Introduction This guide introduces you to the chattr command in Linux. While many Linux users know about file permissions, few discuss the additional control attributes offer. You can manipulate these attributes using the chattr command. What is chattr? The chattr command allows you to change file attributes on a Linux file system. These attributes can … Read more
ModSecurity, an open-source web application firewall (WAF), provides valuable tools to defend web applications from a myriad of online threats. However, as is common with any complex tool, problems can sometimes arise. One such issue relates to the request body size, which can trigger an error if the data length exceeds the configured limit. The … Read more
ConfigServer Security & Firewall (CSF) has a function that allows it to import blocklists and save them to IPTABLES, which is the Linux firewall utility upon which CSF is based. Requirements First we recommended you install and enable IPSET to CSF Firewall. Also we need increasing the maxelem in csf.conf, if not we would see … Read more
IPSET is an extension to iptables that allows you to create firewall rules that match entire “sets” of addresses at once. Unlike normal iptables chains, which are stored and traversed linearly, IP sets are stored in indexed data structures, like addresses, networks, (TCP/UDP) port numbers, MAC addresses, interface names or combinations of them in a … Read more
In this guide you will learn how to tweak the default postfix configuration for incoming emails. In Postfix configuration you need to add or edit following directives on /etc/postfix/main.cf configuration file. All configuration directives are explained in the postfix website. Postfix Configuration Parameters smtpd_helo_required = yes Require that a remote SMTP client introduces itself with … Read more
You can use 3rd party compiled malware and virus signature databases to extend ClamAV signature database collection with better detection PHP malware. RFXN (R-FX NETWORKS) Database signatures are updated typically once per day or more frequently depending on incoming threat data from the LMD checkout feature, IPS malware extraction, and other sources. Malware.Expert also generates … Read more
This tutorial we show how you can use the RBLs interface to configure your mail server to check incoming mail against the available RBLs. Your server will block the incoming messages if the IP address or hostname matches an cPanel RBL entry. RBL is short for “Real-time Blackhole List.” RBL servers keep lists of spam-heavy … Read more
Servers running iptables with CSF firewall can become slow and bogged down while processing the sometimes hundreds of IP addresses in CSF’s iptables chains. Thankfully, it is possible to quickly and easily alleviate this slowdown by installing and configuring a took called ipset. IP sets are a framework inside the Linux kernel that can store … Read more
If you want to set your site as private, setting up a password can definitely come in handy. In this article, you will learn a few methods on how to password protect your website and why it’s a good idea to have one in the first place. Why Password Protect Your Website? Websites are usually … Read more
Using RBL is really efficient and pretty lightweight. All it take is some DNS queries and if you were going to receive a lot of spam email from the same client, this DNS entries will be cached in your (local) DNS. To get some figures on how many emails get caught through, on a server … Read more