Free web hosting services software for linux

AlternC is a set of user-friendly hosting software. AlternC Hosting Software is easy to install and based on open-source software only.
AlternC includes an automatic installation and configuration system, and a web-based control panel to manage users accounts and web services (e.g. domains, emails, ftp accounts, statistics...)
AlternC is based on the Debian GNU/Linux system (Woody version), and it requires other softwares such as Apache, Postfix, Mailman ...
It also contains a documented API, so you can customize your web panel quickly and easily.
AlternC was initially written in French. However, the debian package includes an English version. The translation of the project into other languages such as German and Spanish is in process. Volunteers are welcome ! (See the internationalization page). The documentation is only available in French (so far).
AlternC has been created by the system administrators of Lautre Net, members of Lautre Net and Globenet.
Enhancements:
- This release continues the Debian compliance challenge.
- Quota management was corrected, bind now forbids recursion and domain poisoning, and the Debian package uses po-debconf.
- New functions were also added, such as postfix saslauthd with rimap and MySQL user rights managment in the Web desktop.
- The .eu TLD is now properly handled.

Web Foot Avio is a GDM theme based on wallpaper Blue Web Foot - Gnome.

Hosting Backup provides a set of scripts for backing up your hosted Web sites.
Hosting Backup is a set if PHP command line scripts that provides an easy way to backup hosted Web sites to your local computer. It works with sites hosted on Linux servers with MySQL databases using FTP.
HostingBackup uses lftp (http://lftp.yar.ru/) to download all the files from your remote server.
HostingBackup uses rc4 encryption, so you do not need to have PHP compiled with mcrypt.
HostingBackup is tested on Linux local computer with PHP 4.3.x and lftp 3.0.x.
The remote component will manage some operations like optimization and dump of MySQL databases.
The local component will manage the execution of backups and other utilities like the generation of crypted passwords and the automatic installation of the remote component.
To allow an easy way to backup all hosted MySQL databases we store the main password for the account directly on the remote server, crypted with rc4.
When we call the dump script we pass the decrypt key.
To catch the login data an hacker should read the crypted password written on the server and intercept the key on the net.
Enhancements:
- Add: "--comments=false" to mysqldump
- Add: "set FOREIGN_KEY_CHECKS=0;" to mysqldump
- Add: "--add-drop-table" to mysqldump

Configuration with no services supported script is for a single host firewall configuration with no services supported by the firewall machine itself.

Sample:

# USER CONFIGURABLE SECTION

# The name and location of the ipchains utility.
IPTABLES=iptables

# The path to the ipchains executable.
PATH="/usr/local/sbin"

# Our internal network address space and its supporting network device.
OURNET="10.5.0.0/24"
OURBCAST="10.5.0.255"
OURDEV="eth0"

# The outside address and the network device that supports it.
ANYADDR="0/0"
ANYDEV="ppp0"

# The TCP services we wish to allow to pass - "" empty means all ports
# note: comma separated
TCPIN="ssh,ftp,ftp-data"
TCPOUT="smtp,www,ssh,telnet,ftp,ftp-data,irc,http"

# The UDP services we wish to allow to pass - "" empty means all ports
# note: comma separated
UDPIN="domain"
UDPOUT="domain"

# The ICMP services we wish to allow to pass - "" empty means all types
# ref: /usr/include/netinet/ip_icmp.h for type numbers
# note: comma separated
ICMPIN="0,3,11"
ICMPOUT="8,3,11"

# Logging; uncomment the following line to enable logging of datagrams
# that are blocked by the firewall.
# LOGGING=1

# END USER CONFIGURABLE SECTION
####################################
# Flush the Input table rules
echo -n Flushing forward... && {
$IPTABLES -F FORWARD
} && echo done

# We want to deny incoming access by default.
# echo -n Denying incoming access... && {
# $IPTABLES -P FORWARD drop
# } && echo done

# Drop all datagrams destined for this host received from outside.
echo -n Dropping incoming datagrams... && {
$IPTABLES -A INPUT -i $ANYDEV -j DROP
} && echo done

# SPOOFING
# We should not accept any datagrams with a source address matching ours
# from the outside, so we deny them.
echo -n Preventing spoofing... && {
$IPTABLES -A FORWARD -s $OURNET -i $ANYDEV -j DROP
} && echo done

# SMURF
# Disallow ICMP to our broadcast address to prevent "Smurf" style attack.
echo -n Preventing SMURFs... && {
$IPTABLES -A FORWARD -p icmp -i $ANYDEV -d $OURNET -j DROP
} && echo done

# We should accept fragments, in iptables we must do this explicitly.
echo -n Accepting fragments... && {
$IPTABLES -A FORWARD -f -j ACCEPT
} && echo done

# TCP
# We will accept all TCP datagrams belonging to an existing connection
# (i.e. having the ACK bit set) for the TCP ports were allowing through.
# This should catch more than 95 % of all valid TCP packets.
echo -n Accepting valid incoming tcp datagrams on existing connections... && {
$IPTABLES -A FORWARD -m multiport -p tcp -d $OURNET --dports $TCPIN ! --tcp-flags SYN,ACK ACK -j ACCEPT
} && echo done
echo -n Accepting valid outgoing tcp datagrams on existing connections... && {
$IPTABLES -A FORWARD -m multiport -p tcp -s $OURNET --sports $TCPIN ! --tcp-flags SYN,ACK ACK -j ACCEPT
} && echo done

