5 Crucial Hints To Locking Down A VPS Server

by SYA on September 10, 2011

Securing your VPS server is a very important action to save you from virtual crime. By keeping your VPS protected early on, you’re saving time and effort and you’re preventing other problems as well. It’s not that hard to protect your UK Linux VPS host. In this article, I’ll illustrate the five most basic steps you need to take in order to protect your VPS.

Installing a Fire wall

By installing a firewall, you can save your Linux virtual server hosting from unauthorized access and from powerful force attacks. You can also add Config Server Firewall (CSF), System Integrity Monitor (SIM), Network Socket Inode Validation (NSIV), and Linux Environment Security (LES) if you want to protect your server more. Once you’ve installed a firewall, you’ll realize that you need to open extra ports if you want to add new applications and programs, but it will be worth it.

Root Kit Hunter Installation

Of course, some viruses like root kits, backdoors, local exploits, and Trojans can be sneaky enough to pass through a firewall. This is what a root kit hunter is for. It can be useful to detect any failures in your layers of defence. In the following list you will see the steps in installing a root kit hunter.

a. With your SSH as root, log in to your server. [root@support007 ~]# cd /usr/local/src/

b. Get the latest RKHunter Version. [root@support007 ~]# wget rkhunter.1.3.2.tar.gz

c. Extract files as indicated. [root@support007 ~]# tar -xzvf rkhunter-1.3.2.tar.gz

d. [root@support007 ~]# cd rkhunter-1.3.2

e. [root@support007 ~]# ./installer.sh

f. RKHunter will then send you daily scan reports via email. [root@support007 ~]# pico /etc/cron.daily/rkhunter.sh The above steps will ensure that you will install a root kit hunter successfully.

/tmp partition

Most of the attacks and exploits use /tmp to work out of any propagate themselves. You can mount your /tmp with stops that can make sure that executables can’t be run from /tmp and to prevent escalated privileges. Such stops are “noexec” and “nosuid”. You can do it by adding none /tmp tmpfs nodev,nosuid,noexec 0 0 in “/etc/fstab”. After you save the file and reboot the VPS hosting UK, you can be sure that your VPS is actually safer.

ModSecurity

ModSecurity is an open source intrusion detection and prevention engine for web applications and helps in preventing attacks on programs that would be vulnerable; it acts as a powerful shielding application from attacks. ModSecurity supports both branches of the Apache web server.

PHP suEXEC

A PHP usually executes as the user or group (normally “apache” or “nobody”) when it runs as an Apache Module. On the other hand, Apache is supplied with suexec, which allows executing CGI scripts as the user they belong to, instead of Apache’s user. By making use of these features you can better protect your server, especially from co-users you don’t really trust and who may put CGI content in your server.

You can secure your VPS hosting UK by following these five basic steps. You can protect it from external and even internal viruses. You have to remember that your hardware and the files in it are extremely important, and should be protected from all possible dangers, be it Trojans, root kits, and other viruses. Recovering all your lost data can be costly, and you can actually consider protecting your VPS as a smart investment, since it’ll pay off in the long run.

Are You Looking To Change Your Life & Experience Financial Freedom? At Virtual Assistant Live We Show You How...

Previous post:

Next post: