Security Package 1 is a good starter security and hardening package for any dedicated server.
Security & Hardening features
Firewall
Install and configure APF (advanced policy firewall). All standard ports will be set and any custom ports configured if needed.
Brute Force Detection
Install and configure BFD (brute force detection). BFD is a script for parsing applicable logs and checking for authentication failures.
Portscan Detection
Install and configure PSAD. PSAD will analyze iptables log messages to detect port scans and other suspicious traffic.
Rootkit / Exploit Scanners
Install chrootkit & RKhunter. These exploit scanners will scan your system daily and email you the reports.
Logwatch
Reconfigure logwatch to send you daily, detailed copies of your system logs.
System Binaries
Set the correct permisions to unsafe system binaries.
host.conf Hardening
Harden host.conf from system spoofing etc.
sysctl Hardening
Harden sysctl to prevent spoofing/dos attacks.
SSH
Configure, Harden & secure SSH.
Shared Memory
Secure system shared memory, /dev/shm.
Secure tmp Partitions
Secure any /tmp partitions.
Harden PHP
General hardening of PHP, Disable dangerous functions etc.
PHP Addons
Install Zend optimizer and Ioncube loaders.
Apache Mods
Install Mod_Evasive and Mod_Security.
Root Login
Set a root login notification to a specified email address.
Price: £45.00 GBP one time |
|
|
