Guides tagged “security”
Step-by-step MdmHost guides about security, sorted A-Z.
193 guides · page 2 of 10
Change your Windows server password safely
Two safe ways to change the password on a Windows VPS or Admin RDP, how to test it without locking yourself out, and what to update afterwards.
Check banned IPs and unban an address in Fail2ban
See which IP addresses Fail2ban has banned, find out why, unban an address in one command and whitelist it so it does not happen again.
Check the Windows Firewall rule for RDP port 3389
Find and verify the inbound TCP 3389 rule that lets Remote Desktop reach your server, recreate it if it was deleted and scope it without locking yourself out.
Clean up a hacked WordPress site
Recover a hacked WordPress site step by step: contain the attack, scan with Imunify360, restore or replace infected files, reset credentials and prevent reinfection.
CloudLinux CageFS explained: what it does for your hosting account
What CloudLinux CageFS is, how it isolates each cPanel account in its own file system, what you can and cannot see over SSH, and common CageFS questions.
CloudLinux hardened PHP explained: are old PHP versions safe?
What CloudLinux hardened PHP (alt-php) is, how it backports security fixes to end-of-life PHP versions, its limits, and why you should still plan an upgrade.
Combining Fail2ban with UFW and firewalld for Layered Defense
Fail2ban bans IPs with its own rules by default. Point its ban actions at UFW or firewalld so every ban lands in the firewall you already manage and audit.
Configure cPHulk brute-force protection in WHM (root guide)
Set up cPHulk in WHM to stop password guessing on cPanel, WHM, email and FTP: thresholds, whitelisting your IP, country rules and unblocking from SSH.
Configure DirectAdmin Brute Force Monitor and IP blocking
Set up DirectAdmin's Brute Force Monitor to detect failed logins on DirectAdmin, SSH, FTP and mail, block attackers with CSF or the firewall, and unblock IPs.
Configure Fail2ban jails: bantime, findtime and maxretry in jail.local
Set up Fail2ban properly with a jail.local file. Tune bantime, findtime and maxretry, enable incremental bans, whitelist your own IP and pick the right log backend.
Configure firewall rules for a Virtualizor VPS
Protect your VPS with firewall rules: use Virtualizor's firewall where your provider enables it, or configure UFW or firewalld inside the VPS without locking yourself out.
Configure firewalld on AlmaLinux and Rocky Linux
Learn the firewalld basics on AlmaLinux and Rocky Linux: zones, opening services and ports, permanent versus runtime rules, and IP-restricted access.
Configure ModSecurity (Web Application Firewall) in Plesk
Enable ModSecurity in Plesk, choose a rule set, use detection-only mode, find blocked requests in logs, and switch off rules that cause false positives per server or domain.
Configure ModSecurity in WHM: vendors, rules and per-domain control (root guide)
Set up ModSecurity on a cPanel server as root: choose a rule vendor, enable or disable rules, read hits in ModSecurity Tools and handle false positives per domain.
Configure the Plesk Firewall extension: rules for web, mail and FTP
Install the Plesk Firewall extension, add rules for web, mail, FTP and custom ports, then apply them without locking yourself out of SSH.
Create cPanel API tokens to automate your hosting account
Create, restrict and revoke cPanel API tokens in Manage API Tokens, then call the UAPI from scripts to automate email, DNS or backup tasks without sharing your password.
Create WHMCS API credentials and API roles securely
Create API roles with limited actions, generate API credentials for an admin user, restrict access by IP, test a call and rotate or revoke credentials in WHMCS.
Create WHMCS staff accounts, admin roles and two-factor authentication
Add staff to WHMCS with least-privilege administrator roles, restrict departments, enable and enforce two-factor authentication, and review admin activity logs.
DDoS protection basics for websites and servers
Understand what a DDoS attack is, the difference between network floods and application-layer attacks, and the practical steps that keep a hosted site or VPS online.
Delete, insert and reorder UFW rules safely
List UFW rules by number, delete them by number or by rule text, insert a rule at a set position and reset UFW without cutting off your own SSH session.
Browse by topic
- Getting startedYour first hour with a new server: access, logins and basics.69 guides
- cPanelFiles, databases, email, domains and every cPanel tool, step by step.37 guides
- WHM & resellingWHM, packages, reseller accounts, WHMReseller and running a hosting brand.49 guides
- WordPressInstall, secure, speed up, migrate and fix WordPress sites.40 guides
- Email & webmailMailboxes, webmail, forwarders, spam filters and email delivery.37 guides
- DomainsRegistering, transferring and managing domains and nameservers.20 guides
- SSL certificatesFree AutoSSL, Let's Encrypt, paid certificates and HTTPS.19 guides
- CloudLinuxCloudLinux setup and use: LVE limits, CloudLinux Manager, CageFS and PHP/Node.js selectors.31 guides
- LiteSpeedLiteSpeed Web Server, LSCache and the LiteSpeed Cache plugin: install, settings and tuning.30 guides
- Imunify360Malware scanning, firewall and proactive defence with Imunify360.23 guides
- SoftaculousInstall, update, clone and back up apps with Softaculous.23 guides
- WP SquaredcPanel's WordPress platform: sites, plugins, staging and backups.9 guides
- SitePadBuild and publish websites with the SitePad builder.9 guides
- SitejetDesign, edit and publish sites with the Sitejet builder.9 guides
- WHMResellerAlpha and master resellers with WHMReseller: install, setup and use.12 guides
- VirtFusionInstall, set up and manage VirtFusion: hypervisors, packages, servers and WHMCS integration.7 guides
- VirtualizorManage your VPS with Virtualizor: power, OS reinstall, VNC, IPs and backups.30 guides
- PleskWebsites, email, databases and settings in the Plesk panel.52 guides
- DirectAdminUsers, domains, email and reseller tools in DirectAdmin.40 guides
- WHMCSBilling, automation, products and client management with WHMCS.51 guides
- Control panelscPanel & WHM, Plesk, DirectAdmin and other panels on your VPS.106 guides
- SecurityKeys, passwords, firewalls and keeping a server patched.115 guides
- Networking & DNSIP addresses, reverse DNS, ports and traffic.34 guides
- Websites & appsWeb servers, WordPress, PHP, Node.js, SSL and app hosting.52 guides
- DatabasesMySQL, MariaDB, PostgreSQL, Redis and MongoDB on a VPS.64 guides
- Billing & accountInvoices, renewals, the client area and your account.9 guides
- TroubleshootingWhen something is not working: checks and fixes.68 guides
- Linux VPSSSH, packages, services and everyday Linux administration.70 guides
- Windows VPS & RDPRemote Desktop, Windows Server settings and Admin RDP tips.58 guides
- Docker & DevOpsContainers, Git deploys, automation, monitoring and backups.58 guides
Still stuck?
Ask MdmHost AI for a quick answer, or open a ticket and our team will take a look. We are here 24/7.