Server :: Protect My Server From Syn Attack ?
Jun 15, 2011I want protect my server from syn attack
My server Linux - Cantos 5.6.
ADVERTISEMENT
Security :: Centos 5.5 Server - How To Protect From Outside Attack
Dec 21, 2010I have just configured Centos 5.5 LocalMailServer with fetchmail and sendmail , Proxy with Squid and FileServer with samba. Now my concern is security.. How can i protect my server with outside attack. Will I need to block some ports or I need special tools or script so no one from outside can attack my machine. My machine is working on intranet with local ip only.. No web server or static ip exists. Machine is connected with ADSL router to access internet.
View 5 Replies View RelatedServer :: Postfix As Spam Mailscanner To Protect Mail Server Running Sendmail?
Jul 27, 2011I am using postfix as spam Mailscanner to protect my mail server running sendmail. The problem is that when I forward an email from MailScanner mail me back with the following error:
<postmaster@localhost.@mydomain.com.>... Real domain name required for sender address (in reply to MAIL FROM command))
Jul 27 13:15:59 smtp postfix/local[28465]: C68AC1000001: to=<root@smtp.mydomain.com>,
[code]....
Security :: Track DDoS Attack On A Server?
Jan 25, 2011how can I track a Dos and DDoS attack on a server . Does linux have any goiod known command line utilities and log files to us e in this way?
View 1 Replies View RelatedFedora Security :: Server Seems To Attack The World Hacking?
Apr 10, 2009I went away from home for a few days, ... Now I am back at home and noticed, that my server is going out with 100% available bandwidth. The server is mainly Http / Ftp / Mail server, so I stopped all services, to see which one it is. ervices stopped, still 100Mbps go out like ants in the flood.
I updated the system, made a backup, installed IPtraf. It seems that I have something 'installed' and my server is running something to attack User computers. It seems to try to find something on random IP's random ports. I am a little bit confused now. As long as my sites are running, I'm ~OK~ but sooner or later I would like to have my bandwidth back. How could I try to hunt down which service/app/process got hacked?
It seems that the monetary system of our society got now more enemy's than friends. Capitalism seems to reach it's end. But my server is serving also ART! Sooner or later we will need to pay copyright even for our thoughts. I was reading today, that the French president wants to punish file sharing as his wife made 3 albums, and wants to get some money ..
Fedora Servers :: Server And Clients (NFS And NIS) Are In Continuous Attack Via Ssh?
Aug 25, 2009My server and clients (NFS and NIS) are in continuous attack via ssh. Somebody is trying to guess password and login, and making port 22 busy.What are different ways to stop this attack?I am thinking to block this ip in iptable but I have no good idea because I have not done this before. Any special consideration do I have to take while doing this thing? How is it done and which file does it modify?
View 14 Replies View RelatedServer :: Lighttpd - Slow HTTP POST Attack
Jan 31, 2011[url]
I ran across the above article, which described a DoS attack in which requests are sent very slowly to the Web server. I'm running lighttpd 1.4.28 on a Gentoo Linux server, and I'm wondering if there is anything I could do in preparation to defend against such an attack.
A bug report [url] seems to indicate that there was a patch in place already against this sort of attack, but I wanted to be sure that was the same thing and if there was anything else I needed to do.
CentOS 5 Server :: Tracing An Attack With A Wireshark Script
Jun 18, 2009My data center informed me that my shared web hosting server is producing a massive attack. Attack against who? how? etc?... well.. other than "your server is generating an attack of over 150,000 UDP connections", they did not specify the target IP, nor the specific port. The attacks usually run for less than 5 minutes and pose a threat on the datacenter's firewall itself (from within).
I ran various searches on my server and came up with nothing. (over 300 websites with PHP in 25GB of data, database etc).
I do not allow any shell/bash other than myself, so no other logins are available. (I re-checked /etc/passwd for any bash).
I believe that there is probably some php fsckopen call or something to that degree that responds to a call from an external server. To make it easier to diagnose the problem and then stopping it, I need your assistance developing a simple tracing tool, methodology.
I have wireshark installed on the server.
My thoughts on how to capture this attack (which occurs at random) is as follow:
1. run a service that greps and count the UDP connections currently on the server and does this every 60 seconds. ( a simple one minute cron is enough).
netstat -a |grep UDP -cw
2. Currently the output shows: 0 (zero).
3. I do run a DNS server that can be queried, so I expect to see some UDP calls every so often. However, this is probably going to occur at < 50 entries.
4 . run this logic if no high loads on the server.
If servers load is < 3.00
{
If ( netstat -a |grep UDP -cw ) > 50
{
./tshark > wireshark.hacker.trace<timestamp>.txt;
email me an alert that "hey wireshark was triggered";
sleep (15)
killall -9 tshark
}
}
Security :: Protect Server From Url Injection?
May 20, 2010I am facing problem on my Linux server, those runing php sites, most of the time hacker upload file in my website and take the control, and hack the sites, shoot the thousands of mail etc
View 7 Replies View RelatedServer :: Protect Kernel Through Password?
