LOW COST JAVA PHP MYSQL CGI PERL
HOSTING SERVICE
LINUX WINDOWS CPANEL WHM PLESK
HOSTING PACKAGES
ECOMMERCE HOSTING ASP JSP MSSQL
FRONTPAGE HOSTING
CPANEL WHM RESELLER DEDICATED
SERVER WEB HOSTING

Archive for Server Security

The Effects of RootKits

In this age of malicious programs, there are many different threats which are able to compromise the security of either your VPS or dedicated server, which could leave the information that you host within your dedicated environment open to abuse; this means that you should always take pride in the security of your VPS or dedicated server which means that you should maximize the security of your dedicated environment. One such threat which is common within the Linux world and is able to effect the security of your Linux based VPS or dedicated server are rootkits.

Although it is widely though that root kits are a type of security threat which is specific to Linux based servers only, they are also able to affect the performance of Windows based VPS and dedicated servers. The main aim of rootkits is to enter the target machine via a hole which has been found in either a website or other application which is hosted on the machine or via a database without detection by any type of anti-virus software, and some are created to resist removal and are normally create with one malicious intention.

Rootkits go undetected since most hide themselves within the kernel of a Linux server, which means that they are run as the ‘root’ or administrator user which means that they are able to run without being detected by the administrator or owner of the affected server, and that they are able to run without question by the operating system that is installed on the VPS or dedicated server that has been invaded. You can prevent rootkits from invading your VPS or dedicated server by ensuring that your server is as secure as possible, which means that you should have anti-virus and rootkit hunting software installed to try and prevent your server from being affected by malicious programs. Most malicious attackers use rootkits to install certain programs on your VPS or dedicated server so that they can use it for their own purposes; for example a hacker might install a rootkit on your dedicated server so that they can run their illegal IRC channel which might be used for discussing illegal activities, this in itself might land you in trouble - it is for this reason that you should try and keep your VPS or dedicated server as secure as possible.

One of the most important things to consider with rootkits is that once a rootkit has installed itself on your VPS or dedicated server, you will be unable to remove it since it will be embedded within the kernel or root of the operating system that you have installed on your VPS or dedicated server; in order to be able to utilize your VPS or dedicated server, you will have to reinstall the operating system that your VPS or dedicated server uses.

Comments (1) Bookmark on del.icio.us

cPanel vs. Plesk

cPanel and Plesk are two examples of web hosting control panels utilized by many hosting providers. Currently cPanel is only available for use on Linux operating systems, but this is set to change from 2008 when cPanel releases it’s cPanel/WHM 2008 Suite for Windows 2008; Plesk has been available for both Windows and Linux for a while now.

cPanel

cPanel is seen by many as the preferred control panel for Linux operating systems because of its quick loading times which is main due to the fact that the system is based mainly on Perl scripts meaning that it requires little to no database access at most times. cPanel also has greater capabilities than those which Plesk contains, these being that cPanel gives more server side information to the end user which they may need to use at times which can be mission critical in some cases; cPanel is also able to sort add-ons, examples of these include ‘Fantastico’ and ‘RVSkins’ - this add-on functionality also allows developers to build their own custom functions and programs for use within cPanel.

cPanel provides better reseller hosting than Plesk does. This is because cPanel has a specially created control panel included with it called WebHost Manager (WHM for short) which has been designed specifically for the purpose of reselling web hosting services. Plesk is only one control panel and makes setting up reseller account remarkably hard.

cPanel has also made migrating your hosting account to another cPanel hosting provider easy by intergrating a site migration module. This allows people to transfer all their sites and settings without loosing any data. This is something which makes cPanel stand out from the rest as it is something most control panels lack.

Plesk

Plesk is a cross platform control panel which is available in versions for both Windows and Linux. It is seen as the preferred control panel in the Windows hosting industry because its closest rival, HostingController, is remarkably unreliable and has helped give Plesk a big boost in the control panel industry. Plesk is a relatively closed operating system meaning that isn’t open for developers to create their own add-ons, however, it does have intergration for many other programs in different fields such as the ability to allow customers to use SmarterMail in the Windows version of Plesk.

