Tag Info

New answers tagged

0

While not relevant to serverfault, the short version is yes. To pass port 88 back to your home server, you will need three rules at least: iptables -t nat -A PREROUTING -p tcp --dport 88 -j DNAT --to <internal VPN address> iptables -A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT iptables -A FORWARD -o tun+ -p tcp --dport 88 -j ACCEPT ...


2

One thing to keep in mind with any and all security concerns is that hardware access trumps anything you can do. If you have access to the physical server, you are the beginning and end of the security for that server. No matter what you do on your VPS, the owner of the machine has the last say when it comes to security. This doesn't mean that you should ...


6

Anyone with physical access to the host eventually will be able to get at your system and change it arbitrarily - including the ability to change the password. In the special case of a virtual machine, this would be even easier as anyone with control over the hypervisor could modify the vCPUs behavior and read the guests' memory. Even with encryption in ...


-1

Yes, it is possible, at the very least as long as you don't encrypt your disk images.


-1

VPS' are plenty powerful to handle that load. LAMP server use nginx to better handle higher loads. MSQL database should be on another VPS Check out Digital ocean, I'm certain their VPS' can do this without any issues. They are also scale-able when you need need to handle more data and requests.


0

There are plenty of VPS that can handle it. Just don't go for the small scale ones. Some of those Virtualized servers are quite beefy and can definitely handle it. Go with a VPS where you can add disk, CPU & Mem as needed to size out your application. Then after you've sized the application consider the cost of placing that on a dedicated system. You ...


6

This question's on its way to getting closed as a duplicate of How do I deal with a compromised server, and I think that's a mistake, because the very correct advice in that question is to nuke the server and restore from known-good media. However, there's absolutely no evidence that this system has been compromised. OsakaWebbie, you have admitted that you ...


1

I'm going to largely C&P an answer of mine from an unrelated question. This is a better home for it I think. The instructions below are provided with the assumption that you have already followed the instructions for How do I deal with a compromised server? if applicable. Always disconnect the network cable when in doubt. find /filesystem1 /filesystem2 ...


0

The best solution I have found based on: 1) Ease of installation on the Server & Client 2) Lots of functionality 3) Good instructions Is http://www.softether.org/ which is an open source solution with lots of security measures and control. This VPS solution allowed HTTP Tunneling too - very easy to implement.


1

Not sure what firewall you're using, but it sounds like it's proxying web traffic via itself. If it's acting as a proxy it may be setting the $_SERVER['HTTP_X_FORWARDED_FOR'] variable. If that's the case, you can check to see if that's set, and if it is, use that. Otherwise, fall back to the REMOTE_ADDR. Note also, client IP can be faked fairly easily, so I ...


1

Add to your config PasswordAuthentication yes And restart sshd, you will need it ff you're ssh key was not deployed. For more details please provide verbose putty output while connecting. Also make sure you restart sshd; configuration may have changed (the config you pasted) but service was not restarted since so it may be using older configuration ...


-2

PROXMOX cannot be installed on a VPS. It also needs to be on installed on 3 servers for a cluster at minimum.


1

I've never seen it in use for something like that, and it's certainly not recommended. They've made some significant improvements including automatic MCS labeling with SELinux for each Docker container, and greatly reducing the number of kernel capabilities granted to the Docker process. However, as Linux itself does not offer namespace isolation with all of ...


3

Sounds like it may be set in mysqld_safe. There was once an ancient bug about this. Recall the mysqld_safe calls mysqld from within an indefinite loop. Goto the OS and run the following: grep -n nice `which mysqld_safe` This will show you all places where nice is set, defaulted and used I just ran this on a CentOS VM that's running MySQL 5.5.20 [~]# ...


0

Turns out that I was the victim of xmlrpc attacks on wordpress. I checked the logs and saw hundreds of requests on my xmlrtc.php wordpress file, by a single entity. I changed my .htaccess file to contain one additional rewrite rule: RewriteRule ^xmlrpc.php$ "http://0.0.0.0/" [R=301,L] And so far I have not experienced any problems.


-1

Have a look over the error log in apache. You might check if you find any incompatibility between your new apache version and the older PHP version


0

A good provider should not be setting the limit for shmpages as low as 20000. Shmpages only affects the resource shortage reaction of applications in your container; it has zero effect on the stability or security of the node itself. All of my OpenVZ VPS's (from BuyVM) have the shmpages limit set to 9223372036854775807 (basically, unlimited). It's obvious ...


0

As you said you can't encrypt the filesystem of the VPS. I don't know which feature offers your VPS but you can try to create a second filesystem mounted on /var/lib/mysql (in the case of mysql Server) and encrypt it (for example using the software LUKS). Another alternative is create a encrypted loop-device filesystem using a file of your VPS and mount it ...


1

Without knowing information I can't say for sure, but it sounds very likely that nginx running within Docker is what is serving up the page. I would first suggest you familiarize yourself with Docker: https://www.docker.com/tryit/ Remember that changes to a Docker container are not persistent. You have to save the current state in an image. When you launch ...



Top 50 recent answers are included