Re: Help with Gentoo/Sabayon 10: Building a LAMP and Hardening

On Nov 9, 2012 10:19 AM, "Ralph Figueroa" <[email protected]> wrote:

> Thank you Alex,  I will look into this. I have never heard of Varnish
> before reading this,  but Google is my friend and I will research further.
>  On Nov 4, 2012 3:32 PM, "Alex Stanford" <[email protected]> wrote:
>
>> Hey Ralph,
>>
>> The key to hardening a LAMP server is mostly at the application level.
>> Write secure web applications on a default install and you'll be much safer
>> than a hardened server with insecure front facing applications.
>>
>> With that said, here are a few tips:
>>
>> * Install and configure the ModSecurity web application firewall
>> * Install and configure Varnish Cache (this can help you remain fast
>> and/or online during a DDoS attack or even a large influx of legitimate
>> traffic)
>>
>> Depending on your use case you may also want to:
>>
>> * Disable some risky stuff in PHP via the disable_functions directive
>> * Add the SuPHP and Suhosin extensions
>>
>> >From there you can do the normal system level hardening you would on
>> most any server.
>>
>> Cheers,
>> --
>> Alex Stanford
>> Full Ambit Media | Zero-Sacrifice Web Design & Development
>> 800.928.8145 (904.701.0054) | Extension 10
>>
>>  Direct Line: 888.820.4580 (904.469.7991)
>> Mobile: 855.438.1337 (904.400.0819)
>>
>> https://twitter.com/fullambit
>> http://www.facebook.com/fullambit
>>
>> Made in the USA
>>
>>
>>   Red War <[email protected]>
>>  Sunday, November 04, 2012 12:18 PM
>> Hey All,
>>
>> It was a great event yesterday and I had a lot of fun at the CTF, thanks
>> again to the JAXLUG. I Have built a LAMP on my CENTOS box and that is
>> working perfectly fine, but on my HP Pavillion, I prefer the use of
>> Gentoo/Sabayon 10 for its high performance in video/audio and cause..
>> well, I like it! I am now trying to put the lamp on here, but so far, I
>> have found websites I have found, have differing information. One is
>> this site,
>> which had some references to using this with Linode and the other is
>> http://aristeidis.gr/blog/2012/10/install-lamp-in-sabayon/
>> which seemed ok to me, but, not to sure if there are missing steps,
>> plus, I want to harden my server (make sure that it does not get hacked
>> into all of the time, etc). Are these sites good for the install and
>> does anyone have any other sites or guides for Gentoo lamp operation?
>> Hardening guides?
>>
>> Thanks,
>>
>> Ralph
>>
>>
>> ---------------------------------------------------------------------
>> Archive http://marc.info/?l=jaxlug-list&r=1&w=2
>> RSS Feed http://www.mail-archive.com/[email protected]/maillist.xml
>> Unsubscribe [email protected]
>>
>>