Lock down and secure your server with our Server Security package, perfect for the "NEWBIE" (New Installation) or server that has already been online for sometime. The following work will be preformed on your server;
CHECK LIST
|
Available For : RH7.x RH 8.0 RH 9.0 RHEL3/4 Fedora CentOS FreeBSD |
Control Panel : DirectAdmin cPanel cPanel Pleask Ensim No Control Panel |
Client Requirements : NONE |
Expected Down time : NONE |
Discount : 5% - A discount may be taken at the time of purchase on 3 or more installations. Please use coupon 710 at the time of checkout. This discount only applies to installations on 3 or more servers. |
| - Server Analysis: |
Server Analysis - Includes a full analysis of your server before
any work is performed. We will analyze your server for signs of
a system compromise beforehand. It's pointless to work on and
secure a server that has already been compromised. We will make
sure that your server is clean before we start work. During our
analysis we will point out any configuration issues and other
problems discovered during our analysis. |
| -
SSH Hardening: |
SSH - Make sure that your version of SSH is not Vuln. Prevent direct logins to root. Modify default sshd server configs to address common protocol & authentication issues. Move SSH to a new port if necessary. |
| -
Mod Security: |
Mod Security
- Installation and configuration of Mod Security using our custom
ruleset designed to work with your server configuration. Stops malicious users from
dropping malicious code into your /tmp directory, disables various methods of downloading to your server e.g. wget, curl and adds new BCC rules to stop spam abuse via forms. |
| -
Firewall: |
Firewall
- Install and configure -or-
Upgrade existing
firewall to a new version. Your choice of firewalls or we can
recommend one. Includes and inspection of your open port lists,
fixes, changes and updates.
|
| -
RootKitHunter: |
RootKitHunter
- Install and configure RootKitHunter. RootKitHunter Scans for
rootkits, backdoors, and sniffers and will be installed to scan
your system on a daily basis. Configured to e-mail you daily of
the results. |
| -
Formmail: |
Insecure
Formmail - Disable all insecure versions of Formmail on the server,
recommended! On cPanel, we also disable the use of Formmail in cgi-sys so that remote access to cgi-sys is prohibited. Due to the insecure nature of Formmail on cPanel, this is highly recommended. Check all virtual hosts
for working version of vulnerable Formmail. |
| - Compiler: |
Compiler - Limit the use of the compiler to root level users. |
| -
Logwatch: |
Logwatch - Setup 'logwatch' to receive daily summary reports on
systems events (kernel, network, logins, top e-mail relays &
local senders etc.). |
| -
SSH: |
SSH Hardening - Make sure that your version of SSH is not Vuln.
Prevent direct logins to root. Modify default sshd server configs
to address common protocol & authentication issues. |
| -
Insecure Services: |
Insecure Services
- Deactivation Of Insecure and Unused Services - We will deactivate
and disabled unused and insecure services on your server. |
| -
Kernel: |
Kernel: We will upgrade your kernel to the latest version if necessary. |
| - BFD: |
BFD - (Brute Force Detection) - Installation or upgrade and configuration. Detects brute force attacks against your FTP server and detects other services as well. |
| -
FTP: |
FTP
- 99% of all the servers that we analyzed, was open to being exploited
via FTP. There could be a warez farm growing on your server and
your wouldn't even know it. We will close the hole on
your server, very common on cPanel. |
| -
PHP: |
PHP
- We will analyze your php configuration and disable dangerous
functions that stop the malicious use of shell scripts such as
phpshell. On cPanel servers, we may reconfigure and recompile php to close these holes, depending on your current installation. |
| -
Misc. System Hardening: |
Misc.
System Hardening - Includes additional hardening of system services. These details will not be revealed here. |
| -
System Testing & Monitoring: |
System
Test & Monitor - Completed work is tested and monitored for
up to 12 hours at random internvals. We may stay logged into your server while we monitor logs and server activity. We don't just leave after we have
finished. It's important to make sure that everything is sound
and secure so we spend a considerable amount
of time monitoring logs, system load and server performance on work paid for. Our standards
are high and we treat each and every server with care, just like
it was our own baby. If you are not happy, we will certainly not
be happy. Its as simple as that! We want you to be happy so that
we can keep you as a valued customer for any future projects you
may have for us. |
| -
AIM: |
FREE
AIM Support - We are available via AIM while we work on your server. In fact, 99%
of our customers choose to chat with us via AIM while we work
on their servers. It's a great way to get to know us and a great
way for us to ask questions when we need to. Sometimes, the answers
are not always obvious and we need to ask you additional questions
regarding your server. This service is currently offered as a
free service. We only offer chat support via AIM at this time. If you need to install AIM on your PC, please install it before signing up. Download it! |
Quantity discounts may apply for installation on more than 2 server installations. Please redeem the coupon at the time of purchase for installation on more than 2 servers.
If you have any questions regarding this service, please don't hesitate to
.