Hi blog server is under DDoS attack.

Hi blog server is under DDoS attack. It is nginx with fastcgi with wordpress. Any idea how to tune nginx to reduce damage?

James Spong wrote:
make sure that all users have strong passwords with a combination of caps,
lowercase number and letters. This is especially important for 'core' addresses, such as root, admin, > info etc
Wait a minute. You should *never* allow remote (external) login for root. If you really must then
setup dsa ssh keys and disallow access via password & disable use of PAM in /etc/sshd_config
and limit root access to local IPs (ie: IP ranges owned by your ISP for example).
Same is true for admin.
_Do NOT send or receive email as root !!!_
As for properly securing ssh, better to login as a non-admin account and then su to your admin account.
Don't use "admin" for your admin account-name.
And yes of course use strong passwords, but you want to get away from allowing ssh access via password anyway.
It's not as perfect as I'd like (couldn't edit it after the fact), but see my post about securing ssh
http://discussions.apple.com/thread.jspa?messageID=7082312&#7082312

Similar Messages

  • My server was under dictionary attack - how to make it safer?

    Yesterday my server was "hit" for half an hour by someone using a dictionary. Fortunatly he was not able to get access, but I would like some advice on what I could do to try to make it safer. Like for instance is it possible to completely block an IP address after 5 tries from it?
    Here is a snip of my logs:
    Jul 16 03:35:15 pkmainserver pop3[5809]: badlogin: [193.33.170.11] plaintext info
    Jul 16 03:47:02 pkmainserver pop3[6063]: badlogin: [193.33.170.11] plaintext guest
    Jul 16 03:47:05 pkmainserver pop3[6064]: badlogin: [193.33.170.11] plaintext mailnull
    Jul 16 03:47:09 pkmainserver pop3[6065]: badlogin: [193.33.170.11] plaintext smmsp
    Jul 16 03:47:12 pkmainserver pop3[6066]: badlogin: [193.33.170.11] plaintext squid
    Jul 16 03:47:16 pkmainserver pop3[6070]: badlogin: [193.33.170.11] plaintext webalizer
    Jul 16 03:47:20 pkmainserver pop3[6071]: badlogin: [193.33.170.11] plaintext dbus
    Jul 16 03:47:23 pkmainserver pop3[6072]: badlogin: [193.33.170.11] plaintext xfs
    Jul 16 03:47:27 pkmainserver pop3[6073]: badlogin: [193.33.170.11] plaintext named
    Jul 16 03:47:30 pkmainserver pop3[6074]: badlogin: [193.33.170.11] plaintext ntp
    Jul 16 03:47:34 pkmainserver pop3[6075]: badlogin: [193.33.170.11] plaintext gdm
    Jul 16 03:47:37 pkmainserver pop3[6076]: badlogin: [193.33.170.11] plaintext mysql
    Jul 16 03:47:41 pkmainserver pop3[6077]: badlogin: [193.33.170.11] plaintext manpreet
    Jul 16 03:47:44 pkmainserver pop3[6078]: badlogin: [193.33.170.11] plaintext postfix
    Jul 16 03:47:48 pkmainserver pop3[6079]: badlogin: [193.33.170.11] plaintext clamav
    Jul 16 03:47:51 pkmainserver pop3[6080]: badlogin: [193.33.170.11] plaintext amavis
    Jul 16 03:47:55 pkmainserver pop3[6081]: badlogin: [193.33.170.11] plaintext root
    Jul 16 03:53:45 pkmainserver pop3[6154]: badlogin: [193.33.170.11] plaintext oracle
    Jul 16 03:53:48 pkmainserver pop3[6155]: badlogin: [193.33.170.11] plaintext oracle
    Jul 16 03:53:52 pkmainserver pop3[6156]: badlogin: [193.33.170.11] plaintext oracle
    Jul 16 03:53:55 pkmainserver pop3[6157]: badlogin: [193.33.170.11] plaintext vmail
    Jul 16 04:06:30 pkmainserver pop3[6399]: badlogin: [193.33.170.11] plaintext rami
    Jul 16 04:06:38 pkmainserver pop3[6400]: badlogin: [193.33.170.11] plaintext maha
    Jul 16 04:06:45 pkmainserver pop3[6402]: badlogin: [193.33.170.11] plaintext ntinah
    Jul 16 04:06:52 pkmainserver pop3[6403]: badlogin: [193.33.170.11] plaintext shijazi
    Jul 16 04:06:58 pkmainserver pop3[6404]: badlogin: [193.33.170.11] plaintext daoud
    Jul 16 04:07:03 pkmainserver pop3[6405]: badlogin: [193.33.170.11] plaintext reptegus
    Jul 16 04:07:08 pkmainserver pop3[6406]: badlogin: [193.33.170.11] plaintext psagastume
    Jul 16 04:07:14 pkmainserver pop3[6407]: badlogin: [193.33.170.11] plaintext ndiaz
    Jul 16 04:07:20 pkmainserver pop3[6411]: badlogin: [193.33.170.11] plaintext marriaga
    Jul 16 04:07:26 pkmainserver pop3[6412]: badlogin: [193.33.170.11] plaintext lreyes
    Jul 16 04:07:33 pkmainserver pop3[6413]: badlogin: [193.33.170.11] plaintext lmorales
    Jul 16 04:07:40 pkmainserver pop3[6414]: badlogin: [193.33.170.11] plaintext lgarcia
    Jul 16 04:07:48 pkmainserver pop3[6415]: badlogin: [193.33.170.11] plaintext lcarcamo
    Jul 16 04:07:52 pkmainserver pop3[6416]: badlogin: [193.33.170.11] plaintext kcantarero
    Jul 16 04:07:57 pkmainserver pop3[6417]: badlogin: [193.33.170.11] plaintext jmatute
    Jul 16 04:08:03 pkmainserver pop3[6418]: badlogin: [193.33.170.11] plaintext ivalladares
    Jul 16 04:09:35 pkmainserver pop3[6438]: badlogin: [193.33.170.11] plaintext qmaill
    Jul 16 04:09:43 pkmainserver pop3[6439]: badlogin: [193.33.170.11] plaintext spam
    I also left the person's IP. Maybe you know him
    The list in the middle is much much bigger and sometimes the person tried 10+ times the same login (root as an example).
    Advices?

