Guides tagged “security”

Step-by-step MdmHost guides about security, sorted A-Z.

193 guides · page 3 of 10

Disable root login and password authentication over SSH
Stop brute-force attempts by switching off root and password logins with a small SSH drop-in file, then verify the change from a second session.
IntermediateLinux server3 min read
Disable XML-RPC and protect wp-login.php
Stop brute-force attacks on WordPress: disable XML-RPC, limit login attempts, add 2FA and an extra password on wp-admin, and check what still needs XML-RPC.
IntermediatecPanel hosting3 min read
Docker security checklist for a public VPS
A practical Docker hardening checklist for an internet-facing VPS. Run images as non-root, use read-only filesystems, drop capabilities, never expose the daemon socket, scan images and keep them updated.
IntermediateLinux server5 min read
Domain security explained: registrar lock, DNSSEC and account protection
How domains get hijacked and the layers that stop it: registrar lock, registry lock, DNSSEC, strong account security, accurate contact data and auto-renewal.
IntermediateEveryone2 min read
Enable or disable ModSecurity for a domain in cPanel
Learn what ModSecurity blocks, how to switch it off for one domain to test a false positive, and why you should turn it back on and fix the cause instead.
IntermediatecPanel hosting2 min read
Enable two-factor authentication (2FA) in cPanel
Protect your cPanel login with two-factor authentication using Google Authenticator, Microsoft Authenticator or another TOTP app, and what to do if you lose your phone.
BeginnercPanel hosting2 min read
Enable two-factor authentication for WordPress logins
Protect WordPress accounts with two-factor authentication: choose a plugin, set up an authenticator app, save backup codes, require 2FA for admins and recover a lost device.
BeginnercPanel hosting3 min read
Encrypt email with GPG keys in cPanel (Encryption tool)
Generate or import GnuPG/OpenPGP keys in cPanel's Encryption tool, share your public key, and use encrypted email in Roundcube or Thunderbird for sensitive messages.
AdvancedcPanel hosting3 min read
Fail2ban Custom Jails: Creating Filters for Specific Application Log Errors
Write regex filters for your own application logs, test them with fail2ban-regex, and deploy custom jails that ban repeat offenders without touching your SSH rules.
AdvancedLinux server7 min read
Fail2ban False Positive Resolution: Fine-Tuning Jails and Timeouts
Diagnose why Fail2ban banned a legitimate user, then fix it properly by tuning maxretry, findtime, bantime and ignoreip instead of disabling the jail.
IntermediateLinux server6 min read
Fail2ban not banning? Common causes and fixes
Fail2ban is running but attackers are never banned. Work through the usual causes, from the wrong log backend and log path to a ban action that does not fit your firewall or a custom SSH port.
IntermediateLinux server6 min read
firewalld zones explained: public, trusted, drop and custom zones
Learn what firewalld zones do, how traffic is matched to a zone by interface or source IP, and how to build a custom admin zone so only your IPs can reach SSH.
IntermediateLinux server5 min read
First steps after your Linux VPS is ready (SSH, updates, firewall)
Log in over SSH, change the root password, install updates, add a sudo user and switch on a firewall without locking yourself out.
BeginnerLinux server2 min read
Fix 403 Forbidden errors caused by ModSecurity (Imunify360 WAF)
Recognise when the Imunify360 web application firewall blocks a legitimate form or admin action with a 403 error, collect the details and get the rule fixed.
IntermediatecPanel hosting with Imunify3603 min read
FTP vs SFTP vs FTPS explained: which file transfer method should you use?
The differences between plain FTP, FTPS and SFTP, which ports and logins each uses on cPanel hosting, how they compare to File Manager and Web Disk, and which is safest.
BeginnercPanel hosting2 min read
Get email or Telegram alerts when Fail2ban bans an IP
Make Fail2ban tell you when it bans someone. Use the built-in email action, add a custom action that posts to Telegram or a webhook, and keep the alerts from flooding your inbox.
IntermediateLinux server5 min read
Give team members their own access with cPanel User Manager
Create sub-accounts in cPanel User Manager so staff and developers get their own email, FTP or Web Disk login without sharing your main cPanel password.
BeginnercPanel hosting2 min read
Harden a Plesk server with Security Advisor and best practices
Use Plesk Security Advisor, two-factor authentication, ModSecurity, Fail2Ban, the firewall and update policies to secure a Plesk VPS or dedicated server.
AdvancedPlesk2 min read
Harden a Virtualizor master and its KVM nodes
Secure Virtualizor: restrict admin panel access by IP, enforce 2FA, use SSL, firewall node ports, secure SSH, protect API keys and isolate VPS network traffic.
AdvancedVirtualizor admin2 min read
HestiaCP: manage packages, users and firewall rules
Create a hosting package in HestiaCP, add a user who inherits it, then add and test firewall rules from the panel or the CLI without locking yourself out of SSH.
IntermediateLinux server6 min read

Browse by topic

Still stuck?

Ask MdmHost AI for a quick answer, or open a ticket and our team will take a look. We are here 24/7.

Ask MdmHost AI Open a ticket