How do I restart a daemon ?

How do I restart a daemon ?

Most of the services can be restarted from WebHostManager, however sometimes you will need to restart them from the shell. You must be logged in as root to do this. All standard linux services, such as http, ftp, exim, cpanel/whm, interchange, mysql etc, have init scripts in /etc/rc.d/init.d/

root@host [~]# ls /etc/rc.d/init.d/
./ atd* exim* httpd.tmpeditlib kdcrotate* named* nscd* rawdevices* snmpd* yppasswdd* ../ autofs* filelimits* identd* keytable* netfs* portmap* rstatd* sshd* ypserv* anacron* bandmin* functions* ipaliases* killall* network* portsentry* rusersd* syslog* ypxfrd* antirelayd* chkservd* gpm* ipchains* kudzu* nfs* proftpd* rwalld* xfs* apmd* cpanel3* halt* iptables* lpd* nfslock* radvd* rwhod* xinetd* arpwatch* crond* httpd@ isdn* mysql* nofsck* random* single* ypbind*

This is typical of what you will find in this directory.

The main ones you should be concerned with are :

cpanel3 - starts/stops cpanel and WHM. This includes Interchange, cppop, and cluster management services as well.
exim - starts/stops the exim mail server
httpd - starts/stops the apache webserver
mysql - starts/stops the mySQL database server
named - starts/stops the BIND dns server
proftpd - starts/stop the ProFTPD (or pureftpd when that is enabled) ftp server

Using these scripts is very easy. Let's say that named/bind is down and we need to restart it. As root, simply type /etc/rc.d/init.d/named start

You should see it start up, with a green [OK] on the left side of the shell/terminal window.
It you see a red [FAILED], check the message log. tail /var/log/messages .
You should be able to see the error where things went wrong.
If you can not fix it yourself, contact tech support.
Some of these services have more options than just start and stop, and other ways to do them.
Let's say you have a lot of domains using your dns server and you don't want to stop and restart named just because you edited one domain. type "ndc reload". ndc controls the named daemon.
If you make a minor change to the /usr/local/apache/conf/httpd.conf, but don't want to restart it, type "/etc/rc.d/init.d/httpd graceful" to do a graceful restart (finishes current requests before killing the child processes).

If you want to learn more about what commands each script offers, you can simply run the script without passing any arguments to it.

root@saturn [~]# /etc/rc.d/init.d/cpanel3
Usage: /etc/rc.d/init.d/cpanel3 {start|stop|status|restart}

This let's us know we can start, stop, check the running status of the service(s), or restart it. If you can't get a service to start, and don't know how to fix it, contact tech support for assistance.

Making login to admin first and then su to root.

1. Add username admin from shell (adduser)
2. Assign a password to the username: admin
3. then add admin to the wheel group using WHM
4. pico /etc/ssh/sshd_config
uncomment :
#PermitRootLogin yes
and make it:
PermitRootLogin no

Restart sshd.

-------------------------------------------------------------------------------------

Why on earth would you want to disable root login?
Well,.. you're not.. You are disabling "direct" root login. This will force a hacker to have to guess 2 seperate passwords to gain root access.. (you do have 2 seperate passwords for admin and root right?)

After you do this, you will have to login as 'admin' then you will 'su -' to get to root.. We also will be forcing the use of SSH protocol 2, which is a newer, more secure SSH protocol. It's just a couple more ways to help your server stay safe from the bad guys.

If you're using cPanel make sure you add your admin user to the 'wheel' group so that you will be able to 'su -' to root, otherwise you may lock yourself out of root


1) SSH into your server as 'admin' and gain root access by

su -

2) Copy and paste this line to edit the file

pico -w /etc/ssh/sshd_config

3) Find the line

#Protocol 2, 1

4) Uncomment it and change it to look like

Protocol 2

5) Next, find the line

#PermitRootLogin yes

6)Uncomment it and make it look like

PermitRootLogin no

7) Save the file

ctrl 'x' then 'y' then enter

Restart SSH

/etc/rc.d/init.d/sshd restart

Now, no one will be able to login to root with out first loggin in as admin and 'su -' to root, and you will be forcing the use of a more secure protocol.

