Got Blorped? » Linux

Monit configuration file for SSHD

admin — Sun, 09 Aug 2009 10:18:33 +0000

check process sshd with pidfile /var/run/sshd.pid
start program “/etc/init.d/sshd start”
stop program “/etc/init.d/sshd stop”
if failed host 188.40.81.196 port 2499 protocol ssh then restart
if 5 restarts within 5 cycles then timeout

Monit configuration file for Apache2

admin — Sat, 08 Aug 2009 23:26:38 +0000

Config file for Apache2 on Monit based

This howto is based after you have completed this install guide at SecureCentos.com

Step 1: Create /etc/monit/cfg/apache2.cfg

nano -w /etc/monit/cfg/apache2.cfg

Step 2: Paste this text into apache2.cfg

check process httpd with pidfile /var/run/httpd.pid
   group apache
   start program  "/etc/init.d/httpd start"
   stop program  "/etc/init.d/httpd stop"
   if failed host localhost port 80 protocol http
      and request "/" then alert
   if cpu is greater than 60% for 2 cycles then alert
   if cpu > 80% for 5 cycles then restart
   if children > 250 then restart
   if loadavg(5min) greater than 10 for 8 cycles then alert
   if 3 restarts within 5 cycles then timeout

* You should verify every path string, so it matches your system *

Step 3: Restart Monit to activate new config

service monit restart

Note: you need this line in your monitrc file to make the howto above to work.

include /etc/monit/cfg/*

Howto disable ping to your Centos server

admin — Sat, 08 Aug 2009 22:05:24 +0000

Simple steps to disable ping to your Centos linux server

Step 1: As root, open /etc/sysctl.conf for edit

nano -w /etc/sysctl.conf

Step 1.1: Add these lines in the bottom

net.ipv4.icmp_echo_ignore_broadcasts = 1
net.ipv4.icmp_echo_ignore_all = 1

Step 2: Restart sysctl to set the settings in effect

sysctl -p

This change will persist following a reboot.