Tag: Security

On an Ubuntu server the default firewall management command is iptables. While iptables provides powerful functionality it’s syntax is often seen as complex. For most users a friendlier syntax can make managing your firewall much easier.

Lately there’s been a lot of speculation about Googles up-coming changes to how sites without an SSL are going to be treated. As January draws towards a close we have seen an increase in customers with concerns of how this will affect their site. Both in terms of people being able to see it and how it might affect their search ranking.

What is an SSL?

An SSL (or Secure Socket Layer) is the standard method for creating an encrypted link between a web browser and a web server. This secure link ensures that data passed between the browser and the web server are private.

One of the most important things you can do to ensure the security and stability of your Linux dedicated server is to keep the kernel updated. Some Kernel updates patch security vulnerabilities and other issues. Kernel patches are released as issues are discovered.

The concept of ‘Kernel hotpatching’, sometimes called live patching, was introduced to the Linux community around 2008. Soon after groups began developing differing implementations of the concept. KernelCare, one of the more popular implementations, was originally released in March 2014 by Cloud Linux, Inc.

1. This tutorial assumes you’ve already logged in to cPanel, and are starting on the home screen.
2. Now let’s learn how to setup hotlink protection.
3. Click the “Hotlink Protection” icon.
4. Hotlink protection prevents other websites from directly linking to certain files (typically images) on your website. You’ll want to prevent this if you have copyrighted images, or to simply save on bandwidth usage. You’ll first want to make sure your own sites are listed here, so you are able to hotlink to your images.
5. Enter all the file types you want to protect …
6. … and check the “Allow direct requests” box if you want to give the ability to manually enter URLs of a protected file.
7. Enter the URL you want to redirect to, for anyone who tries to hotlink to your files or images.
8. Then click “Submit”.
9. That’s it! You’ve successfully enabled hotlink protection.
10. To disable hotlink protection, click the “Disable” button.

Overview

Information on CVE-2015-5154 was made public on July 27, 2015. The vulnerability is in QEMU, a generic and open source machine emulator and virtualizer that is utilized by Xen, KVM, and other modern hypervisors / virtualization platforms.

Pre-Flight Check

• These instructions are intended specifically for checking your version of cPanel or WHM via the command line or the WHM dashboard.
• I’ll be working from a Liquid Web Managed CentOS 7 server, and I’ll be logged in as root.

Step #1: Log In to WHM

First, log in to WHM. You’ll arrive at your WHM dashboard:

Pre-Flight Check

• These instructions are intended specifically for checking the installed version of glibc.
• I’ll be working from a Liquid Web Self Managed Fedora 22 server, and I’ll be logged in as root.

Three versions of the Fedora OS are always kept active, at any given time, by The Fedora Project. These would be: 1. the current release, 2. the release before the current release, and 3. a new release that is in development. Last month saw the launch of Fedora 22 and Fedora 23 is in development, thus the time of Fedora 20 is over.