RE: Linux Web Server Hardening (LAMP + Wiki)

ConfigServer is awesome and has recommended security settings/checks and if you are using WHM/CPanel, it plugs into that otherwise you have to use the command line.  I use LiquidWeb for my VPS servers and their support is awesome and is one of the few companies I felt comfortable with putting a forward facing linux server online.  LW also has a firewall you can control access to your VPS as well as the configserver firewall, so double protection.

http://www.configserver.com/
http://www.configserver.com/cp/cxs.html
http://www.configserver.com/cp/csf.html
http://www.configserver.com/cp/cmc.html
http://wiki.centos.org/HowTos/OS_Protection
http://www.gridvirt.com/blog/beginners-linux-security-guide-centos-6-2/

Thank you,
Tommy Thomas, MCP, Network+, Security+, C|EH, MCSE
Network Systems Administrator -::- Webmaster
Public Affairs Specialist - :: - Photojournalist
Ocala Website Designs LLC
www.OcalaWebsiteDesigns.com
352.454.0321

-----Original Message-----
From: [email protected] [mailto:[email protected]] On Behalf Of Jeffrey Walton
Sent: Friday, January 25, 2013 4:31 PM
To: Security Basics List
Subject: Linux Web Server Hardening (LAMP + Wiki)

Hi All,

Is anyone aware of a hardening guide for a Linux LAMP server with a Wiki component?

I have an older Linux Server hardening book, but nothing recent. I have not seen a Wiki hardening document.

Thanks in advance,

Jeff

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------