WEBHOSTUK LTD have launched multiple special offers for our UK or US hosted web hosting plans, to celebrate Christmas 2011. These include FREE Domain Names and SSL certificate with any of our shared, reseller or VPS hosting plans, 20% recurring discount and our very special Christmas Competition to win an Apple iPad2.

Signup with any of our shared, reseller or VPS web hosting plans, and get recurring 20% discount irrespective of the billing cycle you choose.. So pay anually and get the 20% discount applied to your chosen web hosting plan every year, as long as you have an account with us..!

All you need to do is use our special coupon code “xmas2011” (without quotes) and get your account qualified to win a brand new Apple iPad2 with recurring 20% discount and free SSL + Domain name.

WebHosUK LTD is also pleased to offer an exclusive deal this holiday season with our dedicated servers.. Get your own, fully managed dedicated server for as low as £69.99 / month, available for a limited time..! To add up more, we are also offering free control panel (cpanel or Plesk) with our every dedicated server purchase, to make your web hosting a user friendly and pleasurable experience with us!

Christmas 2011 Dedicated Server offer :

• Processor : 1.8GHz
• RAM : 2 gb
• HDD : 250 gb SATA
• Bandwidth : 5000 gb/month
• 2 Dedicated IP’s
• Free Cpanel / Plesk
• Free managed services
• Free Setup
• Choice of Windows or Linux

Special Christmas offer : £69.99 / month : Order Now

WHUK Christmas Celebration:
With plenty of deals avaialble out there, WebHostUK is leading the season with one of the most attractive deals and fantastic prizes for the winners. With every purchase of any web hosting plans during the month of December 2011, customers qualify themselves to win a brand new Apple iPad2. First prize is an Apple iPad2. Second Prize is 1 year free VPS web hosting and third prize is free 2 years of our “Linux Pro” shared Web Hosting.

“This Christmas, we thought of offering something for everyone” commented Abbie Clayton, Head of Business Development, WEBHOSTUK LTD.  “With the most attractive deals in the web hosting industry, our offers are exclusively meant for our customers to celebrate this Christmas and spread the festive spirit!  Our Christmas celebration is fun with some wonderful prizes including free domains and SSL and iPad2 adding a little extra sparkle to our best selling web hosting packages.”

* Winner will be selected through a lucky draw and will receive free iPad2 on the occasion of this Christmas

WEBHOSTUK LTD would like to wish you happy holidays a wonderful and happy Christmas. Enjoy the holiday and don’t forget that we are available 24/7 to assist you with any questions you may have regarding your web site.

About WebHostUK Ltd
WebHostUK Ltd is one of Britain’s leading and most innovative web hosting companies.  With a comprehensive range of domain name registration, web hosting, e-commerce, VPS and dedicated server solutions, WebHostUK Ltd specialize in making it easier, quicker and much cheaper for any consumer, small or large business to have the online presence they need.

2. A box will appear. Click Add and select Mail.

3. Enter your name as you want it to appear on your emails and click Next.

4. Put in your email address, which consists of a user you set up in webmail and @yourdomain.xyz, and then click Next.

5. Set the server type as POP3.

6. For incoming and outgoing mail servers, enter mail.yourdomain.xyz (where yourdomain.xyz is your domain name and extension such as .com).

7. Click on Next.

8. Enter your email address for the Account Name. Enter the password you set for this account. Note: Do NOT check the box “Log on using Secure Password Authentication”.

9. Click Next and then click Finish. After you click Finish, you should see the following window. If not, go to the Tools menu, and click on Accounts. After clicking Accounts the window will appear. In this window, click on your domain until it is highlighted, then click on Properties.

10. When the next screen appears, click on the Servers tab. Under Outgoing Mail Server, check the box next to My server requires authentication. Click Okay. Note: You MUST do this step so you can send mail from your domain.

