Blog on x128.dev

From Kannel to Kamex: My Journey Modernizing an SMS Gateway

Sat, 05 Jul 2025 00:00:00 +0000

💾 Source Code & Downloads

Kannel is an open-source SMS gateway - HTTP, SMPP, the works. Been around since the early 2000s. Originally a WAP gateway too, but WAP is dead. Time to evolve.

Why Fork Kannel?

Kannel 1.4.5 simply won’t build on modern distributions like Rocky Linux 10. Even after fixing build issues, it kept crashing with Redis DLR storage. The only distro still shipping Kannel packages is Debian 12 - with ancient libraries, barely holding together.

How to Harden Wordpress for Better Security

Fri, 02 Oct 2020 00:00:00 +0000

Hi, Here are few tips to harden your wordpress installation:

Disallow File Editing and explicitly set website url in wp-config.php (Some malware replaces Website url in wp_options table.)

define( 'DISALLOW_FILE_EDIT', true );
define( 'WP_HOME', 'https://example.com' );
define( 'WP_SITEURL', 'https://example.com' );
define( 'FORCE_SSL_ADMIN', true );

Replace Default .htaccess with following:

# Block WordPress xmlrpc.php requests
<Files xmlrpc.php>
order deny,allow
deny from all
</Files>
# Block the include-only files.
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^wp-admin/includes/ - [F,L]
RewriteRule !^wp-includes/ - [S=3]
RewriteRule ^wp-includes/[^/]+\.php$ - [F,L]
RewriteRule ^wp-includes/js/tinymce/langs/.+\.php - [F,L]
RewriteRule ^wp-includes/theme-compat/ - [F,L]
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>

In wp-content Folder create new .htaccess file and insert following to Limit Extensions:

Order deny,allow
Deny from all
<Files ~ ".(xml|css|jpe?g|png|gif|js|woff|woff2|ttf|pdf)$">
Allow from all
</Files>

Disable Wordpress Rest Api Using Plugin: https://wordpress.org/plugins/disable-wp-rest-api/

How to proxy RDP via Nginx

Wed, 02 Sep 2020 00:00:00 +0000

Simply Use Snippet Bellow and thank me later :)

stream {
 server {
 listen 1337;
 proxy_pass 10.0.0.1:3389;
 }
 server {
 listen 1336;
 proxy_pass 10.0.0.2:3389;
 }
}

Compile Nginx with Brotli and ngx_cache_purge Plugin on Centos 8

Fri, 03 Jul 2020 00:00:00 +0000

Just Copy Paste This Command and it will automagically do the trick!

will post more explaination later.

p.s : if you use wordpress you can use nginx-helper

dnf install -y wget gcc make redhat-rpm-config git pcre-devel openssl-devel libxslt-devel gd-devel perl-ExtUtils-Embed nginx
cd /usr/src
wget http://nginx.org/download/nginx-1.19.2.tar.gz
git clone https://github.com/FRiCKLE/ngx_cache_purge.git
git clone --recursive https://github.com/google/ngx_brotli.git
tar xzf nginx-1.19.2.tar.gz
cd nginx-1.19.2
./configure --prefix=/usr/share/nginx --sbin-path=/usr/sbin/nginx --modules-path=/usr/lib64/nginx/modules --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --http-client-body-temp-path=/var/lib/nginx/tmp/client_body --http-proxy-temp-path=/var/lib/nginx/tmp/proxy --http-fastcgi-temp-path=/var/lib/nginx/tmp/fastcgi --http-uwsgi-temp-path=/var/lib/nginx/tmp/uwsgi --http-scgi-temp-path=/var/lib/nginx/tmp/scgi --pid-path=/run/nginx.pid --lock-path=/run/lock/subsys/nginx --user=nginx --group=nginx --with-file-aio --with-ipv6 --with-http_ssl_module --with-http_v2_module --with-http_realip_module --with-http_addition_module --with-http_xslt_module=dynamic --with-http_image_filter_module=dynamic --with-http_sub_module --with-http_dav_module --with-http_flv_module --with-http_mp4_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_random_index_module --with-http_secure_link_module --with-http_degradation_module --with-http_slice_module --with-http_stub_status_module --with-http_perl_module=dynamic --with-http_auth_request_module --with-mail=dynamic --with-mail_ssl_module --with-pcre --with-pcre-jit --with-stream=dynamic --with-stream_ssl_module --with-debug --with-cc-opt='-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection' --with-ld-opt='-Wl,-z,relro -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -Wl,-E' --add-module=/usr/src/ngx_cache_purge --add-module=/usr/src/ngx_brotli
make
make install
echo "exclude=nginx" >> /etc/yum.conf

Offload HTTPS traffic to Nginx only / Enginitron Cpanel

Sun, 21 Jun 2020 00:00:00 +0000

Hello, Guide which is posted on engintron.com is outdated and breaks Force SSL Functionality in Cpanel. So Here is my Solution:

Step 1. Edit /etc/apache2/conf.d/includes/pre_virtualhost_global.conf and append:

SetEnvIf X-Forwarded-Proto "https" HTTPS=on

Step 2. Run

cp /var/cpanel/templates/apache2_4/vhost.default /var/cpanel/templates/apache2_4/vhost.local
sed -i 's/RewriteCond %{HTTPS} !=on/RewriteCond %{HTTP:X-Forwarded-Proto} !https/g' /var/cpanel/templates/apache2_4/vhost.local
/scripts/rebuildhttpdconf

Step 3. Edit /etc/nginx/proxy_params_common to update proxy_pass:

proxy_pass http://$PROXY_DOMAIN_OR_IP:8080;

Step 4. restart both apache & nginx

apachectl restart systemctl restart nginx

So what are we actually doing here?

Hi World

Fri, 19 Jun 2020 00:00:00 +0000

Hi, i will post some random things here!

About

Mon, 01 Jan 0001 00:00:00 +0000

Hi ;)

For contact use : vasil [at] connect.ge

P.S: Google Analytics data is anonymized.