| Author |
Message |
guitarman fourth grade
Joined: 04 Nov 2005 Posts: 728
|
Posted: Fri Oct 19, 2007 2:03 am Post subject: how to secure your linux box? |
|
|
hello guys,
Within these days, I've been really tired, angry and worried. There are people uploading shell file to the server and last night, I saw an influx of spamm attack to my exim mail server.
i have yet to fix the exim mail server's spam attack yet as i'm not sure if the attack stems from my server or someone is sending mails to my server (can't really understand the exim_mainlog )
Wonder if anyone has easy solution to exim_mainlog, here?
|
|
| Back to top |
|
 |
guitarman fourth grade
Joined: 04 Nov 2005 Posts: 728
|
Posted: Sun Oct 21, 2007 12:42 am Post subject: |
|
|
Just found one useful site: http://www.webhostgear.com which provides quite useful tips on securing the server.
thought it's useful for other too so share it here.
|
|
| Back to top |
|
 |
guitarman fourth grade
Joined: 04 Nov 2005 Posts: 728
|
Posted: Tue Oct 30, 2007 12:49 am Post subject: |
|
|
I have finally secured part of my images folder.
Usually the guy who defaces my sites try to upload funny PHP script to my image folder. Therefore, I need to put this into the .htaccess in order to disallow him from running his PHP.
inside the .htaccess, use:
| Code: |
| php_flag engine off |
Or if your server is running PHP as CGI, put the following codes inside the .htaccess:
| Code: |
Options -All
<IfModule mod_php4.c>
php_flag engine 0
</IfModule>
<IfModule mod_php5.c>
php_flag engine 0
</IfModule> |
-----------------
For now, i'll stay monitor the progress and see if the moron is still able to successfully deface my site
|
|
| Back to top |
|
 |
|