<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>kieranbarnes</title>
	<atom:link href="http://bloke.org/feed/" rel="self" type="application/rss+xml" />
	<link>http://bloke.org</link>
	<description>do you know where your towel is?</description>
	<lastBuildDate>Sat, 21 Aug 2010 12:03:59 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>[Snippet] Create a large file in Linux</title>
		<link>http://bloke.org/linux/snippet-create-a-large-file-in-linux/</link>
		<comments>http://bloke.org/linux/snippet-create-a-large-file-in-linux/#comments</comments>
		<pubDate>Sat, 21 Aug 2010 12:03:59 +0000</pubDate>
		<dc:creator>Kieran</dc:creator>
				<category><![CDATA[Linux]]></category>

		<guid isPermaLink="false">http://bloke.org/?p=832</guid>
		<description><![CDATA[Need to create a large file? For disk speed tests? Or space tests?
This will create a 500Mb file in your current directory called  your.big.file


Related posts:[Snippet] Allow mysql root access from anywhere A small annoyance of mine is on local development servers,...
[Snippet] Stupid Simple cPanel Install Open a clean server, Go have your lunch. Maybe lunch...
[Snippet] [...]


Related posts:<ol><li><a href='http://bloke.org/mysql/snippet-allow-mysql-root-access-from-anywhere/' rel='bookmark' title='Permanent Link: [Snippet] Allow mysql root access from anywhere'>[Snippet] Allow mysql root access from anywhere</a> <small>A small annoyance of mine is on local development servers,...</small></li>
<li><a href='http://bloke.org/cpanelwhm/snippet-stupid-simple-cpanel-install/' rel='bookmark' title='Permanent Link: [Snippet] Stupid Simple cPanel Install'>[Snippet] Stupid Simple cPanel Install</a> <small>Open a clean server, Go have your lunch. Maybe lunch...</small></li>
<li><a href='http://bloke.org/linux/snippet-centos-server-firewall-configuration/' rel='bookmark' title='Permanent Link: [Snippet] CentOS Server Firewall Configuration'>[Snippet] CentOS Server Firewall Configuration</a> <small>CentOS 5 Server has a nice text interface to configuring...</small></li>
</ol>]]></description>
			<content:encoded><![CDATA[<p>Need to create a large file? For disk speed tests? Or space tests?</p>
<div id="wpshdo_1" class="wp-synhighlighter-outer"><div id="wpshdi_1" class="wp-synhighlighter-inner" style="display: block;"><pre class="bash" style="font-family:monospace;"><span class="kw2">dd</span> <span class="kw1">if</span>=<span class="sy0">/</span>dev<span class="sy0">/</span>zero <span class="re2">of</span>=your.big.file <span class="re2">bs</span>=1MB <span class="re2">count</span>=<span class="nu0">500</span></pre></div></div>
<p>This will create a 500Mb file in your current directory called  your.big.file</p>
<div id="wpshdo_2" class="wp-synhighlighter-outer"><div id="wpshdi_2" class="wp-synhighlighter-inner" style="display: block;"><pre class="bash" style="font-family:monospace;">500+0 records <span class="kw1">in</span>
<span class="nu0">500</span>+<span class="nu0">0</span> records out
<span class="nu0">500000000</span> bytes <span class="br0">&#40;</span><span class="nu0">500</span> MB<span class="br0">&#41;</span> copied, <span class="nu0">4.08855</span> seconds, <span class="nu0">122</span> MB<span class="sy0">/</span>s</pre></div></div>


<p>Related posts:<ol><li><a href='http://bloke.org/mysql/snippet-allow-mysql-root-access-from-anywhere/' rel='bookmark' title='Permanent Link: [Snippet] Allow mysql root access from anywhere'>[Snippet] Allow mysql root access from anywhere</a> <small>A small annoyance of mine is on local development servers,...</small></li>
<li><a href='http://bloke.org/cpanelwhm/snippet-stupid-simple-cpanel-install/' rel='bookmark' title='Permanent Link: [Snippet] Stupid Simple cPanel Install'>[Snippet] Stupid Simple cPanel Install</a> <small>Open a clean server, Go have your lunch. Maybe lunch...</small></li>
<li><a href='http://bloke.org/linux/snippet-centos-server-firewall-configuration/' rel='bookmark' title='Permanent Link: [Snippet] CentOS Server Firewall Configuration'>[Snippet] CentOS Server Firewall Configuration</a> <small>CentOS 5 Server has a nice text interface to configuring...</small></li>
</ol></p>]]></content:encoded>
			<wfw:commentRss>http://bloke.org/linux/snippet-create-a-large-file-in-linux/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>[Snippet] Skipping the WHM Getting Started Wizard</title>
		<link>http://bloke.org/cpanelwhm/snippet-skipping-the-whm-getting-started-wizard/</link>
		<comments>http://bloke.org/cpanelwhm/snippet-skipping-the-whm-getting-started-wizard/#comments</comments>
		<pubDate>Tue, 17 Aug 2010 10:49:01 +0000</pubDate>
		<dc:creator>Kieran</dc:creator>
				<category><![CDATA[cPanel/WHM]]></category>

		<guid isPermaLink="false">http://bloke.org/?p=829</guid>
		<description><![CDATA[WHM uses the /etc/.whostmgrft file to determine whether the  Getting Started Wizard should run. You can touch the file using the  following command to stop it appearing
touch /etc/.whostmgrft


Related posts:[Snippet] Event ID 1056 Source Dhcp Server Got the error The DHCP service has detected that it...
[Snippet] Stop Windows Update irritating you to restart after [...]


