If you have a fully managed VPS that means either you did not have time to manage it or did not know much about server management that is why you are having a fully managed VPS
In case you do not know about servrs How can you know that the vps which is being fully managed is secure enough? and settings like firewalls are correct?
Is there any online tools to verify that?
We want to serve web pages and I think we're getting very close to picking a partner for that. But we also want to have a secure, HA mySQL instance to vend serial numbers to purchased products. This means two more servers at separate data centers behind a load balancer. HA web servers are pretty expensive, is there a mySQL only solution that would be cheaper?(Connectria?) The load would be very light....
View 3 Replies View RelatedI work for a small web design firm with about 100 clients/domains and we are starting the search for a new hosting provider. We need a managed dedicated server with an offsite backup. We are also looking for a company that knows what they are talking about. If we have a Linux or server question they need to be able to give us a quick straight answer. Also, if they could help us transfer all our hosting accounts from our current server over to the new one that would be a BIG plus.
We have been thinking about Rackspace or 1and1.com but were wondering what the community thought. Any recommendations?
how the hosting provider would back me up in setting up my vps, support in additional issues etc. with regards each of the above topics.
View 2 Replies View RelatedHow can one tell the "hosting company" that advertise hosting is a reseller or owns the data center?
I bet 99% are resellers but how can one find out ? is there a web tool?
I have been trying to look for the damn thing everywhere and I can't find anywhere that has it either apart from extreme support of course which they want my life out of me.
I am after a good extreme 24e3 firmware that supports SSH and Web GUI since mine one for some reasons do not have that feature.
I have around 20 bucks (not alot i know but hey that all i got in my paypal)
How can I be a distributor for the domain of foreign companies
I was one of the Arab states and many wish-host of foreign companies
Come across this a few times now, when I come to issue a new VPS find that a IP address is on a spam list from a previous owner of the IP range, even came across and IP block we got issued with a few null-routed IPs!
Has anyone, or hosting providers come across this? Where datacenter issue IPs with problems? On spam lists or worse . . .
I am considering moving to dedicated server, what are risks with self managed server compared to managed?
Managed servers are very expensive for my needs.
When a colo vendor can consider themselves as a managed colocation provider? What make them different than *normal* colo service?
If you need a managed colo, why not go with managed server? With managed server, your vendor will take care about the server health, including software and hardware too
(I am mentioning to fully managed server vendors like Rackspace, don't tell me cheap managed servers)
I've always had hosting where everything is pretty much already setup. I am now considering getting my own dedicated server. I see most good packages are Self Managed Servers.
I'm not a system admin and never had any experience managing and setting up my own server. Is this a lot of work? Is this something that is also pretty easily learned or does this really take a lot of knowledge?
how can i secure my tmp on vps?
mount -o loop,noexec,nosuid,rw /dev/tmpMnt /tmp
it isnt work on vps and i have this error:
[root@ dev]# mount -o loop,noexec,nosuid,rw /dev/tmpMnt /tmp
mount: could not find any device /dev/loop#
i want to secure my /tmp and do this:
so i try this link
[url]
so:
cd /dev
dd if=/dev/zero of=tmpMnt bs=1024 count=150000
/sbin/mke2fs /dev/tmpMnt
cd /
cp -R /tmp /tmp_backup
mount -o loop,noexec,nosuid,rw /dev/tmpMnt /tmp
but i have this error:
root@server [/]# mount -o loop,noexec,nosuid,rw /dev/tmpMnt /tmp
mount: no permission to look at /dev/loop#
when I get a dedi server for shared hosting. I secure it as much as i can and then just incase I miss stuff etc I hire 2 other companys to check over everything. Since I bought a vps from fsckvps are there any guides to secure and optimize a vps other then the one located in the vps section? thanks. I Dont feel like spending 50+ dollars on securing a vps that costs less then 15 a month.
View 14 Replies View Relatedvbulletin.com/forum/showthread.php?t=281011
How secure is my VPS? Anyone who has some free time and is reading this thread could please try to do some penetration-testing or something related (I really do not know much about network security) in order to know if my server configuration could be the problem?
Do you find any way to download the full database without login on the system (cPanel or phpMyAdmin)?
i'v been Installed all these In my VPS server
1)Disable Functions:
system,system_exec,shell,shell_exec,exec,passthru,escapeshellarg, escapeshellcmd,proc_close,proc_open,ini_alter,dl, popen,parse_ini_file,show_source
and Enable The Safe_Mode.
---------------------------------------
2)Hide_your_apache_Version
---------------------------------------
3)Install LogWatch in a Server
---------------------------------------
4)Mod-Security-Install
---------------------------------------
5)Root-Login (IP Sent).
---------------------------------------
6)Disable Login Root and Change SSH Port .
---------------------------------------
7)Installing eAccelerator .
---------------------------------------
8)Install Nobody Check
---------------------------------------
9)Updateing All of
/scripts/upcp
/scripts/updatenow
/scripts/sysup
/scripts/fixeverything
/scripts/exim4
/scripts/easyapache
/scripts/securetmp
----------------------------------------
but doesnt know yet what the better to secure my vps ..
and about Firewall two .. wich firewall better
CSF or APF+BFD ..
I have an application that requires a Secure FTP connection to a server to work. I am having trouble connecting to one server, a windows based server, while the CentOS Linux server is working fine.
Does anyone know where I can find test Secure FTP locations so I can determine if the issue is with misconfiguration or with an incompatibility of the program with windows Secure FTP sites?
