Stephen John Smoogen wrote:
On Fri, May 1, 2009 at 10:19 AM, Jason Todd Slack-Moehrle mailinglists@mailnewsrss.com wrote:
Hi All,
What tips does everyone have on hardening a CenOS Server that is running web, e-mail, ssh, ftp, mysql, coldfusion and will be processing payments from www?
NSA hardening guidelines would be a good start. The CIS hardening guidelines would be also good. After that you want to look at specific hardening guidelines for apache
And we have our very own Wiki guide for hardening SSH:
http://wiki.centos.org/HowTos/Network/SecuringSSH
As for ftp - disable it IMHO :)