Topics

31

iptables / How can I config IPTABLES for DDOS aatacks?

« on: July 26, 2018, 10:29:37 AM »

Hello
Here
https://javapipe.com/ddos/blog/iptables-ddos-protection/
it says to put this code :

Code: [Select]

kernel.printk = 4 4 1 7
kernel.panic = 10
kernel.sysrq = 0
kernel.shmmax = 4294967296
kernel.shmall = 4194304
kernel.core_uses_pid = 1
kernel.msgmnb = 65536
kernel.msgmax = 65536
vm.swappiness = 20
vm.dirty_ratio = 80
vm.dirty_background_ratio = 5
fs.file-max = 2097152
net.core.netdev_max_backlog = 262144
net.core.rmem_default = 31457280
net.core.rmem_max = 67108864
net.core.wmem_default = 31457280
net.core.wmem_max = 67108864
net.core.somaxconn = 65535
net.core.optmem_max = 25165824
net.ipv4.neigh.default.gc_thresh1 = 4096
net.ipv4.neigh.default.gc_thresh2 = 8192
net.ipv4.neigh.default.gc_thresh3 = 16384
net.ipv4.neigh.default.gc_interval = 5
net.ipv4.neigh.default.gc_stale_time = 120
net.netfilter.nf_conntrack_max = 10000000
net.netfilter.nf_conntrack_tcp_loose = 0
net.netfilter.nf_conntrack_tcp_timeout_established = 1800
net.netfilter.nf_conntrack_tcp_timeout_close = 10
net.netfilter.nf_conntrack_tcp_timeout_close_wait = 10
net.netfilter.nf_conntrack_tcp_timeout_fin_wait = 20
net.netfilter.nf_conntrack_tcp_timeout_last_ack = 20
net.netfilter.nf_conntrack_tcp_timeout_syn_recv = 20
net.netfilter.nf_conntrack_tcp_timeout_syn_sent = 20
net.netfilter.nf_conntrack_tcp_timeout_time_wait = 10
net.ipv4.tcp_slow_start_after_idle = 0
net.ipv4.ip_local_port_range = 1024 65000
net.ipv4.ip_no_pmtu_disc = 1
net.ipv4.route.flush = 1
net.ipv4.route.max_size = 8048576
net.ipv4.icmp_echo_ignore_broadcasts = 1
net.ipv4.icmp_ignore_bogus_error_responses = 1
net.ipv4.tcp_congestion_control = htcp
net.ipv4.tcp_mem = 65536 131072 262144
net.ipv4.udp_mem = 65536 131072 262144
net.ipv4.tcp_rmem = 4096 87380 33554432
net.ipv4.udp_rmem_min = 16384
net.ipv4.tcp_wmem = 4096 87380 33554432
net.ipv4.udp_wmem_min = 16384
net.ipv4.tcp_max_tw_buckets = 1440000
net.ipv4.tcp_tw_recycle = 0
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_max_orphans = 400000
net.ipv4.tcp_window_scaling = 1
net.ipv4.tcp_rfc1337 = 1
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_synack_retries = 1
net.ipv4.tcp_syn_retries = 2
net.ipv4.tcp_max_syn_backlog = 16384
net.ipv4.tcp_timestamps = 1
net.ipv4.tcp_sack = 1
net.ipv4.tcp_fack = 1
net.ipv4.tcp_ecn = 2
net.ipv4.tcp_fin_timeout = 10
net.ipv4.tcp_keepalive_time = 600
net.ipv4.tcp_keepalive_intvl = 60
net.ipv4.tcp_keepalive_probes = 10
net.ipv4.tcp_no_metrics_save = 1
net.ipv4.ip_forward = 0
net.ipv4.conf.all.accept_redirects = 0
net.ipv4.conf.all.send_redirects = 0
net.ipv4.conf.all.accept_source_route = 0
net.ipv4.conf.all.rp_filter = 1








in your /etc/sysctl.conf file and apply the settings with sysctl -p.

I go to /etc/sysctl.conf  it says:
"Vendors settings live in /usr/lib/sysctl.d/.
# To override a whole file, create a new file with the same in
# /etc/sysctl.d/ and put new settings there. To override
# only specific settings, add a file with a lexically later
# name in /etc/sysctl.d/ and put new settings there.
#
# For more information, see sysctl.conf(5) and sysctl.d(5)."

What can I do?
Can I add the code to /etc/sysctl.conf  directly or have to breate a new file ?
What does " apply the settings with sysctl -p" mean?


Thanks

32

CentOS-WebPanel Bugs / Why SSH port doesnot change?

« on: July 24, 2018, 03:53:28 PM »

Hi

I changed  SSH port 2 days ago in config file /etc/ssh/sshd_config and in CSF firewall and restartd SSH and CSF Firewall many times but I receive a warning about it always:
 

"WARNING: Security vulnerability! Your server is using default SSH Port 22, to make your server more secure change SSH port in config file /etc/ssh/sshd_config and in CSF firewall !
After changes are done don't forget to restart SSH and CSF Firewall. "


Thanks for your help

33

SSL / What should I do to have SSL on Wordpress with Nginx+ Apache+Varnish webserver?

« on: July 23, 2018, 05:59:25 PM »

Hello

My server is nginx+Varnish+Apache. If I want to have SSL on my wordpress site do I have to use this code:
 

Code: [Select]


 server {
listen 80;
server_name example.com www.example.com;
return 301 https://plugin.salamzaban.com$request_uri;
}


in .httaccess file?

