pnp4nagios Installation and Configuration

Installation —————- PNP is an addon for the Nagios Network Monitoring System. PNP provides easy to use, easy to configure RRDTools based performance charts feeded by the performance data output of the Nagios Plugins. To install this, 1. Download the latest version of pnp4nagios source from http://sourceforge.net/projects/pnp4nagios/ 2. Untar it and cd into the extracted … Read more

How to block Brute force Attack on WordPress , Joomla in Fail2ban

Clients who use fail2ban can block the bruteforce attack on wp-login.php and joomala admin using the below details. In /etc/fail2ban/jail.conf add the below details [wordpress-wp-login] enabled = true port = http,https action = iptables[name=WP, port=http, protocol=tcp] sendmail-whois[name=wordpress-wp-login, [email protected]] filter = wordpress-wp-login logpath = /var/www/vhosts/*/statistics/logs/access_log maxretry = 3 [joomla-admin-index] enabled = true port = http,https action … Read more

OpenSSL Heartbleed Bug

The Heartbleed Bug is a serious vulnerability in the popular OpenSSL cryptographic software library. This weakness allows stealing the information protected, under normal conditions, by the SSL/TLS encryption used to secure the Internet. SSL/TLS provides communication security and privacy over the Internet for applications such as web, email, instant messaging (IM) and some virtual private … Read more

ntVersionCheck : New release v2.0.0

The new release is added with mailing function to send report to the admin.

  • Send report to the mentioned email address
  • We can modify the email address and frequency for sending the report.
  • Fixed the shbang error with the ntVersionCheck

You can update your plugin by clicking the “Update” button (which is in disabled state, and appear only if an update is available) appear on your home page of the plugin.

Read more

FTP Icon missing in cpanel accounts

Last day I had a strange issue with ftp icon in cpanel accounts. Every cpanel account is missing the ftp related icons. In such situation, please follow the below steps 1. Double check whether “Ftp Account Manager” and “Ftp Settings” are enabled in the feature list used by the package assigned to the account. 2. … Read more

Blocking Maliciuos bots from accessing your website

It is always a nuisance when unnecessary bots start hitting your website. It can increase CPU load on your server and may cause MySQL overhead as well, if your website driven by any database. Though the bot access says to be controlled using robots.txt files, most malicious bots do not honor rules defined in robots.txt file. The most reputed … Read more

ntPHPSelector – short_open_tag

I have noticed many users are reporting miscellaneous issues ( like PHP blank pages ) after switching to additional PHPs. Even many of them could not get phpinfo() working on their custom PHP versions. It is unusual and once ntPHPSelector is installed properly on your server, it should server without any problem. So the first thing you should ensure … Read more

Install Mod_security for apache on Red Hat / CentOS

ModSecurity : ModSecurity is an open source web application firewall. Working embedded in the web server, or standalone as a network appliance, it detects and prevents attacks against web applications.

In order to use mod_security, you need to turn on EPEL repo under CentOS / RHEL Linux.

RHEL 5.x / CentOS 5.x Users

Type the following command as root user to install repo:

# rpm -Uvh http://download.fedoraproject.org/pub/epel/5/i386/epel-release-5-4.noarch.rpm

RHEL 6.x / CentOS 6.x Users

Type the following command as root user to install repo:

# rpm -Uvh http://download.fedoraproject.org/pub/epel/6/i386/epel-release-6-8.noarch.rpm

Once repo is turned on, type the following command to install ModSecurity:

Read more