server security hardening

Shutting down unnecessary services, ports, and Accounts makes Windows Server 2003 impregnable. Hackers typically access servers through unused (not configured or insecure) ports and services, such as Internet Information Services (IIS). To limit entry points, server hardening includes blocking unused ports and protocols while aborting unnecessary services. Micro

Apache1. Hide ServerTokens ProductOnlyServerSignature Off or ServerTokens ProdServerSignature Off2. Disable symbolic link 3. Run nobody4 with a specific user and specify the listening port and ip address (for example, you do not need to provide services with multiple ip addresses) 5. root directory permissions 6. mod_security is an open-source web Application Security Program (or web application firewall) that integrates intrusion detection and defens

change the clsid value.HKEY_CLASSES_ROOT/Shell. Application/CLSID/project value HKEY_CLASSES_ROOT/Shell. Application/CLSID/project valueYou can also delete the Trojan to prevent its harm.Disable Guest users from using shell32.dll to prevent calling this component.2000 run the command cacls C:/WINNT/system32/shell32.dll/e/d guests.2003 run the command cacls C:/WINDOWS/system32/shell32.dll/e/d guests. Note: All operations take effect only after the WEB Service is restarted.Use cmd.exeDisable the

ObjectiveIn fact, in the server security settings, although I have some experience, but there is no research, so I write this article when the heart is very not practical, always afraid to say wrong will be mistaken for others.This article is more focused on the prevention of ASP vulnerabilities, so the server black and other aspects of the explanation may be sli

Vps security settings, server security dog It is suitable for new users and friends who have access to VPS. It focuses on VPS security. Prohibit ROOT login to ensure security; Use DDoS deflate to defend against attacks; Iftop Linux traffic monitoring tool; Automatically back

In fact, many friends often search for some information about 2003 will come to the cloud habitat community but the lack of a series of articles list, later we will be the topic of the way to organize, the following for you to share the security of Win2003 server settings considerations and procedures. First, the security of the

content is placed in this section) Administrators all permissions D:\FreeHost (if this directory is used to place user site content) Administrators all permissions SERVICE Read and run From a security perspective, we recommend that Webeasymail (Winwebmail) be installed on separate disks, such as E: E:\ (if Webeasymail is installed on this disk) Administrators all permissions System Full Permissions iusr_*, default Internet Guest account (or dedicate

the best way. Authentication From the implementation mechanism, asp.net1.1 is consistent with the asp.net2.0 security model. First configure the Web site for Forms authentication mode, after which the user accesses the site's url,forms The authentication system redirects unauthenticated requests to the specified login page. The user enters the credentials (user name password) and submits the page. If the validator verifies that the user's identit

, intrusion can use FTP client program using anoymously Anonymous account login, and then check whether/etc/passwd for anonymous set Read permission, if there is a backup to use software decoding. 2. In some systems, the/cgi-bin directory will have a file called PHF, if you are ready to invade the server, it will be more convenient. Since PHF allows users to read remote files in the Web site system, the user can use the browser to crawl the P asswd fi

Original: SQL Server R2 Security Topic (i): Security principlesThis series is mainly focused on SQL Server 2005 after the DBMS, because I work with the R2, so now for the R2 to explain:On the principle of protecting SQL Server security