I have a MUonline (link) gameserver running on Windows 2003 enterprise X64. I had a website running there too. I do not know much about security here so I'm asking for some tips or tutorials you know about this as my server was hacked (I don't know how, exactly) and Windows has been erased. So now I want to make a secure gameserver, to start from 0.
Any ideas ?
Firstly will you be running a website on the server again? What games do you plan to host?
both of these can change bits of how you secure the server.
The most basic security i can think of for a windows server is
- Administrator password with Alpha Numeric Special Character long password
- Keep your system and software up to date
- Install antivirus/malware software
- Enable only needed services though Services.msc
- Don't give out Administrator accounts
- Disable all unneeded accounts
Get SP2 installed, if not already done. Configure Windows Update to pull down any critical security updates.
I'm assuming you've got a firewall in front of the server? If not, configure the Windows Firewall (not very flexible on Win2k3).
Ensure your event log sizes are fairly big (>16K), configure them to overwrite as needed. Enable auditing.
Make your passwords very complex (include upper case, lower case, numerics and punctuation). Make them at least 10 characters.
Ensure any unnecessary accounts are disabled. Disable any unecessary services, use AutoRuns to stop as much stuff starting.
Run services using an account with the minimal privileges possible.
Uninstall any unncesesary applications / windows features.
Possibly install the Security Configuration Wizard.
Then, monitor, monitor, monitor. Use TCPView and ProcessExplorer.
Make sure it's updated all the time for all it's code, that it's running as little code as possible and that it's fire walled to within an inch of its life. Then pay someone ti try to hack it, lusted to them when they're done and implement what they say. Keep this up, forever.
