Securing a new lxadmin vps?

Discussion in 'Security' started by st_jimi, Dec 27, 2007.

  1. #1
    What precautions should i take securing my new lxadmin vps , i know i need a firewall what do you recomend to use, i know apf is ighly recommended but is it compatible with my control panel any help would be great thanks
     
    st_jimi, Dec 27, 2007 IP
  2. Colbyt

    Colbyt Notable Member

    Messages:
    3,224
    Likes Received:
    185
    Best Answers:
    0
    Trophy Points:
    210
    #2
    At the current time I don't think there are any known exploits in LX. So other than your firewall and secure passwords I think you are good to go.
     
    Colbyt, Dec 27, 2007 IP
  3. grk519

    grk519 Peon

    Messages:
    293
    Likes Received:
    4
    Best Answers:
    0
    Trophy Points:
    0
    #3
    APF will support anything, you just have to open the ports. Check to see which ports are open on your system and add them to the APF configuration file. Just because there are no exploits in lxadmin doesnt mean there arent any on the system, there are plenty of other steps you should go through, I will list a few, but if you need professional help, contact me.

    >> Disable apache identification outputs.
    >> Secure SSHD Daemon. Disable direct root login, change default SSH port.
    >> Disable unncecesary system default accounts.
    >> Disable insecure PHP functions to prevent execution of malicious scripts.
    >> Modify/enable various Kernel (sysctl.conf) settings for performance/security.
    >> Setup Denial of Service (DDoS) and SYNFLOOD protection.
    >> Secure and harden /tmp and /var/tmp.
    >> Change permissions on compilers and fetch utilities. [root only]

    Of course there is a lot more like brute force detection and others, but it depends how much security you WANT.
     
    grk519, Dec 27, 2007 IP
  4. st_jimi

    st_jimi Peon

    Messages:
    632
    Likes Received:
    8
    Best Answers:
    0
    Trophy Points:
    0
    #4
    i already done most of that just not this one ">> Setup Denial of Service (DDoS) and SYNFLOOD protection." what do you suggest for that
     
    st_jimi, Jan 3, 2008 IP
  5. oc-scott

    oc-scott Active Member

    Messages:
    420
    Likes Received:
    3
    Best Answers:
    0
    Trophy Points:
    68
    #5
    Securing the server depends on the applications you are running on the server. Its a false thinking that installing an APF will configure the server. There are a lot of things to do ranging from compiling the kernel (you doesn't want it since you have a VPS) to securing the web server. Its better to contact an expert to do that for you to avoid problems in future.
     
    oc-scott, Jan 19, 2008 IP
  6. Pwner

    Pwner Peon

    Messages:
    176
    Likes Received:
    6
    Best Answers:
    0
    Trophy Points:
    0
  7. D'Godown

    D'Godown Well-Known Member

    Messages:
    1,093
    Likes Received:
    25
    Best Answers:
    0
    Trophy Points:
    140
    #7
    install bfd and rootkithunter as well
    plus, change ssh port from 22 to anything secret
     
    D'Godown, Apr 3, 2008 IP