[Trigunflame]

Originally Posted by AdminNation

In the past week or so we've had countless attempts at people trying to hack into our sever, most noteably when somebody tried to get FTP access to corrupt files, but made sure to spoof an admin IP so it would go unnoticed. So, as you can imagine, we're starting to get a bit paranoid. Aside from install most of the 3.5.2-4 security hacks on this board (which was already somewhat planned), what else can be done in terms of server configuration, software, firewall settings, ect to help better secure our box?

Lockdown php with open_basedir for PHP stuff.
Server side, compile a monolithic kernel with grsec, preferably a 2.6.x build.
As for FTP server, it depends which you are using and if its chrooted or not.
Chroot your nameserver, webserver, and FTP if its not already along with any other public services.
Firewall settings are going to be geared mainly towards deflecting illegitimate traffic, that being udp floods, tcp connections, concurrent request etc..
Prevent direct root login, make sure you have to login as a system user first then su- to root; also change SSH to a higher level port thats not currently in use, possibly change ftp to another port as well.