Full Management
Our Semi-Managed Package Includes...
- DoS monitoring - we will monitor your server for DoS and notify you of attack. If incoming we will stop it at our gateway and if outgoing we will help you find the compromise.
- Hardware replacement - we will replace hardware at our expense with onsite spares.
- Hack recovery and dissection - if your server is hacked we will help you figure out why by going through logs and directories so we can secure it for future use.
- Services configuration help - our techs will help you initially configure and answer questions on services configuration including cPanel - DNS, email etc.
- Services restart - if you lose a service - we will restart it at your request if you do not have access.
- cPanel support - if you buy cPanel from us - we will support you on it.
- OS patch and security updates - we will update your computer using RedHat Network or Microsoft Update at your request up to once a month at no charge.
- Initial hardening and optimization (Select *Nix OS only) - Upon request, our technicians will deploy protective features such as a firewall, rootkit detectors, root login alerts and more. Certain services like apache and mysql will also be optimized.
- We will support your needs to the best of our abilities. In the past we had no problems with assisting our clients performing tasks such as recompiling apache/php/mysql (with control panel only), resolving web server and mysql errors, troubleshooting dns and email issues and assisting with FTP problems.
- Most other providers will charge for the above tasks to be completed while we do not. If the task requested is a more complex one, we will notify the client that their account will be billed for the work done before proceeding. We can do this solely at our discretion.
Our Initial Server Hardening & Optimization Includes...
Some services listed below apply only to Linux or Windows
- APF (Advanced Policy Firewall) Policy based, reactive firewall. Works with IPTables.
- LSM (Linux Socket Monitor) Monitors system for newly opened ports and services.
- Mail Source Tracking Enable tracking of emails sent via PHP scripts. (cPanel only)
- PMON (Network Socket Monitor) Network monitor. Identifies rouge services.
- SPRI (Priority Scheduler) Schedule the priority of system processes.
- BFD (Brute Force Detection) Identifies login password cracking attempts.
- SIM (System Integrity Monitor) Monitors critical services, load, network etc.
- RPM Package Purge Removal of unneeded software, such as print server, printer drivers, sound & USB drivers, portmaper, ypserv etc...
- Default User Purge Removal of OS Default users (adm, gopher etc...)
- Common permissions Reset system permissions to secure defaults on directories and common binaries. 'tmp' Path Hardening Harden all temporary data paths (e.g: /tmp) with a special device file to enforce strict options that prevent the execution of compiled exploits.
- Sysctl Hooks Configuration Sysctl provides configuration options hooked into kernel functions to allow a user to modify options without a recompile; these options are tweaked to harden the TCP/IP stack from syn-flood attacks and other network abuses.
- Services Hardening Tweak & harden common services to minimize information broadcasted about software versions.
- Time Synchronization Sync local system clock to a time server.
- Increased Logging Modify default syslog configuration to perform further logging options.
- Host.conf Reconfigure host.conf to prevent DNS lookup poisoning & spoofing protection.
- TPE (trusted path execution) Enforce trusted path execution; exported PATH environment variable can only contain root owned paths.
- Setup 'iftop' Top-like network traffic monitor.
- Setup 'tcpdump' Network packet sniffer/network analysis.
- Setup 'libsafe' Filter common software attacks.
- Setup 'logwatch' Log parsing and reporting utility.
- Setup 'aiv' Auto-inode validation; ensure sanity of binaries.
- Backdoor inspection Inspect and verify server for sanity from backdoor exploits.
- SSH Server Hardening Modify default sshd server config files to address common protocol & authentication issues.
- Software Updates Local inspection of installed software/retrieval of vendor & OS updates.
- PHP open_basedir Modify PHP setup to enforce a set of 'safe' execution paths.
Our Comprehensive Server Management & Consultation Package (CSMC) Includes...
Price: $100/month + $100 one-time installation fee
- Everything in the Semi-Managed Package and the Initial Hardening Package .
- Operating Systems - *Nix and Windows.
- Control Panels - Cpanel/WHM, Plesk, Helm, DirectAdmin, Ensim, Webmin.
- 24/7/365 monitoring and guaranteed 15 minute initial reaction time to downed servers and services.
- Continuous server security monitoring and automatic reaction to detectable threats such as spammers, DoS attacks, and server overload conditions.
- Operating system updates applied within 48 hours of release. (Windows Only)
- Compromise investigations.
- Server Hardening.
- Bandwidth monitoring.
- Server software installations.
- Diagnosis and resolution for any server-related issue (DNS. Email, Web, etc).
- Custom Apache configurations.
- Mail server tweaks for spam reduction.
- Custom and automated rootkit scanning.
- TCP Stack Hardening.
- System performance tuning.
- Trend analysis. ...and much, much more!
Consultation Service - Included with our CSMC package is our business and server consultation plan. You can benefit from our years of experience in the server administration and hosting industry. We can make suggestions regarding...
- Billing systems
- Helpdesk software
- Control panels
- New hardware recommendations
- NOC referrals
- Discuss colo versus server leasing
...and many other business aspects that the new business needs to get rolling quickly and successfully. Avoid making costly mistakes!
