<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Securing &#8211; Hostry Help Center</title>
	<atom:link href="https://help.hostry.com/article-tags/securing/feed/" rel="self" type="application/rss+xml" />
	<link>https://help.hostry.com</link>
	<description>Full information on how to use HOSTRY, provided by 24/7 community based support</description>
	<lastBuildDate>Thu, 11 Mar 2021 09:03:03 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=5.9.13</generator>

<image>
	<url>https://help.hostry.com/wp-content/uploads/cache/2021/01/cropped-apple-icon-180x180-1/836712163.png</url>
	<title>Securing &#8211; Hostry Help Center</title>
	<link>https://help.hostry.com</link>
	<width>32</width>
	<height>32</height>
</image> 
	<item>
		<title>How To Boot Windows Server 2012 in Safe Mode</title>
		<link>https://help.hostry.com/knowledge-base/how-to-boot-windows-server-2012-in-safe-mode/</link>
					<comments>https://help.hostry.com/knowledge-base/how-to-boot-windows-server-2012-in-safe-mode/#comments</comments>
		
		<dc:creator><![CDATA[Alex]]></dc:creator>
		<pubDate>Mon, 17 Feb 2020 10:46:54 +0000</pubDate>
				<guid isPermaLink="false">https://help.hostry.com/?post_type=ht_kb&#038;p=1434</guid>

					<description><![CDATA[Safe Mode on Windows provides access to special features that can be used to fix various kinds of problems. To boot in safe mode, you will need to have regular access to your Windows server. There will be two ways to configure this, use any of them to boot the [&#8230;]]]></description>
										<content:encoded><![CDATA[
<p>Safe Mode on Windows provides access to special features that can be used to fix various kinds of problems. To boot in safe mode, you will need to have regular access to your Windows server. There will be two ways to configure this, use any of them to boot the server in safe mode.</p>



<h2 id="method-1-using-launch-options" >Method # 1. Using launch options</h2>



<p>To enable safe mode using the graphical interface, you must press the key combination from: <strong>Windows + C</strong> to open &#8220;Settings&#8221;, then click on &#8220;Power&#8221;. After that, click on <strong>Shift</strong> and then &#8220;Restart&#8221;. Click Troubleshoot, then Launch Options. Click &#8220;Restart&#8221; after &#8220;Enable safe mode&#8221; is displayed in the displayed list.</p>



<p>Use the arrow keys to enter safe mode. After you press <strong>Enter</strong>, in safe mode, your Windows Server will boot into unopened mode. </p>



<p>After successful inclusion of safe mode, your background should be black, and in the upper right corner on your desktop will appear the inscription &#8220;<strong><em>Safe mode</em></strong>&#8220;</p>



<h2 id="method-2-using-msconfig" >Method # 2. Using msconfig</h2>



<p>In order to boot into safe mode using the system (msconfig), you must go to Run and run <strong><em>msconfig</em></strong></p>



<p>On the Download tab, which is located in the Download Options, select Secure Download. Then click “<strong>OK</strong>”, and the server will automatically restart in safe mode. If you are prompted to &#8220;<strong>Restart</strong>,&#8221; click OK. </p>



<p>When loading in safe mode, the background of the desktop will be black, and in the upper right corner of the desktop will appear the inscription &#8220;<strong>Safe Mode</strong>&#8220;</p>
]]></content:encoded>
					
					<wfw:commentRss>https://help.hostry.com/knowledge-base/how-to-boot-windows-server-2012-in-safe-mode/feed/</wfw:commentRss>
			<slash:comments>6</slash:comments>
		
		
			</item>
		<item>
		<title>How To Enable or Reinstall SELinux on CentOS</title>
		<link>https://help.hostry.com/knowledge-base/how-to-enable-or-reinstall-selinux-on-centos/</link>
					<comments>https://help.hostry.com/knowledge-base/how-to-enable-or-reinstall-selinux-on-centos/#respond</comments>
		
