icon Get the most out of Surmunity, read our tips here! Need an interesting blog to read? You've got to read the Surpass Blog! | Welcome! Please register to access all of our features.

» Surpass Web Hosting Forums » Discussions » Private Hosting » Security Advice (CSF/LFD), (CSE), (CMM), (CMQ)

Private Hosting Questions about VPS, dedicated servers and colocation.

Reply
 
LinkBack Thread Tools Search this Thread
Old December 6th, 2006, 6:38 AM   #1 (permalink)
Surpass Fan
Super #1
 
Joined in Mar 2006
1,024 posts
Gave thanks: 66
Thanked 55 times
Security Advice (CSF/LFD), (CSE), (CMM), (CMQ)

Config Server Firewall (CSF) & Login Failure Demon (LFD)

A user friendly replacement for apf and bfd, plugs straight into WHM allowing easy access, configuration and modification. Especially good for people who are unsure on how to use the command line as this is only used for installation.

It has its own install guide but this is a basic step by step guide to make it easier for people who don't understand exactly what they are doing with the exact commands to run in SSH, so you can just copy and paste from here.

Step 1 - Download the file to your server:
PHP Code:
wget http://www.configserver.com/free/csf.tgz 
Step 2 - Untar the file
PHP Code:
tar -xzf csf.tgz 
Step 3 - Change to the csf directory and execute the install file:
PHP Code:
cd csf
sh install
.sh 
Step 4 - If you are already running APF/BFD you need to disable them as they both conflict:
PHP Code:
sh disable_apf_bfd.sh 
Step 5 - Removing the install files:
PHP Code:
cd ../
rm -fv csf.tgz
rm 
-Rfv csf 

And your done, all it needs now is a bit of configuration. The programs come preconfigured for all the default cpanel server ports and also configures automatically for your ssh port. However as some people may run different ports for example smtp on 26, this is how you change it.

Allowing Port 26 Access
Log in to WHM and scroll right to the bottom, in the addons menu you will see ConfigServer Security & Firewall. When selected you are presented with the following screen:


Choose Firewall Configuration, locate TCP_IN & TCP_OUT add ,26 in the field, then scroll to the bottom of the page and save configuration, it will ask you to restart the firewall and you are done. Now test it to make sure its working.


For extended information the readme provided by config servers is very very detailed and efficient it is worth a read, this was aimed at a basic tutorial:
http://www.configserver.com/free/csf/readme.txt

Along with the original installation documentation: http://www.configserver.com/free/csf/install.txt

For more information see there site: http://www.configserver.com/cp/csf.html

Last edited by deastwood; December 6th, 2006 at 6:41 AM.
deastwood is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old December 6th, 2006, 7:03 AM   #2 (permalink)
Surpass Fan
Super #1
 
Joined in Mar 2006
1,024 posts
Gave thanks: 66
Thanked 55 times
One thing I missed from the above tutorial, run the server security check and try and do everything it suggests it helps to ensure your server is in ship shape.
deastwood is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old December 6th, 2006, 7:09 AM   #3 (permalink)
Surpass Fan
Super #1
 
Joined in Mar 2006
1,024 posts
Gave thanks: 66
Thanked 55 times
ConfigServer Explorer (CSE)

A user friendly file explorer and ssh console inbuilt into whm, allows you todo 99% of things that can be done through external ssh programs in whm, it saves an awful lot of time!

It has its own install guide but this is a basic step by step guide to make it easier for people who don't understand exactly what they are doing with the exact commands to run in SSH, so you can just copy and paste from here.

Step 1 - Download the file to your server:

PHP Code:
http://www.configserver.com/free/cse.tgz 
Step 2 - Untar the file

PHP Code:
tar -xzf cse.tgz 
Step 3 - Change to the cse directory and execute the install file:

PHP Code:
cd cse/
sh install.sh 
Step 4 - Removing the install files:

PHP Code:
cd ../ 
rm -fv cse.tgz 
rm 
-Rfv cse 
After that its done login to whm and scroll to the bottom and its there to be used as you choose, for people new to ssh PLEASE BE VERY CAREFUL WHAT YOU DO, there are some files that you should not touch, so if you don't know what you are doing, don't do it!


