Server admin needed

Since crossfire is so active and it once used to be the place to ask for whatever you want to ask, here I go:

I need someone who can update my server (hosted at OVH, France) and to do some general work. Debian squeeze with standard service is running (apache, ts3,....)

What I need:
OS / Kernel update to latest
rkhunter/chkrootkit don't fully work anymore. I tried to update them and since that they won't scan anymore. I guess re-install will fix the problem.
General security check.
General optimization if possible.
Installation and configuration of OpenVPN
Obviously the whole system should run with all the services like it runs right now

I need that to be done by someone trustable, so I prefer people that I know (hai Germanyeicher, BelgiumAnalconda, Netherlandsh3ll, Norwayplekter, Polandtrakos, .... ). So let me know your experience, how long you expect to work on this and how much € you charge. I will watch you via teamviewer and I guess it can be done within 2-3 hours.

I guess money is the prefered payment, how ever if you prefer webspace/gameserver/bnc/... just let me know. A few crossfire users are using my services for free since 2010 (hai Belgium homiee).

Kind regards & bibuy !

P.S. I tried to find some "webhosting forum" where I could search for such a service but only found "webhostingtalk.com". I received a few offers but would prefer someone I know.
Comments
5
Good luck finding the right person :)
rkhunter/chkrootkit - You don't need it if you secure your server well enough.

1. Use private SSH keys to connect to your server instead of passwords.
2. Auto ban IP based on failed login attempts.
3. Keep updating your server every few days. I tend to apply security fixes as soon as it is released. Debian or Ubuntu works good. You can't protect against zero day exploits but hey, we don't run million dollar business on it.
4. Run apache and ts3 under it's own user. People tend to run it as root. Modify apache to deny executable file uploads and hide open directories. Secure MySQL or MariaDB or Percona.. What ever DB you are using.
5. Secure FTP server and use the one which gets updated often.
I have done most of the things you describe and even a little bit more. And I believe its good practice to do so. But thanks for those tips, I see a little room for improvement ;)

I simply run rkhunter / chkrootkit because it isn't really a ressource intensive task and it can't hurt ?
Parent
Well it's not a bad tool but only does basic checks. For security audits try Nessus. It's a good tool if you have access to it. That's what PCI compliance industry uses.
Parent
What ever happened to plekter, anaconda and simonkinsler?
Back to top