Any tips for securing a dedicated server?

Albertwu · Jul 28, 2016

Hi all, new customer here with a dedicated server.
I want this to be as hardened as possible. Anyone have any particular tips for security? I googled for checklists and did everything I could, and I also made adjustments so I have a perfect score on the firewall configuration check, but I thought maybe there would be some tips for these setups specifically.

In particular I'm wondering about allowed ports, the firewall by default has quite a few ports open, including all from 30,000-50,000. Should I lock down pretty much everything besides HTTP and SSL?

That brings me to a related question.. as of now I am just using this for a webserver. I'm hosting my nameserver with GoDaddy and email with Google. Is there any particular advantage to migrating my nameserver to vpb? The only one I can think of would be to gain use of their support for any DNS issues. If there are other technical advantages please let me know, DNS is an area that I am not very comfortable with.

VirtuBox · Jul 28, 2016

To secure your dedicated server, the first step is to install fail2ban or any similar software to block brute force.
And I recommend you to change your default ssh port 22 to another.

You should not have to block everything with your firewall, using a anti bruteforce software is already a good point.

And for your DNS, move them to Cloudflare, it's free and faster than many other? And it will copy your current DNS settings automatically/

HostColor · Jul 28, 2016

There is a software pack called Configserver and it helps a lot when it comes to Linux server. As far as for CloudFlare... it is not like it is not a good service, but I do not see many benefits to use DNS with them. It is certainly good for WordPress blogs. However, I would not use it as alternative of other web & network security software.

ExpertHosters · Aug 1, 2016

Try installing CSF, its a firewall and helps you to protect the server from unauthorised intruders. It blocks the IP who tries to access the server with wrong password(5 times wrong entry)

Also change the default port from 22 to something complicated.

HostYouFast · Aug 1, 2016

There are various way to secure your server.....You can try using Configserver it will help you. You can pay for ddos protection it will help.....I will say you to change your default ssh port 22 to another that can also help you.

ExpertHosters · Aug 8, 2016

You should be doing that, it will help you reduce attackers on your server. Default SSH port is normally 22 so the attackers try to connect to server with 22 using random passwords.

harry_v · Dec 1, 2021

Today, nothing is safe. So if you get concerned about security, it is perfectly justified. Unfortunately, the number of security breaches is increasing at an alarming rate. One of the primary sources of worry is server security. Going for a dedicated server that provides services such as DDoS protection, firewalls, and other choices will help you deal with these issues more effectively. Top dedicated server security tips include using Password Strategy That Works. In addition, firewall Protection should be scanned and tested regularly. Maintaining a Database, Updating Software regularly, Data Backups, and Professional Assistance, etc.

ITivan80 · Dec 20, 2021

Depending on your budget you can go out there and get a firewall for your server and secure at that point. But if you don't have the budget then software firewall is for you.

hostguy · Dec 21, 2021

To secure Linux server the important thing is to install firewall on server.
It will secure your server and you can also add particular IP address to restrict it.

Also you can install Brute Force plugin to block particular countries according to your choice.

radwebhosting · Dec 22, 2021

Install CSF, Fail2Ban, etc

The Boss · Dec 22, 2021

I agree with VirtuBox 100%. I would only add backup, backup, backup. Cloudflare adds some nice security features for free.

If feasible, use SSH keys instead of passwords. Here are some great tutorials from DigitalOcean on security.

visualwebhost · Jul 14, 2022

Install CSF and fail2ban, antivirus any and setup sshkeys

Any tips for securing a dedicated server?

Albertwu

New member

VirtuBox

Well-known member

HostColor

Well-known member

ExpertHosters

Member

Marc0

Well-known member

HostYouFast

Member

ExpertHosters

Member

harry_v

Well-known member

ITivan80

Well-known member

hostguy

Member

radwebhosting

Well-known member

Kaz Wolfe

Well-known member

The Boss

K Tysinger

visualwebhost

Member

Latest posts New threads

Latest posts

New threads

Latest Hosting Offers New Reviews

Latest hosting offers

Popular Contributors - Past 30 Days

Sponsors

Tag Cloud