Guides tagged “security”

Step-by-step MdmHost guides about security, sorted A-Z.

193 guides · page 9 of 10

SSH Hardening: Mitigating Man-in-the-Middle Attacks with Host Key Verification
SSH host key verification makes your client confirm the server's identity before you send credentials. This guide shows how to read fingerprints, verify them out of band, pin them in known_hosts and rotate host keys without locking yourself out.
IntermediateLinux server6 min read
SSH tunnels: local, remote and dynamic (SOCKS) port forwarding
Use SSH port forwarding to reach a private database, expose a local service temporarily, or browse through your server with a SOCKS proxy.
IntermediateLinux VPS and any SSH server2 min read
SSL, TLS and HTTPS explained: how website encryption works
What SSL/TLS certificates are, how the HTTPS handshake protects visitors, the types of certificates (DV, OV, EV, wildcard), how validation works and why every site needs it.
BeginnerEveryone2 min read
Stop brute force and floods with Cloudflare rate limiting rules
Create Cloudflare rate limiting rules that slow down login brute force, search and checkout abuse, and small HTTP floods, with sensible thresholds and testing tips.
IntermediateSites using Cloudflare2 min read
Stop comment and form spam on WordPress
Reduce WordPress comment and contact form spam: discussion settings, moderation rules, anti-spam plugins, honeypots and CAPTCHA, and cleaning up existing spam.
BeginnercPanel hosting3 min read
Stop Docker from bypassing your UFW firewall
Docker-published ports skip UFW rules and stay open to the internet. Learn why it happens, how to bind ports to 127.0.0.1, how to filter with the DOCKER-USER chain and how to test from outside.
AdvancedLinux server6 min read
Stop fraudulent orders in WHMCS with fraud protection settings
Enable MaxMind or FraudLabs Pro in WHMCS, set risk score thresholds, require order approval, use CAPTCHA and order rules to block card testing and fake signups.
IntermediateWHMCS2 min read
Stop hotlinking and password sharing: Hotlink and Leech Protection in cPanel
Stop other websites from embedding your images and stealing bandwidth with cPanel Hotlink Protection, and block shared passwords with Leech Protection.
IntermediatecPanel hosting3 min read
Stop image hotlinking with DirectAdmin Hotlink Protection
Enable Hotlink Protection in DirectAdmin to stop other sites embedding your images and files, allow your own domains and search engines, and redirect blocked requests.
BeginnerDirectAdmin2 min read
Test firewall changes safely with an automatic rollback
Schedule an automatic undo before you change firewall rules. If a mistake blocks SSH, the old rules come back by themselves a few minutes later.
IntermediateLinux server5 min read
Turn directory listing on or off with cPanel Indexes
Control whether visitors can see a list of files in folders without an index page, using cPanel Indexes or .htaccess, to share downloads or hide sensitive files.
BeginnercPanel hosting2 min read
Turn on automatic security updates (unattended-upgrades and dnf-automatic)
Keep your server patched without remembering to log in: set up unattended-upgrades or dnf-automatic, test it, and choose how kernel reboots happen.
BeginnerLinux server2 min read
UFW and IPv6: make sure your rules cover both
Check that UFW filters IPv6 as well as IPv4. Set IPV6=yes, read the (v6) rules in ufw status, allow or deny IPv6 sources and test your server from outside with nmap -6.
IntermediateLinux server5 min read
UFW vs firewalld vs nftables vs iptables: which Linux firewall to use
UFW, firewalld, nftables and iptables are not four rival firewalls. Learn how they fit together, what each distro uses by default and how to pick one tool for your VPS.
BeginnerLinux server5 min read
Use Fail2ban with firewalld or nftables ban actions
Make Fail2ban put its bans into the firewall your server really uses. Set banaction to firewalld rich rules or nftables, check the distribution defaults and confirm bans in the live ruleset.
IntermediateLinux server5 min read
Use SSH keys in PuTTY with Pageant
Log in to your Linux VPS with an SSH key in PuTTY, either by pointing a saved session at a.ppk file or by loading keys into the Pageant agent, and start Pageant automatically with Windows.
IntermediateLinux server5 min read
Use WHM Security Advisor to harden a cPanel server (root guide)
Run WHM Security Advisor as root, understand its red, yellow and blue findings, and fix the common ones: SSH passwords, compilers, Apache modules, kernel and PHP versions.
AdvancedWHM (root)2 min read
VPS security for traders
Keep your trading VPS safe: one login per person, investor passwords for sharing, 2FA where offered, a locked-down RDP and careful installs.
BeginnerWindows server3 min read
Website backups explained: types, retention and the 3-2-1 rule
What a complete website backup contains, full vs incremental backups, how long to keep copies, why host backups are not enough on their own, and how to test restores.
BeginnerEveryone2 min read
Website hacked? Recovery plan for any site on cPanel hosting
A calm, ordered plan to recover a hacked website on cPanel: contain the damage, find what changed, restore clean files, close the hole, and clean up email and search results.
IntermediatecPanel hosting2 min read

Browse by topic

Still stuck?

Ask MdmHost AI for a quick answer, or open a ticket and our team will take a look. We are here 24/7.

Ask MdmHost AI Open a ticket