    James Spong wrote:
    make sure that all users have strong passwords with a combination of caps,
    lowercase number and letters. This is especially important for 'core' addresses, such as root, admin, > info etc
    Wait a minute. You should *never* allow remote (external) login for root. If you really must then
    setup dsa ssh keys and disallow access via password & disable use of PAM in /etc/sshd_config
    and limit root access to local IPs (ie: IP ranges owned by your ISP for example).
    Same is true for admin.
    _Do NOT send or receive email as root !!!_
    As for properly securing ssh, better to login as a non-admin account and then su to your admin account.
    Don't use "admin" for your admin account-name.
    And yes of course use strong passwords, but you want to get away from allowing ssh access via password anyway.
    It's not as perfect as I'd like (couldn't edit it after the fact), but see my post about securing ssh
    http://discussions.apple.com/thread.jspa?messageID=7082312&#7082312

  • How do you protect yourself against DDOS attacks?

    I'm starting a new job soon for an employer who has had the occasional ddos attack against their website.
    Anyways I was wondering, how do you guys protect yourselves against ddos attacks?
    The way my employer fought against it last time was rather unelegant and a sort of lucky situation. They noticed that all the attacks came from IPs which where located in foreign countries, so they simply blocked entire ip ranges which werent from the country they were providing the service for.
    This seems like quite a drastic measure to me. After all, one goal of my employer is to become more international, and even if you cater only to local clientele, plenty of legitimate users could be across the border.
    Specifically protecting Apache against DDOS attacks is what I would be interested in.
    Can anyone suggest some software or setup I should research for this?

