connect". The user and group on both the page and this script are the same.
With apache, i use the setting to store http and https files in the same directory.
Any ideas how to make this a little more secure? Changing the permission to 751 would do the trick but then it breaks the script. I don't understand why the script would be running taking "other" permissions into account...it should be running with "user" permissions instead. it might even have something to do with who the apache executable is running as...
<?php
include("../../../cgi-bin/dbconnect.php");
// Connect to server and select database.
mysql_connect("$databasehost", "$dbuser", "$dbpword")or die("cannot connect");
mysql_select_db("$dbname")or die("cannot select DB");
I have a VPS with Plesk8.1 on Unix, All my customers are complaining becaouse of daily 100-200 spam mails per acccount. What is the best software or add on for this problem you can reccomnend.
I want to :
-see the junk mails for all accounts in somewhere so i can train if there are normal mails considered as spam. (Not Spam Option)
What are the cons and pros of using UNIX or Windows? Or maybe even Novell. Also, which UNIX distro is most efficient and secure for web hosting?
View 14 Replies View RelatedI'm currently using a SiteGround virtual private server with the following spec:
OS:CentOS (Linux)
cPanel: yes
Support:24/7
RAM: 512 MB
Accounts: 1 main
Traffic: 1,000 GB
Price/mo: $99.00
I'm hosting x2 Joomla 1.5 sites using PHP v5 with the following extensions:
Sobe2
OpenX
Community Builder
Fireboard
Virtumart
The problem is that both sites have several sizable databases, each in excess of 100k records. After uploading the first 90k records to mySQL it became apparent that performance was going to be an issue. I'm therefore considering a dedicated server, tuned for returning fast DB results.
Firstly, would a dedicated server solve my performance issues?
Secondly, what are the critical components, spec wise, that would ensure superfast DB calls?
Like everyone, I'm looking for the best value, meaning solid support, uptime and a low monthly cost. I have been recommended the following hosting partners, but would like everyones input:
site5.com
rackspace.com
iweb.com
singlehop.com
servepath.com
superbhosting.net
Rochen.com
Just got a new server and I tried Unix Bench on it.
Everything seems ok except for the Execl Throughput
What exactly is Execl Throughput? What part of the server is responsible for its value?
How to check for disk health in Unix (freebsd)?
View 7 Replies View RelatedCan someone tell me how to clear the history of a UNIX user? For example, when logged in as a certain user I can press UP to see the last commands that were used. How can I get rid of them?
View 3 Replies View RelatedI have directory1, directory2, directory3 etc and each has directories inside them. Is it possible to zip them all (directory1, directory2, directory3 and their contents) into one .zip file? If so, what is it?
View 1 Replies View Relatedwhat is the linux command to check, how much space is a directory taking?
and
what is the linux command to check, how much space are directories taking in increasing or decreasing order of there sizes?
I'm transcoding videos on a web server using ffmpeg and can successfully transcode some video formats but am having a few issues.
One of them is that I get a "Segmentation Fault" when trying to transcode a video in h.264 codec. I can't find much by searching and am wondering if that's a codec issue, or something else.
any experience with ffmpeg?
I'm running CentOS 5.x and DirectAdmin and wondering how to do the following:
- Disable compilers and other known binaries. Should I chown WGET 550?
- Prevent Shell Fork Bombs
- Best way to create partitions for tmpfs, tmp since my host forgot them?
- Any other tips on securing a DA based server? (I already have taken care of the whole SSH side of things)
One one of our (linux) servers spammers are king. they apparently can control anything and place spam links throughout the files.
For example spammer inserts Iframes either above or below HTML tags. (some step57 related type of virus/trojan as it seems)
Our programmer did not find where the problem is in our applications, yet he is not a security expert.
Our server admin company made us install phpuexec, we apparently have been checked on the server end and have mod_security, but we still don't know what's going on...spam continues.
Trying to determine what I want to put on my server for security. I have secured my /tmp, /var/tmp, and /dev/shm. I am now contemplating mod_evasive, mod_security, and/or APF Firewall.
1.) Should I install all three, or will APF Firewall, provide the same or similar security as mod_security, or vice versa?
2.) Will they all work together without conflicts?
3.) Does installing these services have any affect on overall server performance?
4.) Any other services you might recommend installing and why?
I have recently installed and configured my webserver. Since I think security is very important I am curious for recommendations, tips, etc.
My server:
-CentOS 4.4 (installed by provider)
-Apache 2.0.52
-Php 4.3.9
-MySql 4.1.20
-No FTP
-Mod_security is running
The firewall that comes with CentOS is switched on and allows the following ports: http, ssh, smtp.
I have installed sendmail, but it is turned off by default. I need it approx. 3 times a week for 15 minutes or so and will turn it on then.
I have barely any budget so hardware firewalls etc. aren't an option.
Furthermore it's a basic server, just like my knowledge, so advanced things like IDS aren't an option.
i want to know how can they make the directory ( u--------- )
take a look on this php shell
[url]
what i mean is they make the directory secure against any phpshell with that trick and they hide the hard disk space
how can i make this
my apache is 1.3.37 and i using fc5 and i have mod_security and cfs
I am considering renting a server, but got one question first.
If I sign up for one unmanaged root server with a control panel, from a provider. And just put my website on the server, and let it run there.
Is that a security risk? Is it easy for people to hack into my server, or anything like that?
Do you have any recommendation for an open-source firewall running on Unix which could do:
- Filter and redirect incoming (with exception for some IP).
- Filter outgoing port (with exception for some local IP or MAC).
- Monitoring incoming traffic
- Monitoring outgoing traffic
- Block access from external to a list of IP
- Proxy authentification
- VPN configuration
I search for 2 days now and nothing seems to respond to these requirements. It's for a local network.