		<dc:creator><![CDATA[Alex]]></dc:creator>
		<pubDate>Mon, 06 Jul 2020 07:18:32 +0000</pubDate>
				<guid isPermaLink="false">https://help.hostry.com/?post_type=ht_kb&#038;p=1850</guid>

					<description><![CDATA[SELinux (Security-Enhanced Linux) is a special mechanism that is responsible for kernel security. This guide will be useful for users with a CentOS 6, 7, and 8 virtual machine. Disable and uninstall SELinux Install SELinux SELinux will detect the /.autorelabel file upon reboot, and then reconfigure all the files in [&#8230;]]]></description>
										<content:encoded><![CDATA[
<p><strong><a href="https://ru.wikipedia.org/wiki/SELinux">SELinux</a></strong> (Security-Enhanced Linux) is a special mechanism that is responsible for kernel security. This guide will be useful for users with a <strong>CentOS 6, 7, and 8 </strong>virtual machine.</p>



<h2 id="disable-and-uninstall-selinux" >Disable and uninstall SELinux</h2>



<pre class="wp-block-code"><code># setenforce 0
# yum remove selinux-policy\*
# rm -rf /etc/selinux/targeted /etc/selinux/config</code></pre>



<h2 id="install-selinux" >Install SELinux</h2>



<pre class="wp-block-code"><code># yum install selinux-policy-targeted
# yum install selinux-policy-devel policycoreutils
# touch /.autorelabel; reboot</code></pre>



<p>SELinux will detect the <strong>/.autorelabel </strong>file upon reboot, and then reconfigure all the files in the correct SELinux contexts. If you have many files in your virtual machine, then VPS may be unavailable for a long time.</p>



<p><strong>Note!</strong></p>



<p>If SELinux is not already installed, then you need to go to step 2 &#8211; installing SELinux. If SELinux is installed on your virtual server, then you need to remove it (to reset the policy to the default settings)</p>
]]></content:encoded>
					
					<wfw:commentRss>https://help.hostry.com/knowledge-base/how-to-enable-or-reinstall-selinux-on-centos/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
		<item>
		<title>How To Setup ConfigServer Security and Firewall (CSF) on CentOS 7 and 8</title>
		<link>https://help.hostry.com/knowledge-base/how-to-setup-configserver-security-and-firewall-csf-on-centos-7-and-8/</link>
		
		<dc:creator><![CDATA[Alex]]></dc:creator>
		<pubDate>Fri, 20 Nov 2020 09:34:46 +0000</pubDate>
				<guid isPermaLink="false">https://help.hostry.com/?post_type=ht_kb&#038;p=2577</guid>

					<description><![CDATA[ConfigServer Security &#38; Firewall (CSF) is a packet health monitoring tool (SPI), login or intrusion detection and security application for Linux servers. This is a very popular security package, but still not officially supported on CentOS 7. CentOS 7 uses firewalld, but dodn&#8217;t use iptables. A google search will give [&#8230;]]]></description>
										<content:encoded><![CDATA[
<p>ConfigServer Security &amp; Firewall (<strong><a href="https://www.configserver.com/cp/csf.html">CSF</a></strong>) is a packet health monitoring tool (SPI), login or intrusion detection and security application for Linux servers. This is a very popular security package, but still<br> not officially supported on CentOS 7. CentOS 7 uses firewalld, but dodn&#8217;t use iptables. A google search will give you a picture that many faithful CentOS users find firewalld too complicated for their needs and fall back on iptables.<br> Iptables was the default firewall for CentOS 5 and 6. This tutorial is focused on showing you how to disable firewalld, install IP tables, <strong>CSF</strong> and <strong>CSF</strong> dependencies.</p>



<h2 id="install-csf" >Install CSF</h2>



<p>First you need to install <strong>CSF</strong> and disable and stop firewalld. This can be done using the following command:</p>



<pre class="wp-block-code"><code>systemctl disable firewalld
systemctl stop firewalld</code></pre>



<p>Next, you need to install <strong>Iptables</strong>. This can be done using the following command:</p>



<pre class="wp-block-code"><code>yum -y install iptables-services</code></pre>



<p>Then you need to create <strong>files</strong> needed <strong>by iptables</strong></p>



