Do you rely on a cPanel and WHM server? If so, just like with any other server, you have to make security a primary concern. Servers carry too much information and represent too much potential for many hackers to resist. Fortunately, the following tips are easy enough to implement and will help keep your server safe.

It doesn’t get much simpler than making sure your passwords are secure. Unfortunately, far too many people overlook this easy chore, which is why insecure passwords remain the most common form of security vulnerability.

Fortify Your cPanel and WHM Server

Once a hacker has your server’s password, it’s open season. They can do just about anything they like, whether it’s defacing your website, infecting your system with a virus, etc. At the very least, insist on passwords of no fewer than eight characters that contain both grammatical and alphanumeric symbols. Use a password tester to make sure the one you choose is valid or utilize software that chooses one for you.

If a hacker can guess or otherwise figure out your password in a few hours, it will be more than worth their time. Hackers are fond of searching for Port 22 in order to access companies’ servers. To defend against this, move your SSH access to some other port in order to stop anyone that doesn’t have precise knowledge of your server from finding it.

Pick a privileged port of 1023 or smaller, which isn’t already being used by another service. Being a privileged port means that only “root” is able to bind to it. While passwords are the most vulnerable point for accessing a server, the most readily available one is the web server application. This is why you absolutely must secure your Apache installation.

“Mod_security” is one of the best tools available for easily preventing malicious Apache attacks. You can install it through WHM’s Mod Security Interface, found under Plugins.

Should malicious scripts get deployed against Apache, having “suEXEC” included in the CGI applications and scripts will make it easier for you to track down where these scripts are coming from and who’s running them. Of course, it also means that permission and environment controls get implemented.

Don’t be intimidated by the world of cybercrime. The above tips should go a long way toward helping you keep your cPanel and WHM servers safe. For more help, feel free to contact us at ServerPronto where we have plenty of experience helping with issues like these.

ServerPronto offers the best affordable and secure hosting service in all dedicated server packages.

Source:

Tips to Make Your Server More Secure

Photo cred: Flickr / Dev.Arka