Posts

Showing posts from November, 2016

Up to $100 Match Promotion from Vultr, Hurry UP

Image
Click this link to get $100 match credit from Vultr: http://www.vultr.com/?ref=6945823-3B Just got a piece of promotion news from Vultr that if you are a new customer, you will get up to $100 match credit if you fund your account. The process is petty easy, create a new account and when you fund your account, Vultr will match dollar for dollar up to $100 of your Initial Funding. Frequently Asked Questions: 1.Does my match promotion credit expire? Yes. Any unused promotional credit will expire 12 months after issuance. 2.How is the match credit applied to my account? Credit is applied on a 50/50 basis. If your hourly accrued balance is $10, $5 will be deducted from promotional credit, and $5 will be deducted from real funds. 3.Can I create a new account if I already have an existing account? No. Duplicate accounts are not eligible for promotions. 4.How long will this promotion be available? This promotion is available for a limited time, so act fast before it...

Linode Opens the Second Datacenter in Tokyo

Today, Linode opened a second datacenter in Tokyo , as they promised several months ago. Tokyo 2 is the ninth datacenter around the world, and it offers all of the features and services as other datacenters. If you with to move to Tokyo 2 from other datacenters, you can follow the instructions or open a support ticket and they will configure a migration for you. Enjoy the Tokyo 2 datacenter!

How to Enable HSTS in Webmin

HSTS, which is short for HTTP Strict Transport Security, is a security feature that lets a web site tell browsers that it should only be communicated with using HTTPS, instead of using HTTP. This tutorial will help you setting HSTS in webmin. First, navigate to "Servers"-->"Apache Webserver", click the virtual server with SSL enabled which you want to edit. Then click "Edit Directives" to edit configuration file manually. Second, add the following configs to the bottom of the file. Header always set Strict-Transport-Security "max-age=63072000; includeSubdomains;" Click "Save and close" and restart Apache by clicking the "Apply Changes" on the top right. It's done and now HTTP Strict Transport Security has been enabled. You can run a ssl test here to find if it was enabled.

How to Enable Forward Secrecy in Webmin

It's pretty easy to enable Forward Secrecy in Webmin, here is the instruction. First, navigate to "Servers"-->"Apache Webserver", click the virtual server with SSL enabled which you want to edit. Then click "Edit Directives" to edit configuration file manually. Second, add the following configs to the bottom of the file, if it were exist, replace them. SSLProtocol all -SSLv2 -SSLv3 SSLHonorCipherOrder on SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4" Click "Save and close" and restart Apache by clicking the "Apply Changes" on the top right. It's done and now Forward Secrecy has been enabled. You can run a ssl test here to find if it was enabled.

Hide Apache Software Version and Module Version

Image
By default, Apache will show its version and moudules installed in HTTP Header and error messages pages. It's vulnerable and dangerous, we need to make changes in Apache main configuration file. According to your Linux distribution, you can find Apache main configuration here: /etc/httpd/conf/httpd.conf (RHEL/CentOS/Fedora) /etc/apache/apache2.conf (Debian/Ubuntu)   Edit the Apache configuration file, find and change the following directives. Restart Apache and it's done. ServerSignature Off ServerTokens Prod   ServerSignature is used to set what to show when there is an error, for example, 404 eror (Page Not Found). There are three values for ServerSignature directive, Off, On and Email. The difference between On and Email is if you choose Email you will see a "mailto:" link to ServerAdmin.   The above image is not showing any Apache information, with ServerSignature set to value Off. The above image is showing Apache and OS information, with Ser...