Search:
Type: Posts; User: hostchamp
Search: Search took 0.08 seconds.
-
05-22-2010, 01:51 PM
- Replies
- 15
- Views
- 5,772
It appears that the connlimit module for iptables...
It appears that the connlimit module for iptables is not available for the kernel version used in Red Hat 4 (or Red Hat 5 for that matter).
I do have the limit module loaded, can you assist with... -
05-21-2010, 02:59 PM
- Replies
- 15
- Views
- 5,772
Am i missing the connlimit module?
Am i missing the connlimit module?
-
05-21-2010, 02:16 PM
- Replies
- 15
- Views
- 5,772
I issued the iptables command in the order you...
I issued the iptables command in the order you gave me and i get the above error on the third line.
I tried changing your third line to; ("-m recent" instead of "-m connlimit")
iptables -A INPUT... -
05-21-2010, 02:09 PM
- Replies
- 15
- Views
- 5,772
Yes, i do think my server is being DDOSd via SMTP...
Yes, i do think my server is being DDOSd via SMTP connection.
Also, how do i limit the max number of recipients (cc/bcc) per email like i can see they are trying to send mail to 20-50 mail ids.?
... -
05-21-2010, 02:00 PM
- Replies
- 15
- Views
- 5,772
If 5 connections per sec is very low, then what...
If 5 connections per sec is very low, then what should i set this value to?
-
05-21-2010, 01:57 PM
- Replies
- 15
- Views
- 5,772
Where do i use tabs instead of spaces? I just...
Where do i use tabs instead of spaces?
I just copied and pasted your lines in sendmail.mc and access. -
05-20-2010, 08:02 PM
- Replies
- 15
- Views
- 5,772
I also added following in sendmail.mc...
I also added following in sendmail.mc
FEATURE(`greet_pause', `2000')dnl
And following in /etc/mail/access
GreetPause:localhost 0
Do i also need to add following in access?... -
05-20-2010, 07:24 PM
- Replies
- 15
- Views
- 5,772
Okay i got some confidence going and added one...
Okay i got some confidence going and added one more line in my sendmail.mc;
define(`confCONNECTION_RATE_THROTTLE', `5')dnl
I now see lots of following lines in my maillog;... -
05-20-2010, 07:04 PM
- Replies
- 15
- Views
- 5,772
Once i added confBAD_RCPT_THROTTLE i have started...
Once i added confBAD_RCPT_THROTTLE i have started seeing lots of following lines in my maillog;
--------------------------------------
May 20 17:44:11 www sendmail[25537]: o4KMpEkp052455:... -
05-20-2010, 06:55 PM
- Replies
- 15
- Views
- 5,772
This is what my sendmail.mc look like, i took...
This is what my sendmail.mc look like, i took your advice and added only one of your suggested config option currently;
define(`confBAD_RCPT_THROTTLE', `2')dnl
I did regenerate the... -
05-20-2010, 06:47 PM
- Replies
- 15
- Views
- 5,772
my sendmail version is sendmail-8.13.1
my sendmail version is sendmail-8.13.1
-
05-20-2010, 06:19 PM
- Replies
- 15
- Views
- 5,772
NoRoot - Thanks for helping me with your very...
NoRoot - Thanks for helping me with your very insightful advice.
You asked me for my sendmail config, please let me know contents of which file you want me to paste here?
My maillog is being... -
05-20-2010, 02:11 PM
- Replies
- 15
- Views
- 5,772
Spam network attempting to use my server as a relay
Looking at the sendmail logs (maillog), it appears my system is the target of a spam network attempting to use my system as a relay.
Looking at the maillog i can see that the mail server is... -
08-04-2009, 12:40 PM
- Replies
- 16
- Views
- 4,562
can someone decode this suspicious line added to...
can someone decode this suspicious line added to a php script?
... -
07-27-2009, 11:12 AM
- Replies
- 16
- Views
- 4,562
I do not see the process called crontab.
I do not see the process called crontab.
-
07-27-2009, 11:10 AM
- Replies
- 16
- Views
- 4,562
My php.ini says; enable_dl = On Shall i turn...
My php.ini says;
enable_dl = On
Shall i turn it Off?
What is it supposed to do? -
07-26-2009, 02:46 PM
- Replies
- 16
- Views
- 4,562
I think this exploit is uploaded mostly through...
I think this exploit is uploaded mostly through compromised FTP accounts and so far i have identified the FTP accounts and the files uploaded, although there could be more such files on other...
-
07-24-2009, 05:32 PM
- Replies
- 16
- Views
- 4,562
The issue faced by me is similar to the following...
The issue faced by me is similar to the following blog article;
http://blog.unmaskparasites.com/2009/07/23/goscanpark-13-facts-about-malicious-server-wide-meta-redirects/
This exploit is well... -
07-24-2009, 05:28 PM
- Replies
- 16
- Views
- 4,562
No there are no .htaccess files added, also...
No there are no .htaccess files added, also please understand that this problem is not 24x7, only happens once every few hours. If it were a .htaccess issue it would continue to redirect 24x7 but...
-
07-24-2009, 04:41 PM
- Replies
- 16
- Views
- 4,562
HELP - All HTTP requests to my server gets redirected to malware websites
When i try to open any website hosted on my server (around 50 of them) i am being taken to following malware website;
http://securityexamineonline.com/scan.php?affid=85xxx... -
06-05-2009, 09:16 AM
- Replies
- 7
- Views
- 1,930
Thanks yes, i knew some of the files were calling...
Thanks yes, i knew some of the files were calling http://martuz.cn/, but how to search for this in each any every javascript files? I have probably hundreds of java script files in different user's...
-
06-04-2009, 03:37 PM
- Replies
- 7
- Views
- 1,930
Javasript code vulenarability - what is this java script supposed to do?
Someone sniffed ftp password of a user account on my server and looks like javascripts were altered and iframe tags inserted in php files, while i cleaned up php pages i see the following javascript...
-
06-04-2009, 02:28 PM
- Replies
- 21
- Views
- 10,919
Do you guys recommend using the following RBL;...
Do you guys recommend using the following RBL;
NJABL (dnsbl.njabl.org.) -
06-04-2009, 01:12 PM
- Replies
- 3
- Views
- 7,788
Apache Down with 503 Error / Http requests get redirected / Is server hacked?
My Linux Server's Http Daemon (Apache) would stop serving websites ever so often, as soon as apache is restarted the error fixes iteself only to resurface within few hours.
The apache process... -
06-02-2009, 07:15 PM
- Replies
- 21
- Views
- 10,919
My server still receives lot of Spam espcially...
My server still receives lot of Spam espcially like;
From: "United Parcel Service of America" <xxx@xxx.xxx>
Subject: Postal Tracking #D6NOF66280C8GBN
And lots and lots of emails with those...
Results 1 to 25 of 678