I can access my web application (GeoServer) from this URL http://mydomain.com:8080/geoserver but I am not able to access it from http://www.mydomain.com:8080/geoserver .
How can I fix this?
My DNS records are :
A mydomain.com XXX.XXX.XXX.XXX
A www XXX.XXX.XXX.XXX
I also have Apache on this centos server for a php app and I can access my php app from http://mydomain.com or http://www.mydomain.com with no problems.
I have some issue to install MySecureShell on CentOS 5.4 because I want to use Yum to install it (for maintainability). I get this error :
yum install mysecureshell
Error: Missing Dependency: libcrypto.so.10()(64bit) is needed by package mysecureshell-1.20-1.x86_64 (mysecureshell)
I assume that the issue is that openSSL shipped with CentOS 5.4 is too old...
I don't want to install everything manually so I would like to know if there is an equivalent to MySecureShell which would work with CentOS 5.4.
Thanks!
UPDATE :
OpenSSL is correctly installed. However only libcrypto.so.6 is available on my system (due to an old OpenSSL version available in the CentOS repo)
I am using a Fedora 12 repository for MySecureShell
I would like to setup a SFTP with chroot (or equivalent) login to my Centos 5.4 server in a clean way. By clean way I mean by using only the YUM command if possible and with something easy to maintain and easy to extend (for example an easy way to add an extra SFTP user).
The problem with CentOS 5.4 is that OpenSSH is at version 4.3 in the repository so it is not possible to use the built in chroot capabilities of OpenSSH 4.8+.
Installing RSSH required to create manually a chrooted directory which don't seems easy to maintain to me.
MySecureShell is an other solution but it require an higher version of openSSL than the one which is in the repository.
I know that I could install manually an higher version of OpenSSH but I would lose all the advantage of the Yum command and it could become tricky to maintain if I want to do some updates in the futur...
Do you have an easy and clean way to setup a chrooted SFTP login on a centOS 5.4 server?
Thanks!
I switched a few weeks ago from a dedicated server to a VPS. Now that everything is working well on the VPS I would like to shutdown the dedicated server and close my account with the hosting company.
For peace of mind and in order to be more safe I would like to do a full backup of the server before stopping it.
The best would be a backup that I could browse if I find that I need a something in the backup.
What would be the best solution from command line?
Update :
Medium : Network
I need to setup my Centos 5.4 server for SFTP with chrooted access only (or equivalent). The regular solution using RSSH find here : http://www.cyberciti.biz/tips/howto-linux-unix-rssh-chroot-jail-setup.html seems over-killing to me if we want to manage multiple users...
I found the project MySecureShell which seems a lot simpler to install and to maintain.
Is it a good solution? Is there something better?
Thanks!!
I need OpenSSH 4.8+ in order to do setup a clean chrooted SFTP on my Centos 5.4 with Remi and EPEL repositories.
Is there a repository for Centos which contain an updated OpenSSH?
Thanks!
Extra info :
I want OpenSSH 4.8+ in order to not install an extra library (RSSH) when OpenSSH can already handle it. However if you think that there is a cleaner and easier to maintain way to install a chrooted SFTP server let me know!
I need to do the hostname changes on a centos server which will serve www.myserver.com
What do I need to do in /etc/hosts, /etc/sysconfig/network and with the hostname command?
In /etc/sysconfig/network do I need to write this :
HOSTNAME=www.myserver.com
or this :
HOSTNAME=myserver.com
In /etc/hosts do I need to write this :
XXX.XXX.XXX.XXX myserver.com
or this :
XXX.XXX.XXX.XXX wwww.myserver.com www
Do I need to do sudo hostname www.myserver.com or sudo hostname myserver.com?
Thanks a lot!
UPDATE :
Is there something else that I need to setup about hostname?
For what are these rules in the default iptables shipped with centos 5.4 ?
