Small tutorial

`First if you read this tutorial ,this mean that you didnt purchase the installation service (100 dollars) and i wont help you for fix anything since im a busy guy and you must foolow carrefully this tutorial and all will be good..

follow this tutorial for hide all behind cloudlflare
https://www.cloudflare.com/resources-downloads#mod_cloudflare
//my setting
http://snag.gy/dml7X.jpg

CentOS 6 32/64 bit


//little update
yum -y update

//Install PHP, and a few other goodies
yum -y install php php-devel php-gd php-imap php-ldap php-mysql php-odbc php-pear php-xml php-xmlrpc curl curl-devel perl-libwww-perl ImageMagick libxml2 libxml2-devel php-mcrypt

//if problem with php version because sometime the command above install wrong version
yum -y install php53 php53-devel php53-gd php53-imap php53-ldap php53-mysql php53-odbc php53-pear php53-xml php53-xmlrpc curl curl-devel perl-libwww-perl ImageMagick libxml2 libxml2-devel php53-mcrypt


if mcrypt is "no package available do this  (it happend to me)
rpm -ivh http://www.mirrorservice.org/sites/dl.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm
yum -y install php-mcrypt

//Install Mysql 5
yum -y install mysql
yum -y install mysql-devel
yum -y install mysql-server

//Start MySQL and change the mysql password
service mysqld start
mysqladmin -u root password NEWMYSQLROOTPASSWORD
chown mysql:mysql -R /var/lib/mysql
service mysqld restart

//create user and allow access for each user to each DB
CREATE USER 'wordpress'@'localhost' IDENTIFIED BY 'uwhuiwefhewuihfiweuh'; //change the pass to your own
CREATE USER 'suite'@'localhost' IDENTIFIED BY 'uohfjuwfhouweh4yew';//change the pass to your ownd

GRANT ALL PRIVILEGES ON wordpress TO 'wordpress'@'localhost';
GRANT ALL PRIVILEGES ON suite TO 'suite'@'localhost';

//for disable wordpress rehash if its migration (it avoid rehash mysqld so it dont take time to load wo DB in command line)
mysql -uroot -p -A

mysql_secure_installation  //it will do some secure thing and prompt you u can dissalow root login

create a "wordpress" database & edit the file /_wordpress/wp-config.php (you must enter only the DB info nothing else)
create a "suite" database and upload the sql file provided in the BHC package



//create right for the folder we will work on
chown -R apache:apache black
cd public_html/
chmod +x *.php
echo 0 >/selinux/enforce
service httpd restart

//Install Nano (notepad for linux)
yum -y install nano

//Install Zend Guard (32 bits)
zend guard (32 bits)
wget http://downloads.zend.com/guard/5.5.0/ZendGuardLoader-php-5.3-linux-glibc23-i386.tar.gz
tar -zxf ZendGuardLoader-php-5.3-linux-glibc23-i386.tar.gz
cp ZendGuardLoader-php-5.3-linux-glibc23-i386/php-5.3.x/ZendGuardLoader.so /usr/lib/php/modules
//add zend path to php.ini with nano
nano /etc/php.ini
zend_extension=/usr/lib/php/modules/ZendGuardLoader.so

or  64 bits

//Install Zend Guard (64 bits)
wget http://downloads.zend.com/guard/5.5.0/ZendGuardLoader-php-5.3-linux-glibc23-x86_64.tar.gz
tar -zxvf ZendGuardLoader-php-5.3-linux-glibc23-x86_64.tar.gz
cp ZendGuardLoader-php-5.3-linux-glibc23-x86_64/php-5.3.x/ZendGuardLoader.so  /usr/lib64/php/modules
//add zend path to php.ini with nano
nano /etc/php.ini
zend_extension=/usr/lib64/php/modules/ZendGuardLoader.so

//install Bind utility installation
yum -y install bind bind-utils

//install phpmyadmin
yum -y install phpmyadmin
Open /etc/httpd/conf.d/phpMyAdmin.conf file and find the lines “Deny from All ” and comment those lines and restart httpd service