Being a cross platform control panel, Plesk has the advantage over cPanel meaning that companies can run the same control panel on both panels meaning that minimum training is required for technicians as they only have to work out the operations of one control panel - this can save a business both time and money. However, on the security side of things Plesk for Windows doesn’t fair as well as it’s Linux counterpart or competitor do; there have been several holes found within the Plesk software allowing hackers to take control of a Windows server through the Plesk control panel, and the hacker can still gain access a second time after the administrator password on the server has been changed.

Conclusion

If you are after one control panel that suites all then go with Plesk - it can save you both time and money as a business and what you learn can be applied to both systems. However, if you prefer to go with the market leader and are willing to spend some time studying both options (cPanel for Linux, Plesk for Windows) then fo with cPanel as you will be able to customize it more to suite the environment in which you want your customers to control their websites.

Comments (2) Bookmark on del.icio.us

Security Tip: Finding working directory of Process

Find PID of process
$ps aux | grep
Find out current working directory of the process 1213
$pwdx 1213 >> Output : 1213: /tmp/.abc

This seems to be someone try to hide process directory. You can then try to find out using..
$ls -l /proc/1213/cwd

Output :
lrwxrwxrwx 1 root root 0 Nov 20 04:35 /proc/1213/cwd -> /var/spool/mqueue

Comments Bookmark on del.icio.us

Load Balancing Servers

One server responding to all the incoming HTTP requests for a website might not able to handle all the incoming traffic of a website. This would become more difficult if the website becomes more popular. As a result pages will load slowly and users will have to wait for a long time to view web pages. Due to increase in traffic and connections to website there will be need to upgrade the server and it would be no more cost effective.

To improve the server scalability, more servers are needed to add more scalability and distribute load among the servers which is also called as clustering and load distribution among these servers is called as Load balancing. Load balancing applies to all types of servers including application and database servers.

Load Balancing Mechanism

The load balancing mechanism used for spreading HTTP requests is known as IP Spraying. HTTP traffic needs to be evenly distributed when there are multiple servers in the group. It acts as one server to clients for example an internet browser. “Load dispatcher” and “network dispatcher” are the equipments used for IP spraying. You can simply call them as “Load Balancer”.IP Sprayer redirects HTTP requests to a server in a server cluster. It all depend on the type of IP sprayer involved so that the architecture can provide more scalability, load balancing and overcome all the fail-over requirements.

You can have a look at Load Balanced Servers offered by eUKhost.com for a complete load balancing solution.

Comments (1) Bookmark on del.icio.us

Shared Secure Server(SSL) Access

Hosting accounts has an access to a shared secure server. Its not really a separate server but the web pages are displayed through an encrypted connection. Every page on a website can be called through this secured server.

You can access the web pages through the secure server using following path:-

Replace “servername” with the name of the server on which your domain is hosted. Replace “yourdomain” with your domain name without the TLD extension, and replace “filename.html” or “scriptname.cgi” with the name of the file you want to call through the secure server.

https://servername.safe-order.net/yourdomain/filename.html

Use this path to access scripts located in CGI-BIN-

https://servername.safe-order.net/cgi-yourdomainscriptname.cgi

Note: Always use “https” instead of the usual “http”. Secure calls require the use of the “https”.

Comments (2) Bookmark on del.icio.us

Rsync

Rsync is a powerful command that is used to synchronize and transfer files and directories. Rsync is widely used for mirroring Web sites. and transfers only the changes in files, using a clever rsync algorithm. This is a very useful method for backups as it is uses minimal bandwidth and it is also commonly used to keep clustered servers working together. The ending slashes are very important while using rsync. If you are not familiar with how it works simply make sure to have an ending slash on both the source and the destination and it should be fine.

The general form is:

rsync source destination

A few examples are:
rsync -vrplogDtH /old/usr/local/apache/conf /usr/local/apache

That will sync the /old/usr/local/apache/conf/ directory to the /usr/local/apache/conf/ directory on the same server. If you want to use rsync to go between servers then use the following:

rsync -ave ssh root@192.168.0.1:/backup/ /backup/

That will take the backup directory on 192.168.0.1 and copy it to the server the command is run from. The command will also accept a remote destination if you adjust the command line accordingly.

Comments Bookmark on del.icio.us

« Previous entries