Linked Questions

2
votes
3answers
1k views

Locking down my Ubuntu server with UFW [duplicate]

I'm using Ubuntu 12.04 on an Amazon EC2 instance and new to the sysadmin side of things. I'm working on a little project of my own and I'm already starting to get targeted by bots (at least I hope ...
-1
votes
1answer
2k views

Removing Unnecessary Services & Packages in a MySQL Ubuntu 12.04 Server [duplicate]

As part of hardening a standalone/dedicated MySQL 5.6 server running on Ubuntu 12.04 LTS, unnecessary services and packages will have to be removed. For a server that is serving only as a MySQL ...
0
votes
1answer
954 views

Hardening CentOS 6 web server security [duplicate]

There is a web server installed as a virtual machine in the cloud. I've configured it myself, and it has two corporate web sites on it. I'am not planning anything else to be there. So before it goes ...
0
votes
3answers
364 views

VPS security considerations when only accessing from one IP [duplicate]

I'm running an VPS where I have deployed some projects. As I am the only person who accesses the server and I furthermore have a fixed IP i decided to configure iptables so that server access is only ...
0
votes
1answer
517 views

https connection in LAMP(Ubuntu server) [duplicate]

Possible Duplicate: https setup with apache2 Tips for Securing a LAMP Server How to configure lamp running in ubuntu server for "https" connection..? I tried something from here.. http://www....
0
votes
2answers
308 views

Best practices for PHP configuration on shared server [duplicate]

Possible Duplicate: Tips for Securing a LAMP Server On a Linux based server, what are some of the best practices for securing PHP? What functions should be disabled (ex. exec, exec_shell, system)...
-1
votes
3answers
233 views

Server Security [duplicate]

I want to run my own root server (directly accessible from the web without a hardware firewall) with debian lenny, apache2, php5, mysql, postfix MTA, sftp (based on ssh) and maybe dns server. What ...
0
votes
2answers
330 views

Hardening Apache server [duplicate]

Possible Duplicate: Tips for Securing a LAMP Server. I want to learn about hardening and securing Apache server. Can anybody suggest me very detailed web resource. I also want to learn history of ...
0
votes
1answer
138 views

Exploits on Server [duplicate]

Possible Duplicate: Tips for Securing a LAMP Server. First of all sorry for my stupidness. I run a server, but everytime (once a week) it get 'hacked' by some things. The index is changing to "...
592
votes
13answers
129k views

How do I deal with a compromised server?

This is a Canonical Question about Server Security - Responding to Breach Events (Hacking) See Also: Tips for Securing a LAMP Server Reinstall after a Root Compromise? Canonical ...
11
votes
7answers
3k views

Hacking prevention, forensics, auditing and counter measures

Recently (but it is also a recurrent question) we saw 3 interesting threads about hacking and security: How do I deal with a compromised server?. Finding how a hacked server was hacked File ...
9
votes
8answers
1k views

Multi-site hosting - important vulnerability being missed to secure sites from each other?

EDIT #2 July 23, 2015: Looking for a new answer that identifies an important security item missed in the below setup or can give reason to believe everything's covered. EDIT #3 July 29, 2015: I'm ...
3
votes
1answer
5k views

script not found or unable to stat: /var/www/html/r.php

I have just seen a new series of error in the /var/log/apache2/error.log [Thu May 07 17:12:35.433760 2015] [:error] [pid 3488] [client 190.79.132.215:51660] script '/var/www/html/r.php' not found or ...
4
votes
3answers
898 views

IPtables locking down website allowing only SSH

I have written my first IPtables rule file to try and protect my server on all ports apart from SSH and the ports needed for the web. This is what I have come up with: i=/sbin/iptables # Flush all ...
4
votes
5answers
267 views

What are the 'gotcha's' a software developer needs to look out for if tasked with setting up a production ready server?

As a software developer I am very used to installing my typical stack (java, mysql and tomcat/apache) on my development machine. But setting up and securing a production machine is not something I ...

15 30 50 per page