/////////////////////////////////////////////////////////////////////////////////////////////////////////////////
//if you have problem for install phpmyadmin because it is not available via "yum" , the simple solution is to find rpm package
//this command download phpmyadmin rpm & add to repo the package phpmyadmin (u can yum it )
rpm -Uvh [url]http://download.fedoraproject.org/pub/epel/6/i386/epel-release-6-8.noarch.rpm[/url]
//& then
yum -y install phpmyadmin
//////////////////////////////////////////////////////////////////////////////////////////////////////////////////




setup virtualhosts in httpd.conf

Head over to /etc/httpd/conf/httpd.conf

##Suite Path
<VirtualHost yourmainip:80>
DocumentRoot /home/black/public_html
ServerName yourfirstiphere
<Directory "/home/black/public_html/">
RewriteEngine On
## EVERYTHING BUT RESOURCES GOES TO THE BOOTSTRAPPER ##
RewriteCond %{REQUEST_URI} !/(ajax|_www)/[a-zA-Z0-9_]{0,30}\.php$
RewriteRule !\.(js|ico|gif|jpg|png|css|swf)$ index.php
## COMPRESSED FILE PROCESS ##
RewriteRule \.compressed\.(js|css)$ index.php?process=compress
</Directory>
</VirtualHost>

##Cloaked Site Builder
<VirtualHost yourfirstadditionalip:80>
DocumentRoot /home/black/public_html/_cloakedsitebuilder_root
<Directory "/home/black/public_html/_cloakedsitebuilder_root">
RewriteEngine On
RewriteBase /
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</Directory>
</VirtualHost>

##Landing Page Builder
<VirtualHost yoursecondaddiotnalip:80>
DocumentRoot /home/black/public_html/_landingpagebuilder_root
<Directory "/home/black/public_html/_landingpagebuilder_root">
RewriteEngine On
RewriteRule !\.(css|js|ico|swf|jpg|jpeg|gif|png)$ index.php
</Directory>
</VirtualHost>

##Blog Cloaker
<VirtualHost yourthirdadditonalip:80>
DocumentRoot /home/black/public_html/_wordpress
<Directory "/home/black/public_html/_wordpress">
RewriteEngine On
RewriteBase /
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</Directory>
</VirtualHost>



continue for each free ip on the server. Replace mypath with the actual path you would like to use. After saving this, head over to the /home directory and actually create the folders you specified in the above paths. Upload Blog Cloaker to the suite directory, and upload the blog cloaker wordpress files to the clients directory. Be sure to configure both.

//Disable SUEXEC (not compatible & you got 404 errror)
echo 0 > /selinux/enforce
mv /usr/sbin/suexec /usr/sbin/suexec_old
/etc/init.d/httpd restart

Check for SELINUX to disable it you just
edit the /etc/selinux/config , set SELINUX=disabled and reboot
----------------
//CronJob
nano /etc/crontab
//enterthis
59 23 * * * wget http://MAINIPHERE/cron/analytics
59 23 * * * wget http://MAINIPHERE/cron/getiplist

now at this step you can point your browser to your main url and you should see the installation page wich will ask you some destail

//IP additonal :ip are not listed when u do command:ifconfig   and you need to add them
//usually main ip is assigned to eth0 and we create new for introduce in the network internal map
// you must change IP under as exemple that reflect your additonal IP's, note that the eth0 number change for each (eth0:1,eth0:2 etc.)

sudo ifconfig eth0:1 112.129.1.34 netmask 255.255.255.0 up
sudo ifconfig eth0:2 112.129.1.35 netmask 255.255.255.0 up
sudo ifconfig eth0:3 115.129.1.170 netmask 255.255.255.0 up
sudo ifconfig eth0:4 115.129.2.172 netmask 255.255.255.0 up
sudo ifconfig eth0:5 120.129.2.121 netmask 255.255.255.0 up
sudo ifconfig etc...
etc...

NOW POINT YOUR BROWSER TO THE MAIN IP AND YOU SHOULD SEE THE INSTALLATION PROCESS

///////////////////////////////////////////////////////////////////////////////////////////
Let secure a bit and receive email if anyone login to ssh
yum install mailx
nano .bashrc
//Add the following whole line at the bottom of the file
echo 'ALERT - Root Shell Access (mybhcserver) on:' `date` `who` | mail -s "Alert: Root Access from `who | cut -d'(' -f2 | cut -d')' -f1`" [email protected]

//fail2ban
you install fail2ban
nano /etc/fail2ban/jail.conf //(if you want make any change)
service fail2ban start

//watch failed password
cat /var/log/secure | grep 'Failed password' |  sort | uniq -c