    A colleague of mine recently had one of his own servers under a DDOS attack. Nginx helped out a bit. But the holy grail in this case was Fail2ban.
    Now, usually a DOS would mean that massive requests are issued within a short time. Such behaviour is easily identified and blocked. But how do you react when its distributed and each individual node is issueing requests at a normal rate?
    Well in my tests I came to the conclusion that its all about the difference in typical behaviour of legitimate visitors to a site and automated requests as in the case of a DDOS attack.
    For example, while a DOS bot might not issue requests at an alarmingly high rate (slow and steady wins the race), but will continually issue requests for hours.
    So rather than trying to catch "burst" behaviour with requests crossing a certain threshold in a short amount of time, I instead configured fail2ban to check for IPs which crossed a certain threshold after an hour, and then block that IP for 24hours.
    It might take a while to find the sweet spot. And it wont be effective immediately. But with a little patience the blocklist started to fill up, and after a few hours the DDOS'ers seemed to have run out of IPs from which to attack.
    It makes sense if you think about it. A legitimate human user, will go to a site, and spend most of their time reading content, rather than klicking links. Well, usually anyways.
    Also, I've noticed that bots always seem to hit the same URL. Meaning, the main url of the site, and not selecting any links within the site. While I suppose that it would be trivial to configure a bot to act more legitimately and have it actually klick through all available links, I think it kind of defeats the purpose. Or at least most script kiddies won't go that far.
    If you know your way around with REGEXP, I'm sure you could come up with some really nicely custom-tailored rules for fail2ban to use in identifiying and blocking ips. So for example, rather than simply counting ANY connection made in the http logs, you could concentrate on IPs which only and continually access the main the url, over and over again.
    Legitimate users will most likely click on other links as well, so if you manage to exclude these kinds of accesses from Fail2ban's counting mechanism, you minimize the chance of locking out legitimate users.

  • Need help please programs to stop DDOS attacks

    hi all sorry if this is off topic but i play jedi knight jedi academy multiplayer and my server and my internet connection, or my i.p i'm not sure which or if it's both but i'm being DDOSed. is there a way to stop my connection/i.p from being attacked and making my connection so slow? is there a program i can buy or download for free that will 100 percent protect my ip/connection from DDOS attacks without a question of a doubt?. thanks

    If your IP is being obtained from people on skype because they know your Skype IP then you need to enable the following.  It will protect you as long as your contacts are not the one's doing it.  If they are, they would no longer be my contacts to protect myself and on a personal level.
    If your IP is being obtained by the games you play or you are hosting a server by IP, then there really is nothing you can do.  Even if you utilize a proxy server paid or free, it will only stop you from being knocked completely offline, but won't stop your server from going down.  Only your ISP may be able to help you and all they might be able to do is block the offending party or change your IP, but that doesn't solve the end problem.  
    The real-world solution against DDoS attacks is a combination of software, hardware or cloud, offering psuedo DDoS protection, which may be out of anyone's normal/comfortable price range.  You can do a web search for DDoS protection and you may be able to find something that will work for  you.

  • Protected servers under syn attack!!

    The firewall dashboard has a window at the right lower portion of ASDM and it displays Top 10 protected servers under SYN attack.  Refer to the attached picture.
    In this scenario the server IP 82.214.154.223 seems to be getting SYN attacks from one of my internal network PC. This server 82.214.154.223 does not belong to us, a whois query tells me that the IP originates from Poland with no hostname address.
    I should have been seeing attacks only for servers belonging to my network right? Like an attack from Outside public IP towards my Server public IP, or is it that this feature provides two way statistics where it also displays attack originating from my lan towards outside world. From what I see, I feel it displays two way attacks. Correct me if I am wrong.
    Regards

    Hi,
    below is the output of the # sh threat-detection rate command. can anyone explain me the vulnerabilities and risks by looking at the figures below. thanks
                              Average(eps)    Current(eps) Trigger      Total events
      10-min ACL  drop:                  1               0       0               672
      1-hour ACL  drop:                  1               0       0              4654
      10-min SYN attck:                  0               0       0               386
      1-hour SYN attck:                  0               0       0              3428
      10-min  Scanning:                  2               1   55503              1248
      1-hour  Scanning:                  2               2   18455              9177
      10-min Bad  pkts:                  0               0       0               184
      1-hour Bad  pkts:                  0               0       0              1089
      10-min  Firewall:                  1               0       0               862
      1-hour  Firewall:                  1               1       0              5749
      10-min DoS attck:                  0               0       0                 6
      1-hour DoS attck:                  0               0       0                 6
      10-min Interface:                  1               0       0              1034
      1-hour Interface:                  1               1       0              6616
    regards,
    AAMIR

