Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

how can I know who enter web server and how can I protect my IP from others?

share|improve this question

2 Answers 2

up vote 0 down vote accepted

Your access logs should show who accesses what files.

I would install shorewall and allow incoming access only to limited services. It is very flexible in allowing you to log connections into and out of the server.

share|improve this answer

filter outgoing traffic. deny all of it and allow only for connections established to your serve and only to few destinations you need [ eg automatic updates checking for some web apps or operating system you have ]. in this way it'll be more difficult to download potentially harmful payload attacker might need. preferably limit on external firewall, in worst case on system itself [ iptables for OUTPUT on linux ]

keep your system/webapps up to date.

use fail2ban or similar to prevent password guessing. allow ftp / ssh / rdp access only from trusted list of hosts.

if you are paranoid - run consistency scans to check for file content replaced without your knowledge.

as part of security via obscurity - leave your default vhost with error page [eg 403 not permitted] and serve your actual content from other vhosts so random bot scanning based on ip address cannot harm you.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.