//remove blocked ip
iptables -D fail2ban-ssh 1

//add deny host for allow only your ip to login to ssh
yum install denyhosts
nano /etc/hosts.allow  //add your ip at end of file
//setup mail alert
nano /etc/denyhosts.conf  //change the email to your  at "ADMIN_EMAIL"
//now we check config if all ok
chkconfig denyhosts on
service denyhosts start

//remove ip banned
/etc/init.d/denyhosts stop
nano /etc/hosts.deny
nano  /var/lib/denyhosts/hosts
nano /var/lib/denyhosts/hosts-restricted
nano /var/lib/denyhosts/hosts-root
nano /var/lib/denyhosts/hosts-valid
nano /var/lib/denyhosts/users-hosts
/etc/init.d/denyhosts start

//whitelist your IP
nano /var/lib/denyhosts/allowed-hosts  //add your ip
service denyhosts restart

more info here
http://www.tecmint.com/block-ssh-server-attacks-brute-force-attacks-using-denyhosts/

/////////////////////////////////////
//install maldetect
wget http://www.rfxn.com/downloads/maldetect-current.tar.gz
tar -xvf maldetect-current.tar.gz
cd maldetect-1.4.2  //this will change depending of the verison you downloaded
./install.sh
//then insert your mail and active this script by change the value 0 to 1
nano /usr/local/maldetect/conf.maldet



//inotify for receive email if any file change (i definly need it...)
cd /usr/local/src
wget http://www.rfxn.com/downloads/maldetect-current.tar.gz
tar -zxvf maldetect-current.tar.gz
cd maldetect-1.4.2
./install.sh
nano /usr/local/maldetect/conf.maldet  //setup your mail etc..
//start monitor your home folder
maldet --monitor /home/black/public_html    //can be anything


/////////////////////////////////////////////////////////////////////////////
//Upgrade mysql to 5.5
rpm -Uvh https://mirror.webtatic.com/yum/el6/latest.rpm
yum install mysql.`uname -i` yum-plugin-replace
yum replace mysql --replace-with mysql55w
//there will be some historic dep for older features press yes
service mysqld start
//////////////////////////////////////////////////////////////////////////////////////////////////////////////////


 THIS STEP UNDER ARE NOT OBLIGATORY TO RUN BHC YOU FREE TO SEE THIS SECTION LATER
---------------------------------------------------------------------------------------------------------

install apf firewall:

wget http://www.rfxn.com/downloads/apf-current.tar.gz
tar -zxvf apf-current.tar.gz
cd apf-9.7-2
sh ./install.sh

if you like to install ionube loader for any reason

yum -y install https://www6.atomicorp.com/channels/atomic/centos/6/x86_64/RPMS/atomic-release-1.0-16.el6.art.noarch.rpm
yum -y install php-ioncube-loader

copy this line in you php.ini & alway place the code above the zend guard line (or httpd crash)
zend_extension=/usr/lib64/php/ioncube/ioncube_loader_lin_5.3.so
service httpd restart


//////////////your timezone for php & mysql for set your cron///////////////////////

rm /etc/localtime
ln -s /usr/share/zoneinfo/Europe/London /etc/localtime

and edit config.php & set your timezone
exemple:date_default_timezone_set('Europe/London');

//////////////////ONLY FOR BLOG CLOAKER ///////////////////////////////////////////////////


Installing Memcache and Memcached

First get libevent: http://www.monkey.org/~provos/libevent/

wget http://www.monkey.org/~provos/libevent-1.4.8-stable.tar.gz
tar -xvf libevent*.tar.gz
cd libevent*
./configure;make;make install;

 /Memached can make display problem  (strange domain that still here but they are deleted or thing like this)
install memcached :
yum install memcached

memcached PROBABLY can't find libevent, so we need to move it where it can:

LD_DEBUG=libs memcached -v 2>&1 > /dev/null | less

ln -s /usr/local/lib/libevent-1.4.so.2 /usr/lib/libevent-1.4.so.2

start memcached:

memcached -d -u nobody -m 512 127.0.0.1 -p 11211

Now we need MEMCACHE for php:

wget http://pecl.php.net/get/memcache-2.1.2.tgz
gzip -df memcache-2.1.2.tgz
tar -xvf memcache-2.1.2.tar
cd memcache-2.1.2
yum install php-devel
phpize
./configure;make;make install;

Now edit the /etc/php.ini and add the memcache module: