June 23

How to restore Real IPs in Engintron

To fix the mod_remoteip after software update:

cp -pv /etc/apache2/conf.modules.d/*remoteip.conf.rpmsave /etc/apache2/conf.modules.d/mod_remoteip.conf

To restore the logs if the issue with the logs:

1.
cp -a /var/cpanel/templates/apache2_4/ea4_main.default /var/cpanel/templates/apache2_4/ea4_main.local

2.
replace all %h by %{X-Real-IP}i
in /var/cpanel/templates/apache2_4/ea4_main.local

3.
/scripts/rebuildhttpdconf

4.
/engintron.sh purgecache

Category: simple memo | LEAVE A COMMENT
June 19

Create mysql/mariadb DB and user

mysqladmin create somename_workdb

for user from any host:

CREATE USER 'somename_workdb'@'%' IDENTIFIED BY 'password';
GRANT ALL PRIVILEGES ON somename_workdb.* TO 'somename_workdb'@'%';
FLUSH PRIVILEGES;

for user from localhost only:

CREATE USER 'somename_workdb'@'localhost' IDENTIFIED BY 'password';
GRANT ALL PRIVILEGES ON somename_workdb. * TO 'somename_workdb'@'localhost';
FLUSH PRIVILEGES;

 

Add remote host to firewall in order to allow connection to mysql:

 

tcp|in|d=3306|s=host_ip

Category: simple memo | LEAVE A COMMENT
June 12

secure tmp for Cpanel

/usr/tmpDSK

/scripts/securetmp - secure /tmp and /var/tmp

Options:
- auto: skip interactive customization questions
- install: install & enable securetmp service
- uninstall: disable & uninstal securetmp service
- daemonize: run securetmp in background ( default true )

Sample usages:
# run in interactive mode
> /scripts/securetmp

# disable interactive mode, run in background
> /scripts/securetmp --auto

# disable interactive mode, do not run in background
> /scripts/securetmp --auto --nodaemonize

Category: simple memo | LEAVE A COMMENT
June 12

one line csf setup

yum update -y;yum install -y epel-release;yum install -y perl-Crypt-SSLeay perl-Net-SSLeay bind-utils perl-libwww-perl.noarch perl-LWP-Protocol-https.noarch perl-GDGraph nano wget mc lsof nload tcpdump monit rsync zip unzip ipset langpacks-en glibc-all-langpacks perl-Math-BigInt-FastCalc iptables;cd /usr/src; rm -fv csf.tgz; wget -c https://download.configserver.com/csf.tgz;tar -xzf csf.tgz;cd csf;sh install.sh; cd ~; perl /usr/local/csf/bin/csftest.pl

Category: simple memo | LEAVE A COMMENT