Admins eHow SysAdmin Tips & Tricks

October 23, 2019

How to limit the number of incoming connections to a specific port

Filed under: linux,Security — Tags: , , , , — admin @ 11:47 pm

Replace [PORT] & [CON_NUM] with respected values.

iptables -I INPUT -p tcp --syn --dport [PORT] -m connlimit --connlimit-above [CON_NUM] --connlimit-mask 0 -j REJECT --reject-with tcp-reset

March 28, 2011

Windows 7 32 bit PAE Patch

Filed under: Windows — Tags: , , , , , , , — admin @ 2:19 pm

A lot of people still prefer to use 32 bit version of windows 7 , but 32 bit version of windows doesn’t allow you to use more than 3GB ( 4GB theoretically , 3GB practically ) of your RAM.
In fact there is a workaround for this problem on 32 bit OSes , it is know as PAE ( Physical Address Extension ) which already exists on Windows too but Microsoft has disabled it on purpose, my guess is to push 64 bit OS and some incompatibility problems with some drivers.

By the way for the people who are still in love with 32 bit windows but have more than 3GB of RAM installed on their PC. they can use the PAE patch for windows 7.

it is tested on Windows Vista SP2, Windows 7 SP0 and Windows 7 SP1.

Download it here : PatchPae

After you install it , it is how it looks like :

and resource monitor :

July 14, 2009

Limit Connections per IP using mod_limitipconn on cPanel

Filed under: Apache,CentOS,cPanel,General,Security — Tags: , , , , , , — admin @ 9:41 am

one of the problems I had on one of my cPanel servers was that some people were using download managers to download files from server , so hundreds of connections were being ESTABLISHED to Apache and it was becoming like a dos attack and causing Apache to become non responsive.
so here is what I did to limit connections per IP in a cPanel hosting server :
there is an Apache module named mod_limitipconn which will take care of it for us.
first download the latest version of mod_limitipconn from this site : http://dominia.org/djao/limitipconn2.html
decompress and install it.
at current time the latest version is 0.23.

wget http://dominia.org/djao/limit/mod_limitipconn-0.23.tar.bz2
tar jxvf mod_limitipconn-0.23.tar.bz2
cd mod_limitipconn-0.23
/usr/local/apache/bin/apxs -cia mod_limitipconn.c

next step is to add the required configuration to the Apache config file , we can add this directly to the end of httpd.conf file but the problem is that if we do this , the httpd.conf will be overwritten by easyapache so we will use include files to add our config.
login into your WHM panel , and follow the following menu items :
Main >> Service Configuration >> Apache Configuration >> Include Editor
on the Post VirtualHost Include section , choose All Versions from drop down menu and add the following config into it :

<IfModule mod_limitipconn.c>
<Location />
MaxConnPerIP 10
NoIPLimit images/*
</Location>
</IfModule>

then click on update and restart Apache server.
now We are all set 🙂

Powered by WordPress