Category Archives: Rimuhosting

Anything and everything relating to Rimuhosting

Drupal Exploits – script to detect versions

We are currently seeing a high volume of Drupal exploits running a lot of arbitrary code, including crypto mining, attacking other servers and similar due to this exploit  https://www.drupal.org/sa-core-2018-002   If you want to find out if you have any vulnerable … Continue reading

Posted in Rimuhosting | Leave a comment

Spectre and Meltdown article roundup

Our team is working on the best approach to secure our customers' systems against the recently reported Spectre and Meltdown vulnerabilities.  Our first step is to understand the problem and its mitigations.  This post provides a roundup of discussions and … Continue reading

Posted in Rimuhosting | Tagged , , , | Leave a comment

Letsencrypt with Zonomi and Rimuhosting name servers using hooks

SSL is good, you should use it everywhere! Letsencrypt it is a project that allows you to obtain signed certificates for free (you should consider donating though) to secure your website. Big efforts have been done to make this accessible to … Continue reading

Posted in HOWTO, Rimuhosting, Security | Tagged , , , | Leave a comment

Virtualmin Changes binding from ip:80 to *:80 and breaks older configs … FIX

We have found some virtualmin installs will change the format of new virtualhosts from ip:80 to *:80 sometimes which breaks virtualhosts as the *:80 overrides the ip:80. This can result in websites showing another website content, and usually shows up … Continue reading

Posted in Rimuhosting | Tagged , , | Comments Off on Virtualmin Changes binding from ip:80 to *:80 and breaks older configs … FIX

Reboot-less Xen patching

Recently there have been two sets of Xen vulnerabilities.  One being disclosed in September, the other earlier today.  Historically we have had to organize host updates which required downtime to reboot VMs. For these last sets of vulnerabilities we have … Continue reading

Posted in Rimuhosting | Tagged , , | Comments Off on Reboot-less Xen patching

DKIM and subaddressing added to 25mail.st

We have added a couple of features to the 25mail.st service. First, we now support DKIM email signing. This lets our email servers sign outgoing messages so that recipients can verify that the email was sent from an authorized server. … Continue reading

Posted in Rimuhosting | Tagged , , | Comments Off on DKIM and subaddressing added to 25mail.st

Whitelist your own computer in fail2ban

Fail2ban is a great "dynamic" firewall for servers that is installed by default on many of our VPSs, and we can install it on your VPSs at your request. It protects against brute-force attacks, where an attacker is trying to … Continue reading

Posted in HOWTO, Rimuhosting, Security | Tagged , , | Comments Off on Whitelist your own computer in fail2ban

Using Fail2ban on wordpress wp-login.php and xmlrpc.php

A fair few customer of ours use wordpress and occasionally notice that there are people hammering on a few URLs This can cause high load, slow websites and a number of issues, espoecuially when you have more than a single … Continue reading

Posted in Rimuhosting, Security | Tagged , , | Comments Off on Using Fail2ban on wordpress wp-login.php and xmlrpc.php

Using Ansible to manage your VPSs – Part Two

In this post I'm going to introduce playbooks, and show you how to customise the /etc/resolv.conf file on each server.  I assume you have followed Part One of this series and have created a hosts file and files in ~/myansible/host_vars/. … Continue reading

Posted in Rimuhosting | Comments Off on Using Ansible to manage your VPSs – Part Two

Using Ansible to manage your VPSs – Part One

Ansible is a system to automate the updating of server configurations and other administration tasks.  In this post I'll explain what's necessary to get started with Ansible, creating a configuration structure, telling Ansble about your hosts and running ad-hock commands … Continue reading

Posted in Clustering, HOWTO, Rimuhosting | Tagged , , , , | Comments Off on Using Ansible to manage your VPSs – Part One