Search results

  1. krlabs

    Access control ALLOW/DENY not working?

    I can block and successfully do so. I can even block you in order to demonstrate it in action)) Check out the Network settings in Cloudflare. There are many interesting things there, including the Trust IP header. Nothing is impossible.
  2. krlabs

    How to Set canonical for all PDF Files in subdirectory?

    What does “commercial” mean? This is the Open Source Forum. People who work with LiteSpeed Server on their own, without anyone else's support, gather here. This is exactly what I have been doing since 2020, when I registered here. And I solve all my cases myself by 90%.
  3. krlabs

    OLS using header IP, not trusted Cloudflare IP, for connection limit?

    My understanding leads to the fact that I solve 90% of my tasks for Administration and Security VPS. So it's not a bad thing. Offer your options and your vision if you have more professional experience/approach. I would be grateful for any advice. This forum was created for this purpose.
  4. krlabs

    How to Restrict Direct Access to Server’s Real IP When Using Cloudflare (OpenLiteSpeed)

    If you think that a lot 404 errors, which the server processed before and returned for thousands of non-existent spam HTTP-requests, not caused HIGHER LOAD, then you are mistaken, sir. For example, these ones: 8.222.226.153 - - [30/Nov/2024:14:27:23 +0200] “GET...
  5. krlabs

    How to Restrict Direct Access to Server’s Real IP When Using Cloudflare (OpenLiteSpeed)

    How to protect access to Server IP? ----------------------------------- 1. Create a new Virtual Host with any name, for example, “serverhost”. 2. Add new host "serverhost" in Listeners 80/443 (HTTP/HTTPS) and assign them the server IP address. 3. Activate "Enable Rewrite" on the Rewrite tab in...
  6. krlabs

    How to Restrict Direct Access to Server’s Real IP When Using Cloudflare (OpenLiteSpeed)

    Another option is to create a separate virtual host with an IP address and deny access: https://forum.openlitespeed.org/threads/hide-server-ip.5612/ At this moment this solution works.
  7. krlabs

    How to Restrict Direct Access to Server’s Real IP When Using Cloudflare (OpenLiteSpeed)

    Thank you for your feedback. I understand exactly what you mean. Of course, there are solutions like fail2ban and others. Of course, Cloudflare is not a panacea at all. In this case, I'm just trying to use the standard functionality. But if it doesn't provide for this, if there are no standard...
  8. krlabs

    How to Restrict Direct Access to Server’s Real IP When Using Cloudflare (OpenLiteSpeed)

    Another solution that came to mind was to redirect from the server IP address to the domain. But I didn't like it. Because there are a lot of resources on the server and I don't want to associate the server IP address with any of them...
  9. krlabs

    How to Restrict Direct Access to Server’s Real IP When Using Cloudflare (OpenLiteSpeed)

    Every day, dozens of bots, crawlers, and other attackers make requests to xttp://SERVER_IP. So the question arises - how to restrict access to the server by its IP address. One of the options that immediately came to mind is to use the Accces/Denied List at the Server Settings level in the...
  10. krlabs

    Access control ALLOW/DENY not working?

    Can I block access to the server for all IPs except Cloudflare? My goal is to completely block attackers from accessing xttp://SERVER_IP
  11. krlabs

    How to Set canonical for all PDF Files in subdirectory?

    For something PDF, damn Google put up the canonical URL from other sites on its own. Then, I read their documentation and they advise to specify the canonical URL in such situations. This is important for me for indexing and getting files into search engines.
  12. krlabs

    OLS using header IP, not trusted Cloudflare IP, for connection limit?

    Tried today this settings and got 520 from Cloudflare, but all IP's was in Trust IP and put in Access Allow list. So. I have not been able to completely block access to the SERVER IP.
  13. krlabs

    How to Set canonical for all PDF Files in subdirectory?

    Dont works. Tried in Context, in Rewrite tab and in .htaccess. Nothing. For this moment i have only 1 solution, add in Static -> Context for /books/ directory in Headers section: Link: <https://kr-labs.com.ua/books/>; rel="canonical"
  14. krlabs

    How to Set canonical for all PDF Files in subdirectory?

    I have direcotry /books/ and i want put Canonical header for every file: HTTP/1.1 200 OK Content-Length: 19 ... Link: <https://www.example.com/downloads/white-paper.pdf>; rel="canonical" ... Trying dynamic variables in VHost -> Context -> Static -> Header → I attempted using $0, $URI...
  15. krlabs

    Rewrite Rules (Disabled by CyberPanel)

    Follow this instruction and you can remove "Disabled by CyberPanel": https://community.cyberpanel.net/t/how-to-enable-rewrite-rules-disabled-by-cyberpanel/34983
  16. krlabs

    Custom error pages outside the root directory of website

    Actually, I was thinking of doing that through simlinks. thanks!
  17. krlabs

    Custom error pages outside the root directory of website

    In OpenLiteSpeed we can specify custom 404, 403, etc. "Error" pages. I have created such pages. But the question is, is it possible to specify the path to them outside the root directory of the website? For example, if my templates are stored in a folder other than the domain folder. For...
  18. krlabs

    Certificate issue after update to 1.8.1

    You wrote that “the problem was with permission, after update to 1.8.1, fullchain.pem file has not good permission.” So, what were the permissions fullchain.pem before and after that? If you didn't make any changes, then it's 100% that this problem will happen again after the next upgrade.
  19. krlabs

    Certificate issue after update to 1.8.1

    We analyzed the permissions, and they were set as standard - 644 for fullchain.pem. There is another point in this situation - we also updated CyberPanel to the latest version, and it may have had such authority to overwrite the contents of this file.
Top