Guides tagged “security”
Step-by-step MdmHost guides about security, sorted A-Z.
248 guides · page 12 of 13
Turn directory listing on or off with cPanel Indexes
Control whether visitors can see a list of files in folders without an index page, using cPanel Indexes or .htaccess, to share downloads or hide sensitive files.
Turn on automatic security updates (unattended-upgrades and dnf-automatic)
Keep your server patched without remembering to log in: set up unattended-upgrades or dnf-automatic, test it, and choose how kernel reboots happen.
UFW and IPv6: make sure your rules cover both
Check that UFW filters IPv6 as well as IPv4. Set IPV6=yes, read the (v6) rules in ufw status, allow or deny IPv6 sources and test your server from outside with nmap -6.
UFW vs firewalld vs nftables vs iptables: which Linux firewall to use
UFW, firewalld, nftables and iptables are not four rival firewalls. Learn how they fit together, what each distro uses by default and how to pick one tool for your VPS.
Use Fail2ban with firewalld or nftables ban actions
Make Fail2ban put its bans into the firewall your server really uses. Set banaction to firewalld rich rules or nftables, check the distribution defaults and confirm bans in the live ruleset.
Use SSH keys in PuTTY with Pageant
Log in to your Linux VPS with an SSH key in PuTTY, either by pointing a saved session at a.ppk file or by loading keys into the Pageant agent, and start Pageant automatically with Windows.
Use WHM Security Advisor to harden a cPanel server (root guide)
Run WHM Security Advisor as root, understand its red, yellow and blue findings, and fix the common ones: SSH passwords, compilers, Apache modules, kernel and PHP versions.
VirtFusion security hardening for control servers and hypervisors
Harden a VirtFusion deployment: lock down SSH, firewall the control server and hypervisors, enforce admin 2FA, protect API tokens, keep systems patched and watch logs.
VM golden images: best practices for templates
Build reliable VM golden images: what to include and leave out, removing machine-specific identity (machine-id, SSH host keys), cloud-init readiness, security baselines, versioning and regular rebuilds.
VPS security for traders
Keep your trading VPS safe: one login per person, investor passwords for sharing, 2FA where offered, a locked-down RDP and careful installs.
Web server hardening checklist for Nginx and Apache
Lock down a public web server step by step: hide version details, deny hidden files, disable listings and unused methods, enforce modern TLS, limit request sizes and stop PHP running in upload folders.
Web server users and file permissions: www-data, nginx, nobody and suEXEC
Which Linux user your web server and PHP run as, how that decides what they can read and write, safe ownership and permission patterns for websites, and how hosting panels isolate users.
Website backups explained: types, retention and the 3-2-1 rule
What a complete website backup contains, full vs incremental backups, how long to keep copies, why host backups are not enough on their own, and how to test restores.
Website hacked? Recovery plan for any site on cPanel hosting
A calm, ordered plan to recover a hacked website on cPanel: contain the damage, find what changed, restore clean files, close the hole, and clean up email and search results.
Website security basics for site owners: a practical checklist
The website security basics every site owner should cover: accounts and passwords, updates, HTTPS, backups, firewalls, file permissions, monitoring and what your host does versus what you must do.
Website security checklist for hosting customers (with Imunify360)
A practical security checklist for cPanel hosting customers: what Imunify360 already does for you, and the passwords, updates, backups and settings you still need to handle.
What is a firewall? Network, host and web application firewalls explained
Learn what a firewall does, how network, host-based and web application firewalls (WAF) differ, and which ones protect a cPanel server, VPS or website.
What is CloudLinux and why does it matter for your hosting?
CloudLinux isolates every hosting account with its own resource limits and a caged file system. Learn how LVE, CageFS, PHP Selector and MySQL Governor keep sites fast and safe.
When an employee leaves: forward, archive and delete their cPanel mailbox
A safe offboarding routine for a departing employee's cPanel email: block logins, keep receiving mail via a forwarder, archive old mail and delete the mailbox later.
WHM reseller ACL lists: choose safe reseller privileges (root guide)
Create and apply ACL lists in WHM so resellers get exactly the privileges they need: which functions are safe, which are risky and how to update many resellers.
Browse by topic
- Getting startedYour first hour with a new server: access, logins and basics.83 guides
- cPanelFiles, databases, email, domains and every cPanel tool, step by step.67 guides
- WHM & resellingWHM, packages, reseller accounts, WHMReseller and running a hosting brand.53 guides
- WordPressInstall, secure, speed up, migrate and fix WordPress sites.49 guides
- Email & webmailMailboxes, webmail, forwarders, spam filters and email delivery.67 guides
- DomainsRegistering, transferring and managing domains and nameservers.27 guides
- SSL certificatesFree AutoSSL, Let's Encrypt, paid certificates and HTTPS.41 guides
- CloudLinuxCloudLinux setup and use: LVE limits, CloudLinux Manager, CageFS and PHP/Node.js selectors.31 guides
- LiteSpeedLiteSpeed Web Server, LSCache and the LiteSpeed Cache plugin: install, settings and tuning.35 guides
- Imunify360Malware scanning, firewall and proactive defence with Imunify360.24 guides
- SoftaculousInstall, update, clone and back up apps with Softaculous.24 guides
- WP SquaredcPanel's WordPress platform: sites, plugins, staging and backups.9 guides
- SitePadBuild and publish websites with the SitePad builder.9 guides
- SitejetDesign, edit and publish sites with the Sitejet builder.9 guides
- WHMResellerAlpha and master resellers with WHMReseller: install, setup and use.12 guides
- VirtFusionInstall, set up and manage VirtFusion: hypervisors, packages, servers and WHMCS integration.28 guides
- VirtualizorManage your VPS with Virtualizor: power, OS reinstall, VNC, IPs and backups.44 guides
- PleskWebsites, email, databases and settings in the Plesk panel.53 guides
- DirectAdminUsers, domains, email and reseller tools in DirectAdmin.41 guides
- WHMCSBilling, automation, products and client management with WHMCS.52 guides
- Control panelscPanel & WHM, Plesk, DirectAdmin and other panels on your VPS.107 guides
- SecurityKeys, passwords, firewalls and keeping a server patched.138 guides
- Networking & DNSIP addresses, reverse DNS, ports and traffic.72 guides
- Websites & appsWeb servers, WordPress, PHP, Node.js, SSL and app hosting.83 guides
- DatabasesMySQL, MariaDB, PostgreSQL, Redis and MongoDB on a VPS.80 guides
- Billing & accountInvoices, renewals, the client area and your account.9 guides
- TroubleshootingWhen something is not working: checks and fixes.127 guides
- Linux VPSSSH, packages, services and everyday Linux administration.265 guides
- Windows VPS & RDPRemote Desktop, Windows Server settings and Admin RDP tips.73 guides
- Docker & DevOpsContainers, Git deploys, automation, monitoring and backups.82 guides
Still stuck?
Ask MdmHost AI for a quick answer, or open a ticket and our team will take a look. We are here 24/7.