Related posts:<ol><li><a href='http://bloke.org/windows/snippet-event-id-1056-source-dhcp-server/' rel='bookmark' title='Permanent Link: [Snippet] Event ID 1056 Source Dhcp Server'>[Snippet] Event ID 1056 Source Dhcp Server</a> <small>Got the error The DHCP service has detected that it...</small></li>
<li><a href='http://bloke.org/geeky/snippet-stop-windows-update-irritating-you-to-restart-after-updates/' rel='bookmark' title='Permanent Link: [Snippet] Stop Windows Update irritating you to restart after updates'>[Snippet] Stop Windows Update irritating you to restart after updates</a> <small>I've been irritated to reboot my laptop every fifteen minutes...</small></li>
<li><a href='http://bloke.org/linux/snippet-create-a-large-file-in-linux/' rel='bookmark' title='Permanent Link: [Snippet] Create a large file in Linux'>[Snippet] Create a large file in Linux</a> <small>Need to create a large file? For disk speed tests?...</small></li>
</ol>]]></description>
			<content:encoded><![CDATA[<p>WHM uses the <em>/etc/.whostmgrft</em> file to determine whether the  Getting Started Wizard should run. You can touch the file using the  following command to stop it appearing</p>
<div><em>touch /etc/.whostmgrft</em></div>


<p>Related posts:<ol><li><a href='http://bloke.org/windows/snippet-event-id-1056-source-dhcp-server/' rel='bookmark' title='Permanent Link: [Snippet] Event ID 1056 Source Dhcp Server'>[Snippet] Event ID 1056 Source Dhcp Server</a> <small>Got the error The DHCP service has detected that it...</small></li>
<li><a href='http://bloke.org/geeky/snippet-stop-windows-update-irritating-you-to-restart-after-updates/' rel='bookmark' title='Permanent Link: [Snippet] Stop Windows Update irritating you to restart after updates'>[Snippet] Stop Windows Update irritating you to restart after updates</a> <small>I've been irritated to reboot my laptop every fifteen minutes...</small></li>
<li><a href='http://bloke.org/linux/snippet-create-a-large-file-in-linux/' rel='bookmark' title='Permanent Link: [Snippet] Create a large file in Linux'>[Snippet] Create a large file in Linux</a> <small>Need to create a large file? For disk speed tests?...</small></li>
</ol></p>]]></content:encoded>
			<wfw:commentRss>http://bloke.org/cpanelwhm/snippet-skipping-the-whm-getting-started-wizard/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Smarty Security &#8211; Stop .tpl access</title>
		<link>http://bloke.org/php/smarty-security-stop-tpl-access/</link>
		<comments>http://bloke.org/php/smarty-security-stop-tpl-access/#comments</comments>
		<pubDate>Mon, 16 Aug 2010 23:12:55 +0000</pubDate>
		<dc:creator>Kieran</dc:creator>
				<category><![CDATA[Apache]]></category>
		<category><![CDATA[PHP]]></category>
		<category><![CDATA[cPanel/WHM]]></category>

		<guid isPermaLink="false">http://bloke.org/?p=826</guid>
		<description><![CDATA[WHMCS uses the Smarty template engine. Which means your .tpl files are accessible to anyone that knows the path. Quite easy in WHMCS. Whilst not really a major security risk, its bad practise to all these files to be accessed directly.
Add this code into your .htaccess file.


Related posts:Redirecting non-www to a www prefix This old [...]


Related posts:<ol><li><a href='http://bloke.org/apache/redirecting-non-www-to-a-www-prefix/' rel='bookmark' title='Permanent Link: Redirecting non-www to a www prefix'>Redirecting non-www to a www prefix</a> <small>This old chestnut again. Create or edit the .htaccess file...</small></li>
<li><a href='http://bloke.org/linux/mod_geoip-revisted-including-stopping-spam-in-phpbb-2/' rel='bookmark' title='Permanent Link: mod_geoip Revisted including stopping spam in phpBB 2'>mod_geoip Revisted including stopping spam in phpBB 2</a> <small>I've recently moved a client's forum onto a new cPanel...</small></li>
<li><a href='http://bloke.org/mysql/snippet-allow-mysql-root-access-from-anywhere/' rel='bookmark' title='Permanent Link: [Snippet] Allow mysql root access from anywhere'>[Snippet] Allow mysql root access from anywhere</a> <small>A small annoyance of mine is on local development servers,...</small></li>
</ol>]]></description>
			<content:encoded><![CDATA[<p><a href="http://ww.whmcs.com" target="_blank">WHMCS</a> uses the <a href="http://www.smarty.net/" target="_blank">Smarty</a> template engine. Which means your .tpl files are accessible to anyone that knows the path. Quite easy in WHMCS. Whilst not really a major security risk, its bad practise to all these files to be accessed directly.</p>
<p>Add this code into your .htaccess file.</p>
<div id="wpshdo_3" class="wp-synhighlighter-outer"><div id="wpshdi_3" class="wp-synhighlighter-inner" style="display: block;"><pre class="apache" style="font-family:monospace;">&lt;<span class="kw3">Files</span> ~ <span class="st0">&quot;<span class="es0">\.</span>tpl$&quot;</span>&gt;
<span class="kw1">Order</span> <span class="kw1">allow</span>,<span class="kw1">deny</span>
<span class="kw1">Deny</span> from <span class="kw2">all</span>
&lt;/<span class="kw3">Files</span>&gt;</pre></div></div>


<p>Related posts:<ol><li><a href='http://bloke.org/apache/redirecting-non-www-to-a-www-prefix/' rel='bookmark' title='Permanent Link: Redirecting non-www to a www prefix'>Redirecting non-www to a www prefix</a> <small>This old chestnut again. Create or edit the .htaccess file...</small></li>
<li><a href='http://bloke.org/linux/mod_geoip-revisted-including-stopping-spam-in-phpbb-2/' rel='bookmark' title='Permanent Link: mod_geoip Revisted including stopping spam in phpBB 2'>mod_geoip Revisted including stopping spam in phpBB 2</a> <small>I've recently moved a client's forum onto a new cPanel...</small></li>
<li><a href='http://bloke.org/mysql/snippet-allow-mysql-root-access-from-anywhere/' rel='bookmark' title='Permanent Link: [Snippet] Allow mysql root access from anywhere'>[Snippet] Allow mysql root access from anywhere</a> <small>A small annoyance of mine is on local development servers,...</small></li>
</ol></p>]]></content:encoded>
			<wfw:commentRss>http://bloke.org/php/smarty-security-stop-tpl-access/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>New Roll Cage</title>
		<link>http://bloke.org/vantegra/new-roll-cage/</link>
		<comments>http://bloke.org/vantegra/new-roll-cage/#comments</comments>
		<pubDate>Fri, 13 Aug 2010 12:40:03 +0000</pubDate>
		<dc:creator>Kieran</dc:creator>
				<category><![CDATA[Vantegra]]></category>

		<guid isPermaLink="false">http://bloke.org/?p=816</guid>
		<description><![CDATA[Out came the dash dodging bolt in to make way for the weld in.
Theres a lot of work before it goes in. Etch primering, painting laquering and a bit of seem welding.


Related posts:Preventing MSN Messenger Spam in Pidgin I use Pidgin as my instant messenger application. Mainly because...



