Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

On my website I am able to access my phpMyAdmin control panel by typing in the ip address followed by /phpmyadmin e.g.

http://18.129.514.29/phpmyadmin/ (note: not my real ip)

I also need to limit access to SSH, currently all you need to do to get access to the server login screen is type the ip address of the server which anyone can get a hold of by pinging the server.

What measure can I take to make sure these issues do not become a security threat?

share|improve this question

Setting restrictions in your vhosts (can be done by adding an extra layer like http auth or by only allowing certain IP's).

Another option I would certainly advice to get is host based security like OSSEC. It automatically blocks most bruteforce attempts.

Also you can lower background noise by setting a non default ssh port.

share|improve this answer

To control the access to the phpmyadmin, you can use some of the apache modules for access control ( and Authentication and authorization The most common one is something like this, using the IP but you can use also usernames.

To control the access to you SSH, you can use iptables to restrict access and only allow certain IP's, or more interesting, use BFD ( (brute force detector), Denyhost and Dos Deflate to avoid attacks. BFD, DDOS and Denyhost are simple scripts that check your logs for attacks, and ban the IP's of the attackers (Using iptables or APF), wich is very useful (it allows me to sleep well ;) and have almost no load on the server. Here you have some help installing them

share|improve this answer
Sorry, but as a new user, i cant post more than 2 hyperlinks :S – Wakaru44 Sep 19 '12 at 6:43
looks interesting. – mk_89 Sep 19 '12 at 8:54

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.