Lik`s forum

Protecting your host from SYN floods

From Alexey's iproute documentation, adapted to netfilter and with more plausible paths. If you use this, take care to adjust the numbers to reasonable values for your system.
If you want to protect an entire network, skip this script, which is best suited for a single host.
It appears that you need the very latest version of the iproute2 tools to get this to work with 2.4.0.

#! /bin/sh ...

If you have an error after clicking the icon Fantastico :

PHP script =
/usr/local/cpanel/base/frontend/x/fantastico/includes/enc_restrictions.in=
c.php is protected by SourceGuardian and requires file =
ixed.lin.4.3.8.pxp.
Please read SourceGuardian protected scripts manual.

How to fix it:

Code: Select all

/scripts/upcp --force
cd /usr/local/cpanel/3rdparty/etc/
wget http://netenberg.com/files/ixed.tgz
tar xzpf ixed.tgz
rm -f ixed.tgz
cp /usr/local/cpanel/3rdparty/etc/ixed/* /usr/local/ixed/
chattr -i /usr/local/cpanel/3rdparty/etc/php.ini

Code: Select all

vi /usr/local/cpanel/3rdparty/etc/php.ini

See: http://www.cpanelthemes.com/forum/viewtopic.php?t=894 about what to put in this file and change

Code: Select all

chattr +i /usr/local/cpanel/3rdparty/etc/php.ini

http://www.baifox.org/

http://www.solusvm.com/



#
SolusVM Overview


We started developing SolusVM as a direct replacement for HyperVM as we were not happy using software that was publicly known to contain many flaws and had new exploits being found on a regular basis.

Over the coming months we will see SolusVM supporting other virtualisation technologies such as Xen and KVM. Version 1.0.0 currently supports OpenVZ over multiple nodes using secure encrypted inter-node communication.

There is a limiting function in hypervm for uplink, however the ability to limit downlink speed is not included.

For those who want to offer a truly unmetered VPS (with no bandwidth limit but a capped speed), this feature is inadequate as a customer could use more bandwidth than they are capped at by downloading more.

When HyperVM limits the uplink speed, it is inserting code into this file:

/usr/local/lxlabs/hypervm/etc/openvz_tc.sh


If you have used traffic ...

http://agileco.com/agilebill-open-sourc ... ftware.htm

http://wiki.freeradius.org/SQL_HOWTO

http://nagios.sourceforge.net/docs/3_0/ ... tvars.html

http://forums.cpanel.net/f5/how-apache- ... 45908.html

http://staff.washington.edu/dittrich/misc/ddos/