{"id":1755,"date":"2021-09-08T10:43:04","date_gmt":"2021-09-08T10:43:04","guid":{"rendered":"https:\/\/ownwebservers.com\/kb\/?p=1755"},"modified":"2021-09-08T10:43:19","modified_gmt":"2021-09-08T10:43:19","slug":"how-to-make-your-server-more-secure-via-whm","status":"publish","type":"post","link":"https:\/\/ownwebservers.com\/kb\/how-to-make-your-server-more-secure-via-whm\/","title":{"rendered":"How to make your server more secure via WHM"},"content":{"rendered":"<h2>What is WHM?<\/h2>\n<p>WHM or Web Host Manager allows administrative access to cPanel backend being a powerful program. WHM permits the user with a lot of flexibility and management whereas managing some very popular resource intensive websites, or massive no: of web sites. WHM not only permits the user to with the flexibility to sell web hosting services however also offers the choice to create and manage multiple cPanel accounts. It also saves your money and time by streamlining and automating the tedious task of server management. WHM permits you to manage all things undern one roof.<\/p>\n<h2>WHM enables you to try to the subsequent things?<\/h2>\n<ul>\n<li>It permits you to create, suspend and delete your cPanel accounts.<\/li>\n<li>It permits you to see the status and data of the server.<\/li>\n<li>Reset password, monitor and manage your web sites.<\/li>\n<li>You get the access to see and change all of your domain names\u2019 DNS zones.<\/li>\n<li>You get the ability to tack the support request of your client through cPanel.<\/li>\n<li>When you produce a new account WHM permits you to make your own default page.<\/li>\n<li>Using WHM you&#8217;ll change your client usernames and domain names.<\/li>\n<li>Ability for white labeling i.e. you&#8217;ll customise your control panel and web hosting with extensive branding.<\/li>\n<li>Add-ons within the form of applications and plugins that allows you to supply a tailored solution to your customers.<\/li>\n<li>Gives you the flexibility to manage your own backups, you do not have to worry regarding information loss.<\/li>\n<li>Provides you with server monitoring tools, you&#8217;ll view the utilization of resources, diagnose issue of log files and secure the server from third party attacks.<\/li>\n<li>The options and auxiliary tools that ar packed into WHM provides for a singular client expertise.<\/li>\n<\/ul>\n<h3>Steps to check Server Security in WHM<\/h3>\n<p>Login into the WHM and use the following steps to check the server security:<\/p>\n<p><strong>Step 1:<\/strong>\u00a0Check\u00a0<strong>WHM&gt;&gt;&gt;\u00a0<\/strong><strong>Server Configuration &gt;&gt;&gt; Tweak Settings<\/strong>\u00a0&amp; deactivate the following options:<\/p>\n<ul>\n<li>Avoid users from parking or adding on common internet domains (i.e. gmail.com, aol.com)<\/li>\n<li>Permit cPanel users to reset their password by means of email.<\/li>\n<li>Default catch-all\/default address behavior for the new accounts \u2013 fail<\/li>\n<\/ul>\n<p><strong>Step 2:<\/strong>\u00a0Now go to\u00a0<strong>WHM<\/strong>\u00a0&gt;&gt; &gt;<strong>Security\u00a0<\/strong>&gt;&gt;&gt;<strong>\u00a0Manage Wheel Group Users<\/strong><\/p>\n<ul>\n<li>In the \u201c<strong>Manage Wheel Group Users<\/strong>\u201d section takes out all the users that are present, leaving your user account from the wheel group and the root.<\/li>\n<\/ul>\n<p><strong>Step 3:<\/strong>\u00a0Then select\u00a0<strong>WHM<\/strong>\u00a0&gt;&gt;&gt;\u00a0<strong>Service<\/strong>\u00a0<strong>Configuration\u00a0<\/strong>&gt;&gt;&gt;\u00a0<strong>FTP Configuration<\/strong><\/p>\n<ul>\n<li>Anonymous FTP must be disabled.<\/li>\n<\/ul>\n<p><strong>Step 4:<\/strong>\u00a0Now select\u00a0<strong>WHM\u00a0<\/strong>&gt;&gt;&gt;\u00a0<strong>Account Functions<\/strong>\u00a0&gt;&gt;&gt;\u00a0<strong>Manage Shell Access<\/strong><\/p>\n<ul>\n<li>If there is no need to enable the Shell Access then disable it for all the users.<\/li>\n<\/ul>\n<p><strong>Step 5:<\/strong>\u00a0Then select\u00a0<strong>WHM<\/strong>\u00a0&gt;&gt;&gt;\u00a0<strong>SQL\u00a0<\/strong><strong>Services<\/strong>\u00a0&gt;&gt;&gt;\u00a0<strong>MySQL Root Password<\/strong><\/p>\n<ul>\n<li>The root password for MySQL must be changed.<\/li>\n<\/ul>\n<p>Now perform a quick security scan to detect Trojan Horses from your\u00a0<strong>WHM\u00a0<\/strong>&gt;&gt;&gt;<strong>\u00a0Security in a week.<\/strong><\/p>\n<blockquote><p><strong>Note:<\/strong>\u00a0one important security measure for your server, while creating any new security account, Choose\u00a0<strong>WHM<\/strong>\u00a0&gt;&gt;&gt;\u00a0<strong>Resellers\u00a0<\/strong>&gt;&gt;&gt;\u00a0<strong>Reseller Center\u00a0<\/strong><\/p><\/blockquote>\n<p>Enable \u201c<strong>Prevent Accounts from being created with Shell<\/strong>\u00a0\u201d &amp; deactivate the \u201c<strong>Allow Creation of Packages with Shell Access<\/strong>\u201d this will prevent any 3<sup>rd<\/sup>\u00a0party from accessing your server if they do not have your approval.