Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

My server runs just my own sites (vBulletin forums - which are always patched with security fixes) and Rails sites using the latest version) so do I really need CSF? (http://configserver.com/cp/csf.html) Or is it unnecessary for this kind of server set-up?

I have already done the usual (disable SSH login, pub-key auth, very strong passwords everywhere else etc)

It was often recommended by users over at the cPanel forums - but I guess most of them are hosts there.

share|improve this question

closed as not constructive by Chris S Jun 8 '12 at 2:23

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

add comment

1 Answer

I wouldn't say it is overkill. I run CSF on all my web servers. It does a great job at auto banning port scanners, failed logins and general hacking attempts. It updates its self on a regular bases and gives you a nice report on how secure your server is. Ontop of that it is super easy to manage what goes in and out of your server by port control etc.

It is impossible to be overkill with security not unless you are blocking your main ports, 80 :).

share|improve this answer
1  
"impossible to be overkill with security" - strongly disagree. Adding gratuitous complexity can be catastrophic for security. That is not to say CSF might be a bad idea here! Just don't try to make your fireplace more safe by stuffing it full of safety matches. –  rackandboneman Jun 8 '12 at 1:20
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.