Need 6 Users to test my VPS Server for free for one week

mikeg

I'm guessing your server NIC's are integrated? Have you got any remote KVM so you can do the update through that?

What motherboard version do you have? You need to find exactly what NIC you have and get the driver from here:

http://www.realtek.com.tw/products/productsView.aspx?Langid=1&PNid=13&PFid=5&Level=5&Conn=4

To update the virtual NIC drivers, just update the drivers in the DomU OS. The NIC type will be set in the cfg file of the DomU, find out what this is and get the drivers for that model.

mariusffm

@mikeg Jepp its integrated. I have a KVM, they offer "Upload the recovery template" and offer Sysrescd. I might give it a try later.

Manufacturer: ASUSTeK Computer INC.
Product Name: P5Q-EM

LAN
Realtek® 8111C PCI-E Gigabit LAN controllers, featuring AI Net2

mikeg

@mariusffm said:
mikeg Jepp its integrated. I have a KVM, they offer "Upload the recovery template" and offer Sysrescd. I might give it a try later.

Manufacturer: ASUSTeK Computer INC.
Product Name: P5Q-EM

LAN
Realtek® 8111C PCI-E Gigabit LAN controllers, featuring AI Net2

Try these drivers:

http://www.realtek.com.tw/downloads/downloadsView.aspx?Langid=1&PNid=13&PFid=5&Level=5&Conn=4&DownTypeID=3&GetDown=false

at LINUX driver for kernel 3.x and 2.6.x and 2.4.x

painfreepc

@tommy said:
too much work for nothing

that's what she said.. lol

mariusffm

@mikeg I think I used them and ran the autorun.sh. The ssh connection dropped (well thats normal) and after a reboot, I got no more network connection. Maybe I shall try it by the Sysrescd?

painfreepc

can anyone offer more info about these settings and if they work?

Step 5a - Secure shared memory

nano /etc/fstab

/dev/shm can be used in an attack against a running service, 
such as httpd. Modify /etc/fstab to make it more secure.

Add the following line and save. 
You will need to reboot for this setting to take effect:

tmpfs     /dev/shm     tmpfs     defaults,noexec,nosuid     0     0


Step 5b - Harden network with sysctl settings:

"nano /etc/sysctl.conf"

Harden network with sysctl settings

The /etc/sysctl.conf file contain all the sysctl settings. 
Prevent source routing of incoming packets and log malformed 
IP's

Add to file and save:

# IP Spoofing protection
net.ipv4.conf.all.rp_filter = 1
net.ipv4.conf.default.rp_filter = 1

# Ignore ICMP broadcast requests
net.ipv4.icmp_echo_ignore_broadcasts = 1

# Disable source packet routing
net.ipv4.conf.all.accept_source_route = 0
net.ipv6.conf.all.accept_source_route = 0
net.ipv4.conf.default.accept_source_route = 0
net.ipv6.conf.default.accept_source_route = 0

# Ignore send redirects
net.ipv4.conf.all.send_redirects = 0
net.ipv4.conf.default.send_redirects = 0

# Block SYN attacks
net.ipv4.tcp_syncookies = 1
# some vps's will not except the following 3
net.ipv4.tcp_max_syn_backlog = 2048
net.ipv4.tcp_synack_retries = 2
net.ipv4.tcp_syn_retries = 5

# Log Martians
net.ipv4.conf.all.log_martians = 1
net.ipv4.icmp_ignore_bogus_error_responses = 1

# Ignore ICMP redirects
net.ipv4.conf.all.accept_redirects = 0
net.ipv6.conf.all.accept_redirects = 0
net.ipv4.conf.default.accept_redirects = 0
net.ipv6.conf.default.accept_redirects = 0

# Ignore Directed pings
net.ipv4.icmp_echo_ignore_all = 1


(DON'T close the file - You may wish to add option 5b below)


Step 5c - server auto reboot when it runs out of memory:


Set the server to automatically reboot when it runs out of memory:

In the event of a traffic spike, the VPS may run out of memory 
and your site could be down for hours, well after the spike has ended. 
To avoid the extended downtime, you’ll want the VPS to automatically 
reboot instead. It’s one less thing for you to worry about and provides 
a bit more stability (a few minutes of downtime as opposed to hours).

Add the following lines and save:

# some vps's will not except this
vm.panic_on_oom=1
kernel.panic=10

To reload sysctl with the latest changes, enter:

sudo sysctl -p

mariusffm

Unfortunately I must end the test season a little bit earlier because I'm planning to use XEN. When XEN is ready I will try to give VPS also for a short period of time for testing

mariusffm

Registration open again at: https://ssl.anonvps.net

jenglotbae

@mariusffm said:

Registration open again at: https://ssl.anonvps.net

my ip is fraud for getting this lol.
but i'm so happy 7 days with your linux.
thank you so much sir.

mariusffm

Yes, location set at the Client Registration and your IP must be the same