I have been messing around with hosting a website a little bit. The other day, it got hacked I believe, as suddenly the entire directory of information was gone with out a trace.

I didn't see any login attempts thru ssh, or ftp, so I was unsure about how it happened. Either an exploit of some sort, or my own error? No idea.

I installed a fresh copy of Fedora 6 and would like to go back online. But where are some good resources , or a check list of sorts to make sure I didn't miss anything, so I can sleep better at night.

Where would I go to find exploits of apache and such so I can keep up on the times?

Many thanks,

Have a look at mod_security
http://www.modsecurity.org/

And mod_evasive
http://www.zdziarski.com/projects/mod_evasive/

I'm using these

And also:
http://www.freesoftwaremagazine.com/...ardening_linux
http://httpd.apache.org/docs/2.0/mis...rity_tips.html
http://www.howtoforge.com/apache_mod_security

That's a beginning...

This is what I was looking for. Many thanks.

Neocontrol,

You might consider using CentOS instead of Fedora Core. You could enable the firewall and SELinux upon install. Extensive logging in enabled making it easier to follow breakin attempts and the aftermath of hacking.

You could then install something like DenyHosts python script to block multiple login failures.

Jeff

If you want to keep up on bleeding edge stuff that's just released, one of the infosec mailing lists is the way to go, like bugtraq or full-disclosure. The signal-to-noise ratio can be a bit low on those, especially if you're interested in just Apache vulns, so you may want an Apache-specific list.

Probably the single most-effective measure you can take is to turn on nightly YUM updates, so that your server will be fully patched at all times. If you are hosting anything with dynamic content like CGI scripts, PHP or third-party add ons like phpBB bulletin boards then you need to independently monitor their security status as they will not be automatically updated (PHP core files will be). Also many of these addons have individual security tweaks that can be very helpful, like turning off register_globals in pre-4.2 versions of PHP. I'd also second using mod_security.