Related posts:<ol><li><a href='http://bloke.org/windows/preventing-msn-messenger-spam-in-pidgin/' rel='bookmark' title='Permanent Link: Preventing MSN Messenger Spam in Pidgin'>Preventing MSN Messenger Spam in Pidgin</a> <small>I use Pidgin as my instant messenger application. Mainly because...</small></li>
</ol>]]></description>
			<content:encoded><![CDATA[<p>Out came the dash dodging bolt in to make way for the weld in.</p>
<p>Theres a lot of work before it goes in. Etch primering, painting laquering and a bit of seem welding.</p>

<a href='http://bloke.org/vantegra/new-roll-cage/attachment/dsc_0159copy/' title='DSC_0159copy'><img width="150" height="150" src="http://bloke.org/wp-content/uploads/2010/08/DSC_0159copy-150x150.jpg" class="attachment-thumbnail" alt="" title="DSC_0159copy" /></a>
<a href='http://bloke.org/vantegra/new-roll-cage/attachment/39169_454454655798_660480798_6249634_2953161_n/' title='39169_454454655798_660480798_6249634_2953161_n'><img width="150" height="150" src="http://bloke.org/wp-content/uploads/2010/08/39169_454454655798_660480798_6249634_2953161_n-150x150.jpg" class="attachment-thumbnail" alt="" title="39169_454454655798_660480798_6249634_2953161_n" /></a>
<a href='http://bloke.org/vantegra/new-roll-cage/attachment/40222_454453725798_660480798_6249602_4306550_n/' title='40222_454453725798_660480798_6249602_4306550_n'><img width="150" height="150" src="http://bloke.org/wp-content/uploads/2010/08/40222_454453725798_660480798_6249602_4306550_n-150x150.jpg" class="attachment-thumbnail" alt="" title="40222_454453725798_660480798_6249602_4306550_n" /></a>
<a href='http://bloke.org/vantegra/new-roll-cage/attachment/38605_454033705798_660480798_6239700_2408036_n/' title='38605_454033705798_660480798_6239700_2408036_n'><img width="150" height="150" src="http://bloke.org/wp-content/uploads/2010/08/38605_454033705798_660480798_6239700_2408036_n-150x150.jpg" class="attachment-thumbnail" alt="" title="38605_454033705798_660480798_6239700_2408036_n" /></a>
<a href='http://bloke.org/vantegra/new-roll-cage/attachment/img00216-20100809-2015/' title='IMG00216-20100809-2015'><img width="150" height="150" src="http://bloke.org/wp-content/uploads/2010/08/IMG00216-20100809-2015-150x150.jpg" class="attachment-thumbnail" alt="" title="IMG00216-20100809-2015" /></a>



<p>Related posts:<ol><li><a href='http://bloke.org/windows/preventing-msn-messenger-spam-in-pidgin/' rel='bookmark' title='Permanent Link: Preventing MSN Messenger Spam in Pidgin'>Preventing MSN Messenger Spam in Pidgin</a> <small>I use Pidgin as my instant messenger application. Mainly because...</small></li>
</ol></p>]]></content:encoded>
			<wfw:commentRss>http://bloke.org/vantegra/new-roll-cage/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Active Directory DHCP Authorisation Issues</title>
		<link>http://bloke.org/windows/active-directory-dhcp-authorisation-issues/</link>
		<comments>http://bloke.org/windows/active-directory-dhcp-authorisation-issues/#comments</comments>
		<pubDate>Fri, 06 Aug 2010 05:30:24 +0000</pubDate>
		<dc:creator>Kieran</dc:creator>
				<category><![CDATA[Windows]]></category>

		<guid isPermaLink="false">http://bloke.org/?p=809</guid>
		<description><![CDATA[So you just deleted a DHCP server in your Active Directory site and can't authorise a new one? Yeah... Stupid.
A client of mine recently deleted a Windows Server running DHCP and couldn't authorise the new server of the same name.
This is because the client did not Unauthorise the server beforehand. Possibly because the server hardware [...]


Related posts:<ol><li><a href='http://bloke.org/windows/snippet-event-id-1056-source-dhcp-server/' rel='bookmark' title='Permanent Link: [Snippet] Event ID 1056 Source Dhcp Server'>[Snippet] Event ID 1056 Source Dhcp Server</a> <small>Got the error The DHCP service has detected that it...</small></li>
<li><a href='http://bloke.org/windows/snippet-forcing-replication-between-domain-controllers/' rel='bookmark' title='Permanent Link: [Snippet] Forcing Replication Between Domain Controllers'>[Snippet] Forcing Replication Between Domain Controllers</a> <small>...because some people still don't know! Open Active Directory Sites...</small></li>
<li><a href='http://bloke.org/linux/ntlm-authentication-active-directory-on-apache-linux/' rel='bookmark' title='Permanent Link: NTLM Authentication (Active Directory) on Apache (Linux)'>NTLM Authentication (Active Directory) on Apache (Linux)</a> <small>Here is a quick guide to enabling NTLM authentication for...</small></li>
</ol>]]></description>
			<content:encoded><![CDATA[<p>So you just deleted a DHCP server in your Active Directory site and can't authorise a new one? Yeah... Stupid.</p>
<p>A client of mine recently deleted a Windows Server running DHCP and couldn't authorise the new server of the same name.<br />
This is because the client did not Unauthorise the server beforehand. Possibly because the server hardware was dead.</p>
<p><span id="more-809"></span>You could get error</p>
<blockquote><p>The specified servers are already present in the Directory Service</p></blockquote>
<p>Or this error</p>
<blockquote><p>DHCP Server not authorized:<br />
Error:<br />
Event ID: 1051<br />
Source: DHCPServer<br />
The DHCP/BINL service has determined that it is not authorized to service clients on this network for the Windows domain: <var>Your_Domain_Name</var>.<var>Domain_Root</var></p></blockquote>
<p>Here's a fool proof, yet risky method of sorting the issue out.</p>
<ol>
<li>Open Active Directory Sites and Services.</li>
<li>Click Services, and then click Net Services. If you can't see Services, click to select Show Services Node on the View menu.</li>
<li>In the right pane, right-click the name of the DHCP servers that you cannot add to Active Directory, and then click Delete.</li>
<li>Force replication of Active Directory to the other sites, or wait for the replication cycle to be completed.</li>
</ol>
<p>Now break out AdsiEdit, my favourite tool.</p>
<ol>
<li>Run AdsiEdit (You may need to install the Windows 2003 Server Support Tools if you're an AdsiEdit virgin).</li>
<li>Its best practise to run it on a Global Catalog server.</li>
<li>Expand Configuration, expand CN=Configuration, expand CN=Services, and then click CN=NetServices.</li>
<li>Right-click CN=<var>Your_DHCP_Root</var>, and then click Properties.</li>
<li>In the Select a property to view list, click DHCPServers.</li>
<li>In the Values list, click the name of  the new DHCP server,  click Remove, and then click OK.</li>
<li>Click CN=NetServices, right-click the entry for the new DHCP server, and then click  Delete.</li>
<li><a href="http://bloke.org/windows/snippet-forcing-replication-between-domain-controllers/">Force replication</a> of Active Directory to the other sites, or wait for the replication cycle to be completed.</li>
<li>Reboot the new server. Yeah -  you have to reboot.</li>
<li>Attempt to authorise the server again.</li>
</ol>


