Blog Posts

Introduction

Whether you use web hosting or a server, there is always a traffic limit on the services you use when publishing your websites or projects on the internet. Although many companies today provide unlimited traffic services, technically nothing in nature is truly unlimited. It is presented as unlimited traffic only because the extra usage you consume is not charged. However, if you are not using unlimited traffic services, it will be useful for you to monitor the traffic you use. This way, you can avoid high-cost overage invoices.

Traffic Usage Monitoring at Netinternet

For the physical dedicated server and colocation services you receive, we allow you to monitor how much traffic your server uses through your customer panel. This way, you can compare the traffic limit you purchased with the traffic you use and switch to a higher traffic package based on your needs. This prevents extra invoices that may be generated as traffic overage charges. Now let us look at how you can monitor traffic usage on the physical server service you have received from our company.

NOTE: In order to monitor traffic usage on your physical server, traffic reports must be active. If you cannot see traffic reports, please contact technical support.

First, log in to your customer panel from the Customer Login section on our website. After logging into the panel, click on the Services section in the top menu to navigate to the section where all your services are listed.

When you enter the Services section, you will see all active and passive services you have purchased from our company as a list. If you have too many services, you can search for your service from the Search section or select the relevant service from the Filter section to display only the service whose traffic reports you want to monitor. After reaching your service in the list, click the View button on the right to navigate to the features section of your service.

When you enter the features section, on the page that appears, you will see the following sections in the left menu,

• Information


• Traffic Reports


• Service Cancellation

When you click on the Traffic Reports section, you will have accessed the traffic reports of your relevant server. You can examine all your traffic consumption in detail, both daily and monthly, from the day your server was activated. Please note that the data here does not come in real-time; daily reports are delivered.

Thanks to this reporting process we provide to you, you can easily monitor how much traffic you use. This way, you can purchase traffic packages according to your needs.

Icinga and Icinga Web on Ubuntu
“Introduction”
Icinga is a flexible and powerful open source monitoring system used to check the health of network-connected servers and services. It can be used to monitor process load and uptime, free disk space on a storage device, memory consumption in a caching service, and more. Once properly installed, Icinga can give you an overview of the status of many hosts and services, as well as notifications, downtime scheduling, and long-term storage of performance data.
“Requirements”
What you need before getting started;
An Ubuntu 16.04 server with LAMP installed. You must enable free SSL for Apache since Icinga Web has a login page, which requires entering some sensitive information during setup.
“Installation”
To get the latest version of Icinga, we first use the following command

curl -sSL https://packages.icinga.com/icinga.key | sudo apt-key add -

This key will be used to automatically verify the integrity of all software we download from the Icinga repository.

Open the file with a text editor “nano”

sudo nano /etc/apt/sources.list.d/icinga.list

This will open a new empty text file. Paste the following line

/etc/apt/sources.list.d/icinga.list

deb https://packages.icinga.com/ubuntu icinga-xenial main

Save and close the file, then refresh the package cache

sudo apt-get update

apt-get will now download information from the repository we added and make Icinga packages available for installation

sudo apt-get install icinga2 icinga2-ido-mysql

This software will load Icinga and other information into a MySQL database and will present a few configuration screens

• Should the ido-mysql feature of Icinga2 be enabled? YES

• Should the database for icinga2-ido-mysql be configured with dbconfig-common? YES

• Then you will be asked to enter a password. Create a strong password and save it so you don’t forget it.

We also enable the command feature that will allow us to execute checks from the web interface.

sudo icinga2 feature enable ido-mysql command

Now you can restart Icinga

sudo systemctl restart icinga2

And finally, let us check to make sure Icinga2 is working properly

sudo systemctl status icinga2

“Icinga Web Installation”
Icinga can be used completely without a web interface, but the web interface provides an overview of the health status of your services as well as the ability to send notifications.

sudo apt-get install icingaweb2

The rest of the setup is done in a web browser. Before proceeding, let us edit the PHP configuration file due to timezone requirements.

sudo nano /etc/php/7.0/apache2/php.ini

We need to find a specific line to update. In Nano, we can press CTRL-W to bring up a search interface, type date.timezone and press ENTER. The cursor moves to the line we will update. First, remove the comment at the beginning of the line by removing the semicolon, and type the correct timezone. You can find the correct timezone format at the following link.
https://secure.php.net/manual/en/timezones.europe.php
When you are done, it should look something like this

date.timezone = Europe/Istanbul

Save and close the file. Restart Apache to apply the update

sudo systemctl restart apache2

General Information

Cisco released a security update addressing the unauthorized access vulnerability found in the Voice Operating System software platform.

