Hot answers tagged

18 votes

Allowing access to an Apache virtual host from the local network only

People landing in this answer, please note that this is specific for Apache 2.2. Apache 2.4 has deprecated these directives. The new way is using the module mod_authz_host and the Require directives....
user avatar
15 votes
Accepted

Allowing access to an Apache virtual host from the local network only

Easy. Just set something like this within your main configuration or your virtual configuration: <Directory /var/www/path/to/your/web/documents> Order Deny,Allow Deny from all Allow from ...
user avatar
9 votes
Accepted

Have disabled apache site config file 000-default.conf, but it still seems active. Why?

Just as a matter of explanation for future users. Your 000-default.conf file is a catch-all site and should be left alone. It is good for security. It can be frustrating when a site configuration ...
user avatar
  • 32.5k
7 votes
Accepted

Can file encoding change when FTP is used?

You are probably seeing a difference in line-endings. When transferring a file in ASCII/Text mode (as opposed to "Binary mode") then most FTP clients will convert/normalise line-endings to the OS ...
user avatar
  • 40.9k
5 votes

Getting root access in 1and1 hosting?

You have a shared hosting plan. That means you cannot install software. Your SSH access is primarily meant for managing files remotely. You may be able to run Java or whatnot with your account, but ...
user avatar
  • 206
5 votes

Does an increase in bandwidth usage and a down server indicate a DDoS attack?

Without the spike making 95th percentile 129 Mb, it looks like it would have been around 70 Mb - an 85% increase. That's significant, but the traffic alone isn't enough to determine the cause. You ...
user avatar
  • 694
5 votes

Allowing access to an Apache virtual host from the local network only

Add this section inside your virtual host directive: <Location /mypathurl> Order deny,allow Deny from all Allow from 192.168.1.10 </Location> Replace your IP above. This ...
user avatar
  • 502
5 votes

If i use 301 redirects (to bounce the requests), will the other destination be aware of my Server IP?

Well aren't you friendly... "Hey Google, I'm having a DOS, but im making it your problem, thanks" First: There is no difference for you between serving an 301 or an 404 error page. Your ...
user avatar
  • 6,736
4 votes
Accepted

Best process for upgrading a live server

I think closetnoc's advice is good, and your plan is sound, but in the comments there, you mentioned that you're running on a VPS on linode already. Depending on your time frame, what's preventing you ...
user avatar
  • 175
4 votes
Accepted

Vulnerability in /boaform/admin/formLogin?

This appears to be related to a cluster of exploits that target fiber optic routers. If you are running a simple HTTP website and you are not maintaining fiber optic router equipment, I believe you ...
user avatar
3 votes

Using PHP inside .html files not working as expected

<!--?php echo "It works!"; ?--> This is what you see when you analyse the element using the browsers Object Inspector ie. the interpreted source. This is not the HTML source as sent from the ...
user avatar
  • 40.9k
3 votes

Have disabled apache site config file 000-default.conf, but it still seems active. Why?

I agree with user 'closetnoc' who replied at [2015-Aug-2 00:24:36Z] in response to the original post that wrote "The 000-default.conf site is a catch-all for any request the server does not have a ...
user avatar
  • 31
3 votes
Accepted

Redirect at exact moment in time

You could just include a rule in your index.php to check the current time against the time you want to launch. So if you wanted to launch on 2015-12-01 at 15:00UTC, something like this should work: &...
user avatar
  • 5,794
3 votes

File priority in Joomla website

If you create a page using Joomla and call it 'sitemap' it should display the content of that created page in the theme framework 'on the fly' for you. Joomla does not create a sitemap.html or sitemap....
user avatar
3 votes

Can file encoding change when FTP is used?

Yes. Don't transfer UTF-16 files in ASCII mode; use binary mode to avoid data corruption here. FTP's transformation of \r\n to \n will corrupt the remainder of the file if it happens to contain the ...
user avatar
  • 131
3 votes
Accepted

Apache not working on AWS Linux after reboot - 301 Response code

I figured out the issue. When an AWS instance is rebooted, the DNS address changes. As I am using Wordpress, I need to update the siteurl and home url in the MySQL Database for the wordpress site to ...
user avatar
3 votes

How do I use URL redirection with reverse proxy?

Under Apache, using the ProxyPassReverse directive will do what you want. It will take the redirect from the backend server and replace the backend host name with the front end name. From the ...
user avatar
3 votes
Accepted

Separate web hosting and mail server (CPanel)

There is absolutely no need for a mail server to be on the same machine, in the same building, or even located in the same country as the web server. In your DNS records you will see MX records, ...
user avatar
  • 1,784
3 votes
Accepted

Google Analytics showing a big spike of Linux Chrome users

As the multiple previous people mentioned, you need to check your data. A huge amount of that traffic could be from one IP, it's trivially easy to write a bot that rotates fictional IP addresses. Even ...
user avatar
  • 2,067
2 votes

Best process for upgrading a live server

Actually no. Except that if the site installs are from 2008, then there may be OS and other installs that may also have to be made and incompatibilities between them and the hardware. It is possible ...
user avatar
  • 32.5k
2 votes
Accepted

What was this hack-bot trying to achieve via directory traversal?

Ironically, this is exactly the kinds of things I study in my automated security analysis research. The bot is trying to take advantage of a PHP application vulnerability to read your password file. ...
user avatar
  • 32.5k
2 votes

How to set up a mail server on Linux only for sending admin/debug emails?

I use the exim4 email package on Ubuntu configured as a "smart host". This means you give exim4 the user name and password for your normal SMTP server and it will send the email (from commands like ...
user avatar
2 votes

Can I implement IPv6 support on my server using 6to4 address?

Yes, you can implement IPv6 tunneling with 6to4, but its use in any scenario other than testing is being actively discouraged. Before implementing anything on the public Internet, we should consider ...
user avatar
  • 694
2 votes
Accepted

How to block all hacking?

You can prevent hacking to an extent however, nothing is perfect and there are always flaws in any system. Asking a question with such little detail prevents a comprehensive insightful answer. It's ...
user avatar
  • 151
2 votes
Accepted

WHM Root Password Stops Working

The problem seems to have been resolved. I was going through the logs and noticed the server was under constant root login attack. I have installed DenyHosts and denied SSH login with passwords. The ...
user avatar
2 votes

WHM Root Password Stops Working

You are right. This behavior is very similar when cPHulk Brute Force Protection blocks your IP address or the account. If only your IP address is blocked then it is easy to get access back by ...
user avatar
2 votes

How do I migrate mail from one shared hosting account to another?

I would like to share the steps I followed recently in regards to this question. If you want to transfer the email accounts and messages for a domain from one server to another, you can easily do ...
user avatar
  • 161
2 votes

Using PHP inside .html files not working as expected

My apache installation has a php5.conf file I added this to it. <FilesMatch ".+\.html$"> SetHandler application/x-httpd-php </FilesMatch> In my .htaccess file I also changed ...
user avatar
  • 51
2 votes
Accepted

Sandbox a folder in linux / CPanel

I would personally recommend installing a Linux System Container Manager, such as LXD, to set up a Linux Container on your server to isolate the folder from the rest of the system. Try LXD Online ...
user avatar
  • 1,183
2 votes
Accepted

Trying to install web2py on a shared server (Dreamhost)

Well, I wasn't able to get things working following this tutorial, and many tests and variations. Finally, I found a very interesting link in the uWSGI site, which actually made things work! The only ...
user avatar
  • 171

Only top scored, non community-wiki answers of a minimum length are eligible