| By :
Dirik Hameed
There are criminals out there who have learned to exploit the Internet in order to take advantage of other people. Because of this, you need to secure your VPS server. By keeping your VPS protected early on, you're saving time and effort and you're preventing other problems as well. You can keep your Linux VPS secure with just a couple of steps. The five most important steps are as follows: Firewall A firewall can keep unauthorized users and other harmful viruses out of your VPS UK and Windows VPS host. You can also add Config Server Firewall (CSF), System Integrity Monitor (SIM), Network Socket Inode Validation (NSIV), and Linux Environment Security (LES) if you want to protect your server more. If you have installed a firewall, then it is necessary to open up extra ports to add new services or programs. Installing root kit Hunter You can easily scan for Trojans, root kits, backdoors, local exploits, and other threats to your security with a root kit hunter. It can be useful to detect any failures in your layers of defence. If you want to install a root kit hunter, the following steps need to be followed. a. Login to your server via SSH as root. [root@support007 ~]# cd /usr/local/src/ b. Download latest RKHunter Version [1.3.2] [root@support007 ~]# wget rkhunter.1.3.2.tar.gz c. Extract files [root@support007 ~]# tar -xzvf rkhunter-1.3.2.tar.gz d. [root@support007 ~]# cd rkhunter-1.3.2 e. [root@support007 ~]# ./installer.sh f. Now setup RKHunter to e-mail you daily scan reports. [root@support007 ~]# pico /etc/cron.daily/rkhunter.sh You need to follow the bove steps if you want your root kit installation to be a success. /tmp partition security /tmp is a common method used by hackers and viruses in order to work out of any propagate themselves. By mounting /tmp with noexec and nosuid (meaning executables cannot be run from /tmp nor with escalated privileges), this stops many of these exploits from being able to do any harm. You can do it by adding none /tmp tmpfs nodev,nosuid,noexec 0 0 in "/etc/fstab". After you do this, you just need to save the file and reboot the VPS hosting UK. ModSecurity ModSecurity is actually a powerful shield against most attacks. It's open source, meaning it's free. It detects intrusions and prevents attacks on your programs that could be the most vulnerable. It's also compatible with Apache web servers. PHP suEXEC Once a PHP runs as an Apache Module, it executes as the user or group of the web server. In most cases, this is usually "nobody" or "apache". You can also make use of suexec, a mechanism supplied with Apache. This lets you execute CGI scripts as the user they belong to, instead of Apache's user. By making use of these features you can better protect your server, especially from co-users you don't really trust and who may put CGI content in your server. You can secure your VPS hosting UK by following these five basic steps. You can protect it from external and even internal viruses. Because protecting your files and your hardware should be your top priority, you should be wary of any Trojans, root kits, and other possible dangers against your computer. Recovering all your lost data can be costly, and you can actually consider protecting your VPS as a smart investment, since it'll pay off in the long run.
|