Impact

Due to the existing security vulnerability, it is possible for affected systems to be taken under control by cyber attackers.

Solution

Netinternet recommends that its users and system administrators review the Cisco Security advisories for the vulnerability stated to be of high importance and take the relevant security measures.

Sources

https://www.us-cert.gov/ncas/current-activity/2017/11/15/Cisco-Releases-Security-Update

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-vos

General Information

Mozilla released security updates to address a total of 20 vulnerabilities, 7 of which are critical, found in its Firefox 57 and Firefox ESR 52.5 products.

Impact

Due to existing security vulnerabilities, it is possible for target systems to be compromised by cyber attackers.

Solution

Netinternet recommends its users and customers to review the security advisory published for Firefox 57 and Firefox ESR 52.5 and apply the updates published for these products.

Sources

https://www.us-cert.gov/ncas/current-activity/2017/11/14/Mozilla-Releases-Security-Updates

https://www.mozilla.org/en-US/security/advisories/mfsa2017-24/

https://www.mozilla.org/en-US/security/advisories/mfsa2017-25/

General Information

Intel released an advisory update to address the firmware vulnerability in its Management Engine, Server Platform Services and Trusted Execution Engine products.

Impact

Due to existing security vulnerabilities, it is possible for cyber attackers to infiltrate affected systems and remotely take control of affected systems.

Solution

Netinternet recommends that users and system administrators review the Intel update links below and forward the updates to original hardware manufacturers for firmware vulnerability mitigation strategies.

Sources

https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr
https://www.intel.com/content/www/us/en/support/articles/000025619/software.html
https://downloadcenter.intel.com/download/27150
https://www.us-cert.gov/ncas/current-activity/2017/11/21/Intel-Firmware-Vulnerability

You can use the following commands to back up and restore databases of any size on Linux servers.

For this operation, you need to have a Server Rental, Cloud or Server Hosting service and be able to access your system via SSH. Although the example commands are specified for the Linux operating system, you can also perform the same operation on Windows Servers through the .exe files found in the bin folder under the relevant MySQL directory.

For database backup, apply the following command;

mysqldump -u username -p databasename > databasefile.sql

In the above command, enter the information you defined when creating your database in the username and databasename fields as indicated. When you press Enter, you will be asked for your database password. After entering your password, the backup process will begin.

To restore the database you backed up with the above method, you can apply the following command;

mysql -u username -p databasename < databasefile.sql

After typing this command, you can enter your database password and start the restore process.

To run the same commands on Windows servers, you can go to the mysql/bin directory and use the mysqldump.exe and mysql.exe program files with the same parameters.

If you want to load as MySQL root and do not know the MySQL root password, you can find it out as follows.

Finding MySQL Root Password

First, we connect to our server via SSH. Then we type the following line in the command line and press enter.

cat /root/.my.cnf

The information that appears on the command line screen looks like the following. In this section, what is written opposite “ password= ” is your password.

password= yourmysqlrootpassword
user=root

This way, you can find out your current MySQL root password without changing it.

Log in to your cPanel management panel and click on the PhpMyAdmin icon under the Databases heading:

Click the Import button, select your database of up to 512 MB in size, and click the Go button. To import databases larger than 50 MB, upload your file to an FTP directory and submit a support request to our technical support unit; our technical team will assist with the upload process.

General Information

The ransomware called Bad Rabbit is spreading to systems worldwide by disguising itself as an Adobe Flash update.

Impact

The relevant malware infects the system through a malicious file downloaded to the system, encrypts all files, and demands a fee to unlock them.

Solution

Netinternet recommends that users and system administrators be cautious against suspicious phishing emails, never open their attachments, keep systems up to date, and be careful about Adobe Flash updates coming from untrusted sites.

Sources

https://securelist.com/bad-rabbit-ransomware/82851/

General Information

Google has released Chrome version 62.0.3202.89 for Windows, Mac and Linux operating systems.

Impact

The new version draws attention to the possibility that systems affected by cyber attackers due to security vulnerabilities in the previous version could be taken under control.

Solution

Netinternet recommends that users and system administrators review the “Google Chrome Updates” security advisory published by Google and apply the necessary updates for these products.

Source

https://chromereleases.googleblog.com/2017/11/stable-channel-update-for-desktop.html
https://www.us-cert.gov/ncas/current-activity/2017/11/06/Google-Releases-Security-Update-Chrome