11. Now, you’re ready to send and receive mail. To set up multiple accounts, follow these steps again.

Technorati Tags: Configure Outlook Express on Windows, Configure POP3 and SMTP settings in Outlook Express, Email Hosting, Email web host, My server requires authentication, POP3 and SMTP ports in Outlook Express

1.  Browse to the folder in which the message was deleted from (i.e. inbox, sent, deleted items)

2.  Expand the Tools menu and select Recover Deleted Items

3.  Select the email(s) that you would like to recover

4.  Click the envelope icon to recover the email(s)

Technorati Tags: 2011 email hosting, Email Hosting, Emails deleted in Outlook 2007, Outlook 2007 email recovery, Recover Outlook Email, UK Email Hosting

2. On the E-mail tab, click New.

3. Select Microsoft Exchange, POP3, IMAP, or HTTP and click Next.

4. Check Manually configure server settings or additional server types and click Next.

5. Select Internet E-mail and click Next.

6. Enter the requested information:

* Your Name: your name
* Email Address: the email address the messages will be sent from
* Account Type: POP3
* Incoming Mail server: mail.domainname.com
* Outgoing Mail server: mail.domainname.com
* User Name: the full email address
* Password: the password for the email address

7. Click More Settings

8. On the Outgoing Server tab, check My outgoing server (SMTP) requires authentication

9. Select Use same settings as my incoming mail server and click OK.
10. Click Test Account Settings to verify everything is configured correctly.
11. Click Next and then click Finish.

Technorati Tags: Configure Microsoft Outlook, Configure Outlook 2003, Configure Outlook 2007, email hosting 2011, email UK hosting, Email web hosting, My outgoing server (SMTP) requires authentication, Outlook Email client, POP3 settings, SMTP settings

As reliable Web Hosting provider webhost.uk.net advice website owner , good, quality-led content is an exceptionally important element (if not, the most important aspect) of any good, reputable, successful and profitable web site in online Market.

Now the most important question that will rise in your mind is ” Does a select a right Web Hosting provider and choice between UK web Hosting  provider or US Web Host matters for search engine ranking?”  The and answer is surely YES.

While selecting a web Hosting provider website owners should avoid cheap or free Web hosting provider , who over stuff there servers. The first draw back is they have lots of downtime Secondly as they are offering free hosting can result in spammy ,porn or gambling website Hosting. This can result in backlisting of your server IP. Ultimately such free host can risk your online business.

And now with the new Google Panda updates in progress and also google plus importants,Website owner should look upon web hosting providers that offer reliable, fast and good uptime web hosting provider.

This can only be achieved by doing a good reacearch on internet  reading reviews on forums , review sites etc… contacting the web hosting provider on Email ,chat and confirming things before you sign up.

Also due to google panda updates it has become really important that your site load fast. So if a UK website owner targetting UK Market selects a reliable UK Web Hosting provider with high uptime and good connectivity will result in fast loading of there site , which will surely help you rank high in search engine.

Technorati Tags: Alternative UK Web Hosting, Fast UK Hosting, Fastest UK Hosting provider, Google Panda optimization, Google Panda ranking, Looking for UK Hosting, panda update, Profitable Hosting provider, SEO Hosting Provider, Server Hosting, Top UK Hosting, UK Managed Servers, UK VPS Hosting

Note that logging in without a password is logged as a failure. This results
in the security log filling up very fast if you log failures and have a user
without a password. The result is you can not login normally. Also note, not
having a password is a potential and probable security risk.

The event log can be viewed by going to Start | Control Panel | Performance
and Maintenance | Administrative Tools and click on Event Viewer.

The Event Log (Security) noting a successful logon and logoff by a remote
user. The user can highlight a log entry and right-click to view the event
Properties for detailed information.

Look in the Security Event Log for a Logon/Logoff Event 528 and Logon Type
10.

The free Microsoft Port Reporter tool provides for additional logging.
Description of the Port Reporter Parser (PR-Parser) tool
http://support.microsoft.com/default…b;en-us;884289

Availability and description of the Port Reporter tool
http://support.microsoft.com/kb/837243

Technorati Tags: Best UK Server Hosting, Event Viewer logs, Managed UK Dedicated server, UK windows web hosting, Windows 2008 Dedicated server, Windows Security Settings

Technorati Tags: Best UK Reseller Hosting 2011, Best US Reseller Hosting 2011, Cheap UK Reseller Hosting, Cheap US Reseller Hosting, Cpanel WHM Reseller Hosting, End User Support, Free Enom Reseller Account, Free SSL, Free WHMCS, Linux Reseller Hosting, Plesk windows Reseller Hosting, Reseller Web Hosting, UK Windows Reseller Hosting, US Reseller Hosting, US Windows Reseller Hosting, Webhost.UK.Net Coupon Code, Webhost.Uk.Net Crazy50 Offer, WebHost.UK.Net Deal 2011, Webhost.uk.net offers 2011, Webhost.UK.Net Promo offer

CentOS 6.0 has been released. This is, some might say, the most anticipated release to date with CentOS pushing out the date numerous times. Finally CentOS 6.0, an Enterprise-class Linux Distribution, is available for download to the public.

