How to protect a dedicated server?

[nidhijain1221]

Hello friends,

How to protect a dedicated server? Please suggest me best way of it.

[RH-Calvin]

Dedicated servers are already protected from any attacks as they come with more security and firewall. What kind of protection are you talking about?

[ProgrammerGuy]

Like RH-Calvin said dedicated servers are usually pretty well protected. Speaking from experience the only way I've ever known a server being compromised is by security loopholes in the websites it hosts. So if you want to help ensure security and host for 3rd parties make sure their code is secure. We were once hacked through a customers website we hosted whose developer left an upload folder permanently writable to all users and viewable from the front end site!

[rapidsslonline]

Like RH-Calvin said dedicated servers are usually pretty well protected. Speaking from experience the only way I've ever known a server being compromised is by security loopholes in the websites it hosts. So if you want to help ensure security and host for 3rd parties make sure their code is secure. We were once hacked through a customers website we hosted whose developer left an upload folder permanently writable to all users and viewable from the front end site!

Agree with points of security. Dedicated servers already comes with firewall security, if you think there is loopholes then you should protect website with SSL certificates or else you can protect software code and content with code signing certificate.

[james0131]

Dedicated servers already comes with firewall protection, if you believe there is loopholes then you must protect website with SSL certificates

will be best one

[ProgrammerGuy]

Thats true, but make sure you're getting a hardware firewall too. This sometimes costs extra and it is not uncommon for companies to list firewall protection when it is simply a software based firewall on the server itself.

Sure, SSL is one way to help secure a website. But in reality it will only really protect you from packet sniffing to get passwords etc etc that are in transit. By loopholes I mean actual vulnerabilities in the code that allow things like SQL injections, publically writable directories that allow script execution (a script based shell can be uploaded to these), encrypting you passwords in your database and so on. These are things that an SSL just cannot protect against. So be on the lookout for these too.

[wcdservers]

Easiest one is firewall. Easily configurable if you are in windows or linux. The 2nd thing I would recommend for linux is changing common ports. For example, dont keep your sshd running on port 22. Also dont allow password logins, require rsa key. Also a very easy one is making sure you keep all software up to date.

[moloypal]

Good say alll

[SammiRose]

Dedicated Servers are fully protected with high class security and firewall configurations settings. Dedicately it will your own server. You are heavily paying for it. No other websites hosted and no other IPs usage.

[ghdownloadseo]

Well if you want 100% protection, just remove the network cable from the server


Otherwise, it's just the "normal stuff"


- Make sure all the software is up-to-date
- stop all unnecessary daemons/services
- choose good strong password
- monitor logs etc.


It's always a trade-off between security and usability.


Frank

[cullbuddy]

Found a good resource to your question.

hostdime.com/blog/dedicated-server-security/

[kaufenpreis]

Maybe you should better install logcheck/portsentry (great programs!) It will email to you strange logs and scan attempts

I think it checks all system logs (ftp, messages, etc.) also you can configure it to check other logs

I think you cant check logfiles via WHM, or maybe just a few error pages or something like that. some logs are located inside /var/log/

Closing ports that you dont use and setting hosts.allow to just allow connections from trusted ips. Disable ssh/telnet access to your users, and activating this just for the ones that request this service, checking file permissions, etc.

[taufikflurry]

Maybe you should better install logcheck/portsentry (great programs!) It will email to you strange logs and scan attempts

I think it checks all system logs (ftp, messages, etc.) also you can configure it to check other logs

I think you cant check logfiles via WHM, or maybe just a few error pages or something like that. some logs are located inside /var/log/

Closing ports that you dont use and setting hosts.allow to just allow connections from trusted ips. Disable ssh/telnet access to your users, and activating this just for the ones that request this service, checking file permissions, etc.

I agree with him it will good for you