Hotlink protection: How-To prevent people from stealing your files

 

Create an .htaccess file in your public_html directory with the following code:

RewriteEngine on
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^http://(www.)?domain.com.*$ [NC]
RewriteRule .(gif|jpg)$ – [F]

Where domain.com is your domain.

 

Why do I need an owned IP for my own SSL certificate?

The reason you must have your own dedicated IP address when you want to use your own SSL certificate (when you don’t want the server wide shared certificate) is because of the way SSL and Apache (httpd) works.

For name based web-hosting (when many domains are on one IP) the web browser will pass the name of the domain being requested inside the httpd headers along with the request.  This way, Apache knows which domain you are trying to access even though there are many domains on that one IP address.

When you do the same thing through an SSL connection, the connection has to be made *before* the request can be sent.  In this connection, the certificate is passed.  The only information that Apache knows before the request is made is which IP the connection is being made to.  It has to be able to know which certificate to send before the request is made, thus you can’t use multiple certificates on the same IP (if you do, Apache will use the first certificate listed which DA will always set to the server shared certificate for shared IPs).

If you want to use your own certificate, it must be the first certificate listed.  This wouldn’t work for a shared IP, because there would multiple domain wanting this status, and the first certificate would the one shown.  For this reason the shared certificate is always used on a shared IP.  For your certificate, DA will acknowledge the IP as being ‘owned’ and will remove the server shared certificate as the first cert to be loaded, thus your certificate will be loaded instead.

How To Clear Your DNS Cache

Windows® 8

 

  1. Press Win+X to open the WinX Menu.
  2. Right-click on Command Prompt and select Run as Administrator.
  3. Type the following command and press Enteripconfig /flushdns
  4. If the command was successful, you will see the following message:
    Windows IP configuration successfully flushed the DNS Resolver Cache.

 

Windows 7

 

  1. Click the Start button.
  2. Enter cmd in the Start menu search field.
  3. Right-click on Command Prompt and select Run as Administrator.
  4. Type the following command and press Enteripconfig /flushdns
  5. If the command was successful, you will see the following message:
    Windows IP configuration successfully flushed the DNS Resolver Cache.

 

Windows XP, 2000, or Vista®

 

  1. Click the Start button.
  2. On the Start menu, click Run….
    • If you do not see the Run command in Vista, enter run in the Search bar.
  3. Type the following command in the Run text box: ipconfig /flushdns

 

MacOS® 10.7 and 10.8

 

  1. Click Applications.
  2. Click Utilities.
  3. Double-click the Terminal application.
  4. Type the following command:
    sudo killall -HUP mDNSResponder

    Warning: To run this command, you will need to know the computer’s Admin account password.

 

MacOS 10.5 and 10.6

 

  1. Click Applications.
  2. Click Utilities.
  3. Double-click the Terminal application.
  4. Type the following command: sudo dscacheutil -flushcache

How to adjust the time zone of your webmail client (Roundcube, SquirrelMail, Horde)

SquirrelMail

To change time zones in SquirrelMail:

  1. Access SquirrelMail.
  2. Click Options link at the top of the page.
  3. Click the Personal Information link.
  4. Under Timezone Options, from the Your Current Timezone drop-down, select your preferred time zone.
  5. Click Submit.

Horde

To change time zones in Horde:

  1. Access Horde.
  2. Click the Options icon at the top of the page.
  3. Under Your Information, click the Locale and Time link.
  4. Under Your current time zone, select your preferred time zone from the drop-down menu.
  5. Click Save Options.

RoundCube

To change time zones in RoundCube:

  1. Access RoundCube.
  2. Click the Settings icon in the top-right corner of the page.
  3. Select Preferences tab.
  4. Under the Section column, select User Interface.
  5. Select your preferred time zone from the Time zone drop-down menu.
  6. Click Save.

How to forward a website to another url

There are several ways to accomplish this task, but the simplest to understand is to use php.

To do this, you need to create the page that will do the forwarding.  This can be any page, as long as it ends in “.php”.  If you are trying to redirect a domain, you’d create “index.php” inside the public_html directory.

Once you decide which page you will use, then create the file and enter the following text:

<?php
header(“Location: http://whereyouwant.com/to/go.html“);
?>

Where http://whereyouwant.com/to/go.html is the location that you want the page to forward to.  You can use local values, ie: /page.html, or full urls as in the above example (http://..etc.)


Another way to accomplish this is to use an .htaccess file in the public_html directory.  Sample contents:

Redirect 301 / http://whereyouwant.com/to/go.html

Redirect domain.com to www.domain.com

If you want to force clients to use www.domain.com, you can redirect them from domain.com to the www version with an .htaccess file.

In your public_html folder, create a file called .htaccess and add the code:

RewriteEngine On
RewriteCond %{HTTP_HOST} ^domain\.com
RewriteRule ^(.*)$ http://www.domain.com/$1 [R=permanent]

where you’d need to replace domain\.com and domain.com with your actual domain name.  Note the \ character must be present to escapce the . character.

Other versions of the same thing do a negation check to see if the domain is not www.domain.com, but that doesn’t work if you have subdomains.. hence the need for the explicit check for the value we don’t want.

How to use SSH

 

To use ssh, you’ll need an ssh client for your local computer.  We recommend PuTTY

Once you’ve installed your ssh client, load it up and you should be given a space to enter some information.  You’ll want to select “SSH” on port 22.  You can past in the name of your server “domain.com” or the ip “1.2.3.4” in the the space that says “Host Name (or IP Address)”.  Click Open.

If you’ve entered all info correctly, you should be prompted with a large black screen asking for your login information.  If you are doing system tasks, you’ll probably need root access.  If you have root access, enter “root” and press enter.. sometimes it can take several seconds before you see any change.   Enter the root password (and press enter), and if everything works, you should see a command prompt, ex:[[email protected]]#

You are now on the server. This is your starting point.

From here you can do anything, including destroy your server, so you must be very careful with the commands you enter.

Some basic commands include:

List: ls[[email protected]]# ls
file1.txt   file2.txt   file3.txt

Change Directories: cd[[email protected]]# cd /home/admin

Remove a file: rm[[email protected]]# rm file1.txt
rm: remove `file1.txt’ ? y

Once you’ve finished working, you can type[[email protected]]# exit

and the ssh window should be closed.

 

Welcome to our blog

This blog will cover the following topics:

  • Attacker.NET offers & News
  • Security Advisories
  • Tutorials & How-To’s
  • Genetal IT news, Issues and Best practices