CentOS-6.0 is based on the upstream release EL 6.0 and includes packages
from all variants. All upstream repositories have been combined into
one, to make it easier for end users to work with.

We highly recommend reading this announcement along with the Release Notes 

WebhostUK Limited now provides Reseller clients hosted on server with latest CentOS 6, following feature we offer with reseller hosting plan

* Free WHMCS billing Software: Allows you to automate web hosting and take care of billing for your end user clients.
* 100% private labelled end user support: Get 100% private labelled, free end user support, where your clients can now submit support requests, and our experienced staff will resolve them for you – working as YOUR own company staff.
* Free Vision Helpdesk Software: Most powerful ticket system serving as a helpdesk so that your clients can contact you for their support.
* Free Enom reseller account: Most trusted domain registrar where you can register domains under your ownership for your clients.
* Free private lablelled nameservers: Keeps you completely anonymous not letting your clients know that you are our reseller.
* Free SSL Certificates (on selected reseller plans): Securing your website for critical data that should be protected and encrypted.
* Free RvSiteBuilder: Allows you to design your website in less than 5 minutes with the selection of number of readymade templates.
* And many other things including RvSkin, Fantastico, account migration, etc..

** For More Information on Reseller Hosting plan, please click here

CentOS 6 Downloads

You can download CentOS Linux 6 via the web/ftp server or via BitTorrent (recommended) client.

CentOS 6 DVD ISO downloads

• Download CentOS 6 32 bit i386 DVD ISO image 1 (4.4 GB)
• Download CentOS 6 64 bit x86_64 DVD ISO image 1 (3.9 GB) and image 2 (1.1GB)

CentOS 6 DVD ISO Torrents

Torrent files for the DVD’s are available at the following location:

• Download 32 bit i386 torrent file
• Download 64 bit x86_64 torrent file

Technorati Tags: 100% private labelled, Centos 6.0 released, free end user support, free enom account, Free Vision HelpDesk, Free WHMCS, reseller web hosting 2011, Reseller web hosting on centos 6, UK reseller web hosting

Two of the three remaining vulnerabilities address issues in the Windows operating system as well. Security bulletin MS11-054 describes a vulnerability in Windows Kernel-Mode drivers that could allow elevation of privileges, while bulletin MS11-056 a vulnerability in the Windows Client and Server run-time subsystem.

All supported Microsoft client and server operating systems are affected by the two security vulnerabilities. The last issue is a vulnerability in Microsoft Visio.

Here is an overview of all four security bulletins with links to their pages at the Microsoft Technet website.

* MS11-053 – Vulnerability in Bluetooth Stack Could Allow Remote Code Execution (2566220)
* MS11-054 – Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2555917)
* MS11-056 – Vulnerabilities in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege (2507938)
* MS11-055 – Vulnerability in Microsoft Visio Could Allow Remote Code Execution (2560847)

The patches are as usual already available via Windows Update, Microsoft Update and via the Microsoft Download Center. The monthly exploit mitigation guide at the Technet Security blog provides additional information about the vulnerabilities and deployment strategies.

Probably the easiest way to deploy the security updates to a single system is via Windows Update.

Just click on Start > All Programs > Windows Update to open the update screen. You may need to click on Check for updates on the left sidebar if your computer has been up for some time and the updates are not displayed directly in the main window.

Technorati Tags: ASP hosting, Best Windows shared hosting 2011, Microsoft security patch, PCI Compliant hosting, UK Reseller Web Hosting 2011, Windows dedicated server hosting, Windows Security patch 2011

cPanel PCI Compliance Step 1

First thing first, run a package update.

yum -y update

If it installed a new kernel, reboot the server so the new kernel takes affect. If its a live production server you may want to wait until an off-peak hour to do the reboot and continue with this article.

cPanel PCI Compliance Step 2

Now that you have the OS packages secure, its time to setup a firewall if you don’t have one already.

