Thread: Secure server
10-22-2013, 03:21 PM #1Junior Guru Wannabe
- Join Date
- Oct 2012
I newly purchased Dedicated server for my hosting. Please give me tops to secure it. Within 2 days I found china ip's in cpanel brute force db. though they are only 3-4 but still I am worried about it.
which country should I block in my csf. I am going to use this server for shared hosting
I blocked CN,KR,RU.
10-22-2013, 03:38 PM #2
Blocking entire countries through CSF (especially those countries with many IP ranges) is not the way to do it. CSF creates sets of IPTABLES rules for each range you block so you'll overload it very soon.
Have a look through the Hosting Security and Technology Tutorials section. If you don't feel competent taking care of it yourself there are several companies advertising one-off hardening services.There's no such thing as an unmanaged server - It's actually self-managed. Worth remembering next time you're looking for someone to complain to.
DATA VALUATION SERVICE: Your data's value is linked directly to your backup strategy. If YOU don't have your own backups then YOU value your data at ZERO. So why should anyone else care when you lose it?
10-22-2013, 03:38 PM #3
Since you plan in using it for shared hosting, you might like to consider using CloudLinux + CageFS in order to isolate each cpanel user to prevent a security breach of one account to affect somebody else. http://cloudlinux.com/about/features.php
This is not the only step to server security, but it is a good one.
10-22-2013, 04:59 PM #4Web Hosting Master
- Join Date
- May 2012
Blocking those Country codes should be okay, but not ideal as F-DNS satted. You should be concentrating on the overall security of the server.Kevin Cheri : Senior Server Administrator / Freelancer : 9+ years Exp, reach me out for any help
Server Optimization Expert / Mysql Guru / Migration Specialist
Skype : lynxmaestro
Gmail : [email protected]
10-22-2013, 05:56 PM #5WHT Addict
- Join Date
- Oct 2013
When it comes to securing a server you should disable the root account, I would suggest blocking all IP's but your own, but if you are going to do shared hosting then this isn't possible. I'd install fail2ban too.
By next-hop in forum Other Web Hosting Related OffersReplies: 0Last Post: 12-04-2011, 06:24 PM
By Naza in forum Web HostingReplies: 4Last Post: 07-13-2010, 04:09 PM
By kittyyau in forum VPS HostingReplies: 6Last Post: 08-24-2006, 04:11 PM
By Domenico in forum Hosting Security and TechnologyReplies: 15Last Post: 10-06-2001, 11:26 AM