Skip to main content

Install and configure OpenVPN on Debian 8

OpenVPN is a software package that allows you to protect user traffic from “interception” by providing encrypted data transmission from the client’s device to the server with OpenVPN installed. Great for using public wifi access points where information can be intercepted by third parties. Or in the case when your ip is blocked on a certain site and you need to safely bypass this restriction.

(Further…)

Nginx rewrite rule examples

Redirect to url with slash

Some CMS for sites may open pages with a slash at the end, and without it, if the engine does not redirect itself. For example, the page http://example.net/page and http://example.net/page/ from the point of view of the visitor will be one. But for search engines, these are two different pages, and slash is to blame for everything. So duplicate content is bad.

(Further…)

How to create a self-signed certificate

Create a self-signed certificate with two commands. It may be useful to administer the site via https, for example.

1. Create a key.

  # openssl genrsa -out server.key 2048 

2. Create a certificate. The domain example.com should be replaced with yours.

  # openssl req -new -x509 -key server.key -out server.crt -days 3650 -subj /CN=example.com 


Scrolling the page by clicking on the mouse scroll in Iceweasel

When using iceweasel, I found a very unpleasant moment: if you click on the scroll wheel on a mouse in an arbitrary place on the page of any site, then instead of displaying the scroll icon, a page is opened in a new tab.

This problem is solved as follows. You need to open the about: config page in your browser, find the general.AutoScroll parameter and set it to true .



Multiple requests to xmlrpc.php in WordPress

Today I looked into the access-log of one site for WordPress and found many requests of this kind:

  1.234.83.77 - - [05 / Sep / 2014: 12: 07: 01 +0600] "POST /xmlrpc.php HTTP / 1.1" 200 441 "-" "Mozilla / 4.0 (compatible; MSIE 9.0; Windows NT 6.1; 125LA ; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022) "
 1.234.83.77 - - [05 / Sep / 2014: 12: 07: 01 +0600] "POST /xmlrpc.php HTTP / 1.1" 200 441 "-" "Mozilla / 4.0 (compatible; MSIE 9.0; Windows NT 6.1; 125LA ; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022) "
 1.234.83.77 - - [05 / Sep / 2014: 12: 07: 02 +0600] "POST /xmlrpc.php HTTP / 1.1" 200 441 "-" "Mozilla / 4.0 (compatible; MSIE 9.0; Windows NT 6.1; 125LA ; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022) "
 1.234.83.77 - - [05 / Sep / 2014: 12: 07: 02 +0600] "POST /xmlrpc.php HTTP / 1.1" 200 441 "-" "Mozilla / 4.0 (compatible; MSIE 9.0; Windows NT 6.1; 125LA ; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022) " 

Judging by the results of Google, there is some kind of exploit related to this file - xmlrpc.php. In one article in English it was said, as I understood, relying on my poor knowledge of the given language :), about the possibility of organizing the password selection. True, so far I have not noticed the consequences, but it is better to take action in advance. :)

(Further…)