Linux How to defend against hackers

[Fiodor]

In few days I'm starting new OTserver, on tfs 0.4, debian 8, znote acc
I already changed 'phpmyadmin' to something less obvious and I have complex mysql password

What else do you think should I do to protect my server against people trying to break in?

 

[Nekiro]

Nobody will want to hack you if you wokt have any good amount of players xd

 

[Fiodor]

Once I had forum about OpenTibia with like ~10 users in general and somebody hacked and destroyed it
so xD

 

[Nekiro]

Once I had forum about OpenTibia with like ~10 users in general and somebody hacked and destroyed it
so xD

I had 50 players and never been hacked.
Use complex passwords like @s2S#12S#21S21W#$56s etc.

 

[LordVissie]

Once I had forum about OpenTibia with like ~10 users in general and somebody hacked and destroyed it
so xD

Don't trust anyone.

 

[hellboy]

In few days I'm starting new OTserver, on tfs 0.4, debian 8, znote acc
I already changed 'phpmyadmin' to something less obvious and I have complex mysql password

What else do you think should I do to protect my server against people trying to break in?

1. Remove php my admin at all and use only mysql in console
2. Generate ssh keys and turn off login by password too debian (use ssh keys)
3. Try configure fail2ban for acc menager (google it)
4. Add monitoring tool for daemons (maybe monit? https://mmonit.com/monit/ ), download and compile latest
5. Try too find good iptables configuration for TFS
6. Remove possibility too login into mysql root from any network

Good luck!

 

[seba2632]

as Hellboy mentioned, add IP restrictions to your databases

 

[Red]

What else do you think should I do to protect my server against people trying to break in?

@hellboy has made some good suggestions. A majority of hacking comes not from technical vulnerabilities nor poor security measures.
A majority of hacking comes from social engineering. If you ever decide to share sensitive information with someone else, share the information with one of these two expectations:

1. It will be leaked or used to exploit you in the future.
2. You're willing to have it leaked or exploited.

One, but usually both, will occur in the long-run; few exceptions exist.
Red

 

[Fiodor]

wisely said
that's why I'm trying to avoid sharing any sensitive informations

thank you guys, propably I won't follow all @hellboy tips, because I'm not experienced in linux and web administration at all, but uncle Google is very helpful

I installed fail2ban, but when I'm trying to enable/restart it, error appears

sudo service fail2ban restart
[ ok ] Restarting authentication failure monitor: fail2ban.

how to fix it?

 

[N e r o n Z]

Once I had forum about OpenTibia with like ~10 users in general and somebody hacked and destroyed it
so xD

If you got hacked then I can just say... Stop using same password

 

[hellboy]

I installed fail2ban, but when I'm trying to enable/restart it, error appears

sudo service fail2ban restart
[ ok ] Restarting authentication failure monitor: fail2ban.

how to fix it?

You have to configure it first. Google about configure it with nginx or apache2 ( I don't know what you use) and ssh