<p>Related posts:<ol><li><a href='http://bloke.org/windows/snippet-event-id-1056-source-dhcp-server/' rel='bookmark' title='Permanent Link: [Snippet] Event ID 1056 Source Dhcp Server'>[Snippet] Event ID 1056 Source Dhcp Server</a> <small>Got the error The DHCP service has detected that it...</small></li>
<li><a href='http://bloke.org/windows/snippet-forcing-replication-between-domain-controllers/' rel='bookmark' title='Permanent Link: [Snippet] Forcing Replication Between Domain Controllers'>[Snippet] Forcing Replication Between Domain Controllers</a> <small>...because some people still don't know! Open Active Directory Sites...</small></li>
<li><a href='http://bloke.org/linux/ntlm-authentication-active-directory-on-apache-linux/' rel='bookmark' title='Permanent Link: NTLM Authentication (Active Directory) on Apache (Linux)'>NTLM Authentication (Active Directory) on Apache (Linux)</a> <small>Here is a quick guide to enabling NTLM authentication for...</small></li>
</ol></p>]]></content:encoded>
			<wfw:commentRss>http://bloke.org/windows/active-directory-dhcp-authorisation-issues/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>[Snippet] Forcing Replication Between Domain Controllers</title>
		<link>http://bloke.org/windows/snippet-forcing-replication-between-domain-controllers/</link>
		<comments>http://bloke.org/windows/snippet-forcing-replication-between-domain-controllers/#comments</comments>
		<pubDate>Thu, 05 Aug 2010 21:53:22 +0000</pubDate>
		<dc:creator>Kieran</dc:creator>
				<category><![CDATA[Snippets]]></category>
		<category><![CDATA[Windows]]></category>

		<guid isPermaLink="false">http://bloke.org/?p=807</guid>
		<description><![CDATA[...because some people still don't know!

Open Active Directory Sites and Services.
In the console tree, expand Sites, and then expand the site to which you want to force replication from the updated server.
Expand the Servers container to display the list of servers that are currently configured for that site.
Expand the server objects and click their NTDS [...]


Related posts:<ol><li><a href='http://bloke.org/windows/active-directory-dhcp-authorisation-issues/' rel='bookmark' title='Permanent Link: Active Directory DHCP Authorisation Issues'>Active Directory DHCP Authorisation Issues</a> <small>So you just deleted a DHCP server in your Active...</small></li>
<li><a href='http://bloke.org/windows/synchronizing-time-on-a-windows-2003-domain-controller/' rel='bookmark' title='Permanent Link: Synchronizing time on a Windows 2003 domain controller'>Synchronizing time on a Windows 2003 domain controller</a> <small>In a Windows domain environment its incredibly important that all...</small></li>
<li><a href='http://bloke.org/windows/how-can-i-specify-the-global-catalog-gc-that-i-want-my-microsoft-exchange-server-system-to-use/' rel='bookmark' title='Permanent Link: How can I specify the Global Catalog (GC) that I want my Microsoft Exchange Server system to use?'>How can I specify the Global Catalog (GC) that I want my Microsoft Exchange Server system to use?</a> <small> If you want to force the Exchange server to...</small></li>
</ol>]]></description>
			<content:encoded><![CDATA[<p>...because some people still don't know!</p>
<ol>
<li>Open Active Directory Sites and Services.</li>
<li>In the console tree, expand <strong>Sites</strong>, and then expand the site to which you want to force replication from the updated server.</li>
<li>Expand the <strong>Servers</strong> container to display the list of servers that are currently configured for that site.</li>
<li>Expand the server objects and click their <strong>NTDS Settings</strong> objects to display their connection objects in the details pane. Find a  server that has a connection object from the server on which you made  the updates.</li>
<li>Click <strong>NTDS Settings</strong> below the server object. In the details pane, right-click the connection object whose <strong>From Server</strong> is the domain controller that has the updates that you want to replicate, and then click <strong>Replicate Now</strong>.</li>
<li>When the <strong>Replicate Now</strong> message box appears, review the information, and then click <strong>OK</strong>.</li>
</ol>
<p>That is all!</p>


<p>Related posts:<ol><li><a href='http://bloke.org/windows/active-directory-dhcp-authorisation-issues/' rel='bookmark' title='Permanent Link: Active Directory DHCP Authorisation Issues'>Active Directory DHCP Authorisation Issues</a> <small>So you just deleted a DHCP server in your Active...</small></li>
<li><a href='http://bloke.org/windows/synchronizing-time-on-a-windows-2003-domain-controller/' rel='bookmark' title='Permanent Link: Synchronizing time on a Windows 2003 domain controller'>Synchronizing time on a Windows 2003 domain controller</a> <small>In a Windows domain environment its incredibly important that all...</small></li>
<li><a href='http://bloke.org/windows/how-can-i-specify-the-global-catalog-gc-that-i-want-my-microsoft-exchange-server-system-to-use/' rel='bookmark' title='Permanent Link: How can I specify the Global Catalog (GC) that I want my Microsoft Exchange Server system to use?'>How can I specify the Global Catalog (GC) that I want my Microsoft Exchange Server system to use?</a> <small> If you want to force the Exchange server to...</small></li>
</ol></p>]]></content:encoded>
			<wfw:commentRss>http://bloke.org/windows/snippet-forcing-replication-between-domain-controllers/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>[Snippet] Stupid Simple cPanel Install</title>
		<link>http://bloke.org/cpanelwhm/snippet-stupid-simple-cpanel-install/</link>
		<comments>http://bloke.org/cpanelwhm/snippet-stupid-simple-cpanel-install/#comments</comments>
		<pubDate>Tue, 03 Aug 2010 08:10:10 +0000</pubDate>
		<dc:creator>Kieran</dc:creator>
				<category><![CDATA[Snippets]]></category>
		<category><![CDATA[cPanel/WHM]]></category>

		<guid isPermaLink="false">http://bloke.org/?p=789</guid>
		<description><![CDATA[Open a clean server,
Go have your lunch. Maybe lunch +VAT depending on the speed of your server.


