securing linux webserver?

From: Kurt Leum (sarinshadow_at_yahoo.com)
Date: 02/28/05

  • Next message: Tomas: "RE: What is more secure?"
    Date: Sun, 27 Feb 2005 18:04:12 -0800 (PST)
    To: security-basics@securityfocus.com
    
    

    sorry to be so noob,

    A friend of mine set up a webserver:
    http://www.globalgamesearch.com
    problem is, he and I have no idea how to go about
    securing it;
    he started with SuSE Linux 9.1 with Apache 2.0, PHP
    4.3.1, and MySQL out of the box and put it up.

    about half an hour ago, an intruder broke in, replaced
    SSHD with a back door, and pretty much screwed the
    system up.

    We're going to reinstall the system with minimal
    programs, extremely secure permissions and a basic
    firewall, but beyond that we have no clue what to do.
    Can anyone here please help me out on this?
    Thanks in advance for any help.

                    
    __________________________________
    Do you Yahoo!?
    Yahoo! Mail - Find what you need with new enhanced search.
    http://info.mail.yahoo.com/mail_250


  • Next message: Tomas: "RE: What is more secure?"

    Relevant Pages

    • Strange virus alert by Trend Micro
      ... Trend Micro antivirus software running. ... We were using Yahoo ... friend attempted to log in to Skype. ...
      (alt.comp.anti-virus)
    • Re: Sharing Contacts and Calendar?
      ... My friend has a laptop and he ... > for calendar and contacts only. ... Intellisync for Yahoo to sync your contacts/calendars, ...
      (microsoft.public.outlook)
    • Re: [Full-disclosure] For the attention of Mi5, Mi6 or Symantec
      ... [Full-disclosure] For the attention of Mi5, ... I have information regarding Yahoo ... I used to be his friend but now he fell out with me, ... I'll pass on your slanderism thanks and just slander you. ...
      (Full-Disclosure)
    • Re: Local Homeomorphisms
      ... Yahoo should become your friend. ... which keep confidential records of its ... | not protect the privacy and confidentiality of its Chinese customers ...
      (sci.math)
    • Front Page
      ... Here is a comment my friend sent me... ... this for a business site. ... I sent him a response about him using Yahoo SiteBuilder so his response was ... which makes me think they are using FTP. ...
      (microsoft.public.windowsxp.network_web)