Securing my board and vps

[sherwood]

hello,

well i am need of some help.

I have CSF and LBD install on my server at the moment and that is about it for seucrity. .

I need to know what will make my server more secure against ddos attacks, sql injections and general hacking.

all help is good

[SEOvB]

can't really protect against DDOS thats more of a datacenter objective, SQL injects are done via scripts I beleive so if you only install trust worthy scripts you should be okay.

Install Brute Force Detection and Mod Security if you'd like. Don't install scripts or modifications you dont need, make sure your software is always at the latest verisons

[sherwood]

okay..

i have heard that mod security can have conflicts with vb..

i can't afford to have down time so i would need to know what to do to mod security before it is installed and running

[SEOvB]

Its all how its installed and configured, and what rule set is used I suppose. I've used it for a long time and never had any problems

[Dismounted]

Originally Posted by sherwood

ddos attacks

There's not much you can do on your server, the traffic needs to be stopped before it hits your box.

Originally Posted by sherwood

sql injections

If you can, check all modifications and scripts before you upload/use them. vBulletin itself should be free of any SQL injection exploit.

Originally Posted by sherwood

general hacking

I run a script called DenyHosts. It prevents SSH brute-force/dictionary hack attempts.