Server Security

Audiopro

• April 12, 2014 03:48

I was quite surprised to see that my VPS was delivered with some security issues unresolved, is it normal for them to be delivered this way? I have closed a lot of the obvious holes but security advisor reports that there are still some outstanding issues. Which of the following security alerts should be dealt with urgently and which, if any can I ignore or is it a case of, if they appear in the list they must be dealt with as soon as? Apache vhosts are not segmented or chroot()ed. ClamAV is not installed. Frontpage is installed Current kernel version is out of date. current: 2.6.32-358.14.1.el6, expected: 2.6.32-431.11.2.el6 SSH password authentication is enabled. SSH direct root logins are permitted. Outbound SMTP connections are unrestricted.

• 

  pauloray

  • April 12, 2014 10:23

  Is this a new Unmanaged VPS? Usually, VPS providers will just install the OS and Control Panel and you take care of the rest. You can also use CSF with your Cpanel, it's a good firewall.

  0
• 

  Audiopro

  • April 12, 2014 12:22

  Thanks for the reply, yes it is unmanaged. CSF is not installed, is that something I can install myself or does the ISP have to do that for me?

  0
• 

  PenguinInternet

  • April 12, 2014 13:05

  If you have root access, you can install CSF yourself ([url=http://configserver.com/cp/csf.html]ConfigServer Security & Firewall)

  0
• 

  Audiopro

  • April 12, 2014 19:06

  Thanks - I will look into that tomorrow when the beer has worn off. I am sure I will get my head round all this eventually and the journey is made easier with the help from you guys.

  0
• 

  cPanelMichael

  • April 14, 2014 14:32

  Hello :) To answer your question, it's not out of the ordinary for a VPS provider to setup your server from a template. This may result in an older kernel version, and require you to make some changes to the server in order to increase the security. Let us know if you have any questions about the specific recommendations listed on the Security Advisor. Thank you.

  0
• 

  Audiopro

  • April 14, 2014 15:31

  Do you recommend I carry out all the changes highlighted by security advisor or are some of them not required?

  0
• 

  cPanelMichael

  • April 14, 2014 19:10

  Yes, personally I would follow the recommendations and implement the changes. However, you may need to review the suggested changes and see if it works for your particular environment, or consider alternatives if necessary. Thank you.

  0

Please sign in to leave a comment.