0
votes
1answer
99 views

Securing Erlang / Ubuntu server

I have written a web service in Erlang using mochiweb and jiffy and now face the task of deploying it to production. Since it is going to be open to the public I was wondering how secure Erlang ...
2
votes
3answers
800 views

How to block all root login attempts using denyhosts and or fail2ban?

I currently block all ssh logins using root. But I wanted to go the extra mile and block the ip address of the client who tried to login as root. I currently have denyhosts and fail2ban setup and ...
1
vote
1answer
289 views

Configuring mod_security on Ubuntu 10.04

After spending ~24 hours trying and failing to setup mod_security in Ubuntu 10.04 LTS, I've finally decided that I'm going to need some help. I've tried pretty much every tutorial I can find with a ...
1
vote
1answer
75 views

How do I restrict a post-commit hook?

Yesterday, I mistakenly wrote a post-commit hook that fatally broke my server. In fact, when I committed via TortoiseSVN, I could see the post-commit hook remove significant system resources. When I ...
0
votes
2answers
49 views

Close ports only on a specified network interface

I've just checked with nmap a proxy server (ubuntu 10.04 with squid) for vulnerabilities and I decided to start an hardening process... Is it possible to close, for example, ssh port only on eth1? So ...
2
votes
1answer
296 views

Securing an Apache Setup with a Fresh Ubuntu Web Server with users and permissions

I have a virtual Server with Ubunto 10.04 on. My host Mediatemple have a few guides on trying to secure the apache config, but I think they are missing some details, or at least it makes no sense to ...
0
votes
1answer
215 views

entries in auth.log are +??? I am not sure what it means

I have following entries in /var/log/auth.log Jan 24 06:37:54 server1 su[9508]: Successful su for nobody by root Jan 24 06:37:54 server1 su[9508]: + ??? root:nobody does it point to some problem I ...
1
vote
1answer
191 views

phpmyadmin login should not expire on ubuntu 10.04

On ubuntu 10.04 the phpmyadmin config is a little bit scattered. I want to set the loginexpiration time to zero, should never expire, this is a secured setup behind a firewall. I think it is 3600 by ...
1
vote
4answers
3k views

Server setup - Removing unnecessary Ubuntu 10.4 LTS packages

When setting a system up as a server with Ubuntu 10.4LTS, what packages are unnecessary and could be removed (to help harden the system)? For example, I'm confident the gcc package can (and should) ...
1
vote
1answer
191 views

What do I need to do to prevent exploitation of my postfix server?

I have a a web server that needs to send emails, but not recieve them. I have installed postfix (it came with nagios, also installed on this server) and now I need to make sure that my server does ...