-------------------------------------------------------------------------------------

Also check this link:

http://forum.rackshack.net/showthread.php?s=&threadid=16888&highlight=root

How do I setup my mail to use SSL?

How do I setup my mail to use SSL?

Set your mail server to the host name for SMTP/POP3/IMAP (instead of mail.domain.com) and then make sure that your mail client is using the following ports for SSL:

SMTP - 465
POP3 - 995
IMAP - 993

As always you want to make sure that your account name is user@domain.com (or user+domain.com) and that you are using authentication on your SMTP server.

How can I create a database from an sql backup file ?

First, create the database..

How can I create a database from an sql backup file ?

/path/to/bin/mysqladmin -u $mysqlusername -p$mysqlpassword create $mysqldatabasename

Then, add user permission to it...

/path/to/bin/mysqladmin -u usernamehere -ppasshere create databasename
Finally, add the tables back....
/path/to/bin/mysql -u $mysqlusername -p$mysqlpassword $mysqldatabasename < backup.sql

OR:

mysql -u user -p -e 'source backup_file' database

Standard ports for firewall

Follwoing are the standard ports need to be released through the firewall for a cpanel server.

21 FTP
22 shell
80 apache
25 smtp
53 DNS
110 POP3
143 Imap
443 Apache SSL
465 SMTP SSL
993 Imap SSL
3306 MySQL (Optional)
2086 WHM
2082 Cpanel
2083 Cpanel SSL
2084 EntropyChat
2087 WHM SSL
2095 Horde

------------------------------------------------------------------------------------

Another LIST :

