In order to connect to a remote server via SSH, please perform the following steps:

If you are Linux/MacOS user:

Open the terminal application

Type the following command:

ssh username@ipaddress

In case you are trying to connect to the server at the first time, you will get the following output:

The authenticity of host servername (server_IP) can’t be established. RSA key fingerprint is a9:bb:55:35:86:xx:xx:00:xx:00:2b:2c:79:10:96:3c. Are you sure you want to continue connecting

In order to proceed with connection, type  the word ‘yes’, then insert your password. Done! Now you are connected to your remote server via SSH.

If you are Windows user:

Download SSH client, as an example, PuTTY

Start putty.exe and enter the following connection details in the Sessions category:

• Host Name (or IP address) – here you should enter the host/IP to which you wish to connect;
• Port – the port for the connection – by default, SSH is running on 22 TCP port;
• Protocol – here you should select SSH.

Once you enter the correct connection data, click on Open button. There will open another window asking for your login and password. Enter your login credentials and press enter.

To go to your personal VNC you need:

Go to the list of your services and select the desired vps server. If you do not have an ordered vps server, you can order it here: https://hostry.com/services/vps/

You must click on the selected and installed your operating system

Then You need Forward to VMMANAGER

After, you need to click on the selected virtual server and go to VNC

Connection via VNC session

Creating an SSH key on Linux

First, open the terminal (command line) app, then run the following command to generate a 4096 bit SSH key:

1. Login into your virtual machine via VNC or PuTTY or via SSH.
2. Insert into the command line the following command:
   ssh-keygen -b 4096
   The command will output the following result and prompt you to save the newly created key.
3. In order to view the generated SSH-key, input the following command:
   cat .ssh/id_rsa.pub

PuTTY is a popular SSH client for Windows. You can use it to remotely connect to a Linux server. Its companion software, PuTTYgen, can be used to create SSH keys.
First, download the PuTTYgen software, which we will use to generate the key.
Next, run the software and select RSA as the key type, enter 4096 as the number of bits to generate, and then click the GENERATE button.

Click the Save private key button and select a secure location to keep it. You can name your key whatever you’d like, and the extension .ppk will be automatically added.

Insert your SSH key into VM-manager panel.

At first, please login into your HOSTRY member area. Then access your VM-manager account:

Then go the SSH Keys section. Click on the SSH keys Add icon

Insert your public key into the text box and give it a name, then click on a Save button:

Done. The public key is added!

Method # 1. Using launch options

To enable safe mode using the graphical interface, you must press the key combination from: Windows + C to open “Settings”, then click on “Power”. After that, click on Shift and then “Restart”. Click Troubleshoot, then Launch Options. Click “Restart” after “Enable safe mode” is displayed in the displayed list.

Use the arrow keys to enter safe mode. After you press Enter, in safe mode, your Windows Server will boot into unopened mode.

After successful inclusion of safe mode, your background should be black, and in the upper right corner on your desktop will appear the inscription “Safe mode“

Method # 2. Using msconfig

In order to boot into safe mode using the system (msconfig), you must go to Run and run msconfig

On the Download tab, which is located in the Download Options, select Secure Download. Then click “OK”, and the server will automatically restart in safe mode. If you are prompted to “Restart,” click OK.

When loading in safe mode, the background of the desktop will be black, and in the upper right corner of the desktop will appear the inscription “Safe Mode“

Apache installation

You need to download the MSI installer for your Windows, it can be found on the Apache download page(http://httpd.apache.org/download.cgi),
filling in all the necessary data. After starting this installer, Apache Monitor will be installed. You cannot monitor the status of all Apache services. This can be done from your Windows » services.msc
Now you can connect to your server http://127.0.0.1 and see the default Apache page.

Also, it is possible to edit, delete and add web files from your web server. To do this, make changes to the htdocs folder in the Apache folder. This location is the default for web files. Alternatively, you can use virtual hosts to use other directories or configure subdomains.

By the way, Apache has two configuration files: 

• .htaccess It is applicable based on all directories in web files
• httpd.conf inside Apache’s conf folder, he makes a request to the main configuration

PHP Installation

PHP has the function of using PHP scripts on your web server and display the results for all users

First of all, download the PHP version for Windows from the PHP download for Windows here: (https://windows.php.net/download).
Then you need to download this version and unzip the zip file to c: \ php.