I do that and get "500 Internal Server Error"

 
Thanks

34

Nginx / Wich webserver is the best?

« on: July 23, 2018, 05:31:00 PM »

Hello

For a newbie what's the best web server to use and can set SSL, mitigate DDOS attacks and cluster it with another servers?

Hproxy+Apache
Varnish+Nginx+Apache
or?


Thanks

35

SSL / SSL depends on Wenserver?

« on: July 23, 2018, 04:07:25 PM »

Hello

Thanks for your attention

When we change our webserver we have to change the SSL settings?

I want to have SSL on Wordpress. It's OK with Apache but when I install Apache+Nginx+Varnish it does not work correctly.





 

36

Updates / What does "yum reinstall cwpsrv cwpphp" do?

« on: July 23, 2018, 09:29:02 AM »

Hello

Thanks for your attention
I culdn't enter my CWP panel and used this command:

Code: [Select]

yum reinstall cwpsrv cwpphp
After that the capacity of my hard increased about 2 Gigs.
What does this command do exactly?
When can I use it?
Can it be dangerous?
Why I have about 2 gig files now?


Thanks

37

CSF Firewall / (Unknown) blocked with too many connections

« on: July 21, 2018, 02:56:56 PM »

Hello

Sometimes I recive an email with this subject and my own IPv6 that shows

Connections: 209
Blocked:     Temporary Block for 43200 seconds [CT_LIMIT]


And a long list of Connections like this:


tcp6: 0:0:0:0:My own IPv6 :45334 -> 0:0:0:0:0My own IPv6 :8181 (TIME_WAIT)



What's the reason?

Thanks

38

Installation / In a fresh installation of the CWP I see /dev/sda1 is 3.7G .

« on: July 21, 2018, 02:16:04 PM »

Hello

In a fresh installation of the CWP I see /dev/sda1 is 3.7G .
Can I remove it safely?


Thanks

39

Mod_Security / Is this a dos attack?

« on: July 20, 2018, 11:31:14 AM »

Hello 

Can you please take a look at this access log?
 
 
They request some pages that doesn't exist on my site at the same time with my own IP (54.36.158.33) and the site get database error.

What's the problem?
How can I prevent it?

Thanks

40

Migration from other control panels / CWP to CWP account migration doesnot transfer anything.

« on: July 20, 2018, 05:12:34 AM »

Hello

I have installed a new CWP. Do I have to do anything more from what was said on this link?:

http://wiki.centos-webpanel.com/cwp-to-cwp-account-migration

(Because the destination CWP is a fresh installation and I just did the things that was told in above link for CWP to CWP account migration)

When on the source server I go to "Account Transfer Server (CWP -> CWP)" and check the connnection it shows everything is correct and I start to transfer and wait for some hours each time and it shows "Transfer in progress ...!" but nothing is added to destination server.

Here is the log of /var/log/cwp/account_transfer.log

http://wiki.centos-webpanel.com/cwp-to-cwp-account-migration

2018-07-19 21:28:06 Verifying...!
2018-07-19 21:28:06 Initial process my accounts
2018-07-20 04:23:05 Verifying...!
2018-07-20 04:23:05 Initial process my accounts
2018-07-20 04:28:42 Verifying...!
2018-07-20 04:28:42 Initial process my accounts
2018-07-20 04:34:48 Verifying...!
2018-07-20 04:34:48 Initial process my accounts


The file size and its backup is 8.4 Gig.


Thanks

41

CentOS-WebPanel Bugs / We can not use @#$%^&*()! signs in the password of CWP?

« on: July 18, 2018, 09:50:34 AM »

Hello
We can not use @#$%^&*()! signs in the password of CWP?
When I use them them password doesn't work.

Thanks

42

SSL / Can I add Auto SSL on subdomain that is pointing to different IP?

« on: July 18, 2018, 09:28:03 AM »

Hello

I have a subdoman that is pointing to different IP (on a differebt cpanel download host) and all of my pictures and sound files are on it. I can not publish auto SSL for it?
When I try it sayas: "DNS of your domain doesn't point to this server or you have htaccess restrictions."

How can I solve this problem?


Thanks 

43

SSL / SSL doesnot install on Wordpress. Please help me.

« on: July 15, 2018, 08:50:31 PM »

Hello

Thanks for your attention.

I have installed ssl  and tested it on  https://www.sslshopper.com/ssl-checker too and it doesnot have any problem but when I try to install it on the wordpress the site does not work.

I tried some codes on Config.php and htaccess like this:


RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]


and used different plugins too but no result.

I am using Apache+Nginx+Varnish.


I asked such a question in Wordpress.org forum and one of them told it is the problem of the server and not the Wordpress.



Thanks

44

MySQL / MySQL Processes (live load) can show a slowris DDOS attack?

« on: July 14, 2018, 11:19:00 PM »

Hello

MySQL Processes (live load) can show a slowris DDOS attack?





What does these features mean?

Threads: 8 
Questions: 108152
Slow queries: 0 
Opens: 476
Flush tables: 1 
Open tables: 200
Queries per second avg: 13.693





Thanks

45

CentOS-WebPanel Bugs / White page error

« on: July 14, 2018, 05:20:27 PM »

Hello

When I reboot the server (CWP) or want to install mod security I see a white page and nothing more and I have to open a new page by going to the address of my panel.

How can I solve it?

Thanks for your attention.