• Our team is looking to connect with folks who use email services provided by Plesk, or a premium service. If you'd like to be part of the discovery process and share your experiences, we invite you to complete this short screening survey. If your responses match the persona we are looking for, you'll receive a link to schedule a call at your convenience. We look forward to hearing from you!
  • We are looking for U.S.-based freelancer or agency working with SEO or WordPress for a quick 30-min interviews to gather feedback on XOVI, a successful German SEO tool we’re looking to launch in the U.S.
    If you qualify and participate, you’ll receive a $30 Amazon gift card as a thank-you. Please apply here. Thanks for helping shape a better SEO product for agencies!
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.

Security Hardening - Plesk 11.5 on CentOS 6

Bluedog

New Pleskian
Hi,

I just started with CentOS and Plesk and I am trying to setup everything to be secure as much as possible :) And I would like to ask you if you can share some tips and tricks with me.
Because I am not sure if firewall at Plesk is secure enough or do I have to install fail2ban and IPtables etc.

Thanks a lot for any tips.
 
Hello,

I will suggest you install following plugin on your server in the security purpose

Install CSF/APF firewall
Install LMD (Linux Malware Detect )
And mod_security
 
Check out Atomic Secured Linux, a security suite designed for Plesk environments (we are the founders of Plesk!). https://www.atomicorp.com/products/asl.html

We also have a number of security application available in the Atomic repo, including the openvas vulnerability scanner. I highly recommend it for verifying your security controls.
 
Hello,

I will suggest you install following plugin on your server in the security purpose

Install CSF/APF firewall
Install LMD (Linux Malware Detect )
And mod_security

Thanks for the tips! I just need to setup CSF correctly ;)
 
Yes, Install CSF and configured it correctly on your server

With the LMD you can scan your users website through command prompt, Maldet is a good scanner for the shell scripts scanning and through mod_sec you can prevent lot of web attack and sql injection
 
Back
Top