Guides tagged “security”
Step-by-step MdmHost guides about security, sorted A-Z.
193 guides · page 1 of 10
.htaccess security rules: block IPs, disable directory listing and restrict folders
Copy-ready .htaccess rules for cPanel hosting: block or allow IP addresses, turn off directory browsing, protect .htaccess and config files, and stop hotlinking.
Add hotlink protection and security headers in Plesk
Stop other sites embedding your images with Plesk hotlink protection, and add HTTP security headers such as HSTS, X-Frame-Options and Content-Security-Policy safely.
Add security headers in Nginx (HSTS, CSP, X-Frame-Options)
Add the HTTP security headers browsers use to protect your visitors, including HSTS, X-Content-Type-Options, X-Frame-Options, Referrer-Policy and a starter Content Security Policy.
Add security headers with .htaccess on LiteSpeed (HSTS, CSP, X-Frame-Options)
Add HTTP security headers such as HSTS, X-Content-Type-Options, X-Frame-Options, Referrer-Policy and Content-Security-Policy to a site on LiteSpeed hosting with .htaccess.
Advanced UFW rate limiting to prevent brute force attacks
Use ufw limit and custom before.rules entries to cap connection rates on SSH and mail ports, so password-guessing bots get blocked before they can try thousands of logins.
Advanced Windows Firewall: Blocking Specific Application Executables
Windows Firewall can filter by executable path, not only by port. This guide shows how to block a specific program inbound and outbound with PowerShell, and how to verify the rule.
Advanced Windows Security: Restricting PowerShell Execution Policies
Lock down PowerShell on your Windows VPS by setting execution policies per scope, enforcing them with Group Policy, and signing your own scripts so only trusted code runs.
Advanced Windows Server: Implementing Group Policy Objects (GPO) for security
Group Policy Objects push the same security settings to every Windows server in a domain. This guide creates a GPO, links it to an OU, filters it and verifies the result.
Allow or block IP addresses in Nginx
Use Nginx allow and deny rules to keep admin areas to your own IP, block abusive addresses and whole ranges, manage long lists in include files, and choose between 403 and 444.
Allow RDP port 3389 through your PC's firewall or antivirus
Your own computer's security software can block Remote Desktop to port 3389. Find the block, add a narrow exception for mstsc or TCP 3389, and keep protection switched on.
Block an IP address or subnet with UFW
Block single IP addresses and whole CIDR ranges with ufw deny, place deny rules above your allow rules so they actually work, find attacking IPs in your logs and unblock them later.
Block IP addresses and ranges with cPanel IP Blocker
Stop attackers, spam bots and scrapers from reaching your website by blocking single IPs, ranges or CIDR blocks with cPanel IP Blocker, and remove blocks later.
Block IP addresses and stop image hotlinking in cPanel
Use cPanel IP Blocker to deny abusive visitors or whole ranges, and Hotlink Protection to stop other websites from embedding your images and using your bandwidth.
Block thousands of IPs with firewalld ipsets
Create a hash:net ipset in firewalld, load a blocklist file into it, attach it to the drop zone and update entries later without rebuilding your whole firewall.
Blocked by Imunify360? How to check and unblock your IP
Why Imunify360 blocks IP addresses after failed logins or suspicious traffic, how to tell if you are blocked, how to pass the CAPTCHA and how to get an IP unblocked.
Can't log in to cPanel or WHM? Fixes for every common cause
Get back into cPanel or WHM when the login fails: wrong URL or port, password resets, firewall IP blocks after failed attempts, 2FA problems and suspended accounts.
Change or reset your cPanel account password
Change your main cPanel password from Password & Security, pick a strong one that passes the strength meter, and get back in if you have forgotten it.
Change the Remote Desktop port safely
Open the new port in Windows Firewall first, change the RDP port in the registry, restart the service and connect on the new port.
Change the root password on a cPanel server safely (root guide)
Change the server root password from WHM or SSH, choose a strong password, update tools that use it, and move to SSH keys and API tokens instead of the root password.
Change your cPanel password and keep the account secure
Change the cPanel account password safely, understand what it affects (FTP, SSH, MySQL), and follow a short security checklist for your hosting account.
Browse by topic
- Getting startedYour first hour with a new server: access, logins and basics.69 guides
- cPanelFiles, databases, email, domains and every cPanel tool, step by step.37 guides
- WHM & resellingWHM, packages, reseller accounts, WHMReseller and running a hosting brand.49 guides
- WordPressInstall, secure, speed up, migrate and fix WordPress sites.40 guides
- Email & webmailMailboxes, webmail, forwarders, spam filters and email delivery.37 guides
- DomainsRegistering, transferring and managing domains and nameservers.20 guides
- SSL certificatesFree AutoSSL, Let's Encrypt, paid certificates and HTTPS.19 guides
- CloudLinuxCloudLinux setup and use: LVE limits, CloudLinux Manager, CageFS and PHP/Node.js selectors.31 guides
- LiteSpeedLiteSpeed Web Server, LSCache and the LiteSpeed Cache plugin: install, settings and tuning.30 guides
- Imunify360Malware scanning, firewall and proactive defence with Imunify360.23 guides
- SoftaculousInstall, update, clone and back up apps with Softaculous.23 guides
- WP SquaredcPanel's WordPress platform: sites, plugins, staging and backups.9 guides
- SitePadBuild and publish websites with the SitePad builder.9 guides
- SitejetDesign, edit and publish sites with the Sitejet builder.9 guides
- WHMResellerAlpha and master resellers with WHMReseller: install, setup and use.12 guides
- VirtFusionInstall, set up and manage VirtFusion: hypervisors, packages, servers and WHMCS integration.7 guides
- VirtualizorManage your VPS with Virtualizor: power, OS reinstall, VNC, IPs and backups.30 guides
- PleskWebsites, email, databases and settings in the Plesk panel.52 guides
- DirectAdminUsers, domains, email and reseller tools in DirectAdmin.40 guides
- WHMCSBilling, automation, products and client management with WHMCS.51 guides
- Control panelscPanel & WHM, Plesk, DirectAdmin and other panels on your VPS.106 guides
- SecurityKeys, passwords, firewalls and keeping a server patched.115 guides
- Networking & DNSIP addresses, reverse DNS, ports and traffic.34 guides
- Websites & appsWeb servers, WordPress, PHP, Node.js, SSL and app hosting.52 guides
- DatabasesMySQL, MariaDB, PostgreSQL, Redis and MongoDB on a VPS.64 guides
- Billing & accountInvoices, renewals, the client area and your account.9 guides
- TroubleshootingWhen something is not working: checks and fixes.68 guides
- Linux VPSSSH, packages, services and everyday Linux administration.70 guides
- Windows VPS & RDPRemote Desktop, Windows Server settings and Admin RDP tips.58 guides
- Docker & DevOpsContainers, Git deploys, automation, monitoring and backups.58 guides
Still stuck?
Ask MdmHost AI for a quick answer, or open a ticket and our team will take a look. We are here 24/7.