After successful unpacking zip file need edit apache httpd.conf to enable

LoadModule php5_module "c:/php/php5apache2_2.dll"
AddType application/x-httpd-php .php
PHPIniDir "C:/php"

After that, you will need to restart the Apache web server; for testing PHP it is recommended to create test.php, in its htdocs folder, the contents are indicated below:

<?php phpinfo() ?>

Then check the output on

https: //127.0.0.1/test.php

This completes the configuring

The topic of security has always been relevant in the IT industry. In this article we will give some tips on how to secure your server and try to help to ensure that your server is not subjected to threats and attacks.

Last failed login: Mon Apr 15 13:52:45 MSK 2017 from 1.1.1.1 on ssh:notty
There were 4395 failed login attempts since the last successful login.

If you found approximately such a message during your authorization to the server, it means that unsuccessful authorization attempts were made by someone else. Malicious users pick up SSH passwords purposefully (automatically, or using programmed infected computers).

Configure authorization from specific IP

Configure authorization from specific IP If you plan to connect to the server and conduct work only strictly from one device and / or only from certain IP addresses, you can enter the following lines:

/etc/hosts.deny
sshd: ALL

In this file:

/etc/hosts.allow
Sshd: Your IP address

Thus, SSH access for all subnets except the specified one will be denied. After that, you need to restart the service using the service:

service sshd restart

Change SSH port

To change the SSH port you need to uncomment this file /etc/ssh/sshd_config and change Port 22 to a free one, it can be any number up to 65536

After that, you need to start the server with the command:

service sshd restart

Use SSH keys

The advantage and advantage of this method is that you can be authorized on the server without regularly having to send your password through the network.

Even if someone listens on your connection, he will not have the opportunity to intercept and crack your password, since in fact it is never transmitted. Also, using SSH to identify keys eliminates the risk associated with brute-force attacks, by significantly reducing the attacker’s chance to guess the correct credentials.
The key pair is created using the command

ssh-keygen

The private key (file without extension) is copied to the PC, and the public key (keyname.pub) is copied to the file on the server. .ssh / authorized_keys

In order to disable password authorization, in the same SSH configuration, you need to change the PasswordAuthentication yes directive to PasswordAuthentication no and restart the service – authorization will remain only with the SSH key.

Grown the partition and File System

For the following file systems: xfs, ext4, btrfs, ntfs (for Windows, starting from Vista) is possible to growth online (i.e. without unmounting before proceeding). Ntfs and btrfs even can shrink online, other file systems only then aren’t mounted).

First of all, you need the root access to your VPS server. After login, you need to run the lsblk command. Here you can see all disk devices, their volume, and partitions. In this screenshot, you can see that vda has a size of 50 GB, and in this case, vda1 + vda2 have 30 GB. After that, please enter the parted /dev/vda

As we can see, the command parted is run. Next, we run the command – p (Print), which shows the partitions and offers to change/fix the GPT table so that it matches the size of the virtual disk.
We agree – we write: Fix

After that, we need to run resizepart 2 – this is the command that marks the resize of the partition. You can take the final number from the size of the disk – the size can be seen on screen 2 – 53, 7GB

Finally, you need to use the q command – it exits parted. For the ext3 / ext4 filesystem format, the following command: resize2fs /dev/vda2

Done! At this stage, the changes are complete.

For xfs, you can use the command: xfs_growfs

For btrfs, you can use the command: btrfs filesystem resize

For ext4, you can use the command: resize2fs /dev/vda2

Install CSF

First you need to install CSF and disable and stop firewalld. This can be done using the following command:

systemctl disable firewalld
systemctl stop firewalld

Next, you need to install Iptables. This can be done using the following command:

yum -y install iptables-services

Then you need to create files needed by iptables

  touch /etc/sysconfig/iptables
  touch /etc/sysconfig/iptables6

Next, you need to run iptables

systemctl start iptables
systemctl start ip6tables

Then you need to enable iptables at boot

systemctl enable iptables
systemctl enable ip6tables

Install CSF dependencies

yum -y install wget perl unzip net-tools perl-libwww-perl perl-LWP-Protocol-https perl-GDGraph -y

Download and run the CSF installer.

cd /opt
wget https://download.configserver.com/csf.tgz
tar -xzf csf.tgz
cd csf
sh install.sh

Delete the following installation files

rm -rf /opt/csf
rm /opt/csf.tgz

Done. All steps have been successfully completed.

Back Up Making

!! Always make a backup before upgrading your system

Update The Package List

This can be done using the following command:

$ sudo apt update

List updatable packages

$ sudo apt list --upgradable

Package Updates

$ sudo apt upgrade

Server reboot

$ sudo reboot

One-Line Upgrade

If you want to accept all the defaults and upgrade without intervention, use this command:

$ sudo apt update && sudo apt upgrade -y

Optional – Autoremove

$ sudo apt autoremove