Re: webserver in linux at home ?



On Sat, 28 Oct 2006 19:42:03 -0500, Dances With Crows wrote:

On Sun, 29 Oct 2006 00:47:02 +0100, The Natural Philosopher staggered
into the Black Sun and said:
surf wrote:
I previously investigated running a webserver at home

Your ISP's TOS/AUP probably prohibits "running servers", as other people
have said. Your ISP probably *doesn't care* if you run a low-traffic
websewer, though. The load from an infrequently-accessed Apache is
probably much less than the load from everybody Bittorrenting every
episode of every TV show ever, after all. Just remember that many ISPs
that deliver cable/DSL cap the upstream at a low level, so if you get
/.ed or Farked, you're screwed no matter what.

Can I run a website behind a router ?
better if you do, but you have to make sure that you have a fixed IP
address on your internet connection

Totally not necessary, and probably too expensive. dyndns.org and
similar services exist, after all, and utilities like ddclient exist
that'll update those entries every time your dynamic IP changes.

your router alows you to map incoming port 80 calls to the public
address to your linux [box's] native address.

If it can't do that, it's a pretty poor router.

you have a public dns somewhere that diverts queries about
www.yoursite.com to whatever your fixed public IP adress is.

See the dyndns.org paragraph.

I run my web site from an old Dell, 400 mhz, 125meg memory,
20gig disk using Fedora Core 4. Recently, because of many
photos, I started using reverse proxy so I can keep the
large files on another box. (This makes the installation
scripts rather complex.) My ISP is Comcast, with variable
IP addr, but as mentioned above, using dyndns and ddclient,
this is a non-issue. On the other hand, my understanding
is that this would not work with Verizon, because they change
the IP addr with every use. They are explicit that if you
run a web site, you have to buy a fixed IP addr. BTW, top
shows me that I last booted the Dell 249 days ago. It failed
then after 200 days because, notwithstanding my UPS, there
was a power failure due to misapplication of my finger.
That aside, 449 days without a major failure. (Try that
with uSoft.)

Note that my memory size is half the minimum recommended for
Fedora Core 4. However, I did a minimal installation, almost
never use the monitor, and maintain it from another box.

Up until a few months ago, I got much traffic from attacks
of various kinds, most commonly denial-of-service attacks
by sending me large amounts of nonsense data (definitely,
for the most part, not crypt). These caused no real problem,
but they irritated me. Therefore, using iptables, ipqueue,
and C, I constructed an effective firewall that detected
attacking packets, recorded the IP addrs, and permanently
banned them. (I have no sympathy for AOL.) Since Dec 2005,
I have banned 663 IP addrs.

Recently, however, the logs show me that the attacks have
diminished from perhaps 2 to 5 per day to 1 to 3 per week.
I have no idea why. (I seriously doubt that my ban tree
covers most of the potential attackers.)

So you see Linux is good for this, but if you are compulsive
about it, it can take some work.

Hope this helps.
Mike.

.



Relevant Pages

  • Re: Telnet: route to host
    ... >out why we couldn't reach anything on the internet - pings failed ... Or switch to an ISP that knows and understands networking. ... I see regular attacks on my machine, ... As to adding IPs to your filters you may find that your filters get ...
    (comp.unix.sco.misc)
  • Re: isp Re: intrusion via ssh
    ... >dont forget to add the isp to the list to file against if they were ... worm or some variation on it, and the ddos attacks comeing from their ... One of our clueless sales types insisted she hadn't opened a message ... The ISP refused to disconnect a good customer, and the customer, when ...
    (Debian-User)
  • RE: Denial of service question.
    ... I have been the target of DoS attacks in the past. ... If a particular IP address is being targetted, make your ISP drop all ... How possible is it for us to put a firewall BEFORE the T1 line to block all of this before it hits our poor little line, ...
    (Security-Basics)
  • Re: What to do about attacks?
    ... Lloyd Andrew schrieb: ... >attacks a week. ... Now I am getting hit about every five minutes. ... >customers sharing my ISP, I reported the addresses to my ISP, but they ...
    (comp.security.firewalls)
  • Mail trouble
    ... Our mail is hosted by our ISP. ... exchange-server. ... My addr. ... My primary SMTP on local exchsrv: ...
    (microsoft.public.exchange.admin)