Writer on LowEndBox

Personal
After waiting for almost two months, my account has finally been upgraded by Chief (the new admin of LowEndBox) to give me privileges to post offers without waiting for someone to approve them. Approx 2 months ago, I applied and was given the opportunity to write for LowEndBox as a test writer. During this time, I wrote the following posts on LowEndBox OnePoundWebHosting – £4.40 512MB Xen VPS in UK EaseVPS – $3.99/Month, 512MB OpenVZ VPS in Manchester, Jacksonville & Kansas City Corgi Tech – $6 512MB VMWare VPS in UK Jolly Works Hosting – $15/Year 128MB OpenVZ VPS in Phoenix sshVM – $6/Quarter 128MB OpenVZ VPS IperWeb – €1.52/Month 192MB OpenVZ VPS in Italy InceptionHosting – €6/Quarter 128MB XEN PV VPS in Phoenix and Netherlands WHMCS Hacked, Client data…
Read More

How to find specific files and send alerts

CentOS, How to, Linux, Tips and Tricks, Ubuntu
Maintaining a shared hosting server is a full time job but tools and proper checks and balances can help make this burden lot less. I manage a shared hosting server for one of my friends and numerous times the scripts that people have installed over on their websites have vulnerabilities and hackers exploit it to upload stuff that mass-email or do other nasty stuff. Luckily, most of these exploits have common patterns like files names or other signatures that make them traceable (most of the time the so called hackers are just kiddy scripts) Create a file and put this in it [code]#!/bin/bash find /home -name 'paypal.com*' | mail -s '[Woodcrest] Phishing Alert!' me@mydomain.com find /home -name 'rout.php' | mail -s '[Woodcrest] Phishing Alert - Mail Bomber!' me@mydomain.com[/code] This is…
Read More

package-cleanup: command not found

CentOS, How to, Linux, Tips and Tricks
I tried to do package-cleanup and found this [code highlight="2"]root@ns1 [~]# package-cleanup --problems -bash: package-cleanup: command not found[/code] If I was on Ubuntu, I would have done "apt-get install package-cleanup" but it does not work that way on CentOS, its actually available in yum-utils package, install it by typing [code]yum install yum-utils[/code] Enjoy!!
Read More

How to configure repos to not overwrite base packages?

CentOS, How to, Linux
The greatest fear with adding additional and especially third party repos such as EPEL (we did a blog post on how to install EPEL earlier) is that it MAY overwrite base packages and bring the system to an unstable state. We can fix this issue by installing Yum Priorities plugin on CentOS 5: [code]yum install yum-priorities[/code] on CentOS 4 or CentOS 6: [code]yum install yum-plugin-priorities[/code] Then make sure that the plugin is enabled [code]nano /etc/yum/pluginconf.d/priorities.conf[/code] Now there are two ways to do it, either set HIGHEST priority to CentOS repos OR set lowest priority to other repos. This is done by adding the line [code highlight="3"] # N=1 highest priority # N=99 lowest priority priority=N [/code] In this blog post, I will set 1 as the priority (highest) for my…
Read More

How to change time and/or timezone in CentOS

CentOS, How to, Linux
Generically, I use this Change directory to /etc [code] [root@testbed ~]# cd /etc [/code] Now create a symbolic link (aka symlink) to the timezone e.g. Asia/Karachi (for Pakistan standard time) [code highlight="1"] [root@testbed etc]# ln -sf /usr/share/zoneinfo/Asia/Karachi localtime [root@testbed etc]# date Mon Jan 16 19:26:52 PKT 2012 [/code] Please note that the timezone is following a directory-structure so if you want EST time, you should use [code highlight="1"] [root@testbed etc]# ln -sf /usr/share/zoneinfo/EST localtime [/code]
Read More

WHMCS Hacked, 1.7GB of data posted online

News
Ok, so I didn't had enough time and information to blog this but most of you already know it that WHMCS got hacked yesterday. We have a long LET thread here. I was expecting this to get fixed soon hence I created a Video and uploaded on Youtube (later it was clear that my initial idea was wrong, it took much longer for WHMCS to come back online on its feet before getting hacked for the second time) http://www.youtube.com/watch?v=eGlf-HBPXK8 Hackers released about 1.7GB of data on pasteBin note (unsure whats with pastebin but every hacker seem to be doing that) [caption id="attachment_1177" align="aligncenter" width="556" caption="UGNazi Tweet mentioning WHMCS hacked files"][/caption] (more…)
Read More

How to disable SELinux

CentOS, How to, Linux, Tips and Tricks
SELINUX is a security feature on CentOS but some software such as SolusVM will require that SELINUX be disabled [code] Installation log : /tmp/install.log Add this slave to your SolusVM master using the following details: ID Key .......... : ABC ID Password ..... : XYZ IMPORTANT!! You need to setup a network bridge before you can use KVM on this server. Please see the following link: http://wiki.solusvm.com/index.php/KVM_Network_Bridge_Setup Please set SELINUX=disabled in /etc/selinux/config before rebooting. Thankyou for choosing SolusVM. [/code] The solution? 1) Edit /etc/selinux/config using your favourite editor [code][root@kvm ~]# nano /etc/selinux/config[/code] and set SELINUX=disabled [code highlight="6"]# This file controls the state of SELinux on the system. # SELINUX= can take one of these three values: # enforcing - SELinux security policy is enforced. # permissive - SELinux prints warnings…
Read More

CentOS minimal template’s issue with crontab

How to, Tips and Tricks
On my CentOS 5.x 64bit XEN PV template (XEN PV is a virtualization type, this means I am talking about a VPS) doing 'crontab -e' gave me the following error [code] [root@vpsadmin ~]# crontab -e no crontab for root - using an empty one /bin/sh: /bin/vi: No such file or directory crontab: "/bin/vi" exited with status 127 [/code] To correct this issue, do the following [code] [root@vpsadmin ~]# touch ~/.bashrc [root@vpsadmin ~]# export VISUAL=nano [root@vpsadmin ~]# source ~/.bashrc [/code] So, now if you do 'crontab -e' it will work as it should [code] [root@vpsadmin ~]# crontab -e no crontab for root - using an empty one crontab: no changes made to crontab [/code]
Read More

Freshclam daemon not running

CentOS, How to, Linux
Normally, I have two things on every Linux box so that I know whats going on NAGIOS monitoring (nrpe) Logwatch Today, I got something in my logwatch email and it was strange because just the other day, I upgraded the clamav to latest version using epel reo. [code title="This is what I got in logwatch today" highlight="3,4,5"] --------------------- clam-update Begin ------------------------ The ClamAV update process (freshclam daemon) was not running! If you no longer wish to run freshclam, deleting the freshclam.log file will suppress this error message. ---------------------- clam-update End ------------------------- [/code] It appears that the latest version has some permission issues on the log file because when I try to run freshclam on command line I get this [code]root@cpanel [~]# freshclam ERROR: Can't open /var/log/clamav/freshclam.log in append mode (check…
Read More