Pre Setup

E-mail Print PDF

.

IF YOU ARE MISSING ONE OF THESE, FREE OS-RELOAD, FREE POWER-CYCLE,
PLEASE THINK TWICE BEFORE STARTING, CONSULT PROFESSIONALS
THIS IS ON YOUR OWN RISK, AND I AM NOT RESPONSIBLE IF SOMETHING BAD HAPPEND!
ITS NOT RECOMMENDED TO DO THIS ON A LIVE SERVER!

But first of all..

You will need this:
* Dedicated Server or VPS
* Email Account Offsite

You should have this:
* Free OS-RELOAD
* Free POWER CYCLE (REBOOT)

Looking for server?:


Read this forum post for infomation about what raid you should have:
http://www.tomshardware.co.uk/forum/244377-14-raid-raid-raid

IP/DOMAIN Setup:

First of all we need to buy a domain, this is mainly for the server.
So lets buy a domain from godaddy.com, i got maxisecure.com for this

I recommend that you get a account a http://www.dnsmadeeasy.com, they have a very good solution for dns hosting
Reason to use dnsmadeeasy:
* Good yearly price
* 100% Uptime SLA
* DNS Failover / System Monitoring

Or you can use some free alternative: http://www.everydns.ne

These ips are not real, but ill use them in this tutorial all the way, so make you dont use these, but the ones you got from your ISP. IF you got more than 2 ips, you can use the rest for websites.
I can then recommend you setup the LAST ip in the range as IP2. So you can hide your managment ip a little.

IP1 - 75.100.100.1
IP2 - 75.100.100.2

Now the service overview, what services we bind to what ip:

IP1 - Shared services:
FTPD - ftp.maxisecure.com
HTTPD - maxisecure.com / www.maxisecure.com
SMTP - smtp.maxisecure.com
POP3 - pop.maxisecure.com
IMAP - imap.maxisecure.com
DNS - ns1.maxisecure.com

Other A Names:
mail.maxisecure.com

IP2 - Control-Panel/SSH/Webmin:
DNS - ns2.maxisecure.com
SSH - hidden.maxisecure.com ( this you can change to something you want )

So your dns table at your external dns provider should look like this:

Hostname
-
Type
- Value
- MX/Other
-
TTL
localhost

A

127.0.0.1



86400
ftp

A

75.100.100.1



86400
maxisecure.com

A

75.100.100.1



86400
www

A

75.100.100.1



86400
pop

A

75.100.100.1



86400
mail

A

75.100.100.1



86400
ns1
A

75.100.100.1



86400
ns2

A

75.100.100.2


86400
hidden
A

75.100.100.2



86400
mail

MX

10



86400
maxisecure.com.

NS
ns1.pmsdns.org



86400
maxisecure.com.
NS

ns2.pmsdns.org


86400
maxisecure.com.

TXT

"v=spf1 a mx ip4:75.100.100.1 ?all"



86400

Password Policy:

This may be one of the most important sections this howto got

Follow these guidelines and you should have a good policy:
  • Different password on each user
  • Dont use wordlist words
  • Mix letters and numbers
  • Use both capital LETTERS and "small" letters
  • 12+ Letters/Numbers on all users.
  • Store the usernames/password in a safe place like KeePass (It also generates passwords)

Tags See All Tags Add New Tag...

Please Enter New Tags Separated By Comma's
  Or Close

centos  dedicated server  dns  hardening  linux  password  security 
Powered By Joomla Tags

Last Updated ( Wednesday, 10 September 2008 15:34 )