Nodewatch on CentOS 6.X

For Openvz Containers with CentOS 6.X
Make sure all VPS containers are configured with netfilter=stateful or netfilter=full.

1. Remote into the main node using SSH.
2. Run this command to download the installation file to the server:

wget http://deploy.vpsantiabuse.com/nodewatch-install.sh

3. Install Nodewatch using the following command:

sudo sh nodewatch-install.sh

4. Upon completion, edit nodewatch_config.php with this command:

vi /nodewatch/scripts/nodewatch_config.php

FYI vi is an editor. You should learn the vi commands edit, insert and save the doc.

5. These are the basics that should be set in the config file. FYI – License key is obtained for free from http://vpsantiabuse.com/

Enter in your email for alerts

$admin_email = 'your@email';

Enter in your license key

$license_key = 'xxxxxxxxxxxxx';

Set test mode to 0 to be active

$testmode = 1;

Save your config file by pressing escape then type

:x

enter.

Here are some optional settings:


// set to true to enables SMS alerts
$sms_alerts = true; 

// cell phone for sms alerts; for US/Canada: '555-5555-555'; 

// international example: '+55-555-5555-555' 
// (+55 = country code with "+" prefix)

// multiple numbers example: '555-5555-555,+66-666-6666-666' 
// (up to 3 phone numbers are supported)
$sms_phoneno = '123-4567-890'; 

// change to true to disable scanning customers' VPS for weak root passwords
$disable_nodewatch_passwords = false; 

// change to true to disable scanning customers' VPS for blacklisted process names
$disable_nodewatch_processes = false; 

// From: address for e-mail alerts. If not specified, $admin_email will be used.
$admin_email_from = ''; 

// Do not include inbound packets in pps accounting (this will effectively lead to inbound DoS attacks being ignored)
$limit_packets_ignore_ingress = false;

Nodewatch-web section (optional):

// set to true to enable
$nodewatch_web_update_enabled = true; // change to false to disable web updates

// link to update.php, http only
$nodewatch_web_update_url = 'http://yourdomain.com/update.php'; 
           
// password for nodewatch-web, must match the password 
// set in config.php of your nodewatch-web installation
$nodewatch_web_password = 'secret'; 

SolusVM integration (optional):

// set to true to enable
$solusvm_calls_enabled = true; 

// IP address of the SolusVM master
$solusvm_master_ip = '1.2.3.4';

// API id must be created in the SolusVM Admin panel, menu: Configuration->Api Access 
$solusvm_master_api_id = 'ididididididididididididididid';    

// API key must be created in the SolusVM Admin panel, menu: Configuration->Api Access
$solusvm_master_api_key = 'keykeykeykeykeykeykeykeykeykey';   

// Numeric Node ID of this physical server. It can be looked up in the SolusVM Admin panel, menu: Nodes->List Nodes
$solusvm_node_id = '2';

6. Restart Nodewatch and wait for 2 minutes

sudo /nodewatch/scripts/nodewatch_restart.sh

7. Run the command to see the stats.

watch -n 1 cat /tmp/nodewatch_stats

nodewatch

admin has written 38 articles