Centralized Security software list for multiple WordPress installations
Keeping tabs on WordPress security is super important. But what if you have 10s or even 100s of sites? How would you do that? Here
Security
How to mitigate the extremely popular xmlrpc.php XML-RPC attack on WHM hosted WordPress servers
WordPress is a convoluted mess of security holes. Every year millions of WordPress websites are attacked because if the poor security provided by the vendor
Connection from [a.b.c.d]… refused: too many connections and Exim
At times your Exim server might be overwhelmed: 2023-11-09 12:04:05 Connection from [188.234.244.30]:3802 refused: too many connections Your server is most likely under attack. Check
Fixing cURL error 77: Unable to initialize NSS: -8023 (SEC_ERROR_PKCS11_DEVICE_ERROR)
Out of the blue WordPress starts giving problems. This server has been stable for years. Clue: It’s CentOS 7. Probably time to move away. Anyhow,
SSH Cheat Sheet
How to Audit SSH The /etc/ssh/sshd_config file has many options. Fortunately in a typical environment you have to only focus on a few options to
How to disable ConfigServer Firewall on WHM’s LFD blocked emails
Background ConfigServer Firewall on WHM is incredibly noisy. To the point that you have to set up so many email rules just to be on
UFW Cheat Sheet – Add new allow rules, block IP addresses
Add a Port $ sudo ufw allow 33/tcp Tips: When looking at rules, use ufw status numbered because it gives line numbers with output that
How to decrypt Remmina passwords
Background This article is about decrypting Remmina passwords. Of course it’s pretty easy to Google but the problem is the very first link on Stack
How to enable TLS 1.1 and TLS 1.2 on Windows 7 and deal with Outlook encryption type errors
Basically Windows 7 is end of life 2020. Some users insist on still using it or don’t want to pay for upgrades, because actually, IT
How to install a CloudFlare origin server SSL certificate into Virtualmin
Background If your Virtualmin website is using Cloudflare as a proxy you can’t use the standard Let’s Encrypt HTTP method to request a fresh certificate.