Guides tagged “security”

Step-by-step MdmHost guides about security, sorted A-Z.

193 guides · page 7 of 10

Port forwarding and NAT with UFW before.rules
Forward a public port on your VPS to a backend server or VPN client with UFW. Turn on IP forwarding, add a nat table to before.rules, allow routed traffic and test from outside.
AdvancedLinux server5 min read
Port open in the firewall but still unreachable: how to fix it
You allowed a port in the firewall but connections still fail. Work through each layer, from the listening address to the server and client networks, to find the real block.
Intermediate5 min read
Proactive Patch Management: Automating Security Updates on Linux VPS
Set up unattended-upgrades and dnf-automatic so security patches install themselves, then control reboots, package holds and logging so nothing breaks.
IntermediateLinux server6 min read
Protect Nginx with Fail2ban: bad bots, scanners and auth
Turn on Fail2ban's built-in Nginx jails to ban password guessers, vulnerability scanners and clients that hit your rate limits, then test each filter against your real logs.
IntermediateLinux server5 min read
Protect Plesk with Fail2Ban (IP address banning)
Enable Fail2Ban in Plesk, choose which jails to activate, tune ban time and retries, whitelist trusted IPs and unban an address that was blocked by mistake.
IntermediatePlesk2 min read
Protect SSH from brute-force attacks with Fail2ban
Install Fail2ban, create a safe jail.local for SSH, check which addresses are banned and unban yourself if you mistype a password too often.
IntermediateLinux server2 min read
Protect your website with Cloudflare WAF custom rules
Use Cloudflare WAF custom rules to block bad countries, bots and attack paths, challenge visitors to wp-login.php, and allow your own IP, before traffic reaches your hosting.
IntermediateSites using Cloudflare2 min read
Proxy vs VPN vs reverse proxy: what each one does
The practical difference between forward proxies, SOCKS, VPNs and reverse proxies, and which one fits admin access, privacy, IP whitelists or a website.
BeginnerAll hosting and VPS2 min read
Rate limit requests in Nginx with limit_req
Slow down brute-force logins, scrapers and API abuse with Nginx limit_req and limit_conn, using burst and nodelay so real visitors are not affected.
IntermediateLinux server5 min read
Rate-limit SSH and other ports with ufw limit
Use ufw limit to slow down SSH brute-force attempts. Learn how the 6-connections-in-30-seconds rule works, apply it to a custom SSH port, pair it with Fail2ban and test it.
BeginnerLinux server5 min read
RDP Hardening: Preventing Privilege Escalation via Group Policy
Use Group Policy to cut the privilege escalation paths inside Remote Desktop sessions — restrict RDP logon rights, strip dangerous user rights and force UAC to deny elevation.
AdvancedWindows server7 min read
RDP Hardening: Preventing Session Hijacking on Port 3389
Session hijacking on RDP is usually a permissions problem, not a network one. This guide closes off both paths so nobody can take over an active or disconnected Remote Desktop session on port 3389.
AdvancedWindows server7 min read
RDP Hardening: Using Local Security Policy to Limit User Rights
Restrict what RDP users can do on a Windows VPS by editing user rights in Local Security Policy — who may log on remotely, who holds admin rights, and which dangerous privileges stay with Administrators only.
IntermediateWindows server6 min read
Read and tune UFW firewall logs
Turn on UFW logging at the right level, find [UFW BLOCK] lines in the journal or ufw.log, read the SRC, DPT and PROTO fields and keep log volume under control.
IntermediateLinux server5 min read
Reset a lost WordPress admin password
Get back into WordPress when you forgot the admin password: use the reset link, phpMyAdmin, WP-CLI or Softaculous, and secure the account afterwards.
BeginnercPanel hosting3 min read
Restrict outgoing traffic with UFW egress rules
Switch UFW to deny outgoing traffic by default, then allow only DNS, NTP, HTTPS and package mirrors. Block outbound SMTP and avoid breaking system updates along the way.
AdvancedLinux server5 min read
Restrict RDP port 3389 to your own IP addresses
Limit the Windows Firewall rule for RDP port 3389 to the IP addresses you connect from, so bots elsewhere cannot even reach the login screen.
IntermediateWindows server5 min read
Run Docker in rootless mode on Ubuntu
Set up Docker rootless mode on Ubuntu so the daemon and containers run as a normal user. Covers the setup tool, the user systemd service, ports below 1024, storage and the trade-offs.
AdvancedLinux server5 min read
Secure a cPanel email account: passwords, suspended logins and compromised mailboxes
Change a mailbox password in cPanel, suspend logins or incoming mail, and what to do when an email account is hacked and sending spam.
IntermediatecPanel hosting2 min read
Secure Apache with a free Let's Encrypt certificate
Install certbot with its Apache plugin, issue free Let's Encrypt certificates for each virtual host, redirect HTTP to HTTPS and confirm that automatic renewal works.
BeginnerLinux server4 min read

Browse by topic

Still stuck?

Ask MdmHost AI for a quick answer, or open a ticket and our team will take a look. We are here 24/7.

Ask MdmHost AI Open a ticket