Guides tagged “security”
Step-by-step MdmHost guides about security, sorted A-Z.
193 guides · page 4 of 10
Hide the Nginx version and harden the default config
Make Nginx give away less and accept less. Hide the version number, drop requests for unknown hosts, block dotfiles, limit methods and body size, and tighten timeouts.
How to change a customer's cPanel password in WHM
Reset a customer's cPanel password from WHM with Password Modification, choose whether MySQL passwords change too, and share the new login securely.
How to clean infected files with Imunify360
Clean malware from infected files with Imunify360 in cPanel, restore a file from its pre-cleanup backup if something breaks, and handle files that cannot be cleaned.
How to create and manage WHM API tokens as a reseller
Create WHM API tokens for WHMCS, scripts and other tools, limit their privileges and expiry, rotate them safely and revoke a token if it leaks.
How to enable two-factor authentication for WHM and cPanel
Protect your WHM reseller login and customers' cPanel accounts with two-factor authentication using an authenticator app, plus recovery steps if you lose your phone.
How to install and configure Imunify360 on a cPanel server (root guide)
Install Imunify360 on a cPanel server with i360deploy.sh, then configure malware scanning, auto-cleanup, Proactive Defense and firewall settings in WHM.
How to install and secure Redis on a Linux VPS
Install Redis on Ubuntu, Debian, AlmaLinux or Rocky Linux, keep it on localhost, require a password or ACL user, and run it under systemd.
How to install MongoDB on Ubuntu and secure it
Install MongoDB on Ubuntu from the official repository, enable authentication, create an admin user, and restrict access with bindIp and UFW.
How to scan your website for malware with Imunify360 in cPanel
Check your cPanel account for malware with the Imunify360 scanner: start a scan, read the results, understand statuses and decide what to do with infected files.
How to secure the WHM hostname with a free SSL certificate
Get a free, trusted SSL certificate for your cPanel server hostname with AutoSSL, check it with checkallsslcerts and remove the self-signed warning on port 2087.
Implementing a Web Application Firewall on Nginx with ModSecurity
Install the ModSecurity module on Nginx, load the OWASP Core Rule Set, run in detection mode first, then block SQL injection and XSS with tuned rules.
Implementing secure file transfer with SFTP over SSH keys
Generate an SSH key pair, install the public key on your Linux VPS, and use it to move files with SFTP — no passwords, and ready for scripts and cron jobs.
Imunify360 false positives: add files to the ignore list safely
What to do when Imunify360 flags a legitimate file as malware: confirm it is safe, add it to the ignore list, restore it and report the false positive.
Imunify360 firewall settings: ports, country blocking and DoS protection (root guide)
Configure the Imunify360 firewall as root: open and close TCP/UDP ports, block countries, enable DoS protection, and avoid locking out cPanel, mail or SSH.
Imunify360 firewall: blacklist IPs, block countries and manage ports
Use the Imunify360 firewall in WHM to blacklist IPs and subnets, block whole countries, understand the graylist, and open or close ports from the UI or CLI.
Imunify360 firewall: whitelist, blacklist and grey list explained
How the Imunify360 firewall lists work (white, black and grey), when an IP should be whitelisted, how to request it on MdmHost and the risks of whitelisting.
Imunify360 found a phishing page in my account: what to do
What to do when Imunify360 detects a phishing kit or fake login page in your hosting account: remove it, find how it got in, secure the account and handle blacklists.
Imunify360 on cPanel hosting: what it protects and how to use it
An overview of Imunify360 on MdmHost: malware scanning, Proactive Defense, the firewall, WAF and WebShield, what you see in cPanel and what MdmHost manages for you.
Imunify360 Proactive Defense explained
How Imunify360 Proactive Defense watches PHP scripts as they run, blocks malicious behaviour from unknown malware, the modes it uses and what to do if it blocks your app.
Imunify360 reputation management: check if your domain is blacklisted
How Imunify360 reputation management checks your domains and IPs against blacklists such as Google Safe Browsing and spam lists, and how to get delisted after a problem.
Browse by topic
- Getting startedYour first hour with a new server: access, logins and basics.69 guides
- cPanelFiles, databases, email, domains and every cPanel tool, step by step.37 guides
- WHM & resellingWHM, packages, reseller accounts, WHMReseller and running a hosting brand.49 guides
- WordPressInstall, secure, speed up, migrate and fix WordPress sites.40 guides
- Email & webmailMailboxes, webmail, forwarders, spam filters and email delivery.37 guides
- DomainsRegistering, transferring and managing domains and nameservers.20 guides
- SSL certificatesFree AutoSSL, Let's Encrypt, paid certificates and HTTPS.19 guides
- CloudLinuxCloudLinux setup and use: LVE limits, CloudLinux Manager, CageFS and PHP/Node.js selectors.31 guides
- LiteSpeedLiteSpeed Web Server, LSCache and the LiteSpeed Cache plugin: install, settings and tuning.30 guides
- Imunify360Malware scanning, firewall and proactive defence with Imunify360.23 guides
- SoftaculousInstall, update, clone and back up apps with Softaculous.23 guides
- WP SquaredcPanel's WordPress platform: sites, plugins, staging and backups.9 guides
- SitePadBuild and publish websites with the SitePad builder.9 guides
- SitejetDesign, edit and publish sites with the Sitejet builder.9 guides
- WHMResellerAlpha and master resellers with WHMReseller: install, setup and use.12 guides
- VirtFusionInstall, set up and manage VirtFusion: hypervisors, packages, servers and WHMCS integration.7 guides
- VirtualizorManage your VPS with Virtualizor: power, OS reinstall, VNC, IPs and backups.30 guides
- PleskWebsites, email, databases and settings in the Plesk panel.52 guides
- DirectAdminUsers, domains, email and reseller tools in DirectAdmin.40 guides
- WHMCSBilling, automation, products and client management with WHMCS.51 guides
- Control panelscPanel & WHM, Plesk, DirectAdmin and other panels on your VPS.106 guides
- SecurityKeys, passwords, firewalls and keeping a server patched.115 guides
- Networking & DNSIP addresses, reverse DNS, ports and traffic.34 guides
- Websites & appsWeb servers, WordPress, PHP, Node.js, SSL and app hosting.52 guides
- DatabasesMySQL, MariaDB, PostgreSQL, Redis and MongoDB on a VPS.64 guides
- Billing & accountInvoices, renewals, the client area and your account.9 guides
- TroubleshootingWhen something is not working: checks and fixes.68 guides
- Linux VPSSSH, packages, services and everyday Linux administration.70 guides
- Windows VPS & RDPRemote Desktop, Windows Server settings and Admin RDP tips.58 guides
- Docker & DevOpsContainers, Git deploys, automation, monitoring and backups.58 guides
Still stuck?
Ask MdmHost AI for a quick answer, or open a ticket and our team will take a look. We are here 24/7.
