For sites and integrations where additional security measures are required, VideoWhisper applications support login session check on RTMP side.

This is used to make sure no clients will be able to connect to rtmp server without having previously logged in with the _login.php scripts.
When a new client tries to connect to RTMP server with a session name, rtmp application will check on the web server if that client session exists. If web server does not confirm that client logged in, rtmp server will reject the connection. RTMP server will also check for a webKey that needs to be configured same way on rtmp and web server: this will prevent connections in case of web domain hijacking.
Notes
- This will disable connections from external encoders (ie. FMLE) and players (ie. JwPlayer) to that rtmp address, as these will not provide a session name to check for validity.
- Usually, each installation will require its own rtmp side that checks session info with that installation. Otherwise you will have to tweak scripts to check on all installations.

RTMP Configuration

RTMP side web session check is currently supported for Wowza rtmp side. Download latest version of Wowza rtmp side, deploy to your server and update these settings in conf/videowhisper-web/Application.xml :

…
<Properties>
<Property>
<Name>acceptPlayers</Name>
<Value>true</Value>
</Property>
<Property>
<Name>webLogin</Name>
<Value>http://installation_url/rtmp_login.php?s=</Value>
</Property>
<Property>
<Name>webKey</Name>
<Value>VideoWhisper</Value>
</Property>
<Property>
<Name>webLogout</Name>
<Value>http://installation_url/rtmp_logout.php?s=</Value>
</Property>
</Properties>
</Application>

 

 

Then restart WowzaMediaServer service. For troubleshooting check Wowza access logs. If errors occur in the error logs submit a ticket to VideoWhisper about this.

Web Configuration

Download latest Video Conference php edition and check these integration files:
rtmp.inc.php – stores session info when user authenticates from vc_login.php ; contains $webKey if you want to change it
rtmp_login.php – called by rtmp server to see if a session name is valid (authenticated); also gets canKick permission to allow user to kick clients
rtmp_logout.php – called by rtmp server when client with a session name disconnected (to cleanup session)

Configure settings.php to use the videowhisper-web rtmp address.

To integrate this on other editions or installations you will need to copy the 3 files mentioned above to installation folder and include rtmp.inc.php in the _login.php scripts that authorize the user.
Other changes could be required depending on particularities of each integration.

Sample Demo Configuration

Installation url: http://www.videowhisper.com/demos/vc_web
Using rtmp address: rtmp://videowhisper.com/videowhisper-web

         <Property>
<Name>webLogin</Name>
<Value>http://www.videowhisper.com/demos/vc_web/rtmp_login.php?s=</Value>
</Property>
<Property>
<Name>webKey</Name>
<Value>VideoWhisper</Value>
</Property>
<Property>
<Name>webLogout</Name>
<Value>http://www.videowhisper.com/demos/vc_web/rtmp_logout.php?s=</Value>
</Property>

 

Install
wget http://www.configserver.com/free/csf.tgz
tar -xzf csf.tgz
cd csf
./install.sh

Edit configuration from WHM> ConfigServer Security & Firewall > Plugins or manually from /etc/csf/csf.conf .

Enable incoming connections on ports 1935 and 5080 for Red5 support.

At least Debian 5 (Lenny) required.

Checkout release:
cat /proc/version
uname -a
cat /etc/issue
cat /etc/debian_version

If system is not in English, enable that:
dpkg-reconfigure locales
export LANG=en_US.UTF-8

Update /etc/enviroment

You may need to reboot.

Update:
apt-get update

Install Subversion:
apt-get -y install subversion

Install tools to build your own Debian packages:
apt-get -y install dpkg-dev debhelper dh-make devscripts fakeroot

Install Java (accept sun license if applies):
apt-get -y install java-package
apt-get -y install sun-java6-jre
apt-get -y install sun-java6-jdk
java -version

Install Apache Ant:
wget http://www.apache.org/dist/ant/binaries/apache-ant-1.8.2-bin.tar.gz
tar zxvf apache-ant-1.8.2-bin.tar.gz
mv apache-ant-1.8.2 /usr/local/ant
export ANT_HOME=/usr/local/ant
/usr/local/ant/bin/ant -version

Download the latest development version of Red5:
svn co http://red5.googlecode.com/svn/java/server/trunk red5-trunk

Run ant to build red5:
cd red5-trunk
/usr/local/ant/bin/ant

Deploy red5:
mkdir /usr/local/red5
cp -R dist/* /usr/local/red5/
cd /usr/local/red5
chmod 755 red5.sh

Deploy your custom apps in/usr/local/red5/webapps .
In example VideoWhisper Red5 RTMP application needed to run VideoWhisper solutions.

Start Red5 in background:
cd /usr/local/red5
./red5.sh >> red5.log &

Verify the correct ports are being bound to:
netstat -ant

You need to restart red5 each time you add webapps to /usr/local/red5/webapps or change configuration.

Close Red5:
cd /usr/local/red5
./red5-shutdown.sh

Or kill Red5 processes:
ps aux | grep red5
kill $process_id

Then start it again:
cd /usr/local/red5
./red5.sh >> red5.log &

If you have a FMS account with Influxis, use these instructions for setting up a new application:

1. Create application from Tools > New App Builder or My Applications > Add New Application. Use any name i.e. “videowhisper” and save generated rtmp path.

2. From Tools > File Manager / File Admin edit videowhisper/main.asc file and make sure it has the contents of videowhisper/main.asc (open it with notepad or other text editor). If needed select all from text editor (CTRL+A), copy (CTRL+C), move to form, select all from there (CTRL+A), paste from clipboard (CTRL+V).
Get VideoWhisper FMIS rtmp side from Downloads : RTMP VideoWhisper Applications > FMIS .