0
1 tcpmux
3
4
5 rje
7 echo
9 discard
11 systat
13 daytime
15 netstat
17 qotd
18 send/rwp
19 chargen
20 ftp-data
21 ftp
22 ssh, pcAnywhere , SFTP
23 Telnet
25 SMTP
27 ETRN
29 msg-icp
31 msg-auth
33 dsp
37 time
38 RAP
39 rlp
40
41
42 nameserv, WINS
43 whois, nickname
49 TACACS, Login Host Protocol
50 RMCP, re-mail-ck
53 DNS
57 MTP
59 NFILE
63 whois++
66 sql*net
67 bootps
68 bootpd/dhcp
69 Trivial File Transfer Protocol (tftp)
70 Gopher
79 finger
80 www-http
81 siteadmin on RAQ4
87
88 Kerberos, WWW
95 supdup
96 DIXIE
98 linuxconf
101 HOSTNAME
102 ISO, X.400, ITOT
105 cso
106 poppassd
109 POP2
110 POP3
111 Sun RPC Portmapper
113 identd/auth
115 sftp
116
117 uucp
118
119 NNTP
120 CFDP
123 NTP
124 SecureID
129 PWDGEN
133 statsrv
135 loc-srv/epmap
137 netbios-ns
138 netbios-dgm (UDP)
139 NetBIOS
143 IMAP
144 NewS
150
152 BFTP
153 SGMP
156
161 SNMP
175 vmnet
177 XDMCP
178 NextStep Window Server
179 BGP
180 SLmail admin
199 smux
210 Z39.50
213
218 MPP
220 IMAP3
256
257
258
259 ESRO
264 FW1_topo
311 Apple WebAdmin
350 MATIP type A
351 MATIP type B
360
363 RSVP tunnel
366 ODMR (On-Demand Mail Relay)
371
387 AURP (AppleTalk Update-Based Routing Protocol)
389 LDAP
407 Timbuktu
427
434 Mobile IP
443 ssl
444 snpp, Simple Network Paging Protocol, RAQ550
445 SMB
458 QuickTime TV/Conferencing
465 smtps
468 Photuris
475
500 ISAKMP, pluto
511
512 biff, rexec
513 who, rlogin
514 syslog, rsh
515 lp, lpr, line printer
517 talk
520 RIP (Routing Information Protocol)
521 RIPng
522 ULS
531 IRC
543 KLogin, AppleShare over IP
545 QuickTime
548 AFP
554 Real Time Streaming Protocol
555 phAse Zero
563 NNTP over SSL
575 VEMMI
581 Bundle Discovery Protocol
593 MS-RPC
608 SIFT/UFT
626 Apple ASIA
631 IPP (Internet Printing Protocol)
635 mountd
636 sldap
642 EMSD
648 RRP (NSI Registry Registrar Protocol)
655 tinc
660 Apple MacOS Server Admin
666 Doom
674 ACAP
687 AppleShare IP Registry
700 buddyphone
705 AgentX for SNMP
901 swat, realsecure
993 s-imap
995 s-pop
999 Urchin
1024
1025
1050
1062 Veracity
1080 SOCKS
1085 WebObjects
1100
1105
1114
1227 DNS2Go
1234
1243 SubSeven
1338 Millennium Worm
1352 Lotus Notes
1381 Apple Network License Manager
1417 Timbuktu
1418 Timbuktu
1419 Timbuktu
1420
1433 Microsoft SQL Server
1434 Microsoft SQL Monitor
1477
1478
1490
1494 Citrix ICA Protocol
1498
1500
1503 T.120
1521 Oracle SQL
1522
1524
1525 prospero
1526 prospero
1527 tlisrv
1529
1547
1604 Citrix ICA, MS Terminal Server
1645 RADIUS Authentication
1646 RADIUS Accounting
1680 Carbon Copy
1701 L2TP/LSF
1717 Convoy
1720 H.323/Q.931
1723 PPTP control port
1731
1755 Windows Media .asf
1758 TFTP multicast
1761
1762
1808
1812 RADIUS server
1813 RADIUS accounting
1818 ETFTP
1968
1973 DLSw DCAP/DRAP
1975
1978
1979
1985 HSRP
1999 Cisco AUTH
2000
2001 glimpse
2005
2010
2023
2048
2049 NFS
2064 distributed.net
2065 DLSw
2066 DLSw
2080
2082 CPANEL - USER Control Panel - unsecure
2083 CPANEL - USER Control Panel - Secure
2086 CPANEL - WEBHOST / WHM - unsecure
2087 CPANEL - WEBHOST / WHM - Secure
2095 (cpanel webmail) - unsecure
2096 (cpanel webmail) - secure
2106 MZAP
2140 DeepThroat
2222 DirectAdmin
2300 MSflightsim2002
2301 Compaq Insight Management Web Agents
2327 Netscape Conference
2336 Apple UG Control
2345
2400 MSflightsim2002
2427 MGCP gateway
2504 WLBS
2535 MADCAP
2543 sip
2565
2592 netrek
2727 MGCP call agent
2766
2628 DICT
2998 ISS Real Secure Console Service Port
3000 Firstclass
3001
3031 Apple AgentVU
3052
3128 squid
3130 ICP
3150 DeepThroat
3264 ccmail
3283 Apple NetAssitant
3288 COPS
3305 ODETTE
3306 mySQL
3352
3389 RDP Protocol (Terminal Server)
3520
3521 netrek
3782 Roger Wilco
3879
4000 icq, command-n-conquer
4045
4144
4242
4321 rwhois
4333 mSQL
4444
47017
4827 HTCP
5000
5001
5002
5004 RTP
5005 RTP
5010 Yahoo! Messenger
5050
5060 SIP
5135
5150
5190 AIM
5222
5353
5400
5500 securid
5501 securidprop
5300
5423 Apple VirtualUser
5432 PostGres
5555
5556
5631 PCAnywhere data
5632 PCAnywhere
5678
5800 VNC
5801 VNC
5900 VNC
5901 VNC
5843
6000 X Windows
6112 BattleNet
6050
6073 directplay8
6499
6500
6502 Netscape Conference
6547
6548
6549
6666
6667 IRC
6670 VocalTec Internet Phone, DeepThroat
6699 napster
6776 Sub7
6968
6969
6970 RTP
6971
7000
7007 MSBD, Windows Media encoder
7070 RealServer/QuickTime
7161
7323
7777
7778 Unreal
7640
7648 CU-SeeMe
7649 CU-SeeMe
7654
7786 MiniVend
8000
8002
8010 WinGate 2.1
8080 HTTP
8100
8181 HTTP
8383 IMail WWW
8443 Plesk
8765
8875 napster
8888 napster
8890
9000
9090
9200
9704
9669
9876
9989
10000 Webmin
10008 cheese worm
10752
12345
11371 PGP 5 Keyserver
12346
13000
13223 PowWow
13224 PowWow
14000
14237 Palm
14238 Palm
14690
16969
18888 LiquidAudio
19638 ensim
21157 Activision
22555
22703
22793
23213 PowWow
23214 PowWow
23456 EvilFTP
26000 Quake
27000
27001 QuakeWorld
27010 Half-Life
27015 Half-Life
27374
27444
27665
27910
27960 QuakeIII
28000
28001
28002
28003
28004
28005
28006
28007
28008
30029 AOL Admin
30100
30101
30102
30103
30303
30464
31335
31337 Back Orifice
32000
32771
32777 rpc.walld
34555
40193 Novell
41524 arcserve discovery
45000 Cisco NetRanger postofficed
47624 directplaysrvr
50505
52901
54321
61000
65301
Multicast hidden
ICMP Type hidden
9998
32773 rpc.ttdbserverd
32776 rpc.spray
32779 rpc.cmsd
38036 timestep