A good free IPtables based firewall is the APF (Advanced Policy Firewall) firewall from RF-X Networks, you can download that here:

wget http://www.rfxn.com/downloads/apf-current.tar.gz

While your at it, get and install the BFD (Brute Force Detector) and LSM (Linux Socket Monitor) which are also available on the RF-X Networks site.

The main things you want to configure are the allowed ports in the APF config file, both ingress AND egress, and then you want to setup an ACL by using the allow and deny hosts files that come with APF. For the ACL’s you want to block everything you don’t want public access to, but still need certain IPs to access. For example SSH, cPanel, WHM, and maybe webmail. For example your allow line for cpanel will look like this:

tcp:in:d=2083:s=123.123.123.123

Noticed, we used port 2083 and not the insecure cpanel port 2082, which we have blocked in the APF config file. And then so you have a deny from all that are not explicitly allows, add this to the deny hosts file:

tcp:in:d=2083:s=0/0

The reasoning behind this is to not even give anyone a chance to get in, if #1, they have your password, #2, they are trying to brute force their way in, #3, there is an exploit in which they are able to bypass the authentication means.

cPanel PCI Compliance Step 3

Back to Linux hardening, you want to do a few things here, first disable any unused packages/services, for example cups and portmap, delete any unneeded users, disable shell for any users that don’t need it in /etc/passwd.

You also want to change the SSH port, disable SSH version 1, and disallow direct root login:

pico /etc/ssh/sshd_config

Remember to allow the new SSH port in the APF config file, and add an underprivileged user to the wheel group, so you can su to root. and then restart the firewall and sshd.

cPanel PCI Compliance Step 4

Run a couple cpanel scripts, the first upcp, and the second easyapache. For upcp its recommend to use the “current” build, this is set in the update config in WHM.

/scripts/upcp

Remember to run upcp before running easyapache

/scripts/easyapache

When running easyapache, select the latest apache and PHP versions, and also ensure the following PHP options are checked:
CGI
Mod suPHP
suhosin fo PHP
Mod Security

This will ensure the most secure way to run PHP.

cPanel PCI Compliance Step 5

Install a ModSecurity rule set, ModSecurity, your layer 7, Web Application Firewall (WAF) is only as good as the rule set you are using. GotRoot.com is a good place for free ModSecurity rules.

wget http://www.gotroot.com/downloads/ftp/mod_security/apache2/apache2-gotrootrules-latest.tar.gz

Download, untar and install the different rules files, and then test and edit if needed.

cPanel PCI Compliance Step 6

The next step is to disable dangerous and PCI unfriendly PHP functions. For example a phpinfo page will cause you to fail a PCI scan. You disable line should contain at least the following functions:

phpinfo,passthru,shell_exec,system,proc_open,popen,curl_multi_exec,
show_source,escapeshellarg,escapeshellcmd,inject_code

cPanel PCI Compliance Step 7

Now its time to go to WHM. There are a number of built-in WHM security features, and PCI friendly features.
Going down the list on the left hand side of WHM you want to look at:

Apache mod_userdir Tweak – Here Check “Enable mod_userdir Protection” and click save
Compiler Access – Click “Disable Compilers”
Configure Security Policies – Check the first 3 and next 2 if necessary, and click save
cPHulk Brute Force Protection – Enable cPhulk, and under White/Black list Management enter your IP(s)
Password Strength Configuration – Set this to 100
PHP open_basedir Tweak – Check “Enable php open_basedir Protection.” click save
Shell Fork Bomb Protection – Click “Enable Protection”
SMTP Tweak – Click “Disable”

Apache Configuration–>Global Configuration
- For SSLCipherSuite Change the + by Medium to a -, you line should look like this “ALL:!ADH:+HIGH:-MEDIUM:-LOW:-SSLv2:-EXP”
- Set TraceEnable and ServerSignature to Off
- Set ServerTokens to ProductOnly
- Set FileETag to None
- For Directory ‘/’ Options uncheck “indexes”

