1
vote
2answers
284 views

Locating Rogue Perl Script

I've been trying to source the location of a perl script which is causing havoc on a server which I control. I'm also trying to find out exactly how this script was installed on the server - my best ...
0
votes
1answer
52 views

Providing root ssh access to virtual servers behind NAT? [duplicate]

We are a web hosting company. We have 4 Servers which are running OpenVZ on top of CentOS. Each of the server has around 50 containers running on top of it. We are planning to provide ssh root ...
-3
votes
1answer
92 views

Zpanel 10.1.0 was recently released. Should i bother for client projects? [closed]

Zpanel 10.1.0 was released on 27th of July. Has anyone tried it? I know that they had serious security issues with the last version(10.0.2). Should i bother and use this one for client web projects ...
0
votes
1answer
50 views

SSL configuration for domain pointing to EC2 instance

I have my custom domain pointing to an EC2 instance. Say mydomain.com -> [Elastic IP address for my EC2] I would like to add SSL certificates so that I can access the site via https - ...
0
votes
2answers
182 views

Webhosting on virtual sever vs physical server: Security vulnerability

In comparison to a physical server, is there any special security vulnerability in virtual servers for purpose of hosting several websites? For example, can the fact that there is not any hardware ...
-1
votes
1answer
145 views

What security assurances does a developer running a Windows EC2 hosted Web application need? [closed]

Being a developer, security is a completely new world for me! I have a windows EC2 instance running Windows server 2012 RTM, public facing .NET 4.5 Web application and SQL server 2012 web edition. ...
2
votes
2answers
237 views

Renting a dedicated server, should I rent a physical firewall aswell?

I plan to rent a dedicated server to host a commercial application, which should house esentially everything necessary to run on a single machine (frontend, backend, databases, analytics, backup ...
1
vote
5answers
316 views

Supplier is trying to sell me a hardware firewall: do I need one?

As per the title, my software supplier is trying to persuade me to upgrade to a dedicated server with a hardware firewall. (We're currently on a shared Rackspace virtual host, running Ubuntu.) Our ...
2
votes
1answer
1k views

Where I can find ModSecurity Rules for Specific Applications

Where I can find ModSecurity Rules for Specific Applications specially joomla, wordpress, mambo ?
2
votes
3answers
93 views

Primary domain controller for web hosting + SQL cluster

I was hoping to get some advice here on a web hosting query. We are building an eCommerce website that will basically reside on 2 x web servers (fronted by a load balancer) and interacting with a ...
0
votes
2answers
1k views

Analyzing Apache access logs to quickly identify abuse

So someone in China just loves abusing the crap out of my networking tools site up at yougetsignal.com. I've been trying to analyze my access.log files to see exactly what they are so excited about. ...
-1
votes
1answer
107 views

Debian Web hosting privilages/Apache attacks prevention and priv management

I'm wanting to setup a web hosting service similar to Dreamhost which allows SSH. I'm wanting to know how I can go about letting users connect via SSH but prevent any type of malicious activity. What ...
0
votes
2answers
90 views

HTTP request hijkacked?

I've installed Tomcat 6 on my first, new VPS. I had added AccessLogValve to server.xml configuration Tomcat file. In tomcat log I saw first this: xxx.xxx.xxx.xxx - - [04/Mar/2011:23:43:12 +0000] "GET ...
1
vote
1answer
457 views

Unix / linux permissions setup for shared hosting with Apache

I'm in the process of setting up a server from a clean CentOS 5 install. What is the best permission structure (users, groups, unix permissions) for running a single instance of apache for multiple ...
2
votes
2answers
149 views

Personally identifiable information (PII) on shared web hosting

Hey folks, I am providing web hosting services (shared and dedicated) and have had one of my shared hosting clients mention needing an SSL cert for their site where they are collecting insurance ...
1
vote
1answer
84 views

Host projects safely on linux server?

I'd like to host php projects and perhaps asp.net prjs on my server. Theres two main issues i have. 1) The php files scanning my filesystem. I dont want it to visit /var/www/majorapp/config.xml and ...
1
vote
1answer
212 views

Regular expression not working in .htaccess

I'm trying to limit which characters can be used in the request URI using: RewriteEngine on RewriteCond %{REQUEST_URI} !^([a-z0-9\:\/\.\_\-]) [NC] RewriteRule ^.* - [F,L] For some reason it's ...
5
votes
3answers
448 views

Should I host my entire web application using https?

Actually my only requirement for using SSL encryption is that when a user logs in, the password is transferred encrypted. However after reading a bit about protocol switching, that an HTTPS session ...
1
vote
4answers
258 views

Help! Why do blocked bots still waste bandwidth?

I've blocked a majority of bots that keep sending POST requests to my website, using .htaccess. Each time one of these bots tries to access my website it receives a 403 forbidden error message. My ...
0
votes
1answer
137 views

Script and file execution security with .htaccess

I'm trying to figure out which method I should use to control script/file execution security. I'm trying to protect against malicious file upload/execution exploits where a user could potentially ...
1
vote
2answers
637 views

are permissions granted “network service” secure on a webhost?

I was deploying a site today and it seemed I needed to grant read/write permissions to the site directories to system account "network service". Does that mean any other site running on this webhost ...
5
votes
4answers
796 views

Giving SSH access to a user, and security issues

Okay, so I have a VPS and I made an account for a friend so he can host his own domains (using the reseller features in DirectAdmin). He's asking for SSH access, and I know that this is probably a bad ...
0
votes
2answers
84 views

Secure data hosting

I've looked online and can't seem to find a proper answer. We have a client that requires very sensitive data be stored in a database. Is there a hosting company that provides high-level database ...
3
votes
2answers
818 views

How to be server admin noob and manage security on Linode/SliceHost/Webbynode?

Hoping you can help! I'm considering moving a Rails app from a shared hosting provider to a dedicated server or a service like Linode, SliceHost, Webbynode, etc. where, if I understand correctly, the ...
0
votes
2answers
579 views

ini_set disabled functions

I'm working in a hosting company and I'm pretty new. One of the company's policies is disabling ini_set php function for security reasons. There are lots of clients that have shared hosting asking us ...
2
votes
5answers
178 views

How to run each site under a different user?

Let's say I have a server and a bunch of developers working on different sites(php and django) and I don't want the different developers to access each other's sites. How should I go about ...
1
vote
2answers
843 views

Best pratice for VPS setup and administration (web/ftp/ssh)

After a long hesitation, I finally ordered a small VPS for my own use, basically web hosting (several websites, for me and friends) amongst other things (mumble server hosting, wave server, etc.). It ...
2
votes
4answers
220 views

Which Linux Flavor should I use for web hosting?

Love the site! I am getting ready to CoLo Dual Processor 3.0 Xeon server and was wondering what the best flavor of Linux is to install. If someone could point me in the right direction this would be ...
3
votes
12answers
293 views

Should I host my Data on the same box that I serve my web pages?

I was listening to Hanselminutes one day and this question came up. Under what circumstances should one separate data from code? For example in one of the systems that I've working on the DB is on ...
8
votes
3answers
11k views

Failed to generate a user instance of SQL Server

I'm using Windows 7 Beta and trying to install a web application locally. This web site uses Microsoft SQL Server 2005 Express (SQLEXPRESS) and a MDB file in the web site's ~/App_Data folder. I was ...