Related posts:Installing memcached on CentOS (cPanel) Welcome to hell. No really, compared to installing memcached on...
mod_geoip Revisted including stopping spam in phpBB 2 I've recently moved a client's forum onto a new cPanel...
Installing mod_evasive on cPanel and/or Apache This [...]


Related posts:<ol><li><a href='http://bloke.org/linux/installing-memcached-on-centos-cpanel/' rel='bookmark' title='Permanent Link: Installing memcached on CentOS (cPanel)'>Installing memcached on CentOS (cPanel)</a> <small>Welcome to hell. No really, compared to installing memcached on...</small></li>
<li><a href='http://bloke.org/linux/mod_geoip-revisted-including-stopping-spam-in-phpbb-2/' rel='bookmark' title='Permanent Link: mod_geoip Revisted including stopping spam in phpBB 2'>mod_geoip Revisted including stopping spam in phpBB 2</a> <small>I've recently moved a client's forum onto a new cPanel...</small></li>
<li><a href='http://bloke.org/linux/installing-mod_evasive-on-cpanel-andor-apache/' rel='bookmark' title='Permanent Link: Installing mod_evasive on cPanel and/or Apache'>Installing mod_evasive on cPanel and/or Apache</a> <small>This guide details how to install mod_evasive on cPanel to...</small></li>
</ol>]]></description>
			<content:encoded><![CDATA[<p>Open a clean server,</p>
<div id="wpshdo_4" class="wp-synhighlighter-outer"><div id="wpshdi_4" class="wp-synhighlighter-inner" style="display: block;"><pre class="bash" style="font-family:monospace;"><span class="kw3">cd</span> <span class="sy0">/</span>home <span class="sy0">&amp;&amp;</span> <span class="kw2">wget</span> <span class="re5">-N</span> http:<span class="sy0">//</span>httpupdate.cpanel.net<span class="sy0">/</span>latest <span class="sy0">&amp;&amp;</span> <span class="kw2">sh</span> latest <span class="sy0">&amp;&amp;</span> <span class="sy0">/</span>usr<span class="sy0">/</span>local<span class="sy0">/</span>cpanel<span class="sy0">/</span>cpkeyclt</pre></div></div>
<p>Go have your lunch. Maybe lunch +VAT depending on the speed of your server.</p>


<p>Related posts:<ol><li><a href='http://bloke.org/linux/installing-memcached-on-centos-cpanel/' rel='bookmark' title='Permanent Link: Installing memcached on CentOS (cPanel)'>Installing memcached on CentOS (cPanel)</a> <small>Welcome to hell. No really, compared to installing memcached on...</small></li>
<li><a href='http://bloke.org/linux/mod_geoip-revisted-including-stopping-spam-in-phpbb-2/' rel='bookmark' title='Permanent Link: mod_geoip Revisted including stopping spam in phpBB 2'>mod_geoip Revisted including stopping spam in phpBB 2</a> <small>I've recently moved a client's forum onto a new cPanel...</small></li>
<li><a href='http://bloke.org/linux/installing-mod_evasive-on-cpanel-andor-apache/' rel='bookmark' title='Permanent Link: Installing mod_evasive on cPanel and/or Apache'>Installing mod_evasive on cPanel and/or Apache</a> <small>This guide details how to install mod_evasive on cPanel to...</small></li>
</ol></p>]]></content:encoded>
			<wfw:commentRss>http://bloke.org/cpanelwhm/snippet-stupid-simple-cpanel-install/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>cPanel MySQL Tuning</title>
		<link>http://bloke.org/linux/cpanel-mysql-tuning/</link>
		<comments>http://bloke.org/linux/cpanel-mysql-tuning/#comments</comments>
		<pubDate>Tue, 03 Aug 2010 07:24:50 +0000</pubDate>
		<dc:creator>Kieran</dc:creator>
				<category><![CDATA[CentOS]]></category>
		<category><![CDATA[Linux]]></category>
		<category><![CDATA[MySQL]]></category>
		<category><![CDATA[cPanel/WHM]]></category>

		<guid isPermaLink="false">http://bloke.org/?p=795</guid>
		<description><![CDATA[The default configuration for MySQL provided by cPanel is pretty barren. /etc/my.cnf
Thats it. One line. Its rubbish.
Here's mine to help you along the way. Its got some decent logging set, some decent cache and memory options for a shared server set and some helpful security settings enabled.


Related posts:MySQL Tuning Server Parameters These are some of [...]


