Allow list based on domain
We have to allow listed the most trusted and popular services based on domains a long time ago to make sure our customers have the most secure yet smoothest experience while using…
BitNinja 3.16.0 – WAF Pro Migration and Transparent Proxy Limitation
Overview Starting with BitNinja 3.16.0 , the legacy web application firewall components have been removed and replaced by the new WAF Pro solution. WAF Pro is built on the Caddy w…
BitNinja increases the server load
What process is responsible We need to check what process is responsible for the increased load. To do so: Run htop or top command, htop is more user-friendly Sort the processes a…
BitNinja rate limiting
With the 2.29.0 version of BitNinja , we introduced the rate limiting feature. This is based on the WAF and SSLTerminating modules. In order to use this feature make sure that the…
BitNinja Stats- Plesk360 integration
Our developers have added a new tool to our BitNinjaCLI arsenal. The bitninjacli --stats command can show basic statistics about the BitNinja agent. Its intended use is for integr…
BitNinja stopped on the server
The server’s box is red or yellow on the Dashboard. This means that the BitNinja health checking service could not reach BitNinja on the server Check if BitNinja is running We nee…
Can't start BitNinja because an instance is already running
Info If BitNinja can not start, but it shows as another instance is running, it is because of a former pid file. Solution Just echo an empty string to the file. echo "" > /var/lib…
Close Direct Access
The Close Direct Access option is enabled by default. The setting can be modified from the Dashboard by navigating to the Configuration menu -> Advanced Modules -> IP Reputation -…
Configuring BitNinja under Enhance control panel
Info This is necessary only if you are using Enhance version below v12.0.0 Introduction: When configuring BitNinja on servers using the Enhance control panel, several key adjustme…
Customize the captcha page
You can make the BitNinja captcha page more user-friendly by customizing it. For example, you can include your company logo. This way, users will be more familiar with it The capt…
Haproxy vulnerability: IP spoof via X-Forwarded-For forgery.
Description Suppose an IP-based access control solution is implemented in your web server (back-end server). In that case, the Haproxy used by BitNinja's SslTerminating module can…
How to download the BitNinja Log
If you would like to store the BitNinja logs you need to compress the logs and move it to another location so the log rotation won’t delete the log files. Also, you might need to…
How to make a custom SSL certificate miner
Why do we need an SSL certificate miner? The WAF module can only listen on HTTP but it needs the SSL Terminating module to be able to listen on HTTPS as well. This module can do t…
How to open your terminal
While it might seem intimidating, the terminal is a versatile and powerful tool that can be used for numerous things. However, to install BitNinja, we need to run one command to b…
How to regenerate SSL certifications
If there is an issue with the SSL termination module like it does not find the right certification, All you need is to regenerate the certs. Just simply run the following commands…
How to set up iptables legacy
Unfortunately the BitNinja IPtables ruleset is currently not fully compatible with nf_tables. What does this mean? By default, nf_tables can translate some iptables rules into its…
Install BitNinja via Plesk plugin
With the Plesk BitNinja plugin, you can install BitNinja automatically on your server by just pasting a license key into the plugin. The plugin is available here. You can choose t…
Location header issue
Some applications miss behave behind a proxy. This is why we need to force a redirection to remain https most of the time. Solution This behavior can be changed: You just need to…
MalwareDetection load optimization
If your server's load is high while the MalwareDetection module is enabled, follow this troubleshooting guide to resolve the issue. Find out what causes the issue. Inotifywait pro…
My server is under DDoS attack
The server’s load is high due to a Distributed Denial of Service attack (DDoS). In the case of DDoS, the attack comes from multiple IP addresses at the same time. None of the IP a…
PCI scanning issue
We added a PCI compliance mode to BitNinja. PCI (Payment Card Industry) scanning usually refers to quarterly external vulnerability scans that must be performed by a PCI approved…
Port 25 Closed After Stopping BitNinja Agent
Overview Some customers have reported that port 25 (SMTP) becomes blocked after stopping the BitNinja agent. This behavior should not occur in recent versions (≥ 3.12.1). However,…
Port honeypot
The Port honeypot module opens fake services on 100 random ports that have no active service running. So the Port honeypot module won’t stop an active service. These fake services…
Start BitNinja Debug mode
By default, the debug mode is disabled in BitNinja. If you wish to enable it you might need to make some modifications in /opt/bitninja/etc/config.php . However, this is a tempora…
Useful BitNinja commands
In this article, you can see some of the most useful BitNinja CLI commands and their short descriptions. IP management To manage the BitNinja allow, challenge, block list just use…
Knowledge Base