Mar 11, 2010I just want to know is it possible to protect our kernel through password. If i have three kernels and i want to protect it through kernel so any one without providing the correct password could not be able to boot from that kernel.
View 1 Replies View RelatedServer :: How To Protect Website From Such Attach And Similar
Jan 19, 2011Today I've found several attempt to access the following url on my website: [URL] After googleing a bit it seems that in some cases, using this attack, the bag guy is able to change the code in some of your files. it also seems to affect only a certain version of oScommerce. I don't use oScommerce, so I do believe that I'm on the safe side, but it's not the first time that I see some similar attempt of attack on my website. So to protect my self I was wondering if using .htaccess restriction would be enough?
Code:
########## Begin - Rewrite rules to block out some common exploits
#
RewriteEngine on
Options +FollowSymLinks
[code]....
But I do think that these rewrite string are more specificity write to protect oScommerce site. how to protect my web site from such attach and similar?
Server :: How To Protect Sendmail MTA / Accept Connection?
Apr 1, 2011I run a small website, and the customers need to contact me from our website,and I run sendmail, but I get lots of spam, they use my sendmail to send spam, here is the ps aux: all those url are spam url, and slow my vps down.I believe I need to use SMTP to accept connect so that my customers can contact us from our website, (plz correct me if i'm wrong..I'm new to those stuff..)by the way, we did not need to receive any email from the sendmail server,
View 2 Replies View RelatedServer :: Protect Webpage Directories With Passwords?
Jun 27, 2011To Protect Web Page Directories With Passwords i have done the below configuration but the problem is when i click the linux it is not asking username and password,
Created new account for logging into web interface:
htpasswd -c /etc/httpd/conf/.htpasswd travelkarega
Created a file name .htaccess in /opt/apps/deploy/websites/travelkarega/html/
vi .htaccess
AuthUserFile /etc/httpd/conf/.htpasswd
AuthName "Please enter password"
AuthType Basic
<Limit GET POST>
require user travelkarega
</Limit>
Added these above entries in the file .htaccess
Server :: Password Protect A Folder In Www Directory?
Apr 10, 2010Im running apache2 on a debian webserver and i was wondering how i can password protect a folder in my www directory when someone try to access it from the web.
View 1 Replies View RelatedSecurity :: Is Server Under DdOS Attack - Not Having Much Load And Only Few Process Runs But Site Opens Very Slow
Aug 5, 2010I have a server and i think that my server is under Ddos attack. i see that server is not having much load and only few process runs but my site opens very slow. i executed the following command on my ssh:
[Code]....
Security :: Protect Samba Server For Limiting Access To Certain Domains?
Nov 24, 2010I was looking for a way to protect my samba server for limiting access to certain domains.Can I use the parameterhosts allow = example.comor something like that or is there another way to do the job for domains
View 4 Replies View RelatedUbuntu Security :: Best Solution To Protect Server From Security Threats?
Jul 22, 2011I've recently been running a game server from my desktop, as well as a web page to accompany it.I use the ports 80/8123(HTTP)/5900(VNC)/50500(GAME)/5839(ADMINISTRATION).What's the best solution to protect my server from security threats? On a side note, I plan on adding a MySQL server later, but I want to keep it local only.
View 9 Replies View RelatedServer :: Server Configuration For Small Office Server, Which Smtp, Pop Imap Server And Backup?
Apr 2, 2010I have installed a linux server in my office to run 16 machines. Its main use will be a internal mail server but will be also running websites.
I have installed Ubuntu 9.10 server x64 and have got apache running.
I am looking for the simplest more robust solution for smtp, pop3 and imap. I have only ever used qmail before and found it a pain to configure and its getting old so I though I should probably try something new. I have not much experience with running pop3 or imap on linux so would love a suggestion on that.
Server :: Create A Webhost On An Running Fedora Server Which Runs Multiple Webpages + A Coldfusion Server?
Sep 29, 2010have to create a webhost on an running fedora server which runs multiple webpages + a coldfusion serveri have to add an coldfusion virtual host to these.what i would do:*crate a new user & group*enter vhosts.conf and copy an existing host and modify it for the new one.*create an new folder and copy the main files (phpstarter and webroot) *chown the files for the right useri think an apache graceful would be needet
View 1 Replies View RelatedServer :: Minimum Partition Size Required In Redhat Linux Server For DNS Server Configuration?
May 5, 2011Right now i have a HP DL 180 Server with 130 Gb Hard Disk & 8 Gb ram after Raiding0+1. i want to configure Domain Controller Server for my office for 200 to 300 Users. what should the partition size must be mentioned in my 130 Gb Hard Disk, is that going to be Sufficient for ME ?
i am bit confused about /Usr /Var /Boot partitions, as i need to manage perfectly in 130 GB
if i go with 4 Gb swap and remaining for " / " is that will be fine ? should i need to specify partition sizes separately for / tmp /var / usr ..
Server :: Server Slow : Apache Mysql Fine Tuning Server For Faster And More Responsive?
