Part 3 – Secure and Update your installation.
We are now going to secure and update your server through webmin. Also we are going to add a firewall.
- Login to your server from another browser https://[hostname/ipaddress]:10000 (by default only SSL is supported, also you will probable get a message to accept the certificate.)
- We are first going to update all the packages installed. Go to System -> Software Package Updates -> Scroll down and select Select all -> then Update Selected Packages.
- Click Install Now. You can now watch as it updates.
- Now it’s time to restrict who can access webmin. Go to Webmin -> Webmin Configuration -> IP Access Control
- Change the setting to “Only allow from listed addresses”. In the box put in your IP addresses you will be managing the server from. Here I have my local LAN and using no-ip’s dynamic DNS server I have a laptop that will allow me to manage the server from outside the network (My laptop will update that DNS address and my server will grab the latest address when I login to verify). If you are using a system like mines (Dynamic DNS) you would also want “Resolve hostnames on every request?” enabled. Then Click Save.
- Now that Webmin is secure let’s now add a firewall. Go to Network -> Linux Firewall -> Then select “Allow all traffic”, Checkmark “Enable firewall at boot time?”, and Finally Setup Firewall.
- This will enable the firewall. Now it’s time to make some rules. First under “Incoming packets (INPUT)” click Add Rule.
-
The first rule is for Webmin Then make another one for the Web Server. You will need to do something like this.
Rule Comment: “Webmin”
Action to take: “Accept”
Network protocol: “Equals” “TCP”
Destination TCP or UDP port: “Equals” “Port(s) 10000”Rule Comment: “Web Server”
Action to take: “Accept”
Network Protocol: “Equals” “TCP”
Destination TCP or UDP Port “Equals” “Port(s) 80” - Repeat 7-8 for other ports you will need like Port 80 for the web. Then change the default action for “Incoming Packets (INPUT)” to “Drop” and Click “Set Default Action To:”
- Click Apply Configuration at the bottom. If you did everything right you should not be clicked out of your server. We are also done, continue on to configure install the LAMP components.
