VPS Setup, I can help if you run into problems

[jetter]

wooohooo, finally got my un-manage VPS setup, up and running after 4 days of trying.

Actually it took 4 days to get my heads around Ruby on Rails and specifically how to install and make Redmine work.  The VPS setup is pretty much straightforward and simple.

[Chao]

I have been running a VPS for the last 3 years. I am thinking about letting it go and just use share hosting. Managing a VPS is hardwork espcially when you have a lot of people attacking the server. You want to make sure you got most security cover.

[jetter]

Could you elaborate more on how you got attack?  Why would anyone want to attack your small sever?  How did you get aTtack and how did you protect your sever?  How come your hosting provider hardware don't protect yoursever from known attacks like ddos?  Did you upgrade you vps security?  What os was your sever running?

[Chao]

Could you elaborate more on how you got attack?  Why would anyone want to attack your small sever?  How did you get aTtack and how did you protect your sever?  How come your hosting provider hardware don't protect yoursever from known attacks like ddos?  Did you upgrade you vps security?  What os was your sever running?

The attack mainly come from China (IP trace to China) in the log file. I usually got the FTP, Telnet, and SSH attack. But then I installed a security program to detect and block IP addresses and that helps a bit. The server runs on Fedora Core 4 (old now) and Plesk 8.6.0. I can upgrade it to the latest version of linux and Plesk, but will wait until summer when I got more time to migrate the database.

One other problem I have not figured out is spammers who registered automatically and send mass private messages to all users. I found no trace of it. So I set a limited on how many messages a user can send out and that limits the number of spam messages to a few per minutes. It would be good to be able to trace the spammer and block it, but these auto spammers are hard to catch. I don't know I can prevent them when firms as big as google or myspace can't block.

[jetter]

good information man. If I run into further issues, I will surely ask you.