  • May I ask how FMS against DDOS attacks

    Suppose a person stop connection to the FMS server, how do

    Suppose a person in one second of FMS issued 100,000 requests, such as call methods, and how to prevent DDOS attacks.I know there is no particularly good way, is it possible to restrict access by IP frequency？

  • URGENT:  MailServer has DBERROR after DDOS attack..... HELP PLS!!!!!

    Hi all,
    Short story: we had a DDOS attack at our data centre.... server was down for quite a while.
    On coming back up, nothing seemed to be working. So I rebooted.
    Web services etc are fine, but mail server is screwed:
    Sample IMAP Log:
    Sep 22 05:59:34 tiger imaps[17367]: DBERROR: critical database situation
    Sep 22 05:59:34 tiger master[3369]: service imaps pid 17367 in READY state: terminated abnormally
    Sep 22 05:59:34 tiger imaps[17370]: DBERROR db4: PANIC: fatal region error detected; run recovery
    Sep 22 05:59:34 tiger imaps[17370]: DBERROR: critical database situation
    Sep 22 05:59:34 tiger master[3369]: service imaps pid 17382 in READY state: terminated abnormally
    Sep 22 05:59:34 tiger imaps[17385]: DBERROR db4: PANIC: fatal region error detected; run recovery
    Sep 22 05:59:34 tiger imaps[17385]: DBERROR: critical database situation
    Sep 22 05:59:34 tiger master[3369]: service imaps pid 17385 in READY state: terminated abnormally
    Sep 22 05:59:34 tiger imaps[17388]: DBERROR db4: PANIC: fatal region error detected; run recovery
    Sep 22 05:59:34 tiger imaps[17388]: DBERROR: critical database situation
    Sep 22 05:59:34 tiger master[3369]: service imaps pid 17388 in READY state: terminated abnormally
    Sample POP Log:
    Sep 22 06:02:55 tiger master[17433]: service pop3 pid 26619 in READY state: terminated abnormally
    Sep 22 06:02:55 tiger pop3[26621]: DBERROR db4: PANIC: fatal region error detected; run recovery
    Sep 22 06:02:55 tiger pop3[26621]: DBERROR: critical database situation
    Sep 22 06:02:55 tiger pop3s[26622]: DBERROR db4: PANIC: fatal region error detected; run recovery
    Sep 22 06:02:55 tiger pop3s[26622]: DBERROR: critical database situation
    Sep 22 06:02:55 tiger master[17433]: service pop3s pid 26624 in READY state: terminated abnormally
    Sep 22 06:02:55 tiger master[17433]: service pop3 pid 26623 in READY state: terminated abnormally
    Sep 22 06:02:55 tiger pop3[26625]: DBERROR db4: PANIC: fatal region error detected; run recovery
    Sep 22 06:02:55 tiger pop3[26625]: DBERROR: critical database situation
    Sep 22 06:02:55 tiger pop3s[26626]: DBERROR db4: PANIC: fatal region error detected; run recovery
    Sep 22 06:02:55 tiger pop3s[26626]: DBERROR: critical database situation
    Sep 22 06:02:55 tiger master[17433]: service pop3s pid 26626 in READY state: terminated abnormally
    Sep 22 06:02:55 tiger master[17433]: service pop3 pid 26625 in READY state: terminated abnormally
    What has happened...?
    Rebooting the server doesn't do any good, .... what has happened...?
    Appreciate any help.
    Cheers,
    Steve

