Skip to content

Apache configs

block xmlpc

    <FilesMatch "^(xmlrpc\.php)">
Order Deny,Allow
Deny from all
</FilesMatch>
  • Stress test for lveinfo stats generation for localhost domains
  • generate reqeusts 
    for domain in $(cat /etc/hosts | awk 'NR>5 {print $2}');do ab -n 1 -c 1 $domain/ ;done
  • append all domains with local IP to /etc/hosts 
    for domain in $(cat /etc/userdomains | cut -d ':' -f-1 | grep -v '*');do echo "10.2.35.64 $domain" >> /etc/hosts ;done

block whm vhost

<VirtualHost 10.2.32.60:80 127.0.0.1:80>
ServerAlias whm.*
DocumentRoot /var/www/html
ErrorDocument 403 /var/www/html/403.shtml
</VirtualHost>

<VirtualHost 10.2.32.60:443 127.0.0.1:443>
ServerAlias whm.*
DocumentRoot /var/www/html
ErrorDocument 403 /var/www/html/403.shtml


<IfModule suphp_module>
suPHP_UserGroup nobody nobody
</IfModule>
<Directory "/var/www/html">
AllowOverride All
</Directory>
<IfModule ssl_module>
SSLEngine on

SSLCertificateFile /var/cpanel/ssl/cpanel/cpanel.pem
SSLCertificateKeyFile /var/cpanel/ssl/cpanel/cpanel.pem
SSLCertificateChainFile /var/cpanel/ssl/cpanel/cpanel.pem
SSLUseStapling Off

</IfModule>
<IfModule security2_module>
SecRuleEngine On
</IfModule>
</VirtualHost>
  • Rebuild conf 
        mv -v /etc/apache2/conf/httpd.conf{,.-$(date +%Y-%m-%d)}
  • Traffic by user cPanel Apache Access logs 
    for log in $(find /var/log/apache2/domlogs/ -group lsclsedx -name '*-ssl_log');do echo $log; awk '{print $1}' $log|sort |uniq -c | sort -rn| head -20;done