cPanel/WHM

Hi,

Let's share how you are making your cPanel server more secure. This will help the beginners.

Thanks,

John

[cPanel/WHM Configuration]

First, install fierwall (APF or configserver security and firewall) and then install Root kit checker (chkrootkit).

To install chkrootkit, SSH into server and login as root.
At command prompt type:

cd /root/ (any location where you would like to install it)
wget ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit.tar.gz
tar xvzf chkrootkit.tar.gz
cd chkrootkit-0.44
make sense

To run chkrootkit

At command prompt type:
/root/chkrootkit-0.44/chkrootkit

Also set the cron to run chrootkit on regular basis and keep the version of chkrootkit updated.

Regularly install OS patches and upgrade cPanel version. If possible set a cron job to check the update for cPanel.

Mike

Bind SSH on a single IP address other than shared IP address of the server and also on a different port than port 22 (default).

To change these, type the below at command prompt:

pico /etc/ssh/sshd_config

Scroll down to below section:

#Port 22
#Protocol 2, 1
#ListenAddress 0.0.0.0
#ListenAddress ::

uncomment and change Port 22 to
Port 1344 (which you would like to use)

Uncomment and change Protocol 2, 1 to
Protocol 2

Uncomment and change ListenAddress 0.0.0.0
ListenAddress 1.1.1.1 (One of the IP address of your server).

Regards,

Andrew