------------------------------------------------------------------------------------
Content of /etc/sysconfig/ipchains :


# Firewall configuration written by lokkit
# Manual customization of this file is not recommended.
# Note: ifup-post will punch the current nameservers through the
# firewall; such entries will *not* be listed here.
:input ACCEPT
:forward ACCEPT
:output ACCEPT
-A input -s 0/0 -d 0/0 110 -p tcp -y -j ACCEPT
-A input -s 0/0 -d 0/0 53 -p tcp -y -j ACCEPT
-A input -s 0/0 -d 0/0 953 -p tcp -y -j ACCEPT
-A input -s 0/0 -d 0/0 2082 -p tcp -y -j ACCEPT
-A input -s 0/0 -d 0/0 2083 -p tcp -y -j ACCEPT
-A input -s 0/0 -d 0/0 2086 -p tcp -y -j ACCEPT
-A input -s 0/0 -d 0/0 2087 -p tcp -y -j ACCEPT
-A input -s 0/0 -d 0/0 2095 -p tcp -y -j ACCEPT
-A input -s 0/0 -d 0/0 143 -p tcp -y -j ACCEPT
-A input -s 0/0 -d 0/0 993 -p tcp -y -j ACCEPT
-A input -s 0/0 -d 0/0 465 -p tcp -y -j ACCEPT
-A input -s 0/0 -d 0/0 22 -p tcp -y -j ACCEPT
-A input -s 0/0 -d 0/0 25 -p tcp -y -j ACCEPT
-A input -s 0/0 -d 0/0 443 -p tcp -y -j ACCEPT
-A input -s 0/0 -d 0/0 995 -p tcp -y -j ACCEPT
-A input -s 0/0 -d 0/0 111 -p tcp -y -j ACCEPT
-A input -s 0/0 -d 0/0 21 -p tcp -y -j ACCEPT
-A input -s 0/0 -d 0/0 80 -p tcp -y -j ACCEPT
-A input -s 0/0 -d 0/0 -i lo -j ACCEPT
-A input -s 127.0.0.1 53 -d 0/0 -p udp -j ACCEPT
-A input -s 0/0 -d 0/0 -p tcp -y -j REJECT
-A input -s 0/0 -d 0/0 -p udp -j REJECT
-A input -s 0/0 -d 0/0 995 -p tcp -y -j ACCEPT