Now click save, then click Rebuild Configuration and Restart Apache
For Manage Service SSL Certificates, make sure all your services have a valid SSL cert
Under Service Manager, disable any services you don’t need, for example if you don’t have your database on this server, disable mySQL, if you don’t use it for email, disable the email related services

cPanel PCI Compliance Step 8

In order to pass a PCI scan your server must have at least one SSL certificate signed by a recognized certificate authority, and any services using SSL need to be using a certificate as well. Buy a decent 128 / 256 bit  SSL certificate and install it not just for Apache, but also for all of your active services. WebHost Manager has a section for installing service SSL certificates to make this process easier.

cPanel PCI Compliance Step 9

Finally document your versions. A part of your PCI docs file, you should have a screen shot of the version you are running of at least the following:
Apache, PHP, ModSecurity, Linux Kernel, CentOS, OpenSSH, and OpenSSL. Your output will look something like this:

root@server [/]# httpd -v
Server version: Apache/2.2.17 (Unix)
Server built: Dec 14 2010 17:23:57
Cpanel::Easy::Apache v3.2.0 rev5277

root@server [/]# php -v
PHP 5.3.4 (cli) (built: Dec 14 2010 17:30:39)
Copyright (c) 1997-2010 The PHP Group
Zend Engine v2.3.0, Copyright (c) 1998-2010 Zend Technologies
with the ionCube PHP Loader v3.3.20, Copyright (c) 2002-2010, by ionCube Ltd.
with Suhosin v0.9.32.1, Copyright (c) 2007-2010, by SektionEins GmbH

root@server [/]# uname -r
2.6.18-194.32.1.el5

root@server [/]# cat /etc/redhat-release
CentOS release 5.5 (Final)

root@server [/]# cat /home/cpeasyapache/src/modsecurity-apache_1.9.5/apache2/mod_security.c
|grep MODULE_RELEASE |head -1
#define MODULE_RELEASE “1.9.5″

root@server [/]# rpm -qa |grep openssl
openssl-devel-0.9.8e-12.el5_5.7
openssl-0.9.8e-12.el5_5.7

root@server [/]# rpm -qa |grep openssh
openssh-4.3p2-41.el5_5.1
openssh-server-4.3p2-41.el5_5.1
openssh-clients-4.3p2-41.el5_5.1

Since RedHat type operating systems, including CentOS and Fedora, use backporting for OpenSSH and OpenSSL, you may get a false positive on your PCI scan for these. If that happens to you, send the screen shots showing your OpenSSH, OpenSSL, as well as your CentOS version and kernel version to your PCI scanner and let them know your a running a seucre, backported version, and request that they test that version manually.
If your PCI ASV requests more proof you are running a secure version of OpenSSH and OpenSSL, you can send them a screen shot of the following commands, which show specifically what patches have been applied to your version.

rpm -q --changelog openssh | head -50
rpm -q --changelog openssl | head -50

This will produce output similar to:

# rpm -q --changelog openssl | head -50
* Tue Dec 07 2010 Tomas Mraz 0.9.8e-12.7
- fix CVE-2010-4180 - completely disable code for
SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG (#659462)

* Fri Mar 12 2010 Tomas Mraz 0.9.8e-12.6
- fix CVE-2009-3245 – add missing bn_wexpand return checks (#570924)
(output truncated)

Another common false positive with cPanel servers, is your scan might detect Exim as an open relay, this is because the server will sending the mail headers before authentication, even though a successful authentication is needed before it will allow email to go through. If this shows up on your scan you will want to ask the scanning vendor to test this vulnerability manually.

We hope you have enjoyed this article and found it useful for helping make your cPanel Linux server PCI compliant. Please remember to try and test the steps listed here on a test server before applying them to your production cPanel servers. In addition this article does not cover everything your need to do to be PCI compliant, and it meant to be a starting point, and provide information for a cPanel, CentOS specific server. We plan on bringing your future articles and howto’s to cover the PCI compliant information missing from this article.

Technorati Tags: Best UK Web Hosting 2011, Britain Web Hosting, England Web Hosting, fasthosts Alternative, Godaddy Alternative, London Web Hosting, PCI Compliant, Top UK Web Hosting 2011, UK2 alternative, Web Hosting 2011, WebHosting UK alternative