Quote:
What would you do if every time you uploaded your sites someone hacked you and deleted ALL your work?
|
wsjb has it right. I would secure my box.
1. I'd start with a fresh install of the latest version of freebsd.
2. Use different passwords than I used on the compromised box.
3. Close any unnecessary ports. For a webserver I'd have only port
80 (http) and port 23 (ssh) open. I'd also limit the ip address ranges
allowed to connect to ssh.
4. Get rid of all scripting on the website, pending review of each line of code.
5. Set up an intrusion detection system.
Threaded Mode