A Beginner's Guide to Securing Your Server

[sime]

I would love to see a revised edition of the opening 3 posts. I suppose at some stage I will read all 10 pages :-)

[mitgib]

I would love to see a revised edition of the opening 3 posts. I suppose at some stage I will read all 10 pages :-)

I just finished with all 10 pages, was my goal of the day to impliment everything that was offered here that I saw benefit in, and if the 1st 3 posts were updated it would save the noobs (myself included) even more time which is the purpose of the thread I imagine.

BTW, excellent thread to everyone who has contributed.

[WebNET]

Yes it is an excellent resource to have. Just so you people know who use RackShack servers, the forums over there have an APF thread. I used it way back in 2003, and it's very informative. The APF author constantly updated the threads with new versions. Check it out.

DK

[[O-CuK]Marci]

Just installed BFD on our server, running FreeBSD 5.3-RELEASE-p5, WHM 10.8.0, cPanel 10.8.1-S114, and receive the following message...

[: unexpected operator
[: /var/log/exim_mainlog: unexpected operator
[: unexpected operator
[: unexpected operator
[: unexpected operator
[: /var/log/messages: unexpected operator
[: 0: unexpected operator
[: /var/log/messages: unexpected operator
[: 0: unexpected operator
[: /var/log/messages: unexpected operator
[: 0: unexpected operator
[: unexpected operator
[: unexpected operator
[: /var/log/maillog: unexpected operator
[: 0: unexpected operator
[: unexpected operator
[: /var/log/secure: unexpected operator
[: /var/log/secure: unexpected operator
[: /var/log/secure: unexpected operator
[: /var/log/secure: unexpected operator
[: unexpected operator

???

[WhiteBear]

Just pass the command : insmod ip_tables

When I type /usr/local/sbin/apf -s, I get the following:

Unable to load iptables module (ip_tables), aborting.

I type:

root@server [/]# insmod ip_tables
insmod: can't read 'ip_tables': No such file or directory

Please someone knows how to fix this problem?

WhiteBear

[chirpy]

What OS and version are you on, and is this on a VPS or a dedicated server? If a dedicated server, is it running a custom kernel or the OS vendor supplied one?

[abhijith]

Thanks for the valuble information

[WhiteBear]

What OS and version are you on, and is this on a VPS or a dedicated server? If a dedicated server, is it running a custom kernel or the OS vendor supplied one?

Hello Chirpy,

Fedora I
Dedicated Server
Custon Kernel, The HOST informed:They are not modules. iptables support is compiled into the kernel itself.

Thank you,

[chirpy]

In that case, you need to enable the MONOLITHIC kernel option as you cannot use the LKM functions for the kernel - somwhat restrictive.

[azz]

Yep, it has been rehashed millions of times. I just did it again with everything in one place. The reason why is because back when I was learning how to do it, I had to search all over the place to find it. Now months later I see that new comers are still having to do the same thing.

But there is more to it than that... when ever someone new comes into these forums looking for help, they get the same treatment, like at this thread: http://forums.cpanel.net/showthread.php?t=29457.

Honestly, I posted this for people that need the information. Not to argue with people who have nothing better to do than run around a forum ranting on every one.
.

Thank you very much for taking to time to put it all in one thread!

[djblamire]

I've just gone through installing and running the chkrootkit on my server, and it found the following:

Checking `bindshell'... INFECTED (PORTS: 465)

Can anyone advise what I need to do.

Thanks in advance,
Daniel

[nettigritty]

I've just gone through installing and running the chkrootkit on my server, and it found the following:

Checking `bindshell'... INFECTED (PORTS: 465)

Can anyone advise what I need to do.

Thanks in advance,
Daniel

ignore it

[djblamire]

Thank you

Daniel

[djblamire]

After changing SSH to another port I keep getting disconnected every few minutes. I have changed it back to 22, and now it stays connected.

Any ideas ??

Thanks
Daniel

[djblamire]

I have installed BFD and started it using the command "/usr/local/sbin/bfd -s"

Would I need to start this manually if I restarted the server, or is this automatic (as part of the install) ?

Thanks in advance,
Daniel