ADVANCED SERVER SECURITY, OPTIMIZATION AND HARDENING. - RS. 5000 PER SERVER.

The following is a list of software and configurations that we install to secure, optimize and harden your server. The following software is not resource intensive; therefore you will not see any decrease in performance.

1. We will install CHKRootKit, which is a program that looks for known signatures in trojaned system binaries, it basically detects if your system has been compomised.
2. We will install Rootkit Hunter, which is scanning tool to find most types of exploits (backdoors, suspicious files, md5 hash comparisons, and is over 99% accurate in detecting such exploits.
3. We will install CSF Firewall.
4. We will install Logwatch. This program parses through your server's logs and reports to you via e-mail on a daily basis with tabulated information.
5. We will install SIM (System Integrity Monitor) has on your server. This software checks all services 24x7 and restarts them if they are down. An e-mail is dispatched a downed service is detected and restarted.
6. Apache (HTTPD) web server will be optimized and secured. For extra http/php security, we can install mod_security if you would like, it is not installed by default because it can interfere with certain common functions. If you would like mod_security installed, just let us know and we'll be more than glad to install this for you.
7. MySQL Server will be optimized to perform at it's best under the most common and standard environments.
8. System Configuration File host.conf will be secured and hardened to prevent DNS lookup poisoning and also provide protection against spoofs.
9. System Configuration File nsswitch.conf will be secured and hardened. We will also optimize it to perform DNS lookups more efficiently.
10. System Configuration File sysctl.conf will be secured and hardened to help prevent the TCP/IP stack from syn-flood attacks.
11. All of your vulnerable directories (/tmp, /var/tmp, /dev/shm and /usr/local/apache/proxy) will be reviewed. /tmp and /var/tmp will be hardened and secured to prevent the execution of malicious scripts.
12. Old archived logs files that have been rotated located in /var/log will be removed to free up space in the /var partition/directory.
13. We will install MyTOP. This is an administrative console based tool for monitoring MySQL threads/processes and performance.
14. We will setup a root login notification script and logger. This will send an e-mail to 'root' everytime someone logs into your server as root. Also, it will keep track of all logins in a history file located in /var/log/rootlogins
15. SPRI will be installed. This program changes the priority of different processes in accordance to their level of importance. You should see at least a 5-20% decrease in the average load level of your server on average.
16. We will disable Mchat, Cgiecho, Cgiemail, Guestbook, Counter and Formmails from CPanel's system wide cgi-sys directory. These are the most commonly exploited scripts since they are in the same location on every CPanel server in the world.
17. Unused programs will be disabled from the OS of your server. This reduces the chance of being compromised through software exploits on old or deprecated programs.
18. MultiTail will be installed to give you the ability to tail (view realtime activity) multiple log files simultaneously.
19. We will install PHPSysInfo. This is a GUI (graphical user interface) to your server's vital statistics. You can view it by going to http://0.0.0.0:2086/phpsysinfo/index.php
    Replace 0.0.0.0 with your own server's IP Address. You will have to enter your root login information to gain access as it is protected under your root WHM login.
20. Telnet will be disabled to prevent insecure transmissions of data and passwords, SSH must be used instead of Telnet, and functions the same way.
21. SSH will be hardened by restricting the SSH Protocol to SSH 2. SSH will still function the same way, just more secure. If you would like your ssh port changed, or direct root login disabled, just let us know and we'll be more than glad to do this for you.
22. Fileman (Filemanager developed by gossamer-threads.com) will be installed into WHM with root level permissions. This allows system root files to be edited in an emergency situation when SSH is not accessible. You can access Fileman by going to http://0.0.0.0:2086/fileman/fileman.cgi
    Replace 0.0.0.0 with your own server's IP Address. You will have to enter your root login information to gain access as it is protected under your root WHM login.
    !!IMPORTANT!! This simulates SSH access, treat it as such, do not use it unless you are familiar with SSH. Moreover, do not execute any commands you are not fluent with. As with SSH, damage can be done if Fileman is not used properly. If you are unfamiliar with SSH, do NOT use this program. It should be left in case of such an emergency.
    Again, this file can only be accessed through WHM while being logged in as root.
23. Shell Fork Bomb/Memory Hog Protection will be enabled. Fork Bomb/Memory Hog protection will prevent users logged into a shell (ssh/telnet) from using up all the resources on the server and causing a crash.
24. Background Process Killer will be enabled to kill any of the following which are commonly recognized bad processes: BitchX, bnc, eggdrop, generic-sniffers, guardservices, ircd, psyBNC, ptlink and related services.
25. A warning message will be created for the SSH login welcome screen. Any user that logs into your server via SSH, will see a message stating 'SSH is for authorized users only and any unauthorized access will be reported to the law enforcement authorities'.
26. Your FTP server software will be upgraded and secured.
    

* IMPORTANT * PLEASE READ * IMPORTANT *
Can we guarantee your system will be hacker proof?
No, nobody can! It is 100% impossible to make a server hacker proof, that's a fact. This is even more impossible when vulnerable freeware scripts are so commonly used (forums, bb's, guestbooks, formmails). Nevertheless, even multibillion dollar company's such as banks, government computers, credit card companies, have had server's compromised. We consider our security hardening procedures to make your system hacker resistant. The software we install secures the system without adversely effecting or hindering the normal operations of your server.

Please note that over 99% of hacks come from insecure php scripts. These insecurities in php scripts come from the programming code, and therefore there is absolutely no way search to find "all" insecure scripts.

Remote based hacks are extremely rare. If there is no weak passwords, and no insecure php scripts, you have an very rare chance of ever being hacked.