Two Questions (about shared & SDX)

[Bianca007]

Hello all,
I already have a semi-dedicated server with JPC which I am very happy with. I recently had, what I believe to be, a possible hack attempt. I have been trying to backup my site but my problem is, every time I try to back it up or use that home directory backup, once it finishes downloading and I try to open the file, it says "invalid archive directory" - has this happened to anyone else? The sites pretty big, is it possible that its timing out before it fully downloads or am I missing something?

My other question is in regards to the shared hosting. I have two other sites hosted with another company that I am thinking of moving here. Basically my other hosting company requires that I purchase IP addresses from them in order to use SSL. I'm wondering if JPC has the same requirements (or other hidden fees) associated with SSL??

Also, how does the multi-hosted domain thing work with shared hosting? Same deal as SDX? Can I host 2 separate sites/domains with two separate SSL on shared? I was told that the add-on (example: abc.com) gets a directory in the public_html folder of the main domain. What if I want to add a sub-domain to my add-on domain abc.com?

Thanks in advance for any info

[Vin DSL]

Hello all,
I already have a semi-dedicated server with JPC which I am very happy with. I recently had, what I believe to be, a possible hack attempt. I have been trying to backup my site but my problem is, every time I try to back it up or use that home directory backup, once it finishes downloading and I try to open the file, it says "invalid archive directory" - has this happened to anyone else? The sites pretty big, is it possible that its timing out before it fully downloads or am I missing something?

I backup my SDX hosted site[s] from a PuTTY CLI and it doesn't time out!

Then I download the archive to my local PC to open it.

You might wanna try that...

[Bianca007]

What's PuTTY CLI? Is that like an FTP client? I use smartFTP... no good?

[JPC-Usman]

PuTTY and Secure CRT are third party soft wares used for shell access. You can check below KB's which may help you to learn more about Shell.

-How do I login via ssh to my account?
http://www.jaguarpc.com/support/kbase/704.html

-What are some basic linux shell commands?
http://www.jaguarpc.com/support/kbase/33.html

-How can I backup my data to backup server?
http://www.jaguarpc.com/support/kbase/733.html

Also if you can open a ticket with support providing the steps you are following for the backup so that we could reproduce it at our end and guide you accordingly.

Regarding SSL, dedicated IP is requirement for it. However you can use shared SSL form us if you do not want dedicated IP. If you want to move your domains here at jaguar we will be happy to welcome you and you can open a ticket after you purchase new account and we will help you to transfer your domains here and to do the initial setup as well for you.

>"how does the multi-hosted domain thing work with shared hosting?"
>"I was told that the add-on (example: abc.com) gets a directory in the public_html folder of the main domain. What if I want to add a sub-domain to my add-on domain abc.com?"

Yes, you are right, add-on is actually a subdomain which loads its own web data. You can have unlimited add-on domains here. You can add a add-on via Cpanel >> Domains >> Addon Domains

For SSL on add-on domain requires manual admin work it can be setup on request at the cost of few $.

-----------
Regards,
Ryan
JaguarPC

[Bianca007]

Thank you Ryan,
this was very helpful. The two sites are definitely going to be transferred here, its just a matter of when. Currently I have 5 months left on my other account and since I am not actually having any problems there (yet) I may just keep them there until the account expires. Once it expires, I will almost certainly be transferring those two sites here.

And thank you for the info on PuTTY. I actually just asked support to disable shell on my account last week. I don't know how to use it and after the hack scare, I decided its better to be safe and just disable it.

Thanks again for your help!!

[jason]

One advantage of keeping shell access enabled is the ability to use secure FTP (SFTP) and/or Secure Copy (SCP) to access your site. When you use traditional FTP there is no encryption, so anything you send--including your login credentials--could be sniffed out by a malicious user somewhere between you and JPC. With SFTP and SCP everything is encrypted in transit, so anyone sniffing the network just sees garbage.

Most modern FTP clients provide the option of using SFTP. My personal favorite is WinSCP.

[Bianca007]

and if I use SFTP, shell HAS to be enabled or can it work without shell?

[Bianca007]

Meanwhile... if someone hacks your site, ftp/shell are not the only way they can access your files, right? Can they mess with your site/scripts straight from their browser? If so, where would we look to find out what happened... raw access logs?

[JPC-Nick]

Just purchase the CDP addon and not have to worry about your backups? :-)

We keep 24 hour old data 48 hour old and between 20-40 day old data!

[Bianca007]

Thank you for that info, I wasn't aware that was available I will look into that, thanks again for all your help!

[jason]

SFTP is actually FTP tunneled through SSH, so yes, shell access is required to use SFTP.

As for attack vectors, it is much more common for an attack to originate via an faulty script on yoru site than through SSH or FTP provided you use strong passwords and especially if you use only secure access methods (SSH, SFTP, cPanel via HTTPS). If your passwords are easy to guess then all bets are off. The standard password rules apply: avoid using dictionary words (or if you do, obfuscate them), use a mixture of letters, numbers, and punctuation, size matters--longer is always better. Also consider changing your passwords regularly--I change mine every three months or so--and if you have to give out your password to support (or a contractor you hire or anyone else), change it as soon as they don't need access anymore.

--Jason

[Vin DSL]

If your passwords are easy to guess then all bets are off. The standard password rules apply: avoid using dictionary words (or if you do, obfuscate them), use a mixture of letters, numbers, and punctuation, size matters--longer is always better.

Bwahahahaha! You aren't going to believe this, but...

I just ran the title of this thread: "Two Questions (about shared & SDX)"

Against the Microsoft Password Checker: http://www.microsoft.com/protect/you...d/checker.mspx

And, it came out rated: Best

MS_Password_Checker.png

How cool is that???

[AJA]

Just purchase the CDP addon and not have to worry about your backups? :-)

We keep 24 hour old data 48 hour old and between 20-40 day old data!

Is the 911 Executive Escalation Service (911 EES) included with CDP backup for the $2.50 a month.

[JPC-Nick]

Is the 911 Executive Escalation Service (911 EES) included with CDP backup for the $2.50 a month.

No it is not

[JPC-Greg]

no. That 911 EES service is only available on higher tiered plans and yes it even rings my phone . We have lots of internal marketing surrounding that but our site is lacking data. I'll fix that and the failover among a few other things that our site needs done to show all these recent changes.

The cdp is available to any client right now (besides dedicated server clients unless they purchase DataLockBox) . All of our vps, shared, reseller, and sdx servers are already protected by DataLockBox as part of your hositng fee. To gain access to those backups just add the cdp addon to your account. I guess that isn't clear enough and theres too much technical jargon confusing that point. I'll clean it up.