Related posts:<ol><li><a href='http://bloke.org/linux/mysql-tuning-server-parameters/' rel='bookmark' title='Permanent Link: MySQL Tuning Server Parameters'>MySQL Tuning Server Parameters</a> <small>These are some of the handy MySQL 5.0 tweaks I...</small></li>
<li><a href='http://bloke.org/mysql/snippet-allow-mysql-root-access-from-anywhere/' rel='bookmark' title='Permanent Link: [Snippet] Allow mysql root access from anywhere'>[Snippet] Allow mysql root access from anywhere</a> <small>A small annoyance of mine is on local development servers,...</small></li>
<li><a href='http://bloke.org/linux/installing-mytop-on-cpanel/' rel='bookmark' title='Permanent Link: Installing mytop on cpanel'>Installing mytop on cpanel</a> <small> MyTop is one of the best MySQL monitoring tools...</small></li>
</ol>]]></description>
			<content:encoded><![CDATA[<p>The default configuration for MySQL provided by cPanel is pretty barren. /etc/my.cnf</p>
<div id="wpshdo_5" class="wp-synhighlighter-outer"><div id="wpshdi_5" class="wp-synhighlighter-inner" style="display: block;"><pre class="bash" style="font-family:monospace;"><span class="br0">&#91;</span>mysqld<span class="br0">&#93;</span> skip-innodb</pre></div></div>
<p>Thats it. One line. Its rubbish.</p>
<p>Here's mine to help you along the way. Its got some decent logging set, some decent cache and memory options for a shared server set and some helpful security settings enabled.</p>
<div id="wpshdo_6" class="wp-synhighlighter-outer"><div id="wpshdi_6" class="wp-synhighlighter-inner" style="display: block;"><pre class="bash" style="font-family:monospace;"><span class="br0">&#91;</span>mysqld<span class="br0">&#93;</span>
max_connections = <span class="nu0">200</span>
bind-address = 127.0.0.1
&nbsp;
safe-show-database
skip-locking
skip-innodb
&nbsp;
<span class="co0"># MySQL 4.x has query caching available.</span>
<span class="co0"># Enable it for vast improvement and it may be all you need to tweak.</span>
<span class="re2">query_cache_type</span>=1
<span class="re2">query_cache_limit</span>=1M
<span class="re2">query_cache_size</span>=32M
&nbsp;
<span class="re2">interactive_timeout</span>=<span class="nu0">100</span>
&nbsp;
<span class="co0"># Reduced wait_timeout to prevent idle clients holding connections.</span>
<span class="re2">wait_timeout</span>=15
<span class="re2">connect_timeout</span>=<span class="nu0">10</span>
&nbsp;
<span class="co0"># Checked opened tables and adjusted accordingly after running for a while.</span>
<span class="re2">table_cache</span>=<span class="nu0">512</span>
&nbsp;
<span class="co0"># Reduced it to 32 to prevent memory hogging.</span>
<span class="re2">thread_cache</span>=<span class="nu0">32</span>
&nbsp;
<span class="co0"># Reduced it by checking current size of *.MYI files.</span>
<span class="re2">key_buffer</span>=128M
&nbsp;
<span class="re2">thread_concurrency</span>=<span class="nu0">1</span>
&nbsp;
log_error                = <span class="sy0">/</span>var<span class="sy0">/</span>log<span class="sy0">/</span>mysql<span class="sy0">/</span>error.log
&nbsp;
<span class="co0"># log slow queries is a must.</span>
<span class="re2">log_slow_queries</span>=<span class="sy0">/</span>var<span class="sy0">/</span>log<span class="sy0">/</span>mysqld.slow.log
<span class="re2">long_query_time</span>=2
&nbsp;
<span class="br0">&#91;</span>mysqldump<span class="br0">&#93;</span>
quick
<span class="re2">max_allowed_packet</span>=16M
&nbsp;
<span class="br0">&#91;</span>mysql<span class="br0">&#93;</span>
no-auto-rehash
&nbsp;
<span class="br0">&#91;</span>isamchk<span class="br0">&#93;</span>
<span class="re2">key_buffer</span>=64M
<span class="re2">sort_buffer</span>=64M
<span class="re2">read_buffer</span>=16M
<span class="re2">write_buffer</span>=16M
&nbsp;
<span class="br0">&#91;</span>myisamchk<span class="br0">&#93;</span>
<span class="re2">key_buffer</span>=64M
<span class="re2">sort_buffer</span>=64M
<span class="re2">read_buffer</span>=16M
<span class="re2">write_buffer</span>=16M
&nbsp;
<span class="br0">&#91;</span>mysqlhotcopy<span class="br0">&#93;</span>
interactive-timeout</pre></div></div>


<p>Related posts:<ol><li><a href='http://bloke.org/linux/mysql-tuning-server-parameters/' rel='bookmark' title='Permanent Link: MySQL Tuning Server Parameters'>MySQL Tuning Server Parameters</a> <small>These are some of the handy MySQL 5.0 tweaks I...</small></li>
<li><a href='http://bloke.org/mysql/snippet-allow-mysql-root-access-from-anywhere/' rel='bookmark' title='Permanent Link: [Snippet] Allow mysql root access from anywhere'>[Snippet] Allow mysql root access from anywhere</a> <small>A small annoyance of mine is on local development servers,...</small></li>
<li><a href='http://bloke.org/linux/installing-mytop-on-cpanel/' rel='bookmark' title='Permanent Link: Installing mytop on cpanel'>Installing mytop on cpanel</a> <small> MyTop is one of the best MySQL monitoring tools...</small></li>
</ol></p>]]></content:encoded>
			<wfw:commentRss>http://bloke.org/linux/cpanel-mysql-tuning/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Extending Advanced Policy Firewall with Brute Force Detection</title>
		<link>http://bloke.org/linux/extending-advanced-policy-firewall-with-brute-force-detection/</link>
		<comments>http://bloke.org/linux/extending-advanced-policy-firewall-with-brute-force-detection/#comments</comments>
		<pubDate>Mon, 02 Aug 2010 22:05:35 +0000</pubDate>
		<dc:creator>Kieran</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[cPanel/WHM]]></category>

		<guid isPermaLink="false">http://bloke.org/?p=785</guid>
		<description><![CDATA[In my previous article I discussed setting up the Advanced Policy Firewall on your servers. So now your servers are protected - but what happens when you get an attack at a legitimate service? SSH? MySQL? Apache? In a series of articles I'll discuss implementing some best practises to help avoid server nightmares.
SSH - Introducing [...]


