Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

On my website I am able to access my phpMyAdmin control panel by typing in the ip address followed by /phpmyadmin e.g.

http://18.129.514.29/phpmyadmin/ (note: not my real ip)

I also need to limit access to SSH, currently all you need to do to get access to the server login screen is type the ip address of the server which anyone can get a hold of by pinging the server.

What measure can I take to make sure these issues do not become a security threat?

share|improve this question
add comment

2 Answers 2

Setting restrictions in your vhosts (can be done by adding an extra layer like http auth or by only allowing certain IP's).

Another option I would certainly advice to get is host based security like OSSEC. It automatically blocks most bruteforce attempts.

Also you can lower background noise by setting a non default ssh port.

share|improve this answer
add comment

To control the access to the phpmyadmin, you can use some of the apache modules for access control (httpd.apache.org/docs/2.2/howto/access.html) and Authentication and authorization httpd.apache.org/docs/2.2/howto/auth.html. The most common one is something like this, using the IP but you can use also usernames.

To control the access to you SSH, you can use iptables to restrict access and only allow certain IP's, or more interesting, use BFD (www.rfxn.com/projects/brute-force-detection/) (brute force detector), Denyhost denyhosts.sourceforge.net/ and Dos Deflate to avoid attacks. BFD, DDOS and Denyhost are simple scripts that check your logs for attacks, and ban the IP's of the attackers (Using iptables or APF), wich is very useful (it allows me to sleep well ;) and have almost no load on the server. Here you have some help installing them

share|improve this answer
    
Sorry, but as a new user, i cant post more than 2 hyperlinks :S –  Wakaru44 Sep 19 '12 at 6:43
    
looks interesting. –  mk_89 Sep 19 '12 at 8:54
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.