Take the 2-minute tour ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.

I just recently got my hands on a linux (Fedora) VPS and I would like to ask if there are special configurations that I have to be wary of. Do I still configure it like I would configure a normal virtual machine? Are there more things to take care of, or be cautious about because that machine is 24/7 available online, and can fall pray to those (hackers/crackers) seeking a machine to test their knowledge on?

I would appreciate your input.

share|improve this question
    
Great question! –  Tim Jun 29 '12 at 17:08
add comment

2 Answers 2

up vote 2 down vote accepted

In addition to Tim's suggestion, configure your user account to use ssh keys for authentication, then configure SSH to only accept key based auth (no passwords). Also make sure that root logins are disabled.

Here's a summary of the options that do this:

ChallengeResponseAuthentication no
HostbasedAuthentication no
PasswordAuthentication no
PermitEmptyPasswords no
PermitRootLogin no
PubkeyAuthentication yes
RSAAuthentication yes
RhostsRSAAuthentication no
UsePAM yes
UsePrivilegeSeparation yes

Remember, you must have key based login working before you disable password logins. Otherwise you will be locked out permanently.

share|improve this answer
    
Hello, and thank you for your input! This gave me some good insight on the matter. –  NlightNFotis Jun 30 '12 at 6:50
add comment

Most VPS providers, if they have been around long enough, have a well known block of IP addresses, and tend to get a boat load of malicious traffic. I would be overly careful, lock it all down, and only open ports, etc. when you are sure they are secure and can handle some malicious traffic and shoot it down properly.

share|improve this answer
    
Hello and thank you for your input. It really helped me clarify some things. –  NlightNFotis Jun 30 '12 at 6:51
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.