.emacs
Add those bellow in the file ~/.emacs
;; do not make backup files
(setq make-backup-files nil)

;; php syntax color
(load “php-mode”)
(add-to-list ‘auto-mode-alist
‘(“\\.php[34]?\\’\\|\\.phtml\\’” . php-mode))

X forwarding with ssh
ssh -X your.ssh.domain.com
~$emacs somefile
will start an gui emacs on your local computer. You can also set ForwardX11 to yes for enable X forwarding. This property can be found at /etc/ssh/ssh_config

http://manpages.ubuntu.com/manpages/jaunty/en/man8/ufw.8.html

http://www.ubuntu-unleashed.com/2008/05/howto-take-use-setup-and-advantage-of.html

NameVirtualHost xxx.xxx.xxx:80
<VirtualHost xxx.xxx.xxx:80>
        ServerName example.com
 
        DocumentRoot /path/to/doc/root
        <Directory /path/to/doc/root/>
                Options Indexes MultiViews FollowSymLinks
                Order Deny,Allow
                Deny from xx.xxx.xxx.xxx
                Deny from xxx.xxx.xxx.xxx
                Deny from ...
                # ips that not matched deny list will be permitted
        </Directory>
...
</VirtualHost>

Be aware that you can not use “Allow from all” in the end since apache deny a request only if it does not match an allow condition. So we have a deny list to match against. Ips that are not matched ips in this list will be permitted.

It says that there are no good way to protect against this kind of attacks. I hope that I can get in touch with those ip-owners and hopefully they can help me.

Some good pages

http://wiki.apache.org/httpd/ProxyAbuse

http://httpd.apache.org/docs/2.2/mod/mod_authz_host.html

ps aux | grep php

Result

root      7749  0.0  0.1   3236   796 pts/2    S+   16:09   0:00 grep php
root     19292  1.8  5.6  90624 28528 ?        S    01:36  16:09 php test.php

To kill a process you can use kill with a specific pid, for instance 19292 above

kill 19292

And kill all php process

killall -9 php

a2enmod ssl

Generate self-signed ssl certificate
Solution: http://www.akadia.com/services/ssh_test_certificate.html

Just follow instruction carefully. Make sure that i step 2 you need to enter a correct “Common Name”, ie your domain. Step 5 and 6 also different for different distributions and installation …

Summary in case link above is not available anymore:
Step 1: Generate a Private Key

openssl genrsa -des3 -out server.key 1024

Step 2: Generate a CSR (Certificate Signing Request)

openssl req -new -key server.key -out server.csr

Step 3: Remove Passphrase from Key

cp server.key server.key.org
openssl rsa -in server.key.org -out server.key

Step 4: Generating a Self-Signed Certificate

openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt

Step 5: Installing the Private Key and Certificate
(or the location you want to store)

cp server.crt /usr/local/apache/conf/ssl.crt
cp server.key /usr/local/apache/conf/ssl.key

Step 6: Configuring SSL Enabled Virtual Hosts

SSLEngine on
SSLCertificateFile /usr/local/apache/conf/ssl.crt
SSLCertificateKeyFile /usr/local/apache/conf/ssl.key
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown

Step 7: Restart Apache and Test

New problem:
ssl_error_ssl2_disabled
Solution in ssl.conf:
# enable only secure protocols: SSLv3 and TLSv1, but not SSLv2
## disabled this one
#SSLProtocol all -SSLv2
## use this instead
SSLProtocol all

See also http://httpd.apache.org/docs/2.0/ssl/ssl_howto.html

New problem:
sec_error_untrusted_issuer due to self-signed SSL Certificate
But it is no problem for me since this is for my own usage and test…

[boot loader]
timeout=15
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
 
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /NoExecute=OptIn
c:\wubildr.mbr="Ubuntu"

If we wish to start with Ubuntu instead we change default operative system as following

[boot loader]
timeout=15
default=c:\wubildr.mbr
 
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /NoExecute=OptIn
c:\wubildr.mbr="Ubuntu"