    Hi
    Thanks for your responses, sorry I haven't got back to you until now - the forum seemed to go down on Friday & I've only just hooked up again.
    To answer both;
    Log entries in mail system do not seem to indicate anything odd - Windows clients can access OK but the one & only MAC client cannot. I have tried rebuilding the index on that client already but it gets right to the end then hangs.
    When I stop the service with the GUI it shows "mail service running" but all protocols become disabled (reported in the GUI). This seems to be consistent with the output below.
    Here is the terminal status output, once running & once after trying to stop the service.
    mail:command = "getState"
    mail:protocolsArray:arrayindex:0:active = 0
    mail:protocolsArray:arrayindex:0:protocol = "SMTP"
    mail:protocolsArray:arrayindex:0:total = 0
    mail:protocolsArray:arrayindex:0:kind = "INCOMING"
    mail:protocolsArray:arrayindex:0:status = "ON"
    mail:protocolsArray:arrayindex:1:active = 0
    mail:protocolsArray:arrayindex:1:protocol = "SMTP"
    mail:protocolsArray:arrayindex:1:total = 0
    mail:protocolsArray:arrayindex:1:kind = "OUTGOING"
    mail:protocolsArray:arrayindex:1:status = "ON"
    mail:protocolsArray:arrayindex:2:active = 0
    mail:protocolsArray:arrayindex:2:protocol = "POP3"
    mail:protocolsArray:arrayindex:2:total = 0
    mail:protocolsArray:arrayindex:2:kind = "INCOMING"
    mail:protocolsArray:arrayindex:2:status = "ON"
    mail:protocolsArray:arrayindex:3:active = 2
    mail:protocolsArray:arrayindex:3:protocol = "IMAP"
    mail:protocolsArray:arrayindex:3:total = 0
    mail:protocolsArray:arrayindex:3:kind = "INCOMING"
    mail:protocolsArray:arrayindex:3:status = "ON"
    mail:protocolsArray:arrayindex:4:active = 0
    mail:protocolsArray:arrayindex:4:protocol = "LISTSERVER"
    mail:protocolsArray:arrayindex:4:total = 0
    mail:protocolsArray:arrayindex:4:kind = "INCOMING"
    mail:protocolsArray:arrayindex:4:status = "ON"
    mail:state = "RUNNING"
    mail:logPaths:Server Log = "srvr.log"
    mail:logPaths:Lists qrunner = "/private/var/mailman/logs/qrunner"
    mail:logPaths:Lists post = "/private/var/mailman/logs/post"
    mail:logPaths:Lists smtp = "/private/var/mailman/logs/smtp"
    mail:logPaths:Lists subscribe = "/private/var/mailman/logs/subscribe"
    mail:logPaths:SMTP Log = "smtp.log"
    mail:logPaths:POP Log = "pop3.log"
    mail:logPaths:Lists error = "/private/var/mailman/logs/error"
    mail:logPaths:IMAP Log = "imap.log"
    mail:logPaths:Lists smtp-failure = "/private/var/mailman/logs/smtp-failure"
    mail:postfixStartedTime = "2007-11-02 15:38:22 +0000"
    mail:readWriteSettingsVersion = 1
    mail:setStateVersion = 1
    mail:startedTime = "2007-11-02 15:38:22 +0000"
    mail:cyrusStartedTime = "2007-11-02 15:38:23 +0000"
    mail:command = "getState"
    mail:protocolsArray:arrayindex:0:active = 0
    mail:protocolsArray:arrayindex:0:protocol = "SMTP"
    mail:protocolsArray:arrayindex:0:total = 0
    mail:protocolsArray:arrayindex:0:kind = "INCOMING"
    mail:protocolsArray:arrayindex:0:status = "OFF"
    mail:protocolsArray:arrayindex:1:active = 0
    mail:protocolsArray:arrayindex:1:protocol = "SMTP"
    mail:protocolsArray:arrayindex:1:total = 0
    mail:protocolsArray:arrayindex:1:kind = "OUTGOING"
    mail:protocolsArray:arrayindex:1:status = "OFF"
    mail:protocolsArray:arrayindex:2:active = 0
    mail:protocolsArray:arrayindex:2:protocol = "POP3"
    mail:protocolsArray:arrayindex:2:total = 0
    mail:protocolsArray:arrayindex:2:kind = "INCOMING"
    mail:protocolsArray:arrayindex:2:status = "OFF"
    mail:protocolsArray:arrayindex:3:active = 0
    mail:protocolsArray:arrayindex:3:protocol = "IMAP"
    mail:protocolsArray:arrayindex:3:total = 0
    mail:protocolsArray:arrayindex:3:kind = "INCOMING"
    mail:protocolsArray:arrayindex:3:status = "OFF"
    mail:protocolsArray:arrayindex:4:active = 0
    mail:protocolsArray:arrayindex:4:protocol = "LISTSERVER"
    mail:protocolsArray:arrayindex:4:total = 0
    mail:protocolsArray:arrayindex:4:kind = "INCOMING"
    mail:protocolsArray:arrayindex:4:status = "ON"
    mail:state = "RUNNING"
    mail:logPaths:Server Log = "srvr.log"
    mail:logPaths:Lists qrunner = "/private/var/mailman/logs/qrunner"
    mail:logPaths:Lists post = "/private/var/mailman/logs/post"
    mail:logPaths:Lists smtp = "/private/var/mailman/logs/smtp"
    mail:logPaths:Lists subscribe = "/private/var/mailman/logs/subscribe"
    mail:logPaths:SMTP Log = "smtp.log"
    mail:logPaths:POP Log = "pop3.log"
    mail:logPaths:Lists error = "/private/var/mailman/logs/error"
    mail:logPaths:IMAP Log = "imap.log"
    mail:logPaths:Lists smtp-failure = "/private/var/mailman/logs/smtp-failure"
    mail:postfixStartedTime = ""
    mail:readWriteSettingsVersion = 1
    mail:setStateVersion = 1
    mail:startedTime = ""
    mail:cyrusStartedTime = ""
    What would you suggest should be my next steps?
    Thanks,
    Apull