Along with the original installation documentation: http://www.configserver.com/free/cse/INSTALL.txt

For more information see there site: http://www.configserver.com/cp/cse.html
deastwood is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old December 6th, 2006, 7:13 AM   #4 (permalink)
Surpass Fan
Super #1
 
Joined in Mar 2006
1,024 posts
Gave thanks: 66
Thanked 55 times
ConfigServer Mail Manage (CMM)

A user friendly file program providing you with an interface to the cPanel user accounts email configuration without having to login to their accounts.

It has its own install guide but this is a basic step by step guide to make it easier for people who don't understand exactly what they are doing with the exact commands to run in SSH, so you can just copy and paste from here.

Step 1 - Download the file to your server:

PHP Code:
http://www.configserver.com/free/cmm.tgz 
Step 2 - Untar the file

PHP Code:
tar -xzf cmm.tgz 
Step 3 - Change to the cse directory and execute the install file:

PHP Code:
cd cmm/
sh install.sh 
Step 4 - Removing the install files:

PHP Code:
cd ../ 
rm -fv cmm.tgz
rm 
-Rfv cmm 
After that its done login to whm and scroll to the bottom and its there to be used as you choose, It is also something that should not be abused, please respect peoples privacy!


Along with the original installation documentation: http://www.configserver.com/free/cmm/INSTALL.txt

For more information see there site: http://www.configserver.com/cp/cmm.html
deastwood is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old December 6th, 2006, 7:17 AM   #5 (permalink)
Surpass Fan
Super #1
 
Joined in Mar 2006
1,024 posts
Gave thanks: 66
Thanked 55 times
ConfigServer Mail Queues (CMQ)

A user friendly file program providing you with a full featured interface to the cPanel exim email queues from within WHM.

It has its own install guide but this is a basic step by step guide to make it easier for people who don't understand exactly what they are doing with the exact commands to run in SSH, so you can just copy and paste from here.

Step 1 - Download the file to your server:

PHP Code:
http://www.configserver.com/free/cmq.tgz 
Step 2 - Untar the file

PHP Code:
tar -xzf cmq.tgz 
Step 3 - Change to the cse directory and execute the install file:

PHP Code:
cd cmq/
sh install.sh 
Step 4 - Removing the install files:

PHP Code:
cd ../ 
rm -fv cmq.tgz
rm 
-Rfv cmq 
After that its done login to whm and scroll to the bottom and its there to be used as you choose.


Along with the original installation documentation: http://www.configserver.com/free/cmq/INSTALL.txt

For more information see there site: http://www.configserver.com/cp/cmq.html
deastwood is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old December 6th, 2006, 7:19 AM   #6 (permalink)
Surpass Fan
Super #1
 
Joined in Mar 2006
1,024 posts
Gave thanks: 66
Thanked 55 times
Ok i no i have pretty much replicated what configservers provide but i hope its useful having it all in one place for easy access, please note thought that the above will not protect your server on its own, correct practices with passwords, use of uptodate scripts and general carefulness will also help.

good luck and if you have any questions or would like help installing setting up the above please let me know.
deastwood is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old December 6th, 2006, 5:35 PM   #7 (permalink)
H
after g, before i
Resident.
 
H's Avatar
 
Joined in Jul 2004
Lives in N,BC,CA
8,059 posts
Gave thanks: 48
Thanked 129 times
Would you be able to put these in the Wiki as well? :-)

http://wiki.surpasshosting.com/index...itle=Main_Page
H is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old December 7th, 2006, 8:58 AM   #8 (permalink)
Surpass Fan
Super #1
 
Joined in Mar 2006
1,024 posts
Gave thanks: 66
Thanked 55 times
yeh if you want me to add them, sure
deastwood is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Old May 19th, 2007, 12:51 PM   #9 (permalink)
Registered User
Fresh Surpasser
 
Joined in Apr 2007
14 posts
Gave thanks: 0
Thanked 0 times
what security level should I set? low, medium or high?
Sychev is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On