1. Disable and Remove Telnet and FTP.
It would be an old box with Telnet enabled. Good point on SFTP. A lot of apps rely on ftp for updates and collaborative work. Contribute and Dreamweaver come to mind. I will be checking that out on my own usage.
1a. Disable and Remove Unused Packages and Programs.
Wish I were smart enough to know each and every server process and app I might use or need sometime. Is there a better alternative etc. The major ones are obvious. Can all describe every process in your PID list or all the processes on your PC for that matter.
1b. Microsoft Front Page Extensions.
Is a virus and should never be turned on.
1c. Remove "Pine"
ok - it was off to begin with
2. Make Absolutely Certain that PHP, phpMyAdmin, MySQL and Apache are Updated.This I expect from my manged hosting provider, but do check from time to time generally. Do I know if they have every single patch and adjustment made - no.
Brings up another point. It is prolly smart to move to a new server or do a total rebuild every year to make sure you keep up with the latest versions and patches. The idea being that the larger and smart host will have an upto-date image to apply!
2a. Consider Removing Apache and Going to lighthttpd.
NO - Still learning Apache - lol Plus not sure my manged hosting supports it. Am using FreeBSD which some say is better for security.
Last edited by pussyluver : 12-26-2007 at 09:07 AM.
|