  • Documentation for oracle webcenter wiki and blog server 10.1.3.2.0

    Hi
    Can anyone tell me where I can get the documentation for oracle webcenter wiki and blog server 10.1.3.2.0. I am specifically interested in this version and not the latest version Oracle® WebCenter Wiki and Blog Server 10g Release 3 (10.1.3.4.0) because I have heard the older version provided out of the box portlets for creation of blogs.
    Since we want blogs very fast, I want documentation of this older version.
    Can anyone point them out to me as soon as possible please

    You can find the demo portlets here: http://www.oracle.com/technology/products/webcenter/owcs_10132_demos.html#wiki_blog_disc_samples
    I do not believe there were any portlets provided with the earlier release.
    Anyway what i think is it should not take you more than a few hours to integrate blogging functionality if you are using the Connection & Task flows provided by WebCenter.
    Venkat

  • Solaris Server VM under Weblogic 7.0 sp1

    I have noticed that bea has dropped platform support
    for the Sun SPARC Solaris Server VM (java 1.3 -server option)
    and only allows the use of the client VM (-hotspot)
    I was under the impression that -server mode was much more scalable than -hotspot
    mode, which is now the only option
    on solaris.
    Has anyone tried using -server mode under with weblogic 7
    with any success or greater performance?
    Matt

