Tutorial: How to secure your server?

i took some time to write a tutorial on the basics of securing the linux server (server hardening).

Basic Linux Server Security

Install Firewall (APF or CSF Firewall with BFD)
ModSecurity (Web application firewall)
ModEvasive (Prevent DDOS attacks)
Harden SSH server
Fix Open DNS Recursion
Install RKhunter
Install ClamAV (Antivirus)
XInet Servers Hardening (Disable Telnet/Finger or unwanted services)
Securing PHP
PortsEntry (tool to detect portscans)
Harden host.conf (against IP spoofing)
Check User Uploaded files
Secure /tmp Folders (noexec, nosuid)

Full article: see here

Leave me a feedback if you have anything to comment! thanks

 

Good tutroial
Thanks for sharing

 

Thank you for the tutorial.

It's well written and very informative. =]

 

Thanks!
Great tutorial, just want I've been looking for

 

thanks for sharing

 

Good summary. Nice work.

 

the article is real good !

 

thank you for article

 

Great guide. Thanks for that.

 

Great Tutorial, I'm gonna install some of these things on my server.

 

Thanks for this...

I didn't see the securing temp tutorial...

 

Thanks for the excellent tutorial man!

 

Mod_Security installation for cPanel is quiet outdated. You don't enable it as a plugin, it is now part of EasyApache and can be compiled with it.

But decent tutorial non the less, this are basic things that should run on every server for basic security.

 

Very good tutorial. Thanks.

 

Great tutorial, got a few new tricks to try from it!

 

nice job but one question when i do su to root how can i adduser i tried it and it doesn`t work that`s my only down fault in not using it

 

Type /usr/sbin/adduser instead of just adduser

 

Thanks alot for the help Sir

 

Looks a lot like http://www.knbykl.org/linux/how-to-secure-linux-servers/

 

Original :/