HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials

HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials (http://www.howtoforge.com/forums/index.php)
-   Server Operation (http://www.howtoforge.com/forums/forumdisplay.php?f=5)
-   -   My webserver is insecure (http://www.howtoforge.com/forums/showthread.php?t=62441)

madlars 4th July 2013 17:33

My webserver is insecure
 
Hello,

Someone tested my server and got it offline relatively easy.
I was not on good terms with him so he would not tell me how I could improve it.
I am far from an expert in servers so I would like some advice as of how to improve it as I intend to use it for the webhosting of my client's site's.
the url of one sites is http://nucleos.nl running in php5.3 fpm.

You don't have to bother in writing tutorials, theres plenty of those here!
Thanks!

madlars 6th July 2013 23:13

Stuff resolved!
 
Hello,
I havent had Apache configured well, so I upped the maximum connection limit which really boosted performance.
Then I installed mod_security which did not do the trick against the "slowloris attack" So I installed antiloris on Apache and now When I Dos myself my connections get refused! :D

For people wanting to know if their servers are "slowloris proof" you can google for the utility, then type in the url of your site server.
You can then look up here if your server is fending off the attack:
http://www.downforeveryoneorjustme.com/

This worked for me very well and I hope this helps other people with this issue :D

madlars 6th July 2013 23:14

Wow I just noticed how vague my first post was! :O


All times are GMT +2. The time now is 11:09.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.