    I heard for corporate customers there is a patch for weblogic 7 with that you can
    use jdk141.
    Am i right?
    Rahul
    "Deyan D. Bektchiev" <[email protected]> wrote:
    7.0 is not supported with 1.4.x .
    If you need 1.4 then you should upgrade to 8.1
    --dejan
    Riku Henriksson wrote:
    Hello
    I have a problem with Weblogic 7.0 SP1. I run three ejb beans on Tru64platform
    (V5.1 1885 alpha). I recently tried to upgrade java from 1.31 to 1.40and run
    into this problem. When I try to start Weblogic I get following error:
    <Jul 21, 2003 3:30:35 PM EEST> <Info> <Security> <090065> <Getting bootidentity
    from user.>
    Enter username to boot WebLogic server:system
    Enter password to boot WebLogic server:
    Starting WebLogic Server...
    <Jul 21, 2003 3:30:47 PM EEST> <Notice> <Management> <140005> <Loadingconfiguration
    /home/voucher/weblogic701/bea/user_projects/mydomain/./config.xml>
    <Jul 21, 2003 3:31:23 PM EEST> <Notice> <Security> <090082> <Securityinitializing
    using realm myrealm.>
    <Jul 21, 2003 3:31:25 PM EEST> <Notice> <WebLogicServer> <000327> <StartingWebLogic
    Admin Server "myserver" for domain "mydomain">
    exception system: exiting due to multiple internal errors:
    exception dispatch or unwind stuck in infinite loop
    exception dispatch or unwind stuck in infinite loop
    exception system: exiting due to multiple internal errors:
    exception dispatch or unwind stuck in infinite loop
    exception dispatch or unwind stuck in infinite loop
    /startWebLogic.sh: 72637 Abort - core dumped
    Everything worked fine when I used 1.31 java, or earlier. Does anybodyknow
    what's going on here? How do I fix this. It would be crucial to getit working
    with 1.41 java because there's another problem with TimeZones that supposedly
    is fixed in 1.41...

  • Can DDoS Attack program in java?

    Can we write powerful and disastrous exploit in Java such as DDOS attack,Sql injection,byte code attack,reversing
    other language's program?
    please end up my curiosity by your perfect solution. :)
    I will godly appreciate that, thanks in advance. :)
    best regards,
    JVegeta

    Dear Friends,
    can we develop program in java to identify the virus
    or unknown application is running in the system.
    I want to develop such kind of application in java.
    Which classes and methods are usefull for that in
    java.
    May I get some clue
    ThanksSome thoughts:
    You will need to define unknown before you can search for it.
    You might want to try a smaller project first, to learn the API. Then you will be able to determine what would be useful yourself.
    I would give you a clue but I am all out today.

  • Does anyone know how to archive and export individual blogs from OS X blog server?

    I work for a school and we'd like to allow students to leave with their work on our blog server in html form. I have looked through the documentation provided by Apple and third party writers and googled around, but haven't come across any references to exporting blogs and wikis as self-contained structures, with all files, images and links intact.
    We are running a Snow Leopard server. BTW
    Any ideas?
    -shryn

    I'm afraid you've fallen over a requirement that Apple has recently introduced. The iPhone plays podcasts by using 'byte-range requests', which means calling for part of the file at a time rather than the whole thing. Unfortunately some servers don't support this, and there were an increasing number of complaints that podcasts which worked elsewhwere weren't working on an iPhone.
    So Apple are now making the ability to handle this a condition of submission. Evidently your server doesn't support this, so all you can do is to ask them whether they can implement it. If not, you will have to find another hosting service - ask about this before committing yourself, and if they say no, or don't know what it is, find another host. Note that if, as some people do, you are hosting the feed and the episodes on different servers, it is the server hosting the episodeswhich is in question.
    If you would like to post the URL of one of your media files it may be possible to check your server - there is a test though I'm not sure it's 100% accurate.

  • Blogging Server

    Does Oracle have any future plans to support a blogging server?

    Can you clarify what you are looking for? Are you looking for us to provide an application that manages blogs?
    Are you looking for OTN to host users blogs?

  • Protect internet Router from ddos attack

    Hello,
    i have small router 2911 connected the main internet router GSR this GSR has peering with ISPs , there is default route on 2911 send to GSR and all user connect on 2911 will go from 2911 to GSR, i had attack ddos attack on 2911 my question how can protect 2911 from this kind of attack, i have some queries if you can help me:
    1. what is the access-list need to configure to protect the router 2911.for example ICMP, HTTP.......
    2. what is the COOP configuration to allow us to able to access this router when attack and CPU high.
    3. i heard ASR and 7200 has some feature to protect these router from ddos attack, is helpful for all kind of dedos attack
    thanks in advanced.

