server hardening :security setup

system priority
----
cd /usr/local/src
wget http://www.rfxn.com/downloads/spri-current.tar.gz [1]
tar xzvf spri-current.tar.gz
cd spri-0.5/
./install.sh
spri -v

process resource manager---
 cd /usr/local/src
wget http://www.rfxn.com/downloads/prm-current.tar.gz [2]
tar xzvf prm-current.tar.gz
cd prm-1.0.7
./install.sh
prm -j

csf/lfd
-------
cd /usr/local/src
wget http://www.configserver.com/free/csf.tgz [3]
tar -xvzf csf.tgz
cd csf
sh install.sh
sh remove_apf_bfd.sh
csf -s

by default the firewall is running in testing mode(testing= "1"). we might want to disable the firewall running in testing mode.
vi /etc/csf/csf.conf
testing = "0" -
csf -r

chkrootkit
----------
cd /usr/local/src
 wget ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit.tar.gz [4]
wget http://www.net-security.org/dl/software/chkrootkit.tar.gz [5]
tar xvzf chkrootkit.tar.gz
cd chkrootkit*
make sense

to add cron:
vi /etc/cron.weekly/chkrootkit.sh

insert the following to the new file:
#!/bin/bash
(cd /usr/local/src/chkrootkit-0.49; ./chkrootkit 2>&1 | mail -s "chkrootkit scan details" mgtalrt@futurehosting.com)
or
#!/bin/bash
(cd /usr/local/src/chkrootkit-0.49; ./chkrootkit 2>&1 | mail -s "chkrootkit scan details" root)

chmod +x /etc/cron.weekly/chkrootkit.sh

(03:18:48 pm) nishanth vip: rkhunter
--------
cd /usr/local/src
wget http://downloads.sourceforge.net/project/rkhunter/rkhunter/1.3.8/rkhunter-1.3.8.tar.gz [6]
tar zxvf rkhunter-1.3.8.tar.gz
cd rkhunter-*
./installer.sh --layout default --install

to add cron:
vi /etc/cron.weekly/rkhunter.sh

insert the following to the new file:
#!/bin/bash
(/usr/local/bin/rkhunter --update && /usr/local/bin/rkhunter -c --cronjob 2>&1 | mail -s "rkhunter scan details" mgtalrt@futurehosting.com)

or

#!/bin/bash
(/usr/local/bin/rkhunter --update && /usr/local/bin/rkhunter -c --cronjob 2>&1 | mail -s "rkhunter scan details" root)

chmod +x /etc/cron.weekly/rkhunter.sh

installation of ioncube, eaccelerator and zend optimizer can be done using the following cpanel scripts.

eaccelerator, zendopt, ioncube loader - cpanel
-----------------------------------------------

/scripts/phpextensionmgr install zendopt
/scripts/phpextensionmgr install ioncubeloader
/scripts/phpextensionmgr install eaccelerator

please verify the steps and let me know if there are any mistakes. i am moving this ticket to the next admin on desk. he will check this further and update you.

apf/bfd
-------
cd /usr/local/src
wget http://www.rfxnetworks.com/downloads/apf-current.tar.gz [7]
tar -xvzf apf-current.tar.gz
cd apf-9.7-1/
./install.sh

vi /etc/apf/conf.apf
dev_mode=0

 if=venet0

bfd
---
cd /usr/local/src
wget http://www.rfxnetworks.com/downloads/bfd-current.tar.gz [8]
tar -xvzf bfd-current.tar.gz
cd bfd-1.4/
./install

vi /usr/local/bfd/conf.bfd
alert=1
bfd -s

les
===
cd /usr/local/src
wget http://www.r-fx.ca/downloads/les-current.tar.gz [9]
tar -zxvf les-current.tar.gz
cd les-0.*
./install.sh
les -sb 1
les -sp 1
les -so 1

/usr/local/sbin/les -ea



links:
------
[1] http://www.rfxn.com/downloads/spri-current.tar.gz
[2] http://www.rfxn.com/downloads/prm-current.tar.gz
[3] http://www.configserver.com/free/csf.tgz
[4] ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit.tar.gz
[5] http://www.net-security.org/dl/software/chkrootkit.tar.gz
[6] http://downloads.sourceforge.net/project/rkhunter/rkhunter/1.3.8/rkhunter-1.3.8.tar.gz
[7] http://www.rfxnetworks.com/downloads/apf-current.tar.gz
[8] http://www.rfxnetworks.com/downloads/bfd-current.tar.gz
[9] http://www.r-fx.ca/downloads/les-current.tar.gz