Securing whm (dns-only)

[ManuelT]

just trying to properly secure a new installation of cpanel DNS only and wanted to check.


1. Is stopping the external mySQL port 3306 ok via adding skip-networking to /etc/my.cnf as I couldn't find much about it.
2. how can i stop people logging on over insecure ports :2086

Many thanks in advance.

[chinmay]

just trying to properly secure a new installation of cpanel DNS only and wanted to check.


1. Is stopping the external mySQL port 3306 ok via adding skip-networking to /etc/my.cnf as I couldn't find much about it.
2. how can i stop people logging on over insecure ports :2086

Many thanks in advance.

If you do not want the ports 2086 and 3306 accessible, you can block the ports in the server firewall (preferably csf).

[ManuelT]

Why would I want to firewall a service that I can switch off. Firewalls are great but they shouldn't be used as a replacement for good systems admin.

As i said i already had switched 3306 off by using skip-networking
How do i disable port 2086 without using a firewall

[PlatinumServerM]

Specifically regarding port 2086, that is standard and hardcoded into whm. There is no separate way to shut off the port for whm. Blocking it in the firewall should be sufficient and would block all accesses to that port.

[chinmay]

yep.. firewall's are the best options to block the ports which are standard and hardcoded.