amuck-landowner

Your new VPS is provisioned, what is the first thing you do once you connect?

GVH-Jon

Banned
I install zPanel and then I stuff as much data on it as possible. Then I log into SSH and I type in rm -rf and then I log out. Then I jump out the window for being so stupid but I make sure I land on grass.

Just kidding

The first thing I do when I connect would be to do some security hardening.
 
Last edited by a moderator:

NodeBytes

Dedi Addict
Considering I'm on dedi's... I build my own OVZ/KVM Vm's and install all the security I need before it's officially "provisioned" to the main live server.
 

wlanboy

Content Contributer
Play around with it. Try everthing I did not want to do on my production vps.

The feeling you have a free trial because you are starting from zero and you can easily start from zero again is great.

Afterwards I do a reinstall and build up the system for which I have bought the vps for.
 

notFound

Don't take me seriously!
Verified Provider
service iptables stop
chkconfig iptables off

echo 'SELINUX=disabled' > /etc/selinux/config
echo 'SELINUXTYPE=targeted' >> /etc/selinux/config

mkdir ~/.ssh ; echo ssh-rsa .......== [email protected] >> .ssh/authorized_keys ; echo ssh-dss ......= [email protected] >> .ssh/authorized_keys

chmod 600 .ssh/authorized_keys

cat >> /etc/ssh/sshd_config <<END
Port 5---
TCPKeepAlive yes
ClientAliveInterval 30
ClientAliveCountMax 99999
PasswordAuthentication no
END

service sshd restart

sed -i 's/plugins=1/plugins=0/' /etc/yum.conf

yum -y update
yum -y install mlocate traceroute wget jwhois openssh-clients wget rsync bind-utils mtr syslog-ng htop iotop nohup vnstat tmux

echo "* * * * * root vnstat -u -i eth0" >>/etc/crontab

ln -sf /usr/share/zoneinfo/Europe/London /etc/localtime

Got a bit more but couldn't be asked to paste it all from my little script.
 
Last edited by a moderator:

trexos

New Member
1) passwd root
2) apt-get update && apt-get upgrade
3) apt-get install htop
4) reboot
5) benchmark stuff
 

sleddog

New Member
At an SSH login:

1. Setup an iptables firewall, particularly for SSH.

2. Set a new root password.

3. Review installed services and remove those I won't be using.

4. Update.

5. Configure for the intended use.

6. Use :)
 
Last edited by a moderator:
Top
amuck-landowner