Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : Floodguard at Servermatrix

[allanh]

I have a server at servermatrix.

I am wondering if Floodguard (offered by Servermatrix )in your opinioin, is adequate protection for my server against DDoS attacks?

Do I still need this package ( http://www.rfxnetworks.com/linux_appsec_secbundle.php ) if I already have Floodguard?

[Steven]

i would get the package regardless you have flood guard or not

[server4sale]

Flood Guard still needs 7+ days to get trained

[pmabraham]

Happy New Year allanh:

Security, to be most effective, should be done in layers.

For Unix-based servers, consider:

* Disable telnet.
* Limit SSH access to specific IP addresses.
* Disable direct root login.
* Remove unnecessary packages / software.
* Harden the kernel against synflood and basic DOS attacks.
* Remove common user access to compilers and fetching software (wget, fetch, lynx, etc.).
* Ensure /tmp is in its own partition with noexec, nosuid.
* Ensure kernel and software is up to date.
* Remove unnecessary users and groups.
* Install chkrootkit, logwatch, tripwire.
* Install a firewall, and port scan detector.
* For Apache servers, install mod_security and configure for use with FrontPage, PHPMyAdmin, Site Studio, and other H-Sphere applications.
* Secure DNS Servers
* Utilize firewall automation to mitigate brute force FTP, syn floods, mail bombs, and out-of-network trojan’d servers from impacting our servers

Thank you.

[HostMonger]

Solid summarization dynamicnet...


Hostmonger

[allanh]

thank you for the summary, dynamicnet. I will look into those issues.