On 09/18/10 12:08, Roland RoLaNd wrote: > Dear all, > > i Just finished setting up an apache service on a centos 5.2 VM machine. > > i need to secure this machine as i'm soon to be setting a public IP over it where i'd be opening up the following services: > > > 1. http > 2. https > 3. ssh > > > Things i've done so far: > > 1. stopped root ssh access in sshd.conf > 2. tried configuring PAM so i get a more secure ssh passwords (dictionary wise) as well as tried setting up a 2 times authentication failure for the account to be disabled for 12 hours (i couldnl't succeed in setting this up) > 3. disabled port forwarding (to deny outsiders to tunnel through the server inside my network) couldn't succeed with this either. > > > Any help or advice would be greatly appreciated.. > > thanks, > > --Roland Start by upgrading to the latest release...