A Beginner's Guide to Securing Your Server

[Nathan D.]

How can I make chkrootkit send a nightly email of the results?

Thanks in advance,

[gpilot]

Credit goes to Webhostgear, but works for me on my server. This assumes you already have chkrootkit installed:

Daily Automated System Scan that emails you a report

While in SSH run the following:
pico /etc/cron.daily/chkrootkit.sh

Insert the following to the new file:
#!/bin/bash
cd /yourinstallpath/chkrootkit-0.42b/
./chkrootkit | mail -s "Daily chkrootkit from Servername" admin@youremail.com

Important:
1. Replace 'yourinstallpath' with the actual path to where you unpacked Chkrootkit.
2. Change 'Servername' to the server your running so you know where it's coming from.
3. Change 'admin@youremail.com' to your actual email address where the script will mail you.

Now save the file in SSH:
Ctrl+X then type Y

Change the file permissions so we can run it
chmod 755 /etc/cron.daily/chkrootkit.sh

Now if you like you can run a test report manually in SSH to see how it looks.
cd /etc/cron.daily/

./chkrootkit.sh

You'll now receive a nice email with the report! This will now happen everyday so you don't have to run it manually.

[agentblack]

Can admin's please sticky this, this is a great guide for any beginner or advanced user to help cover a base you might have missed, PLEASE sticky this!

Thank you to the creator of this post.

[Ishware]

As has been pointed out - it's old info, even if mostly still relevant.

Would be better for the experts (of which I am not one) to try and work on a new guide, re-using from here what's appropriate.

[KeB]

As has been pointed out - it's old info, even if mostly still relevant.

Would be better for the experts (of which I am not one) to try and work on a new guide, re-using from here what's appropriate.

I was just going to ask a similar question, I notice the original article is over 4 years old, i would guess that maybe some of the recommendations have been implemented by Cpanel themselves.

From the original article, what is still applicable to the current version of Cpanel and would should be implemented?

[deejay]

Same question here!

Can we have this updated please (the original post is over 4 years old).

Thanks

[Infopro]

Meantime, here is a link to cPanel's Recommended Security Settings (pdf) last revised Dec '09.

[cPanelKevin]

Thanks to all who contributed to this great thread.

We will be making alot of this part of our "Securing your Server" article that should hopefully be available officially soon.

[Ishware]

Thanks to all who contributed to this great thread.

We will be making alot of this part of our "Securing your Server" article that should hopefully be available officially soon.

Still in progress, or is it out there and I can't find it?

Many thanks either way, glad to see so much great stuff cPanel is working on.

[Lygas]

Hi there, New in WHM/cPanel here.

The first post's Guide is still active? i mean i was only do the basic setup in WHM but nothing about Firewall or Security issues.

Is there some Basic setting to do for more Security or is enough the default firewall settings..?


Thanks, Demetris

[k-planethost]

you have to trigger the firewall
csf-check server security there are some suggestions.
this is an old guide some things had changed but it is a beginning for securing a server

[Lygas]

Thanks k-planet ! I just install the csf (ConfigServer Firewall).

Is there some suggestions for best results ..?

[cPanelKevin]

cPanel 11.30 Recommended Security

Recommended Security Settings

[cPanelKevin]

Also pages 30-32 of this special cPanel version of Ping Zine magazine is my article on PHP Security some may find helpful.

Ping! Zine » Special cPanel Edition – Nick Koston: The Man Behind the Curtain

[Lygas]

Thanks mate ! i start to reading now.