    Hi Steven,
    Have a look at the below mentioned link:
    DDOS Protection
    DDOS Protection 2
    Regards,
    Anim Saxena
    Community Manager
    *do rate helpful posts*

  • HT3228 I don't see the "Delete from server" option under Incoming Settings on my IPhone4, is there a way to keep it from the server so that I can check emails from multiple devices?.

    I'm using IPhone 4 to check emails.  Is there a way on the IPhone to setup that the messages would still be on the server so that when I check on my laptops the messages are still there.  I can do this setup for multiple laptops but don't know how I can do it for the IPhone.
    I got help and setup all the things they told me but the problem is that I did not see the "Delete from server" option under Incoming Settings on my IPhone 4 to select.  Is there anything else that I am missing?  Thanks

    TamIPhone4 wrote:
    I am using cox email, Outlook on the laptop, and IMAP on the IPhone, the problem is that I did not see the Delete from Server option like many of you suggested.
    The default for IMAP is that it does NOT delete the email from the server when it pushes the email to a device.  Only if you tell a device to tell the server to delete the email, will it actually delete from the server.

  • Vhost configuration for Adobe Media Server running under linux.

    Please help me with Vhost configuration for Adobe Media Server running under linux.
    I was running a media sharing website for which I wanted to use Adobe Media Server.
    To use, AMS, I disabled the already installed Apache server and installed AMS along with the built in Apache server. I could successfully install AMS and could login to AMS Admin Console through my IP number.
    My existing website, www.mydomain.com is having its contents located at:
    /home/mydomain/public_html
    (Directory created under the old version of Apache not bundled with AMS)
    Users will be uploading their videos, which will get transcoded and will be delivered to the website visitors in the existing scenario.
    To use this website with AMS, this is what I did:
    I created a folder for my domain, www.mydomain.com as below
    /opt/adobe/ams/conf/_defaultRoot_/www.mydomain.com
    Copied Application.xml and Vhost.xml from /opt/adobe/ams/conf/_defaultRoot_/   and pasted them in /opt/adobe/ams/conf/_defaultRoot_/www.mydomain.com
    In the Application.xml file there are 2 entries:
    <Alias name="mydomain.com"></Alias>
    <AppsDir>${/home/mydomain/public_html}</AppsDir>
    Please help me with further steps to be completed:
    Do I need to create a separate VirtualHost entry in the Apache installed with AMS?
    If yes, can I specify already existing document root for my website (/home/mydomain/public_html) or do I need to create a separate folder under webroot/Apache ?
    If yes to point 2 above, then do I need to copy all the existing contents from /home/mydomain/public_html to the newly created folder ?
    I hope, I can serve all my static contents like html pages and php and media like video/audio. In that case do I need create alias to my Media/Alias folder or AMS will automatically start streaming when a video/audio is requested ?
    What other steps do i need to complete?
    Any help in this regard would be highly appreciated.
    Thanks and Regards

    Dear sir or madam,
    Here is Letswin Technology, which specializes in global servers, web hosting, VPS, VPNj. If anything I can do for you, pls contact us!
    Have a nice day!

Maybe you are looking for

  • Capturing video using XLR8's InterView device?

    Since I prefer the QT software to the InterView software that came with my S-video to USB capture device... Is there a way to use QTPro instead?

  • Does FCSvr read ACL permissions set in OD?

    We have set up a series of permissions using ACL's within OD. I assumed that FCSvr would pick up these permissions to certain areas of an Xsan. However within FCSvr you can still see media from areas that have been denied to certain users - set up in

  • ORA-00942 -- Problem with XSD Registration

    I was able to successfully register an XSD file and the corresponding tables got created. When I query "Select * from tab" I can see all the the tables. BUT When i do a 'desc' or a 'select count(*) from <table_name>' ORA-00942: table or view does not

  • Inbox frozen

    My Inbox is frozen with a spinning gear. I have restarted 3 times, nothing changed. Any suggestions?

  • Record chat option grayed out

    Im running iChat 4 (601) and the record chat option is grayed out in the video drop down menu. I saw some one else had this problem but theirs was solved when they did the QT update. I did the update... Still no change anyone have any ideas?