|
Joined: Oct 2006
Posts: 358
enthusiast
|
enthusiast
Joined: Oct 2006
Posts: 358 |
My Hosting Provider is suggesting that I install a Malware Checker (like Maldet).
This seems difficult using Plesk. The source file is gz.
While I've spent some time trying to figure this out, I guess that I'm in the "hate Linux" stage right now. :-)
Any suggestions on 1) whether I need this on my UBB server? or 2) What's the easiest way to install it? or 3) Is there a different product that I should be thinking of?
--BIll B
|
|
|
|
Joined: Dec 2003
Posts: 6,633 Likes: 85
|
Joined: Dec 2003
Posts: 6,633 Likes: 85 |
I don't use any malware protection on my site. My desktop yes.
Now I am not saying it is not a needed security step. But why is the host suggesting to install it?
And as far as I can tell to install maldet you need ssh to install and use it. So if you don't have ssh then it is useless.
Blue Man Group There is no such thing as stupid questions. Just stupid answers
|
|
|
|
Joined: Jun 2006
Posts: 16,379 Likes: 129
|
Joined: Jun 2006
Posts: 16,379 Likes: 129 |
Well, if it's a gz file you're going to have to login via SSH and un tar/gz it: Then you're going to have to gander at the files in it, it could be anything from a set of source files that you have to compile and run, an apache module that's precompiled that needs to be moved somewhere and included in the apache instance, etc... BTW, this isn't for the faint of heart, one could technically nerf their server if they didn't know what they where doing... We decided to use Cloudflare as a CDN (they have a free version and several paid versions) to provide several protection mechanisms (please note, if you do choose to use Cloudflare you still have to patch your apache server, otherwise all incoming users will display the IP of cloudflare).
|
|
|
|
Joined: Oct 2006
Posts: 358
enthusiast
|
enthusiast
Joined: Oct 2006
Posts: 358 |
Okay - that's good info to digest.
I got started on this path after our Forum was unavailable EVERY SUNDAY during backups - for over three hours!! Additionally we have had numerous slowdowns at totally unpredictable times.
When confronted with this on Monday, our Host Provider (Webintellects) suggested that we include an anti-virus and malware detector s/w on our Apache server (with UBB).
We looked at the logs and saw that we were reaching Max Connections. And a lot of the incoming IP's were not logging in to the forum. So it appeared to be some sort of "phishing".
As a first step I added an htaccess file which blocked tens of thousands of Chinese IP addresses. And for the past 48 hours, our site has NEVER run faster than it is right now.
So the maldet is just another check to make sure that we don't have some other corruption already imbedded.
--BIll B
|
|
|
|
Joined: Jun 2006
Posts: 16,379 Likes: 129
|
Joined: Jun 2006
Posts: 16,379 Likes: 129 |
I think a CDN may be a good route; check out this faq
|
|
|
|
Joined: Oct 2006
Posts: 358
enthusiast
|
enthusiast
Joined: Oct 2006
Posts: 358 |
It sounds too good to be true. How can they offer it for free?
--BIll B
|
|
|
|
Joined: Jun 2006
Posts: 16,379 Likes: 129
|
Joined: Jun 2006
Posts: 16,379 Likes: 129 |
Because they figure if you use it that you'll want the features of their other plans...
I run the free version for every site on my VPS, it's nice; and you can mark what hosts you don't want to go through their CDN and it'll link directly (which was required to use my own domain with tumblr).
|
|
|
|
Joined: Oct 2006
Posts: 358
enthusiast
|
enthusiast
Joined: Oct 2006
Posts: 358 |
After researching this for the second time, I'm still a tad confused. It emphasizes the performance (etc) of HTML pages. But does it support PHP (ie. UBB forums)?
I recently added a htaccess file to my server to ban ten-thousand IP addresses. I'd like to use CloudFlare's feature instead.
But, again, do they consider PHP to be "http equivalent"?
--BIll B
|
|
|
|
Joined: Jun 2006
Posts: 16,379 Likes: 129
|
Joined: Jun 2006
Posts: 16,379 Likes: 129 |
All of my sites use CloudFlare ; I've got at least 5 ubb installs... A good example one would be A Gardeners Forum as you can see from the DNS it is using CloudFlare and as you can see from navigating the domain it is just a ubb forum.
|
|
|
1 members (Gizmo),
68
guests, and
126
robots. |
Key:
Admin,
Global Mod,
Mod
|
|
|
|