Keep server uptodate

[Nego]

Hi all,

I just had a problem that one of my servers was hacked. It needed a complete reinstall to ensure that there wasnt a rootkit anymore.

Im wondering now what is the best way to keep my server up to date. My production server has got 53 updates available while trying apt-get upgrade. Someone adviced me NOT to run the upgrade but the use this:

http://www.lampdocs.com/blog/2008/10/how-to-update-major-server-software-on-a-directadmin-server/

Can anybody tell me something more about this and how to keep my server uptodate as much as possible? Its all about a Debian machine

 

[carlo_gra]

Hi all,

I just had a problem that one of my servers was hacked. It needed a complete reinstall to ensure that there wasnt a rootkit anymore.

Im wondering now what is the best way to keep my server up to date. My production server has got 53 updates available while trying apt-get upgrade. Someone adviced me NOT to run the upgrade but the use this:

http://www.lampdocs.com/blog/2008/10/how-to-update-major-server-software-on-a-directadmin-server/

Can anybody tell me something more about this and how to keep my server uptodate as much as possible? Its all about a Debian machine

Check into this forum, but you must always recompile php, apache, dovecot, etc through "custombuild".

For example, a simple way to update apache is:


cd /usr/local/directadmin/custombuild
./build clean
./build update
./build apache


You can repeat the last command for the other daemons (or interpreters):

./build php y (it recompile php and other related softwares)
./build dovecot



"apt-get update && apt-get upgrade" or "yum update" must be used only to upgrade you O.S. for basic daemons (such as SSH, vim, etc).

 

[Nego]

Yes i understand that but server software can be upgraded by using aptitude?

I contacted the people where hire the server but they told me it was not good. (but maybe they only mean the big packages).

So the server libs can be upgraded without any problems?

 

[nobaloney]

DirectAdmin doesn't use your OS Distribution's package manager for the hosting stack. The hosting stack should be updated through custombuild. You should use your distribution's package manager to manage only the core OS, as user carlo_gra wrote.

Jeff