3 ms·
There are my thoughts: Fail2Ban - "It updates firewall rules to reject the IP address." stopped reading here, NOTHING changes my firewall rules, I do. Non sta
by LoneWolf 15y ago
There are my thoughts:
Fail2Ban - "It updates firewall rules to reject the IP address." stopped reading here, NOTHING changes my firewall rules, I do.
Non standard ports - I run on my server sshd on port 22, never had a single problem, yes sometimes I get some attempts, denyhosts helps but it is a problem for those days you type your own password wrong too many times. Also totally unrelated to apache.
Hardware firewall - Not knowing much about this I can't say much either, but my bet is that for a simple server it is overkill.
Virtual hosts - Useless thing in my opinion.
PhpMyAdmin - Don't use it.
Updates - I'm ok with this one, but you can't just update somethimes things break.
Check logs - Not a bad idea at all but not like that, get something to look for suspicious patterns or you will go insane.
.htaccess - Block addresses? Seriously? With htaccess? I would go with firewall rules, and a complete country? Don't like that idea.
- brador 15y agoBoth you and Kijin above have strongly suggested not using PhpMyAdmin. Are there better alternatives for managing my mysql databases?
- FuzzyDunlop 15y agoThe command line? You don't want to make any of your administration tools on your production server, or any server for that matter, visible to the world. Your options thus are: 1. Don't use them in the first place 2. Restrict who can access them (eg. IP whitelist) and how (eg. VPN, on the local network) It's not really about what you use, but what steps you take to make sure no one else can use it against you.
- ludwigvan 15y agoI use the command line too, but MySQL Workbench using SSH tunnelling might be a good solution: http://dev.mysql.com/doc/workbench/en/wb-manage-db-connections-ssh.html http://dev.mysql.com/doc/workbench/en/wb-manage-db-connectio...
- deleted 15y ago[deleted]
- mzarate06 15y agoNavicat is a good option, far better than PHPMyAdmin imo. One thing to be aware of though - when dumping a database, it doesn't use extended inserts when creating a backup file. This can have a ridiculous impact on restore time. For example, a 500MB database I'm working with takes about 10 minutes to restore locally via extended inserts. It takes over an hour w/out them.
- epo 15y agoOne advantage of a non-standard SSH port is it cuts down on log file clutter and sends the script kiddies elsewhere to look for their low hanging fruit. But, as you say, nothing to do with Apache.
- 8ig8 15y ago> Check logs - [...] get something to look for suspicious patterns or you will go insane. Any suggestions for this? Thanks.