-A RH-Firewall-1-INPUT -p 50 -j ACCEPT
-A RH-Firewall-1-INPUT -p 51 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp --dport 5353 -d 224.0.0.251 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 631 -j ACCEPT
Do I need them for a web server with ftp, apache, ssh, mysql?
Thanks
I am installing a new centos 5.4 server and I would like to have a set of clean rules for mu iptables to startup.
What would be the good rules to start with?
Is this a good starting point :
# Allow outgoing traffic and disallow any passthroughs
iptables -P INPUT DROP
iptables -P OUTPUT ACCEPT
iptables -P FORWARD DROP
# Allow traffic already established to continue
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
# Allow ssh, ftp and web services
iptables -A INPUT -p tcp --dport ssh -i eth0 -j ACCEPT
iptables -A INPUT -p tcp --dport ftp -i eth0 -j ACCEPT
iptables -A INPUT -p udp --dport ftp -i eth0 -j ACCEPT
iptables -A INPUT -p tcp --dport ftp-data -i eth0 -j ACCEPT
iptables -A INPUT -p udp --dport ftp-data -i eth0 -j ACCEPT
iptables -A INPUT -p tcp --dport 80 -i eth0 -j ACCEPT
# Allow local loopback services
iptables -A INPUT -i lo -j ACCEPT
# Allow pings
iptables -I INPUT -p icmp --icmp-type destination-unreachable -j ACCEPT
iptables -I INPUT -p icmp --icmp-type source-quench -j ACCEPT
iptables -I INPUT -p icmp --icmp-type time-exceeded -j ACCEPT
For what is this rule :
iptables -A INPUT -p tcp --dport domain -i eth0 -j ACCEPT
UPDATE :
It will be a web server with FTP (required), apache, SSH, mysql.
My FTP server is a CentOS 5.4 with VSFTPD.
When I try to ls after connecting to my server using FTP I get this :
ftp> ls
229 Entering Extended Passive Mode (|||12206|)
ftp: Can't connect to `000.000.000.000': Connection refused
500 Illegal PORT command.
425 Use PORT or PASV first.
I can do mkdir without any problem.
When I connect from the same server to my ftp server I have no problem.
Port 20 and 21 are open in my iptable. How can I fix that?
Thanks!!
UPDATE :
telnet myftpserver.com 20
Trying 000.000.000.000...
telnet: connect to address 000.000.000.000: Connection refused
telnet: Unable to connect to remote host
and
[root@internal vsftpd]# /sbin/iptables -L -n
Chain INPUT (policy ACCEPT)
target prot opt source destination
RH-Firewall-1-INPUT all -- 0.0.0.0/0 0.0.0.0/0
SSH_CHECK tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW
Chain FORWARD (policy ACCEPT)
target prot opt source destination
RH-Firewall-1-INPUT all -- 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain RH-Firewall-1-INPUT (2 references)
target prot opt source destination
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:33988
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:3306
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:20
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:21
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:80
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 icmp type 255
ACCEPT esp -- 0.0.0.0/0 0.0.0.0/0
ACCEPT ah -- 0.0.0.0/0 0.0.0.0/0
ACCEPT udp -- 0.0.0.0/0 224.0.0.251 udp dpt:5353
ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:631
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:631
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:22
REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited
Chain SSH_CHECK (1 references)
target prot opt source destination
all -- 0.0.0.0/0 0.0.0.0/0 recent: SET name: SSH side: source
DROP all -- 0.0.0.0/0 0.0.0.0/0 recent: UPDATE seconds: 60 hit_count: 4 name: SSH side: source
I am currently keeping daily backup of my database by doing a daily mysqldump and by using logrotate to keep the 7 last days of mysqldump.
I would like to improve this backup process to keep 7 daily backup, 3 weekly backups and 12 monthly backup.
I found this article which explain how to di this with logrotate : https://web.archive.org/web/20070625054821/http://hotcoding.com/os/sysadmin/35751.html
However I am using the dateext logrotate option to name my backup files so I cannot use this solution.
How can I do daily, weekly and monthly backup with logrotate and with the dateext option?
