3

If I have a vps hosting with linux, what should I do to be sure it has platform security ?

I install a server (let's say tomcat), a database server (mysql) and then I deploy my application. Should I be concerned about some security issues ? I am talking about the platform security, not my software application

Thank you

migrated from stackoverflow.com Nov 30 '10 at 1:10

This question came from our site for professional and enthusiast programmers.

1

You should apply the same security policy as for a physical server. Configure tomcat and mysql to listen on 127.0.0.1 only or use a firewall to allow only certain IPs to access these services directly. Keep the server and all services updated. Disable ssh password based authentication and use only key based authentication. Disable remote authentication for root user. Save the logs on a different machine. If possible use an IDS in front of your web server.

  • "Configure tomcat and mysql to listen on 127.0.0.1 only or use a firewall to allow only certain IPs to access these services directly." But I want to deploy a public website, I don't want to restrict users. – Horatiu Jeflea Nov 30 '10 at 11:16
  • Yes, because you will want to expose only the web server. The application server and the database should be accessible only trough web server – Mircea Vutcovici Dec 1 '10 at 6:09
0

At the least, you'll want to secure SSH and lock down all other services/ports that you don't need, and keep your system up to date.

slicehost has a nice intro to basic setup for various distros: http://articles.slicehost.com/2008/1/30/centos-setup-page-1

0

with htaccess? remember to set noindex for your site.

for any web exposed ssh server use certificates.

Those are some of the basic things.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.