I want to install webmin to make server administration tasks on my Ubuntu 10.4 server easier. However I'm very nervious about having that kind of power accessable over the web.
So I want to know how to secure webmin so that it can't be used to comprimise my server.
So far here are my ideas, but I still don't feel comfortable:
- Make webmin accessable from only the localhost (how?)
- Use SSH tunneling to access the webmin server whenever I need to administrate it
Can anyone help me with instructions on making webmin accessable only from the localhost?
What other ways can I make webmin secure?