# TCP - INCOMING CONNECTIONS
# We will accept connection requests from the outside only on the
# allowed TCP ports.
echo -n Accepting incoming tcp connections on allowed ports... && {
$IPTABLES -A FORWARD -m multiport -p tcp -i $ANYDEV -d $OURNET --dports $TCPIN --syn -j ACCEPT
} && echo done

# TCP - OUTGOING CONNECTIONS
# We will accept all outgoing tcp connection requests on the allowed TCP ports.
echo -n Accepting outgoing traffic on allowed tcp ports... && {
$IPTABLES -A FORWARD -m multiport -p tcp -i $OURDEV -d $ANYADDR --dports $TCPOUT --syn -j ACCEPT
} && echo done

# UDP - INCOMING
# allow UDP datagrams in on the allowed ports and back.
echo -n Allowing UDP datagrams in on the allowed ports and back... && {
$IPTABLES -A FORWARD -m multiport -p udp -i $ANYDEV -d $OURNET --dports $UDPIN -j ACCEPT
$IPTABLES -A FORWARD -m multiport -p udp -i $ANYDEV -s $OURNET --sports $UDPIN -j ACCEPT
} && echo done

# UDP - OUTGOING
# We will allow UDP datagrams out to the allowed ports and back.
echo -n Allowing UDP datagrams out on the allowed ports and back... && {
$IPTABLES -A FORWARD -m multiport -p udp -i $OURDEV -d $ANYADDR --dports $UDPOUT -j ACCEPT
$IPTABLES -A FORWARD -m multiport -p udp -i $OURDEV -s $ANYADDR --sports $UDPOUT -j ACCEPT
} && echo done

# ICMP - INCOMING
# We will allow ICMP datagrams in of the allowed types.
# echo -n Allowing ICMP datagrams in of the allowed types... && {
# $IPTABLES -A FORWARD -p icmp -i $ANYDEV -d $OURNET --icmp-type $ICMPIN -j ACCEPT
# } && echo done

# ICMP - OUTGOING
# We will allow ICMP datagrams out of the allowed types.
# echo -n Allowing ICMP datagrams out of the allowed types... && {
# $IPTABLES -A FORWARD -p icmp -i $OURDEV -d $ANYADDR --icmp-type $ICMPOUT -j ACCEPT
# } && echo done

# DEFAULT and LOGGING
# All remaining datagrams fall through to the default
# rule and are dropped. They will be logged if youve
# configured the LOGGING variable above.
#

# DoS
# enabling Syn-flood protection
echo -n Enabling Syn-flood protection... && {
iptables -A FORWARD -p tcp --syn -m limit --limit 1/s -j ACCEPT
} && echo done
# Enabling Furtive port scanner protection
echo -n Enabling Furtive port scanner protection... && {
iptables -A FORWARD -p tcp --tcp-flags SYN,ACK,FIN,RST RST -m limit --limit 1/s -j ACCEPT
} && echo done
# Enabling ping of death protection
echo -n Enabling ping of death protection... && {
iptables -A FORWARD -p icmp --icmp-type echo-request -m limit --limit 1/s -j ACCEPT
} && echo done


if [ "$LOGGING" ]
then
# Log barred TCP
$IPTABLES -A FORWARD -m tcp -p tcp -j LOG
# Log barred UDP
$IPTABLES -A FORWARD -m udp -p udp -j LOG
# Log barred ICMP
$IPTABLES -A FORWARD -m udp -p icmp -j LOG
fi
#
# end.

Web Site Robot is an easy to use Web site builder with a blog tool, shopping cart, and online photo album. It is free and does not require additional software, HTML, programming, or a hosting company.
It enables secure online payments with credit cards. There is virtually unlimited storage space for HTML, documents, blogs, photos, music, videos, or any multimedia content.
Enhancements:
- The Robot is now able to discover and inform UPnP routers about its presence and the need to have a NAT port available for its Web server.
- In most SOHO environments with UPnP enabled routers, manual configuration is not needed.
- The operator just installs, registers the Robot and the Web site is online effortlessly.

Abyss Web Server is a compact web server available for Windows, MacOS X, Linux, and FreeBSD operating systems.
Despite its small footprint, it supports HTTP/1.1, dynamic content generation through CGI/1.1 scripts, ISAPI extensions, Server Side Includes (SSI), custom error pages, password protection, IP address control, anti-leeching, and bandwidth throttling.
It features also an automatic antihacking system as well as a multilingual remote web management interface that makes its configuration as easy as browsing a web site.
Main features:
- Virtual hosting (support for many hosts on a single computer)
- ISAPI extensions support
- Custom directory listings
- Multilingual remote web configuration interface (console)
- Unicode support
- Automatic anti-hacking system
- Anti-leeching system to control cross-site linking
- Server-wide bandwidth control
- Per file and per directory bandwidth control
- Windows System Service, MacOS X Startup Item, and Linux/FreeBSD daemon support

swordcoast.net IRCd is a fork of Undernets IRCu 2.10.12 that features more possibilities for network services, less power for IRC operators, some of QuakeNets Asuka patches, more versatile host hiding, customizable whois information lines, improvements for silence masks, and a few other things.
Enhancements:
- Apart from integrating all changes made in ircu 2.10.12 and Asuka 1.2.1, this release fixes compile issues, EPITHETs, and issues with privilege propagation.
- It adds a command to adjust MAXOPLEVEL per channel, a user mode to shun people (prevent them from doing anything possibly visible to other users except services), extended host hiding (see README), and forced joins and relaying join to services as requests.