<HTML xmlns="http://www.w3.org/TR/REC-html40" xmlns:v =
"urn:schemas-microsoft-com:vml" xmlns:o =
"urn:schemas-microsoft-com:office:office" xmlns:w =
"urn:schemas-microsoft-com:office:word" xmlns:m =
"http://schemas.microsoft.com/office/2004/12/omml"><HEAD>
<META content="text/html; charset=us-ascii" http-equiv=Content-Type>
<META name=Generator content="Microsoft Word 14 (filtered medium)">
<STYLE><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></STYLE>
</HEAD>
<BODY lang=EN-GB dir=ltr link=blue vLink=purple>
<DIV dir=ltr>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: 'Calibri'; COLOR: #000000">
<DIV>As the network administrator of a rather large hosting company I can attest
to the usefulness of Cacti. It is easy to install and one need only set a port
for Apache to show traffic. For security purposes one can place it on a
non-standard port for anything. Like not using port 8080 or 8880. Find another
port. I recommend adding a line in .htaccess restricting access to Cacti to your
dedicated IP.</DIV>
<DIV> </DIV>
<DIV>You should also install and run <SPAN class=st>APF (Advanced Policy
Firewall) and BFD (Brute Force Detection). One cannot rely on iptables
alone.</SPAN></DIV>
<DIV><SPAN class=st></SPAN> </DIV>
<DIV><SPAN class=st>We run ALL of our web site hosting installations on CentOS
because it conforms most closely with “standards” that the others don’t. We then
load Virtuozzo, a partitioning layer like VMWare. Some will ask why or declare
that it is unnecessary. No, it offers an additional layer of security, it adds
features like easy backups, either first run or incremental, it adds the ability
to “bounce” the installation to another node if there is a hardware failure,
such as a hard drive or SD drive pending failure. Another nice feature is the
ability to rebuild the OS if you have been breached. You then restore from a
backup that hopefully doesn’t contain the breach. You may begin looking at what
you need at <A href="http://openvz.org">http://openvz.org</A>. It’s free
software! It will not slow your PC down and in fact it will likely make your PC
more stable.</SPAN></DIV>
<DIV><SPAN class=st></SPAN> </DIV>
<DIV><SPAN class=st>Wayne</SPAN></DIV>
<DIV
style='FONT-SIZE: small; TEXT-DECORATION: none; FONT-FAMILY: "Calibri"; FONT-WEIGHT: normal; COLOR: #000000; FONT-STYLE: normal; DISPLAY: inline'>
<DIV style="FONT: 10pt tahoma">
<DIV> </DIV>
<DIV style="BACKGROUND: #f5f5f5">
<DIV style="font-color: black"><B>From:</B> <A title=david.osborn@manx.net
href="mailto:david.osborn@manx.net">David Osborn</A> </DIV>
<DIV><B>Sent:</B> Monday, March 23, 2015 11:58 PM</DIV>
<DIV><B>To:</B> <A title=app_rpt-users@ohnosec.org
href="mailto:app_rpt-users@ohnosec.org">app_rpt-users@ohnosec.org</A> </DIV>
<DIV><B>Subject:</B> Re: [App_rpt-users] Traffic monitor</DIV></DIV></DIV>
<DIV> </DIV></DIV>
<DIV
style='FONT-SIZE: small; TEXT-DECORATION: none; FONT-FAMILY: "Calibri"; FONT-WEIGHT: normal; COLOR: #000000; FONT-STYLE: normal; DISPLAY: inline'>
<DIV class=WordSection1>
<P class=MsoNormal>For longer term monitoring, say monthly, you might want to
install some additional software.<o:p></o:p></P>
<P class=MsoNormal><o:p></o:p> </P>
<P class=MsoNormal>I use Cacti extensively both on my nodes, and at work,
monitoring network and server health in a power station.<o:p></o:p></P>
<P class=MsoNormal><o:p></o:p> </P>
<P class=MsoNormal><A
href="http://www.cacti.net">www.cacti.net</A><o:p></o:p></P>
<P class=MsoNormal><o:p></o:p> </P>
<P class=MsoNormal>You’ll need to enable SNMP, so there may be some security
considerations, but it’s a great way to monitor what your system is up to (and
what it’s been up to!).<o:p></o:p></P>
<P class=MsoNormal><o:p></o:p> </P>
<P class=MsoNormal>David Osborn<o:p></o:p></P>
<P class=MsoNormal>GD4HOZ<o:p></o:p></P>
<P class=MsoNormal><o:p></o:p> </P></DIV>
<P>
<HR>
_______________________________________________<BR>App_rpt-users mailing
list<BR>App_rpt-users@ohnosec.org<BR>http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users<BR><BR>To
unsubscribe from this list please visit
http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the
bottom of the page. Enter your email address and press the "Unsubscribe or edit
options button"<BR>You do not need a password to unsubscribe, you can do it via
email confirmation. If you have trouble unsubscribing, please send a message to
the list detailing the problem.</DIV></DIV></DIV></BODY></HTML>