Portal Home > Knowledgebase > Articles Database > How to security dedicated server?
How to security dedicated server?
Posted by TenFu, 06-15-2007, 06:12 AM |
Hi
Plz give me some advise about what the way to protect dedicated server?
At present, My dedicated server have firewall and setting permision for each user/ data.
I have installed a anti-virus software.
I wonder that whenever my server can be hacked/ attached.
So i need all your helping for to resolve this problem?
|
Posted by tsj5j, 06-15-2007, 06:50 AM |
Hire a professional.
There are many things to look at when securing a server, and sometimes also depends on the situation, etc.
|
Posted by pravZ, 06-15-2007, 07:34 AM |
If you have a such kind of issue then always go for managed dedicated server where everything is managed by service provider and you dont have to take any headache.
|
Posted by aria-security, 06-15-2007, 07:40 AM |
1 - Upgrading your kernel
2 - Make your application secure which can be accessed by internet
3 - Install a secure firewall to monitor outgoing and incoming
Regards
|
Posted by Notts-Promos, 06-15-2007, 07:48 AM |
CHKRootKit - a simple program that detects and hacker software and notifies you if any has been detected via email
RootKit Hunter - scanning tool to ensure your system does not have any backdoors or exploits
Securing and Upgrading of SSH Server - increases security during ssh connections
APF Firewall - the most commonly used policy based iptables firewall system (CSF Firewall can be installed upon request instead of APF)
Anti-DoS configuration for APF Firewall - helps mitigate denial of service type attacks
Brute Force Detection - notifies you of numerous login authentication failures and automatically blocks the attackers ip in the firewall
Log Analysis Software Installation - Emails are dispatched daily, the amount of detail in the
emails can be changed on request
System Integrity Monitor - 24x7 Internal Monitor that checks all services and restarts them if they are down
SPRI - changes the priority of different processes in accordance to level of importance, hence increasing server performance
Secure and Optimize Apache (HTTP) - tweaks apache to perform better, and prevent unnecessary information from being easily seen
MySQL optimization - increases performance of MySQL
host.conf hardenening - prevent dns lookup poisoning & spoofing protection
nsswitch.conf modification - secure and optimize DNS lookups
sysctl.conf hardening - helps prevent TCP/IP stack from syn-flood attacks and other network
abuses
FTP Hardening - upgrade and secure your ftp software
Removal of unused software - prevents exploits and wasted resources
Removal of old logs - regain wasted space by deleting old archived logs
Shell Fork Bomb/Memory Hog Protection - prevents a user logged into a shell from consuming all the resources on the server
Root Logger - logs and emails you everytime someone accesses root with the timestamp and their ip address
MyTOP - tool for monitoring MySQL threads and processes
MultiTail - view multiple log files simultaneously
TMP Directory hardening ( /tmp, /var/tmp, /dev/shm) - helps prevents execution of malicious scripts
Password Scanner - scans for easy to guess and common passwords
Filemanager - allows you to edit system files through WHM in case SSH is inaccessible
Firewall Admin - allows you to edit firewall allow & deny list and config through WHM
just some reccomendations
|
Posted by The3bl, 06-15-2007, 07:57 AM |
What kind of OS? Linux or Windows?
Is there is control panel installed?
Need more info. Everyone is assuming you have linux and one poster is assuming you cpanel. I did not see you mention what it is you are trying to secure and that makes a lot of difference.
|
Posted by Notts-Promos, 06-15-2007, 08:04 AM |
im not assuming he has cpanel its just some reccomendations thats all if he has or if he hasnt
thanks
|
Posted by TenFu, 06-15-2007, 09:43 PM |
OS: Windows 2003 Enterprise Edition SP1 (always updated patched).
Control Panel : Hosting Controller Panel (HC7)
I need to have some software to monitor network traffice (Ex: Iris Network Traffic analyzer).
|
Posted by sirius, 06-15-2007, 09:48 PM |
Moved to Technical and Security Issues....
Sirius
|
Add to Favourites Print this Article
Also Read