Krydos

I highly recommend using SFTP for the encryption because the world in general seems to be moving towards the idea that any company or ISP or government is entitled to snoop on all of our data traffic, but that's just my personal politics I suppose. Just be aware that if you do use unencrypted FTP it's fairly trivial to intercept your data to sell it or use it against you. Regarding the file permissions, I implemented a permission mask that would force the files to be uploaded with more sensible permissions but it ended up breaking a lot of other things so I put it back the way it was. Most FTP clients you can just right click and change the permissions. I just tested it with filezilla (a very commonly used ftp client) and you can even right click a directory and set the permissions to 644 for all files recursively in the directory. So you could just do that on your public_html each time you upload something. It's only a few extra mouse clicks.

No, she doesn't need to go elsewhere if she doesn't want to. I'm convinced she didn't install the malware intentionally or maliciously. As wolstech already said the existing account is too corrupted to be unsuspended, and we must keep the data intact for law enforcement to research the illegal activity if they need to. We can remove the domain(s) from the account though so you can use them to create a new account. Let us know how you'd like to proceed.

Well, like I said before I'm not too familiar with cloudflare and it's multitude of options. If anyone knows more about it they might chime in. Otherwise you can figure it out and let us all know how it works so people who search these forums in the future will be able to find the information without going through the whole process as you currently are. I'm always leery of free services like this because they have a tendency to get a ton of users over a year or two while taking big monetary losses and then switch to paid services once they have everyone hooked on their service suckering people into paying them to get what was once free. I've seen it dozens of times. Pingdom was one that annoyed me the most recently because our uptime images were based on pingdom API, and we lost years of uptime reports when they switched to pay scheme. I wasn't aware of any partner program, mainly because none of our users have told us about it prior to you just now. I signed up for it now though so we'll see what they have to say.

In order to provide ruby on rails support on Johnny through cpanel we cannot change the ruby version or the rails version. Since Tommy doesn't support ruby on rails it's possible we could upgrade the ruby version on that server.

The easiest way to set up cloudflare is to use the cloudflare plugin we have in your cpanel https://tommy.heliohost.org:2083/frontend/paper_lantern/cloudflare/index.live.php As far as whether you should use cloudflare for each and every cname, that's up to, and what your purpose for using cloudflare is. If you're just trying to speed up your site a bit then all of those cnames don't really matter. If you expect your site to get targetted by DDoS attacks, then first of all maybe you should host your site somewhere else so your account doesn't cause downtime for the rest of our users, but yeah you should probably run ALL of your subdomains and cnames and everything through cloudflare so your attackers can't find the originating server, but if you don't expect all of that to happen then it's probably overkill. Regarding the forced https I would just use .htaccess myself. I'm not familiar with cloudflare forced ssl settings, but rewrite rules are pretty straight forward. Just put this in your .htaccess file RewriteEngine On RewriteCond %{HTTPS} !=on RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

A PM has been sent with the link to download your databases.

Deployed http://academicmanager.heliohost.org/AcademicManagerTest/

I can backup the database only.

That link works for me. https://tommy.heliohost.org:2083/frontend/paper_lantern/webmaillogin.html leads to https://tommy.heliohost.org:2096/webmail/paper_lantern/index.html?login=1&post_login=

Don't worry about it. By making this post you just let us know that yet another user is interested in this feature, and thereby moving it as a higher priority.

See http://www.helionet.org/index/topic/27636-solved-lets-encrypt-support-auto-ssl/ and http://www.helionet.org/index/topic/26914-ssh-on-tommy/?p=124952 In order to automatically renew Let's Encrypt a custom Heliohost plugin is going to need to be written which is a considerable undertaking, but it is in the works. For now just update your Let's Encrypt certificates manually.

Dedicated IP granted.

Go to https://tommy.heliohost.org:2083/frontend/paper_lantern/sql/managehost.html and enter the symbol % to allow all IP addresses to connect to your databases remotely. That way each time your dynamic IP changes you'll still be able to connect.

The goal is to get Johnny to open registrations 24 hours a day, but we're scaling it up slowly to make sure he can handle the load. The number of accounts allowed to be created is based on the load.

Deployed. http://academicmanager.heliohost.org/AcademicManager/

Why does it matter? It changes (increases lately) often.

You're the reason Tommy got listed in the CBL. See http://www.helionet.org/index/topic/27727-tommy-is-blacklisted/

https://www.timeanddate.com/worldclock/converter.html

I suspended the account that was causing the issue. That's the only thing that can be done. Ah, nevermind I checked again and it said "We can tell you fixed the problem" and it has a delist link now.

This one is working too now that I restarted apache.

There you go https://itech.heliohost.org/

<%@ page import="java.io.*,java.util.*,java.sql.*"%> <%@ page import="javax.servlet.http.*,javax.servlet.*" %> <%@ taglib uri="http://java.sun.com/jsp/jstl/core" prefix="c"%> <%@ taglib uri="http://java.sun.com/jsp/jstl/sql" prefix="sql"%> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" > <head> <title>JSP MySQL Test</title> </head> <body> <sql:setDataSource var="mysql_test" driver="com.mysql.jdbc.Driver" url="jdbc:mysql://localhost/username_test?serverTimezone=UTC" user="username_test" password="bestpasswordever"/> <sql:query dataSource="${mysql_test}" var="result"> SELECT * from java; </sql:query> <c:forEach var="row" items="${result.rows}"> <c:out value="${row.data}"/> </c:forEach> </body> </html> Then download https://krydos.heliohost.org/jars/jstl-1.2.jar and https://krydos.heliohost.org/jars/mysql-connector-java-6.0.5.jar and put them in your WEB-INF/lib directory Working example: https://krydos.heliohost.org/mysql.jsp It doesn't look like anyone has tried that yet. Let us all know how it goes and the next person will know.

It's working now. Apache needed to be restarted for it to work though.

The one and only report I have for Tommy is from February. Johnny has had quite a few reports lately though.

You can use the cloudflare plugin in cpanel. It shouldn't give any errors.