I am able to connect to both sites using WinSCP and choosing Secure FTP.
Check out this blog and suggest what thing more can be added to secure the vps and i think this information database can be helpful for newbies and intermediate users which like to secure the VPS.. which sometimes exploited due to bad scripts.
[url]
Ive been using Dreamhost for years and there great however, One of my clients needs has drastically changed and they are now required to comply with the Data Protection Act.
In particular this bit make Dreamhost a bit of a no go due to them being in California:
"Personal information may not be transmitted outside the EEA unless the individual whom it is about has consented or adequate protection is in place, for example by the use of a prescribed form of contract to govern the transmission of the data."
Unless my client goes and asks all 1000+ customers they are kinda in a bit of a quandary. So here's what im looking for:
Secure UK Datacenter, eg Easynet, Blue Square etc
128mb RAM, 256mb Burstable, 20GB storage, 500GB transfer
LAMP Environment
Support within Business Hours
Control Panel
So I just got SVN installed on my server, and now I'm wondering about the best way to go about securing it. This is what I've had done so far
the executables were installed to /usr/bin as ROOT
Then I created a directory in /usr/local/svn as ROOT to hold the svn repositories (the conf folders, etc).
I've decided that I'd like to use the SVNSERVE tool rather than have to run Apache2 which my current VPS provider does not provide any support for.
So I've run SVNSERVE like so:
svnserve -d -r /usr/local/svn --listen-port=7126
Then for each repository within the /usr/local/svn folder I've gone into the conf folder and added:
anon-access = none
auth-access = write
password-db = passfile
realm = myrealm
The passfile is located in the same directory (ie. /usr/local/svn/test) and contains my users in the format:
[users]
harry = harryssecret
sally = sallyssecret
I then run my checkouts like so:
svn checkout svn://mysite.com:7126/test
Now my question is how secure is this. I was tempted to use svn+ssh but I couldn't seem to figure out how to get it configured. Is the protection I have adequate? How easily can this be compromised? What steps should I take to lock it down further. Can I limit the connection to SVNSERVE to only come from certain specific IP's... similar to how apache does:
Order deny,allow
deny from all
allow from 192.153.123.12
What would be the most secure free CMS at the moment? I ask this because im looking to setup a website, and i dont have enough money to invest in a custom coded website, so to start out with ill use a free CMS, but i dont want to be hacked.
Now i know that because the CMS's are open source, they can still be hacked, what im looking for is something that is the most secure, preferably with sql injection protection.s?
Secure FTP?
Entirely dependent on Client Software or do we need to buy an SSL certificate and install it on our server as well?
How it works?
[url]
i followed the guide, after done I reboot the server then it gives me these errors:
Quote:
mounting local filesystems: Failed
mounting other filesystems: /dev/tmpMnt: No such file or directory
How can I make a domain and a subdomain points to different hosting accounts. For example
[url]-->host1
[url]-->host2
I want to make this through my resellerclub managed DNS service
We're starting a new video sharing project much like YouTube, so there will be lots of video conversation taking place, as well as high volume traffic on a website driven primarily by PHP and MySQL. It is very important that the company be able to host adult content.
We are looking for a managed VPS under $40. This is not a hard cap. We've been looking at EarthVPS but would like to check out more companies before making a decision. The price point that EarthVPS offers is relatively in the right spot. We are looking for comparable resources as well.
EarthVPS offers 50GB of space, 1000GB bandwidth for $35 a month. Keeping in mind cPanel is $12 more per month.
What is EarthVPS' reputation? Are there any other companies out there that offer a managed VPS service at around the same price point with roughly the same resources?
One of my sites needs a vps of its own... the hosts ive tried so far have not been very satisfying (uptime wise) but i will not list them because they had a 30day refund policy and that alone is enough to say thanks and a friendly goodbye.
What im looking for in a vps... (atleast)
-10gb filespace
-200gb bandwidth
-Managed
-Cpanel
-Unlimited domains/sqls (would be nice to add on some domains)
-Reasonable setup time
-Money back garuntee (not a must but id lean more towards hosts that offer)
-Reasonable uptime (i know 100% isnt possible.. least 80%?)
-Located near southern california is a plus
I think i nailed pretty much everything im looking for unless i forgot something.
Thanks for the recommends in advance!
My budgets about $50 by the way.. (can pay more depending on the host)
I'm having a little trouble with setting up DNS. I'm not sure if it's setup right, and it's acting slow the *first time* you connect (but normal until you reconnect again, wait 3 minutes).
3 domains at 000domains.com. 5 DNS each domain at dnsmadeeasy.com. Reseller plan with dedicated IP at polurnet.com.
- At dnsmadeeasy I enter the domain daemn.com and IP.
- At 000domains I register n1-ns5.daemn.com with my 5 DNS IPs.
- At 000domains I update daemn.com's DNS to n1-n5.daemn.com
- At 000domains I add A record with daemn.com's IP.
- At WHM I edit daemn.com's DNS to ns1-ns5.daemn.com
- At WHM I change daemn.com's A records ns1-ns5 to the 5 DNS IPs.
I repeated the same for the other 2 domains. Looks like they gave me the same DNS IP's for all 3 domains though.
On top of all that, I added subdomains in cPanel (which added A records for them) and they still haven't resolved (5ish hours). Didn't take this long before. I wonder if I need to add A records at 000domains too, or I did this all wrong.
What is best method to secure the tmp?
1. /tmp mounted as noexec,nosuid?
2. creating /usr/tmp directory?
