What exactly does DA do?

[TomJones]

Not the best title for this thread so, let me explain. I've spent the last few months/years (long story) trying to man-up to managing my own dedicated server. I took a stab a few years back with RackSpace but, was way over my head. I've read several FreeBSD books since then and have lots of cheat sheats around for SSH. I thought I was ready...

But, now I realize some of what I was learning was how to do things DA takes care of. This should be great except for the fact that I'm not exactly sure what I should & should not do. I have already locked myself out of SSH access by fooling around in DA by creating Admins/Resellers. I was reading about chroot and jailing apache,mysql, etc. but, I read on the forums that this is already done by DA?

Basically, my question is what can/should I do on my own (with the shell, apache, php, mysql, permissions, etc) and, what should I not touch? I'm extremely concerned with hardening the shell and locking down the system.

I have read all that I can, I can't find anything that covers this. Is there a resource available that explains these things?

 

[andyreed]

But, now I realize some of what I was learning was how to do things DA takes care of. This should be great except for the fact that I'm not exactly sure what I should & should not do.

If your server works just fine, no technical issues, you shouldn't be doing any thing to the server. The only thing you should do is keeping your server healthy by updating the services and/or applications when they become available or when they are needed, technically speaking.

 

[pucky]

If your server works just fine, no technical issues, you shouldn't be doing any thing to the server. The only thing you should do is keeping your server healthy by updating the services and/or applications when they become available or when they are needed, technically speaking.

Oh not Servertune again! I thought i got rid of you when i left cPanel. Seems like your trolling for business again? Based on your footer message thats all you do on every forum you visit. And the worst part is, you never really offer any solutions for FREE. Go away!

 

[TomJones]

Yeah, server is working fine but, I am concerned with hardening the shell, improving performance, and locking down everything I can. I'm not clear on what security measures DA offers and what I shouldn't be touching in apache. There are so many tweaks that are suggested to an "out-of-the-box" install of freeBSD but, I'm not sure what will affect DA.

 

[Marshall]

DA wont really harden your system for you, you will still need to do things like install a firewall, move ssh to a higher port and disable root login. There is an example of a firewall in the FreeBSD 6.x forum. You may also want to do sysctl hardening and make sure /tmp is mounted noexec and nosuid and that /var/tmp is symlinked to /tmp. DA mainly just handles software install/management but not so much security.

 

[TomJones]

Thanks, Marshall. I'll check that forum out.

 

[andyreed]

Oh not Servertune again! I thought i got rid of you when i left cPanel. Seems like your trolling for business again? Based on your footer message thats all you do on every forum you visit. And the worst part is, you never really offer any solutions for FREE. Go away!

So, you are unhappy with me because I "never really offer any solutions for FREE"? Read my postings to see for yourself. I need to remind you that the purpose of any forum, like this one, is to share, help and support others. One rule of thumb, always display a positive, friendly attitude, and be respectful of others' opinions.

I am sure that DA moderators won't tolerate insulting posts, personal attacks or purposeless inflammatory posts in this forum. Thank you!

 

[pucky]

So, you are unhappy with me because I "never really offer any solutions for FREE"? Read my postings to see for yourself. I need to remind you that the purpose of any forum, like this one, is to share, help and support others. One rule of thumb, always display a positive, friendly attitude, and be respectful of others' opinions.

I am sure that DA moderators won't tolerate insulting posts, personal attacks or purposeless inflammatory posts in this forum. Thank you!

Thats correct. Share is the BUZZWORD. When was the last time you did? Please, point me in the direction of your HOWTO's. I'm dying to see what you have to share.