Help with your own VPS

[User_38581]

Hi,

Just found this interesting site with many tutorials about VPS, called VPSServer
Maybe some of you know it from before, but for someone who just saw it, there you go!

There are tips/tutos about Securing your vps, installing webserver, cpanels etc..maybe someone finds it helpful, especially whos new at it

SITE: https://www.vpsserver.com/community/tutorials/

 

[closedportss]

Very nice, that will be very useful to some people.

 

[null3d]

Wow that is by far the cheapest made hobbywebsite for skids I have ever seen. Would you tell us what exactly makes this site in any kind of way interesting? Even digitalocean is better than that.

 

[Asphyxia]

They seem fairly helpful, they take the typical hardening guides and add a few extra useful security tips, for example:
https://www.vpsserver.com/community/tutorials/24/cpanel-server-security-tips-and-tutorial/ mentions CSF and changing from port 22.

Then there is: https://confluence2.cpanel.net/plugins/servlet/mobile?contentId=1779641#content/view/1779641

Both great security reads on cPanel, I think reading two guides is always better than just one.

If you really want in-depth info, it may be helpful to read 4+ hardening guides and see all the overlapping information. Security is a mix of art and science. Combining all the right tips into a single guide makes for somewhat of a “master” guide.

So feel free to check more examples:

How To Secure A cPanel WHM Server

Step by step instructions on how to secure a cPanel WHM Server. Don't let your server get hacked. Use our easy to follow recommendations.

www.pickaweb.co.uk

cPanel Security Hardening

Server Security is something an exception. One day or another, your server will be attacked and the integrity of your data will be at risk, that does not mean you will lose the current and existing customers in the process. cPanel provides easy access to your search and accessibility...

malware.expert

cPanel Server Hardening

Server hardening is the process by which we install and configure maximum security softwares on the server to prevent the various security threats on the internet.

www.cpanelserverhardening.com

https://www.assistanz.com/server-hardening-scripts-for-cpanel-2/ - I believe GoDaddy disables password resets also (through cPanel)

404 Response Error Page

Oh no we couldn't find the page you were looking for

www.webhostpython.com

cPanel Server Hardening in 24hrs @ Cheapest Price

Get cPanel Server Hardening within 24hrs at Cheapest Price. CHKRootKit, RootKit Hunter, Brute Force Detection, Linux Malware Detect, Secure cPanel and WHM Now!

eliteservermanagement.com

15 Easy Steps To Secure CPanel Server As Rock Hard

15 Easy Steps to Secure cPanel Server as Rock Hard: Follow these steps for cPanel server management and strengthen the security against threats.

medhahosting.com

https://www.interserver.net/tips/kb/php-hardening-steps-whm/ (emphasis on PHP)

How To Harden The cPanel Server

Below are the steps to Harden the cPanel server:

medium.com

Harden and Secure a Linux/cPanel Server - Knowledgebase - HostSailor

https://bobcares.com/blog/cpanel-ddos-protection/ (BobCares is a darn awesome site)

Basic DoS/DDoS Mitigation with the CSF Firewall

Learn about Basic DoS/DDoS Mitigation with the CSF Firewall today with Liquid Web.

www.liquidweb.com

https://stackoverflow.com/a/11762213 (using a cloud WAF is an amazing idea)

Blocking attacks with EasyApache 4's mod_evasive | cPanel

With the release of EasyApache 4 on Nov 7th, 2017, we now provide the mod_evasive Apache module. You can install it either in the EasyApache 4 interface, or with yum install ea-apache24-mod_evasive on the command line. What is mod_evasive? Themod_evasive Apache module helps to protect your...

blog.cpanel.com

https://www.buycpanel.com/top-ddos-protection-providers/ (great list of DDoS protection services)
www.webhostingtalk.com/showthread.php?t=1715221 (WHT has a very sweet forum on web hosting)

Neat video showing use of synproxy:

THe cPanel app is here https://applications.cpanel.net/lis...ailability-and-native-nginx-plugin-for-cPanel

Working with SYNPROXY

A firewall for humans... Contribute to firehol/firehol development by creating an account on GitHub.

github.com

How To Build Your Own DDoS Protection With Linux & IPtables in 2023

The ultimate guide on DDoS protection with IPtables including the most effective anti-DDoS rules. Learn how to protect your Linux server with this in-depth research that doesn't only cover IPtables rules, but also kernel settings to make your server resilient against small DDoS and DoS attacks.

javapipe.com

Web Application Firewall 2.0 — BitNinja 2.28.21 documentation

doc.bitninja.io

www.webhostingtalk.com/showthread.php?t=1506515

BitNinja WHM plugin

Do you think using BitNinja can be easier than now? Yes, it can! We are happy to announce that WHM integration for BitNinja is alive. If you are a user of this WebHost Manager, monitoring BitNinja will be much easier for you with our new plugin. WHM plugin Sometimes you can feel that...

bitninja.io

And lastly, a good overview of various layers of DDoS protection! Keep in mind, strong DDoS protection does happen with multiple layers of security controls/protection: www.webhostingtalk.com/showthread.php?t=1522926

Plentiful resources here to harden your cPanel builds and others.

KEEP IN MIND once you begin protecting websites within your cPanel, you will want to protect all your systems like WordPress, phpBB, XenForo, and so on. So setting up rules to block common attacks in all these systems may be helpful, see https://www.memset.com/blog/block-wordpress-dos-attacks-cpanel/

 

[Asphyxia]

Wow that is by far the cheapest made hobbywebsite for skids I have ever seen. Would you tell us what exactly makes this site in any kind of way interesting? Even digitalocean is better than that.

Coming back to save @null3d from getting trashed on.

Keep in mind that everyone online (this forum included) has a heartbeat and a brain to process words, feeling(s), and make decisions.

Even if someone says something you may disagree with, this does not mean to treat them badly. As for @closedportss and @AndreiD I am sure both of you have heard of constructive criticism (hint: keep it sweet).

A little less "No brain, change your name." or "He has anger problems, poke him with a stick."

More "What do you not like about the website exactly?".. or "Can we be a little more positive?"

I know the Internet is full of a keyboard warrior here and there but being nice helps build teams, and shapes stronger communities. Thanks guys!