• Access to our 24x7x365 technical support helpdesk
• Guaranteed average responsetime of 20 minutes
• No limit on admin time
• Full support for any cPanel issues
• Full support for any issues with backend software (Apache, PHP, MySQL, Exim, Courier, Dovecot, BIND, NSD, PureFTPd etc)
• Best-effort support for 3rd party software such as additional PHP modules, Fantastico, RVskins
• Installation of Php/MySQL scripts
• General maintenance and updates carried out on request
• Security hardening and optimization carried out on request
• Migrations of accounts from one server to another
• Disaster recovery and server backup restoration
• Optional monitoring of your server (ping), RAID array and root logins

Is this pro-active?

This is a request based service by default, to have any work carried out you are required to submit a ticket or email to our helpdesk system. It goes without saying that if there is a critical Linux kernel vulnerability for example, we will announce this and patch all systems as quickly as possible.

We can offer a proactive management service for an additional £30/Month which includes load monitoring, regular health checks/updates and extended optimization - Specialised Apache/MySQL optimization including support for caching agents (e.g. Varnish) and custom kernel builds for your server.

How much does it cost?

• Tools: ffmpeg-php, FLVTool2, MP4Box, Mplayer, Mencoder
• Codecs: libxvid, libfaac, libx264 and libtheora

• Update operating system and all server related software
• Modify control panel security settings (If applicable)
• Firewall installation and configuration
• Bruteforce detection installation and configuration
• Limit access to dangerous system binaries
• Disable unused/unnecesarry system services
• Disable/remove unnecesarry system users
• Harden temporary directories /tmp, /var/tmp and /dev/shm
• Harden /etc/host.conf and /etc/sysctl.conf
• Harden PHP with Suhosin extension
• Scan system with two rootkit checking utilities
• Scan system and identify files with potentially dangerous permissions
• Disable direct root login to SSH and setup wheel user
• (Optional) Implement email notifications on SSH login
• (Optional) Implement SuPHP and disable dangerous PHP functons
• (Optional) Scan /etc/shadow file with Johntheripper to identify users with weak/dictionary passwords

Hardening & Security

• Installation of ConfigServer Firewall.
  Blocks access to unnecesarry ports, manages firewall rules, and drops IPs in common blacklists.
• Installation of ConfigServer Login Failure Daemon (LFD).
  Provides protection against bruteforce attacks on services, and blocks offending IPs.
• Update operating-system and all server related software.
  Helps protect your server from known exploits, adds security, stability and performance improvements.
• Disable unused & potentially vulnerable services.
  Less services running, means less things to be exploited, and less resource usage.
• Limit access to select system binaries.
  Prevents various programs from being accessed by users other than root.
• Harden /etc/host.conf and /etc/sysctl.conf.
  Provides anti-spoof, basic DoS protection and small performance tweaks.
• Harden temporary system directories (/tmp, /var/tmp and /dev/shm).
  Prevents potentially dangerous files from being executed in temporary directories.
  
• Installation of CHKRootKit and RKHunter.
  Useful tools which can be used to scan for known rootkits and backdoors.
• Installation of Mod_Security.
  Mod security provides protection against some forms of SQL Injection and script exploits.
• Apache Hardening (Optionally with SuPHP).
  SuPHP means that php scripts run under their owners name, ensuring security.
  We will also hide common version information, making your server a less attractive target for hackers and scanners.
  
• PHP Hardening with Suhosin.
  Suhosin is a PHP patch which protects against known and unknown PHP exploits.
• FTP Hardening.
  Disables anonymous (password-less) access, and direct root login.
• SSH hardening.
  Configure SSH on a non-standard port, enable logging, optionally disable direct root login
• MySQL Hardening.
  Disable external access to MySQL, bind to local IP's only.
• Disable compilers for underprivileged users.
  Prevents non-root users from being able to compile software.
• Enable shell fork bomb protection.
  Prevents scripts from opening too many processes at once.
• Enable php open_basedir protection.
  Prevents users from being able to access file outside their home directory with PHP.
• Enable background process killer.
  A cPanel security tool which attempts to detect and block malicious processes.
• Enable reccomended cPanel "Tweak settings".
  Provides security, stability and feature enhancements.
• (Optional) Disable potentially dangerous php functions.
  This is optional as it can break a number of popular scripts.
• (Optional) Root Login email notification.
• You will be automatically notified by email when someone logs in as root.

Anti-Spam

• Installation of SpamAssassin.
  This is the mail filtering engine, which we will configure, and add additional filtering rules to.
• Installation of ClamAV Antivirus.
  Provides anti-virus scanning of incoming and outgoing emails.
• Install Vipul's Razor.
  A collaborative, spam detection and filtering network used to identify and block spam.
• Install DCC.
  Another distributed anti-spam filtering network, used to identify and block spam.
  
• Install SARE Rules + Automatic Updates (SpamAsassin Rules Emporium)
  A vast collection of anti-spam rules, to improve SpamAsassin's detection rates.
• Implement increased logging functions
• To allow for easier tracking of mail issues and SPAM.
• Implement Realtime Blackhole Lists (RBLs).
  Blocks emails from being sent/recieved to IPs on common blacklists for spam and abuse.
• Implement Dictionary Attack Protection.
  Prevents common dictionary based spam.
• Implement Rate Limiting
  Domains will be limited to sending 150 Emails/Hour to prevent spam. This can be increased as needed.

Optimization, Monitoring + Additional Software

• Install RFXN System Priority (SPRI).
  Provides resource priority to important services, and can improve performance by upto 20%.
• Install RFXN Process Resource Monitor (PRM).
  Monitors server processes and prevents overloading.
• Install MyTop.
  Allows you to monitor the most active MySQL queries to identify issues and improve performance.
• Install Sysstat Package.
  Provides realtime and daily CPU and Disk I/O statistics.
• Install Configserver Explorer (CSE)
  Allows you to view and edit files on your server via WHM, without SSH
• Apache Optimization
  We will optimize Apache to improve performance and reduce load, based on your servers existing performance and specification.
• MySQL Optimization
  We will optimize Apache to improve performance and reduce load, based on your servers existing performance and specification.
• (..and more)