Apr 21, 2011I'm running a linux cloud server with the following config
1.2ghz Processor allocation
752MB Ram
The site loads slow and clicking a link almost freezes the page for a second. Also, the page loads could be much faster. We've been running mysqltuner and have pretty much optimized all slow queries. Is there anything we can do to fine tune the server for faster and more responsive?
Httpd.conf
Timeout 20
KeepAlive Off
MaxKeepAliveRequests 100
KeepAliveTimeout 5
<IfModule prefork.c>
code....
Server :: Sync File Server Data Into Backup Server Machine By Command- Rsync -avu?
Jun 21, 2011iam trying to sync file server data into backup server machine by command- rsync -avu path/of/data ipaddress-of-backup-server:/path/where/to/save after running it ask for root password and manually it is successful.but i want to make it automatic.for that i also tried cronjob and also generated authentication key but iam not successful in login automatically..anybody know how to authenticate root to login for storing data in backup server.
View 14 Replies View RelatedDebian Configuration :: Install A Multi-core System And Configure It To Run Several VMs, One Each For A Firewall, A Caching Proxy Server, A Mail Server, A Web Server?
Jan 25, 2011I will be relocating to a permanent residence sometime in the next year or two. I've recently begun thinking about the best way to implement a home-based network. It occurred to me that the most elegant solution might be the use of VM technology to eliminate as much hardware and wiring as possible.My thinking is this: Install a multi-core system and configure it to run several VMs, one each for a firewall, a caching proxy server, a mail server, a web server. Additionally, I would like to run 2-4 VMs as remote (RDP)workstations, using diskless workstations to boot the VMs over powerline ethernet.The latest powerline technology (available later this year) will allow multiple devices on a residential circuit operating at near gigabit speed, just like legacy wired networks.
In theory, the above would allow me to consolidate everything but the disklessworkstations on a single server and eliminate all wired (and wireless) connections except the broadband connection to the Internet and the cabling to the nearest power outlets. It appears technically possible, but I'm not sure about the various virtual connections among VMs. In theory, each VM should be able to communicate with the other as if it was on the same network via the server data bus, but what about setting up firewall zones? Any internal I/O bandwidth bottlenecks? Any other potential "gotchas", caveats, issues? (Other than the obvious requirement of having enough CPU and RAM).Any thoughts or observations welcome, especially if they are from real world experience in a VM environment. BTW--in case you're wondering why I'm posting here, it's because I run Debian on all my workstations/servers (running VirtualBox as a VM for Windows XP on one workstation).
Server :: Configure Internal Zimbra Server To Use External Server To Send Mails?
Feb 16, 2010I have got a running mail server on CentOS5.4 Final using Zimbra free edition. . Assume that domain is organization.com.local And it is running fine with users created and bugzilla running on the same machine can send mails using this server. But it can obviously send messages to the internal users. There is this option to configure it to use external mail server to send mails outside the network but my external smtp server needs an authentication.Is it possible to configure it this way to use my external server to send mails from internal domain to say gmail?
View 15 Replies View RelatedServer :: Phpsite Not Showing Images (buttons) Home Server For Game Server?
Jan 6, 2011i recently installed apache2 mysql php exc. to run a realtime stat site for my servers.the only thing is that the buttons/ images are not showing up.i checked that my GD was up to date and installed perl5 GD. dont know what else to check.my site with problems go to:http://24.20.177.228/stats_public
View 2 Replies View RelatedServer :: Server Status Command Output Getting Dumped To Smtp Server Instead Of A File?
May 24, 2010I am working on linux server with below specifications.Linux EDT 2008 i686 i686 i386 GNU/LinuxWhile checking the status of the server using the command 'opmnctl status' and when server is down the output is not getting redirected to file.I m using the command as,opmnctl status > abc.txt.
View 2 Replies View RelatedCentOS 5 Server :: Automation Of Ftp Server \ Configure A FTP Server Where Upload And Download Files?
Jan 8, 2011i have been trying to complete the following project1) Configure a FTP server where we can upload and download files.........2) server must run at 9 pm & stop at 9 am automatically ............although the first task was easy ,i have no idea how to accomplish the 2nd task(not to mention I'm a new user)
View 5 Replies View RelatedNetworking :: Hide The IP Of Y Server Want X Server To Be As VNC Proxy And Redirect All VNC Sessions To Y Server
Aug 21, 2010I've two internet based server ( xx.xx.xx.xx and yy.yy.yy.yy ) The Y server is running VNC server and is responsible for answering to VNC sessions. But I need to hide the IP of Y server so I want X server to be as VNC Proxy and redirect all VNC sessions to Y server.
I guess the best way is to use iptables but actually I can't get it working so
Server :: Setup RAID 1 On CentOS 5 Server For A Zimbra Email Server
Feb 7, 2011I'm trying to setup RAID 1 on a CentOS 5 server for a zimbra email server.I get a partion schema error. Can I do this?The server is a HP Proliant ML150 G3 server with two 80GB HDD.
View 1 Replies View RelatedServer :: Configure Redhat Enterprise Server 4 As Router And Proxy Server
May 18, 2010Im new in linux i want to configure my redhat machine as both router and transparent proxy!
View 1 Replies View Related