Guides tagged “security”

Step-by-step MdmHost guides about security, sorted A-Z.

248 guides · page 4 of 13

Enable automatic security updates on Ubuntu, Debian and AlmaLinux
Configure unattended-upgrades on Ubuntu and Debian or dnf-automatic on AlmaLinux and Rocky to install security patches automatically, with email reports, reboot handling and safe exclusions.
BeginnerLinux VPS2 min read
Enable or disable ModSecurity for a domain in cPanel
Learn what ModSecurity blocks, how to switch it off for one domain to test a false positive, and why you should turn it back on and fix the cause instead.
IntermediatecPanel hosting2 min read
Enable two-factor authentication (2FA) in cPanel
Protect your cPanel login with two-factor authentication using Google Authenticator, Microsoft Authenticator or another TOTP app, and what to do if you lose your phone.
BeginnercPanel hosting2 min read
Enable two-factor authentication for WordPress logins
Protect WordPress accounts with two-factor authentication: choose a plugin, set up an authenticator app, save backup codes, require 2FA for admins and recover a lost device.
BeginnercPanel hosting3 min read
Encrypt email with GPG keys in cPanel (Encryption tool)
Generate or import GnuPG/OpenPGP keys in cPanel's Encryption tool, share your public key, and use encrypted email in Roundcube or Thunderbird for sensitive messages.
AdvancedcPanel hosting3 min read
Fail2ban Custom Jails: Creating Filters for Specific Application Log Errors
Write regex filters for your own application logs, test them with fail2ban-regex, and deploy custom jails that ban repeat offenders without touching your SSH rules.
AdvancedLinux server7 min read
Fail2ban False Positive Resolution: Fine-Tuning Jails and Timeouts
Diagnose why Fail2ban banned a legitimate user, then fix it properly by tuning maxretry, findtime, bantime and ignoreip instead of disabling the jail.
IntermediateLinux server6 min read
Fail2ban not banning? Common causes and fixes
Fail2ban is running but attackers are never banned. Work through the usual causes, from the wrong log backend and log path to a ban action that does not fit your firewall or a custom SSH port.
IntermediateLinux server6 min read
firewalld zones explained: public, trusted, drop and custom zones
Learn what firewalld zones do, how traffic is matched to a zone by interface or source IP, and how to build a custom admin zone so only your IPs can reach SSH.
IntermediateLinux server5 min read
First steps after your Linux VPS is ready (SSH, updates, firewall)
Log in over SSH, change the root password, install updates, add a sudo user and switch on a firewall without locking yourself out.
BeginnerLinux server2 min read
First steps on a new Linux VPS: secure and set it up
The first things to do on a fresh Linux VPS: log in, update packages, create a sudo user, set up SSH keys, enable a firewall, set hostname and timezone, add swap and plan backups.
BeginnerLinux VPS2 min read
Fix 403 Forbidden errors caused by ModSecurity (Imunify360 WAF)
Recognise when the Imunify360 web application firewall blocks a legitimate form or admin action with a 403 error, collect the details and get the rule fixed.
IntermediatecPanel hosting with Imunify3603 min read
FTP vs SFTP vs FTPS explained: which file transfer method should you use?
The differences between plain FTP, FTPS and SFTP, which ports and logins each uses on cPanel hosting, how they compare to File Manager and Web Disk, and which is safest.
BeginnercPanel hosting2 min read
GDPR and web hosting: what website owners and resellers need to know
How GDPR applies to web hosting: controller vs processor roles, data processing agreements, server location and transfers, logs, backups, breaches and a practical compliance checklist.
IntermediateEveryone3 min read
Get email or Telegram alerts when Fail2ban bans an IP
Make Fail2ban tell you when it bans someone. Use the built-in email action, add a custom action that posts to Telegram or a webhook, and keep the alerts from flooding your inbox.
IntermediateLinux server5 min read
Give team members their own access with cPanel User Manager
Create sub-accounts in cPanel User Manager so staff and developers get their own email, FTP or Web Disk login without sharing your main cPanel password.
BeginnercPanel hosting2 min read
Hacked VPS? Incident response steps for a compromised server
What to do when a Linux VPS is compromised: signs of intrusion, isolate the server, preserve evidence with a snapshot, find the entry point, rebuild cleanly, rotate credentials and prevent a repeat.
IntermediateLinux VPS2 min read
Harden a Plesk server with Security Advisor and best practices
Use Plesk Security Advisor, two-factor authentication, ModSecurity, Fail2Ban, the firewall and update policies to secure a Plesk VPS or dedicated server.
AdvancedPlesk2 min read
Harden a Virtualizor master and its KVM nodes
Secure Virtualizor: restrict admin panel access by IP, enforce 2FA, use SSL, firewall node ports, secure SSH, protect API keys and isolate VPS network traffic.
AdvancedVirtualizor admin2 min read
HestiaCP: manage packages, users and firewall rules
Create a hosting package in HestiaCP, add a user who inherits it, then add and test firewall rules from the panel or the CLI without locking yourself out of SSH.
IntermediateLinux server6 min read

Browse by topic

Still stuck?

Ask MdmHost AI for a quick answer, or open a ticket and our team will take a look. We are here 24/7.

Ask MdmHost AI Open a ticket