3. From Account Settings > Domain Permissions, Set Referring Domain(s), Add New Domain – add your domain that hosts the flash (i.e. your-domain.com)

4. Reset the VHost for your Influxis account so it loads new applications or updates.
In your Influxis account go to My Applications > FCS Administration Console: Connect then go to Maintenance : Adaptor / VHost: Restart .

Find latest wget version on http://ftp.gnu.org/gnu/wget/wget/ and install it as /usr/local/bin/wget .

wget ftp://ftp.gnu.org/gnu/wget/wget-1.13.4.tar.gz
yum remove wget
tar xfz wget-*
cd wget-*
./configure
make
make test
make install
cd ../

You can publish a rtmp stream to a rtmp address and then playback with an external player like JWPlayer.
If you publish StreamName to rtmp address rtmp://your-rtmp-address-here then you will need to configure JW Player:
var flashvars = { file: StreamName.flv, streamer: rtmp://your-rtmp-address-here, autostart:”true”, type:”rtmp”}

Webcam video streams can be published from web with a video Live Streaming broadcasting script. With the VideoWhisper Live Streaming soulution, StreamName is channel name (in example Studio586). Important: As latest VideoWhisper solutions also support P2P streaming, these need to be configured with alwaysRTMP=1 parameter in their _login.php or equivalent script so streams are always published to RTMP server.

If you want to publish for other devices special encoders and codecs would be required. Using an external encoder you can encode with codecs and settings not available in browser flash player (due to flash limitations). Not all encoders and versions are compatible with all rtmp servers and versions. Some require special configuration and usage instructions.

Adobe Flash Media Live Encoder can be used for Adobe Media Interactive server and is also reported to work with Wowza.

Wowza & Wirecast documentation and support is available for Wowza Media Server hosting.

Note that when publishing H.264, video player should be configured to play StreamName.mp4 instead of StreamName.flv .

Here is how to install 2 popular tools for scanning your servers for rootkits, trojans:

RKHunter
http://rkhunter.sourceforge.net/

Install

wget http://downloads.sourceforge.net/project/rkhunter/rkhunter/1.3.8/rkhunter-1.3.8.tar.gz
tar -xvzf rkhunter-1.3.8.tar.gz
cd rkhunter-1.3.8
./installer.sh –install
rkhunter –propupd

Scan

rkhunter –check

Also check resulting log in /var/log/rkhunter.log .

ChkRootkit
http://www.chkrootkit.org/

Install

wget ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit.tar.gz
tar xvzf chkrootkit.tar.gz
cd chkrootkit*
make sense

Scan

./chkrootkit

Have multiple servers or VPS and want to compare performance by running a benchmark as root?

This takes some time.

wget http://byte-unixbench.googlecode.com/files/UnixBench5.1.3.tgz
gunzip -dvc UnixBench5.1.3.tgz | tar xvf -
cd UnixBench
make
./Run

Also found an older version on Web Hosting Talk:

wget http://members.dslextreme.com/users/andylee/unixbench-4.1.0-wht.tar.gz
gunzip -dvc unixbench-4.1.0-wht.tar.gz | tar xvf -
cd unixbench-4.1.0-wht-2
make
./Run

In case yum is unavailable due to various reasons (broken, uninstalled) here is a shell script that can install it.

Paste this in a yumi.sh file:

for file in \
gmp-4.1.4-10.el5.i386.rpm \
readline-5.1-3.el5.i386.rpm \
python-libs-2.4.3-43.el5.i386.rpm \
python-2.4.3-43.el5.i386.rpm \
libxml2-2.6.26-2.1.2.8.el5_5.1.i386.rpm \
libxml2-python-2.6.26-2.1.2.8.el5_5.1.i386.rpm \
expat-1.95.8-8.3.el5_5.3.i386.rpm \
python-elementtree-1.2.6-5.i386.rpm \
sqlite-3.3.6-5.i386.rpm \
python-sqlite-1.1.7-1.2.1.i386.rpm \
elfutils-libelf-0.137-3.el5.i386.rpm \
elfutils-0.137-3.el5.i386.rpm \
popt-1.10.2.3-22.el5.i386.rpm \
rpm-libs-4.4.2.3-22.el5.i386.rpm \
rpm-4.4.2.3-22.el5.i386.rpm \
rpm-python-4.4.2.3-22.el5.i386.rpm \
m2crypto-0.16-6.el5.8.i386.rpm \
python-urlgrabber-3.1.0-6.el5.noarch.rpm \
python-iniparse-0.2.3-4.el5.noarch.rpm \
yum-fastestmirror-1.1.16-14.el5.centos.1.noarch.rpm \
yum-metadata-parser-1.1.2-3.el5.centos.i386.rpm \
yum-3.2.22-33.el5.centos.noarch.rpm
do rpm -Uvh –nodeps http://mirror.centos.org/centos-5/5/os/i386/CentOS/$file;
done

chmod a+x yumi.sh
./yumi.sh
yum update
Some files may have been updated, so if you get errors update these file names to latest versions from http://mirror.centos.org/centos-5/5/os/i386/CentOS/ or other mirror you may be using.

You need to create 2 files in public_html of website where suPHP is enabled. A .htaccess specifying path to php.ini configuration and a php.ini with directives.

Example for account “account-name”. Make sure you update that in .htaccess content:

.htaccess

suPHP_ConfigPath /home/account-name/public_html

php.ini

register_globals = Off