How to secure my server

[MeNi]

Hi.

I am planing to start new OTS, on dedicated server with linux. As its going to be my first serious server, i want to know how i can secure it.

I am going to host newest version of TFS, 0.3.5
There will be Gesior/Unnamed AAC on it
It will be dedicated server with linux OS


I want do my best to secure it, so i hope you will helpe me :thumbup:

 

[MeNi]

bump

 

[NilssoN042]

first remove pma from phpymadmin

 

[Saints Anathema]

sadly this is something you pretty much learn from trial and error..

simply saying, hi tell me how people will fuck my server... wont really get anyone to make a huge ass list for you.

i suggest typing in "my server was hacked" or security in the search function

 

[Migxxx]

First if you want a secure server don't use Unamed-CMS

2: Filter the ports with a firewall or router (I would recommend both if you are a security freak), only set 7171/7172/80 to open (You will probbably need to set more ports to open (on my server i filter them by ip) like SSH/virtual desktop or w/e you gonna use...)
3: add DDoS evasive mod for apache2 (Not required but is good to fight scriptkiddies 'apt-get install libapache2-mod-evasive')
3: Rename the phpmyadmin shortcut (in case you install phpmyadmin) You can also add an .httacces with the ips you want

HmmMmmMm i guess those are the most importants one....

 

[MeNi]

First if you want a secure server don't use Unamed-CMS

So Gesior AAC isn't safe? And if it isn't, why?

 

[Sizaro]

So Gesior AAC isn't safe? And if it isn't, why?

Just use the latest versions and you'll be fine :thumbup:

 

[Feloth]

Just use the lastest versions and you'll be fine :thumbup:

latest*