06-22-2007, 12:29 PM #1Web Hosting Guru
- Join Date
- Jan 2007
Server Surgeon - System Administration, Backup, Hardening Services
Server Surgeon provides affordable system administration and support to companies and individuals with dedicated and colocated servers. Many of our customers are in the shared web hosting industry that have sought an outside management company for their servers, others are engaged in e-commerce or application hosting who require management, administration and security services. Regardless of what business you are in, Server Surgeon is the company to help support your dedicated and colocated servers.
Server Surgeon provides a variety of services including:
Our server management plans entail a variety of services needed by all dedicated and colocated servers, especially when high uptime of services is required. All our plans include system monitoring, emergency response in conjunction to monitoring , daily security and maintenance patching, a specified amount of "by request" system adminstration and support and access to our 24/7 emergency on-call administrator.
You can order our server management plans online, by telephone at 877-378-7436 (International +1-213-291-9191), or via email to email@example.com.
Professional Server Management
Supported Operating Systems: Linux, Windows 2000/2003, BSD
Recommended for all dedicated or colocated servers, this plan is often employed on web hosting servers that need maximum uptime and require a reasonable level of external management. Customers with management plans are given priority to those without and will be able to contact Server Surgeon 24 hours a day, 7 days a week for immediate service during emergencies. Those without management plans will have to wait until regular business hours as well as pay higher hourly rates.
- 1 hour of "by request" system administration time per month
- 24/7 monitoring of server and services
- Daily patching & security updates (Linux only)
- 24/7 emergency on-call access
- 10 minute live response to server and service outages
20% discount for customers with 5 or more servers.
Enterprise Server Management With Security
Supported Operating Systems: Linux
This plan includes everything in the Professional Management plan above plus:
- Advanced Server Linux Hardening package
- Daily security monitoring and live response using SIM, LSM and Rootkit Hunter
- On the box process, disk, and cpu monitoring and live response
- Custom by request monitoring (application monitors, URL monitors, log monitors, etc.)
- 10 minute live response to security and custom monitors
20% discount for customers with 5 or more servers.
A disk failure, a hacked server or other problem can result in permanent loss of data, including databases, domain contents, email, etc. Restoring a system without an adequate backup is virtually impossible, especially on servers using web hosting control panels such as Plesk, cPanel and Ensim.
Server Surgeon offers a fully managed backup solution that includes:
- Daily full disk backup (Linux) or weekly backup (Windows)
- Daily full control panel backup (cPanel, Plesk, Ensim, DirectAdmin, & H-Sphere)
- Four week retention (last 7 daily backups plus last 4 weekly backups)
- FTP and Rsync access to backups
- Easy restoration of a single file, single directory, even entire file system
- Customizable to only backup the data you need (which requires less backup space)
Supported Operating Systems: Linux, Windows 2000/2003, BSD, OS X
Having a current mirror or copy of your complete file system stored on a secured, external server is a must if you intend to be able to rebound from a crashed disk, security compromise or similar issue. Our Full System Backup uses the readily available Rsync utility to transfer your data to our server. We fully configure the backup for you based on your needs, provide the transfer of the data to our servers, and provide monitoring to insure backups are valid and occurring at regular frequencies.
Cost per server: $30 per month (includes first 30 gigabytes storage)
Cost for each additional 10 gigabytes: $10 per month
Securing a Linux server from a variety of attacks is not an easy task. Server Surgeon has assembled a variety of patches, best practices and much needed security software and put them into two packages that can be installed and configured on any Linux server. We highly recommend at least our Essential Linux Hardening for any server. The Advanced Linux Hardening package provides more protection and is highly recommended for any servers offering shared hosting services.
You can view the details of both packages below.
If you'd like more information on our server hardening, please call us toll free at 877-378-7436 (International +1-213-291-9191) or send an email to firstname.lastname@example.org.
Esential Linux Hardening
BFD - (Brute Force Detection) - Most Linux servers on the Internet are attacked by brute force multiple times each week. BFD detects brute force connections and automatically enters the offending IPs into the firewall to be blocked.
SSH Server Hardening - Locks down and hardens the SSH server. Provides additional protection against brute force attacks.
Firewall Installation - APF (Advanced Policy Firewall) iptables based firewall and anti-dos rulesets.
LES - (Linux Environment Security) - Enforces root-only permissions on system binaries as well as other restrictions on system programs.
/tmp, /var/tmp and /dev/shm Hardening - The /tmp, /var/tmp and /dev/shm directories are the most common cause of security compromises on web hosting servers. Hardening prevents execution of malicious scripts from being launched from these directories.
Disable Unused Services/Software - Unused services and software are disabled to prevent them from being exploited.
Advanced Linux Hardening
Everything in the Essential Linux Hardening.
Mod-Evasive - Blocks HTTP Denial of Service attacks.
SIM - (System Integrity Monitor) - Automatically monitors and restarts required services including HTTP, FTP, DNS, SSH, and MYSQL.
LSM (Linux Socket Monitor) - Identifies and alerts you when rogue services are started on your server.
SPRI - (System Priority) - Sets the priority to current processes being run on your server, decreasing load 5-25%.
PSAD - Detects port scan attacks and and automatically enters the offending IPs into the firewall to be blocked.
CHKRootKIt - Simple script that detects software used by hackers. It scans once a day and emails the client if any suspicious scripts are found.
Mod-Security - Adds another layer of security for your web applications. (Note: Mod-security will only be installed by request when you order this package as its rules can break certain websites -- if you want mod-security installed on your server please let us know.)
Anti-Spam & Anti-Virus
Server Surgeon uses a combination of OpenProtect, MailScanner, SpamAssassin and Clam AV to protect your Linux mail server from incoming spam and virus infected emails. This saves valuable resources especially on busy mail servers serving mail for multiple domains. Our spam and virus protection is compatible with most Linux control panels including Plesk, cPanel, Ensim, Webmin and H-Sphere. It also integrates seamlessly with Sendmail, Exim, Postfix and Qmail. Features of using this system include:
- Customized Clam Antivirus installation
- Customized SpamAssassin installation
- Automated hourly virus and daily spam signature updates
- Customizable RBL (Realtime Blackhole List) checks
- Customizable whitelists and blacklists
- Customizable attachment filename and filetype checks
- Customizable per-domain rules
- Bayesian spam filtering
Server Surgeon's office is open from 7 AM to 4 PM US Pacific time. Our support hours (for non-emergencies) is from 7 AM to 4 PM US Pacific time. 24/7 emergency support is also available to server management customers for server or service outages.
Toll Free US 1-877-378-7436 ext. 1
International +1-213-291-9191 ext. 1
Server Surgeon SupportServer Surgeon George
Linux, BSD and Windows Administration Services
Toll Free US 877-378-7436 International +1-213-291-9191