Related posts:<ol><li><a href='http://bloke.org/linux/advanced-policy-firewall-for-cpanel/' rel='bookmark' title='Permanent Link: Advanced Policy Firewall (for cPanel)'>Advanced Policy Firewall (for cPanel)</a> <small>More retro software that has been with us for years...</small></li>
<li><a href='http://bloke.org/windows/ridiculously-simple-ntlm-authentication-for-apache-ubuntu/' rel='bookmark' title='Permanent Link: Ridiculously simple NTLM Authentication for Apache (Ubuntu)'>Ridiculously simple NTLM Authentication for Apache (Ubuntu)</a> <small>We all know Ubuntu makes things amazingly simple. This is...</small></li>
<li><a href='http://bloke.org/linux/cpanel-mysql-tuning/' rel='bookmark' title='Permanent Link: cPanel MySQL Tuning'>cPanel MySQL Tuning</a> <small>The default configuration for MySQL provided by cPanel is pretty...</small></li>
</ol>]]></description>
			<content:encoded><![CDATA[<p>In my <a title="advanced policy firewall" href="http://bloke.org/linux/advanced-policy-firewall-for-cpanel/">previous article</a> I discussed setting up the <a href="http://www.rfxn.com/projects/advanced-policy-firewall/" target="_blank">Advanced Policy Firewall</a> on your servers. So now your servers are protected - but what happens when you get an attack at a legitimate service? SSH? MySQL? Apache? In a series of articles I'll discuss implementing some best practises to help avoid server nightmares.</p>
<p><span id="more-785"></span><strong>SSH - Introducing <a href="http://www.rfxn.com/projects/brute-force-detection/" target="_blank">BFD</a></strong></p>
<p><a href="http://www.rfxn.com/projects/brute-force-detection/" target="_blank">BFD </a>is a modular shell script for parsing application logs and checking for authentication failures. In it's simplest form BFD will monitor your SSH log files for potential attacks and take preventative action.</p>
<div id="wpshdo_7" class="wp-synhighlighter-outer"><div id="wpshdi_7" class="wp-synhighlighter-inner" style="display: block;"><pre class="bash" style="font-family:monospace;"><span class="kw2">wget</span> http:<span class="sy0">//</span>www.rfxn.com<span class="sy0">/</span>downloads<span class="sy0">/</span>bfd-current.tar.gz
<span class="kw2">tar</span> zxpfv bfd-current.tar.gz
<span class="kw3">cd</span> bfd-1.4<span class="sy0">/</span>
<span class="kw2">sh</span> install.sh</pre></div></div>
<p>Thats it. The default options are perfect to use with APF. It will block an attackers IP after 15 incorrect login attempts.<br />
Feel free to edit the config file if you want your Inbox full of emails telling you its blocked someone. Trust me, you'll get fed up of it in 15 minutes.</p>


<p>Related posts:<ol><li><a href='http://bloke.org/linux/advanced-policy-firewall-for-cpanel/' rel='bookmark' title='Permanent Link: Advanced Policy Firewall (for cPanel)'>Advanced Policy Firewall (for cPanel)</a> <small>More retro software that has been with us for years...</small></li>
<li><a href='http://bloke.org/windows/ridiculously-simple-ntlm-authentication-for-apache-ubuntu/' rel='bookmark' title='Permanent Link: Ridiculously simple NTLM Authentication for Apache (Ubuntu)'>Ridiculously simple NTLM Authentication for Apache (Ubuntu)</a> <small>We all know Ubuntu makes things amazingly simple. This is...</small></li>
<li><a href='http://bloke.org/linux/cpanel-mysql-tuning/' rel='bookmark' title='Permanent Link: cPanel MySQL Tuning'>cPanel MySQL Tuning</a> <small>The default configuration for MySQL provided by cPanel is pretty...</small></li>
</ol></p>]]></content:encoded>
			<wfw:commentRss>http://bloke.org/linux/extending-advanced-policy-firewall-with-brute-force-detection/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Advanced Policy Firewall (for cPanel)</title>
		<link>http://bloke.org/linux/advanced-policy-firewall-for-cpanel/</link>
		<comments>http://bloke.org/linux/advanced-policy-firewall-for-cpanel/#comments</comments>
		<pubDate>Mon, 02 Aug 2010 21:01:20 +0000</pubDate>
		<dc:creator>Kieran</dc:creator>
				<category><![CDATA[CentOS]]></category>
		<category><![CDATA[Linux]]></category>
		<category><![CDATA[cPanel/WHM]]></category>

		<guid isPermaLink="false">http://bloke.org/?p=596</guid>
		<description><![CDATA[More retro software that has been with us for years - APF - Advanced Policy Firewall. A brilliantly robust and fool proof Linux script that acts as a wrapper for iptables.
Here's how I configure it for all the WHM/cPanel boxes I commission, although you can configure it for non-cPanel servers, just adjust your ports accordingly.
These [...]


