The 1and1 OS Secure package is a fresh install of one of our supported operating systems plus hardening.
Operating systems supported
CentOS 5.1 i386 - CentOS 5.1 x86_64 - CentOS 4.6 i386 - CentOS 4.6 x86_64
System Configuration
RAID 1 setup and fully configured (where applicable)
Swap partitions will be fully configured in a non raid format with priorities set on both partitions
Server hostname will be setup to your desired hostname
Any system updates/upgrades (including kernel) will be installed
Security & Hardening features
Firewall
Install and configure APF (advanced policy firewall). All standard ports will be set and any custom ports configured if needed.
Brute Force Detection
Install and configure BFD (brute force detection). BFD is a script for parsing applicable logs and checking for authentication failures.
Portscan Detection
Install and configure PSAD. PSAD will analyze iptables log messages to detect port scans and other suspicious traffic.
Rootkit / Exploit Scanners
Install chrootkit & RKhunter. These exploit scanners will scan your system daily and email you the reports.
Logwatch
Reconfigure logwatch to send you daily, detailed copies of your system logs.
System Binaries
Set the correct permisions to unsafe system binaries.
host.conf Hardening
Harden host.conf from system spoofing etc.
sysctl Hardening
Harden sysctl to prevent spoofing/dos attacks.
SSH
Configure, Harden & secure SSH.
Shared Memory
Secure system shared memory, /dev/shm.
Secure tmp Partitions
Secure any /tmp partitions.
Harden PHP
General hardening of PHP, Disable dangerous functions etc.
PHP Addons
Install Zend optimizer and Ioncube loaders.
Apache Mods
Install Mod_Evasive and Mod_Security.
Root Login
Set a root login notification to a specified email address.
Price: £65.00 GBP one time |
|
|
