Comments for How should I set up my Linux Web Server?

Comment from jeffatrackaid on 2010-05-19

2010-05-19T14:07:06Z

Mod Security is probably the best option you have applied. In my experience dealing with 100's of servers, I find web application exploits to be the most frequent issue followed by compromised FTP accounts.

You've blocked FTP at the firewall but this will not prevent the issue I often encounter. Various trojans still FTP credentials. This happens client-side so the FTP firewall block will not prevent this. It will however prevent the bots from logging in, so you do get some protection but a clever attacker would at least get the account login.

You may also want to consider rate-limiting SSH and perhaps access to your WHM ports with iptables. I've used this to great success on a large number of cPanel servers. More details on this technique here.
http://www.rackaid.com/resources/how-to-block-ssh-brute-force-attacks/

]]>

A comment on: How should I set up my Linux Web Server?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Darko Bunic on 2008-07-30

2008-07-30T07:47:09Z

It is good to minimize running services before publishing new Linux WEB server. Turn off all needless services as they are potentially security hole. I also have practise to forbid ssh root access ...
More can be read at http://www.redips.net/linux/lamp-setup/

]]>

A comment on: How should I set up my Linux Web Server?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Vijay on 2006-10-12

2006-10-12T14:15:28Z

Nice Article.
I am new bee in list whose server is hacked.

Following article suggest some of CPanel's setting.
http://www.shareware-promotion.org/resources,9.html

It could be useful for others.

Vijay.

]]>

A comment on: How should I set up my Linux Web Server?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Leo Notenboom on 2006-10-04

2006-10-04T22:28:09Z

Republishing terms & conditions are here: http://ask-leo.com/terms.html - if they don't work for you, email me directly.

]]>

A comment on: How should I set up my Linux Web Server?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Aniket Dasgupta on 2006-09-27

2006-09-28T06:05:03Z

can i publish this in my magazine i will mention you as the author and also put a link to your webste

]]>

A comment on: How should I set up my Linux Web Server?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Ujjwal Mukherjee on 2005-08-04

2005-08-04T12:20:46Z

how to setup web&mail server Ofredhat linux12(fedore core3)

]]>

A comment on: How should I set up my Linux Web Server?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.