Related posts:<ol><li><a href='http://bloke.org/linux/extending-advanced-policy-firewall-with-brute-force-detection/' rel='bookmark' title='Permanent Link: Extending Advanced Policy Firewall with Brute Force Detection'>Extending Advanced Policy Firewall with Brute Force Detection</a> <small>In my previous article I discussed setting up the Advanced...</small></li>
<li><a href='http://bloke.org/linux/centos-cpanel-firewall-setup/' rel='bookmark' title='Permanent Link: CentOS / cPanel Firewall Setup'>CentOS / cPanel Firewall Setup</a> <small>I almost like CentOS now. That doesn't mean I can't...</small></li>
<li><a href='http://bloke.org/linux/installing-mytop-on-cpanel/' rel='bookmark' title='Permanent Link: Installing mytop on cpanel'>Installing mytop on cpanel</a> <small> MyTop is one of the best MySQL monitoring tools...</small></li>
</ol>]]></description>
			<content:encoded><![CDATA[<p>More retro software that has been with us for years - <a href="http://www.rfxn.com/projects/advanced-policy-firewall/" target="_blank">APF - Advanced Policy Firewall</a>. A brilliantly robust and fool proof Linux script that acts as a wrapper for iptables.</p>
<p>Here's how I configure it for all the WHM/cPanel boxes I commission, although you can configure it for non-cPanel servers, just adjust your ports accordingly.<span id="more-596"></span><div id="wpshdo_8" class="wp-synhighlighter-outer"><div id="wpshdi_8" class="wp-synhighlighter-inner" style="display: block;"><pre class="bash" style="font-family:monospace;"><span class="kw2">wget</span> http:<span class="sy0">//</span>www.rfxn.com<span class="sy0">/</span>downloads<span class="sy0">/</span>apf-current.tar.gz
<span class="kw2">tar</span> zxpfv apf-current.tar.gz
<span class="kw3">cd</span> apf-9.7-1<span class="sy0">/</span>
<span class="kw2">sh</span> install.sh
<span class="kw2">nano</span> <span class="sy0">/</span>etc<span class="sy0">/</span>apf<span class="sy0">/</span>conf.apf</pre></div></div></p>
<p>These are the main settings I change in the configuration file.</p>
<div id="wpshdo_9" class="wp-synhighlighter-outer"><div id="wpshdi_9" class="wp-synhighlighter-inner" style="display: block;"><pre class="bash" style="font-family:monospace;"><span class="co0"># !!! Do not leave set to (1) !!!</span>
<span class="co0"># When set to enabled; 5 minute cronjob is set to stop the firewall. Set</span>
<span class="co0"># this off (0) when firewall is determined to be operating as desired.</span>
<span class="re2">DEVEL_MODE</span>=<span class="st0">&quot;0&quot;</span>
&nbsp;
<span class="co0"># Common ingress (inbound) TCP ports for cPanel &amp; WHM</span>
<span class="re2">IG_TCP_CPORTS</span>=<span class="st0">&quot; 20,21,22,25,26,53,80,110,143,443,465,993,995,2077,2078,2082,
2083,2086,2087,2095,2096,3306,6666&quot;</span>
&nbsp;
<span class="co0"># Common ingress (inbound) UDP ports for cPanel &amp; WHM</span>
<span class="re2">IG_UDP_CPORTS</span>=<span class="st0">&quot;21,53,465,873,2077,2078&quot;</span>
&nbsp;
<span class="co0"># Common ICMP (inbound) types</span>
<span class="co0"># 'internals/icmp.types' for type definition; 'all' is wildcard for any</span>
<span class="re2">IG_ICMP_TYPES</span>=<span class="st0">&quot;3,5,11,0,30,8&quot;</span>
&nbsp;
<span class="co0"># Outbound (egress) filtering - Always a good idea.</span>
<span class="re2">EGF</span>=<span class="st0">&quot;1&quot;</span>
&nbsp;
<span class="co0"># Common egress (outbound) TCP ports for cPanel &amp; WHM</span>
<span class="re2">EG_TCP_CPORTS</span>=<span class="st0">&quot;21,25,26,37,43,53,80,113,465,873,3306&quot;</span>
&nbsp;
<span class="co0"># Common egress (outbound) UDP ports for cPanel &amp; WHM</span>
<span class="re2">EG_UDP_CPORTS</span>=<span class="st0">&quot;20,21,53,465,873&quot;</span>
&nbsp;
<span class="co0"># Common ICMP (outbound) types</span>
<span class="co0"># 'internals/icmp.types' for type definition; 'all' is wildcard for any</span>
<span class="re2">EG_ICMP_TYPES</span>=<span class="st0">&quot;all&quot;</span></pre></div></div>
<p>One final setting I had to change was the BLK_RESNET option</p>
<div id="wpshdo_10" class="wp-synhighlighter-outer"><div id="wpshdi_10" class="wp-synhighlighter-inner" style="display: block;"><pre class="bash" style="font-family:monospace;">Block all ipv4 address space marked reserved <span class="kw1">for</span> future use <span class="br0">&#40;</span>unassigned<span class="br0">&#41;</span>,
<span class="co0"># such networks have no business talking on the Internet. However they may at</span>
<span class="co0"># some point become live address space. The USE_RD option further in this file</span>
<span class="co0"># allows for dynamic updating of this list on every full restart of APF. Refer</span>
<span class="co0"># to the 'internals/reserved.networks' file for listing of address space.</span>
<span class="re2">BLK_RESNET</span>=<span class="st0">&quot;0&quot;</span></pre></div></div>
<p>Then, finally, start it <em>/etc/init.d/apf start</em></p>
<p>You can confirm it is working with iptables -L</p>
<p>These are the <strong>Inbound</strong> tcp/udp and <strong>Outbound</strong> tcp/udp ports in question</p>
<p><strong><strong>I</strong>nbound TCP Ports</strong></p>
<div><strong> </strong></p>
<ul>
<li>20 FTP</li>
<li> 21 FTP</li>
<li> 22 SSH</li>
<li> 25 SMTP</li>
<li> 26 SMTP</li>
<li> 53 DNS</li>
<li> 80 HTTP</li>
<li> 110 POP</li>
<li> 3143 IMAP</li>
<li> 4443 HTTPS</li>
<li> 465 SMTP (TLS/SSL)</li>
<li> 993 IMAP4 (SSL)</li>
<li> 995 POP3 (SSL)</li>
<li> 2082 CPANEL</li>
<li> 2083 CPANEL (SSL)</li>
<li> 2086 WHM (Web Host Manager)</li>
<li> 2087 WHM (SSL)</li>
<li> 2095 WEBMAIL</li>
<li>2096 WEBMAIL (SSL)</li>
</ul>
<p><strong>Inbound UDP Ports</strong></p>
<ul>
<li>21 FTP</li>
<li>53 DNS</li>
<li>465 SMTP (TLS/SSL)</li>
</ul>
</div>
<div>
<p><strong> </strong><strong>Outbound TCP Ports<br />
</strong></p>
<ul>
<li>20  FTP</li>
<li>21  FTP</li>
<li>25  SMTP</li>
<li>26  SMTP</li>
<li>37  RDATE</li>
<li>43  WHOIS</li>
<li>53  DNS</li>
<li>80  HTTP</li>
<li>113  IDENT</li>
<li>465  SMTP (TLS/SSL)</li>
<li>873  RSYNC</li>
<li>2089  CPANEL LICENSE</li>
</ul>
<p><strong>Outbound UDP Ports</strong></p>
<ul>
<li>21 FTP</li>
<li>53 DNS</li>
<li>465 SMTP (TLS/SSL)</li>
<li>873 RSYNC</li>
</ul>
</div>
<div>** If you want MySQL remote access and have modified the my.cnf according make sure you add 3306 into EG_TCP_CPORTS and IG_TCP_CPORTS</div>
<div></div>
<div>** Its best practise to add your own IPs to the white list - /etc/apf/allow_hosts.rules</div>
<div></div>
<div>Now you've got a software firewall monitoring your server's incoming and outgoing requests.</div>


<p>Related posts:<ol><li><a href='http://bloke.org/linux/extending-advanced-policy-firewall-with-brute-force-detection/' rel='bookmark' title='Permanent Link: Extending Advanced Policy Firewall with Brute Force Detection'>Extending Advanced Policy Firewall with Brute Force Detection</a> <small>In my previous article I discussed setting up the Advanced...</small></li>
<li><a href='http://bloke.org/linux/centos-cpanel-firewall-setup/' rel='bookmark' title='Permanent Link: CentOS / cPanel Firewall Setup'>CentOS / cPanel Firewall Setup</a> <small>I almost like CentOS now. That doesn't mean I can't...</small></li>
<li><a href='http://bloke.org/linux/installing-mytop-on-cpanel/' rel='bookmark' title='Permanent Link: Installing mytop on cpanel'>Installing mytop on cpanel</a> <small> MyTop is one of the best MySQL monitoring tools...</small></li>
</ol></p>]]></content:encoded>
			<wfw:commentRss>http://bloke.org/linux/advanced-policy-firewall-for-cpanel/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