<pre class="wp-block-code"><code>  touch /etc/sysconfig/iptables
  touch /etc/sysconfig/iptables6</code></pre>



<p>Next, you need to run iptables</p>



<pre class="wp-block-code"><code>systemctl start iptables
systemctl start ip6tables</code></pre>



<p>Then you need to <strong>enable iptables at boot</strong></p>



<pre class="wp-block-code"><code>systemctl enable iptables
systemctl enable ip6tables</code></pre>



<p>Install <strong>CSF</strong> dependencies</p>



<pre class="wp-block-code"><code>yum -y install wget perl unzip net-tools perl-libwww-perl perl-LWP-Protocol-https perl-GDGraph -y</code></pre>



<p>Download and <strong>run</strong> the <strong>CSF </strong>installer.</p>



<pre class="wp-block-code"><code>cd /opt
wget https://download.configserver.com/csf.tgz
tar -xzf csf.tgz
cd csf
sh install.sh</code></pre>



<p>Delete the following installation files</p>



<pre class="wp-block-code"><code>rm -rf /opt/csf
rm /opt/csf.tgz</code></pre>



<p>Done. All steps have been successfully completed.</p>
]]></content:encoded>
					
		
		
			</item>
		<item>
		<title>Securing MongoDB</title>
		<link>https://help.hostry.com/knowledge-base/securing-mongodb/</link>
					<comments>https://help.hostry.com/knowledge-base/securing-mongodb/#respond</comments>
		
		<dc:creator><![CDATA[Alex]]></dc:creator>
		<pubDate>Sat, 11 Jan 2020 08:09:27 +0000</pubDate>
				<guid isPermaLink="false">https://help.hostry.com/?post_type=ht_kb&#038;p=1242</guid>

					<description><![CDATA[By default, MongoDB is not safe; people can write, read, modify or delete data on your server, without the need for authorization in any case. Protecting the database is not a complicated procedure; it is performed in just a few steps. &#160; Start your Mongo client first. On Linux, this [&#8230;]]]></description>
										<content:encoded><![CDATA[
<p>By default, MongoDB is not safe; people can write, read, modify or delete data on your server, without the need for authorization in any case. Protecting the database is not a complicated procedure; it is performed in just a few steps. &nbsp;</p>



<p>Start your Mongo client first. On Linux, this is the mongo command. Enter this block of text, of course, changing the parts of the placeholder to your own information.</p>



<p>The protection procedure begins with the fact that you need to start your Mongo client. On Linux, this is the <strong><em>mongo</em></strong> command. Enter this block of text, of course, changing the parts of the placeholder to your own information.</p>



<pre class="wp-block-code"><code>db.createUser({
  user: "USERNAME", 
  pwd: "PASSWORD", 
  roles: [
    {
      role: "readWrite",
      db: "YOUR_DATABASE"
    }
  ]
});</code></pre>



<p>Next, you need to exit the mongo client and edit the MongoDB configuration file. Depending on your OS and distribution, you will find it in one of these places. </p>



<pre class="wp-block-code"><code>/etc/mongodb.conf
/etc/mongod.conf</code></pre>



<p></p>



<p>Change the following<strong> #security:</strong> line to the following:</p>



<pre class="wp-block-code"><code>security:
  authorization: enabled</code></pre>



<p>You should consider changing the bind port to localhost <strong><span style="text-decoration: underline;">(127.0.0.1</span>) </strong>or bind it to a private IP address that is not available on the Internet.</p>



<pre class="wp-block-code"><code># network interfaces
net:
  port: 27017
  bindIp: 634.234.102.6</code></pre>



<p>You should always watch your spaces! Always two by one, never tabs. After that, restart the MongoDB database.</p>



<pre class="wp-block-code"><code>systemctl restart mongod
systemctl restart mongodb</code></pre>
]]></content:encoded>
					
					<wfw:commentRss>https://help.hostry.com/knowledge-base/securing-mongodb/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
	</channel>
</rss>