I have setup cronjob for the root user. However when the cron fail I should receive an email from the cronjob because I have set MAILTO like this in /etc/crontab :
[email protected]
I have installed mailx using
yum install mailx
But when I look at the cron log I get these lines :
Feb 23 14:13:01 internal crond[6858]: (root) CMD (/var/www/vded/build/bin/sync.sh)
Feb 23 14:13:01 internal crond[6857]: (root) MAIL (mailed 79 bytes of output but got status 0x0001 )
How can I fix this?
UPDATE :
I get this error in the maillog :
Feb 23 16:06:01 internal sendmail[7210]: o1NG61cd007210: from=root, size=425, class=0, nrcpts=1, msgid=<[email protected]>, relay=root@localhost
Feb 23 16:06:01 internal sendmail[7211]: o1NG61hT007211: from=<[email protected]>, size=732, class=0, nrcpts=1, msgid=<[email protected]>, proto=ESMTP, daemon=MTA, relay=localhost [127.0.0.1]
Feb 23 16:06:01 internal sendmail[7210]: o1NG61cd007210: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30425, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (o1NG61hT007211 Message accepted for delivery)
Feb 23 16:06:01 internal sendmail[7212]: o1NG61hT007211: to=<[email protected]>, ctladdr=<[email protected]> (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30972, dsn=2.0.0, stat=Sent
internal.fff.com is the name of the server.
UPDATE :
So in fact if I put the [email protected] as the first line of my crontab (using crontab -e) it is working.
Why is it not working by setting the MAILTO in /etc/crontab ?
Thanks
I currently own a domain name mydomain.com at goDaddy and I have a web server (at thePlanet) mydomain.com which serve a website from www.mydomain.com and mydomain.com with Apache.
I now have a new server in an other hosting company and I would like to access this server with sandbox.mydomain.com and serve a website from sandbox.mydomain.com.
How can I do that?
Thanks!
I am receiving xml files on my server using the HTTP PUT request. Is it compressed during the transfer if my Apache is configured with mod_deflate? How can I verify that it is compress? If not, how can I force the compression?
Thanks!
I am in the process to migrate to a new web server and I would like to have a clean and safe file architecture for apache and my web application.
The server will serve one single php/mysql application. This application receive files from FTP and webservices and generate logs files.
The server OS is CentOS 5.4.
The default Apache document root is /var/www/html.
Should I put my web application directory under :
/var/www/html/myWebApp?/www/myWebApp?/home/www/myWebApp?The application directory should be owned by the root user or apache user or an other user?
Thanks for your help.
I currently have a small dedicated server at ThePlanet and I want to do an hardware upgrade. On this server I am hosting a php web application. I have done some comparaison between ThePlanet, Amazon and Rackspacecloud and I am not sure what would be the best...
At ThePlanet I can get a dedicated server with :
At http://www.rackspacecloud.com I can get a Cloud Server :
It seems to me that there is only Pros for VPS (for example CPU Bursting or the possibility to quickly change the RAM if we need).
But what would be the advantage to have a dedicated server over a VPS? Is rackspacecloud a good company?
Thanks
I looked at the bandwidth utilization on my "theplanet" management tools yesterday.
The traffic of my website has not increased (I checked Google Analytics). All the increased bandwidth is INBOUND bandwidth.
I did a vnstat -l and it appear that I'm receiving something of about 12MiB every 10 minutes.
How can I know what it is, where it is and from where it is coming from?
The server is on Centos.
UPDATES :
How can I do a simple sniff of the traffic?
There is an FTP server but I looked at the log vi /var/log/xferlog and nothing is weird in the log.
No email are hosted on the server (how can i verify that to be sure?).
You can see that starting at the end of W48, the bandwidth from internet become crazy...
I get a lot of SSH connection attempt from different IP on my server (with different username). 1 to 5 per seconds. It look like a brute force attack. What can I do to prevent that? Block the IP? change the SSH port? Something else?
Thanks!