<\/p>\n<p><strong>WHM<\/strong>\u00a0&gt;&gt;&gt;\u00a0<strong>Security Center<\/strong>\u00a0&gt;&gt;&gt;\u00a0<strong>Host Access Control<\/strong><\/p>\n<p>Host Access Control permits you to set up precise rules to permit or deny access to your server and services over it on the basis of IP address that is trying to connect. The most secure way of using Host Access Control it regulates the connection as per your wish i.e. to provide access only to the connections which you want.<\/p>\n<p><strong>WHM\u00a0<\/strong>&gt;&gt;&gt;\u00a0<strong>Security Center\u00a0<\/strong>&gt;&gt;&gt;\u00a0<strong>PHP open_basedir Tweak<\/strong><\/p>\n<p>PHP\u2019s\u00a0<strong>open_basedir<\/strong>\u00a0protection averts users from opening files that are outside of their home directory with PHP.<\/p>\n<p>In addition, you can install mod security to avoid web-based infection, cross scripting attacks and web-based intrusions to the server.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>What is WHM? WHM or Web Host Manager allows administrative access to cPanel backend being a powerful program. WHM permits the user with a lot of flexibility and management whereas managing some very popular resource intensive websites, or massive no: of web sites. WHM not only permits the user to with the flexibility to sell [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22,13],"tags":[],"class_list":["post-1755","post","type-post","status-publish","format-standard","hentry","category-security","category-whm"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v15.2.1 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>How to make your server more secure via WHM - OWS KB<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/ownwebservers.com\/kb\/how-to-make-your-server-more-secure-via-whm\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to make your server more secure via WHM - OWS KB\" \/>\n<meta property=\"og:description\" content=\"What is WHM? WHM or Web Host Manager allows administrative access to cPanel backend being a powerful program. WHM permits the user with a lot of flexibility and management whereas managing some very popular resource intensive websites, or massive no: of web sites. WHM not only permits the user to with the flexibility to sell [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/ownwebservers.com\/kb\/how-to-make-your-server-more-secure-via-whm\/\" \/>\n<meta property=\"og:site_name\" content=\"OWS KB\" \/>\n<meta property=\"article:published_time\" content=\"2021-09-08T10:43:04+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-09-08T10:43:19+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\">\n\t<meta name=\"twitter:data1\" content=\"admin\">\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\">\n\t<meta name=\"twitter:data2\" content=\"3 minutes\">\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebSite\",\"@id\":\"https:\/\/ownwebservers.com\/kb\/#website\",\"url\":\"https:\/\/ownwebservers.com\/kb\/\",\"name\":\"OWS KB\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":\"https:\/\/ownwebservers.com\/kb\/?s={search_term_string}\",\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/ownwebservers.com\/kb\/how-to-make-your-server-more-secure-via-whm\/#webpage\",\"url\":\"https:\/\/ownwebservers.com\/kb\/how-to-make-your-server-more-secure-via-whm\/\",\"name\":\"How to make your server more secure via WHM - OWS KB\",\"isPartOf\":{\"@id\":\"https:\/\/ownwebservers.com\/kb\/#website\"},\"datePublished\":\"2021-09-08T10:43:04+00:00\",\"dateModified\":\"2021-09-08T10:43:19+00:00\",\"author\":{\"@id\":\"https:\/\/ownwebservers.com\/kb\/#\/schema\/person\/4a40fe3fe17a08ddd1d7c113668e75f2\"},\"breadcrumb\":{\"@id\":\"https:\/\/ownwebservers.com\/kb\/how-to-make-your-server-more-secure-via-whm\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/ownwebservers.com\/kb\/how-to-make-your-server-more-secure-via-whm\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/ownwebservers.com\/kb\/how-to-make-your-server-more-secure-via-whm\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"item\":{\"@type\":\"WebPage\",\"@id\":\"https:\/\/ownwebservers.com\/kb\/\",\"url\":\"https:\/\/ownwebservers.com\/kb\/\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"position\":2,\"item\":{\"@type\":\"WebPage\",\"@id\":\"https:\/\/ownwebservers.com\/kb\/how-to-make-your-server-more-secure-via-whm\/\",\"url\":\"https:\/\/ownwebservers.com\/kb\/how-to-make-your-server-more-secure-via-whm\/\",\"name\":\"How to make your server more secure via WHM\"}}]},{\"@type\":\"Person\",\"@id\":\"https:\/\/ownwebservers.com\/kb\/#\/schema\/person\/4a40fe3fe17a08ddd1d7c113668e75f2\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/ownwebservers.com\/kb\/#personlogo\",\"inLanguage\":\"en-US\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/ba5db5841d48bd7517bb2583e13983e6d2fa56a4099a0b3c61ad2daefc321303?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"https:\/\/ownwebservers.com\/kb\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","_links":{"self":[{"href":"https:\/\/ownwebservers.com\/kb\/wp-json\/wp\/v2\/posts\/1755","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ownwebservers.com\/kb\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ownwebservers.com\/kb\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ownwebservers.com\/kb\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ownwebservers.com\/kb\/wp-json\/wp\/v2\/comments?post=1755"}],"version-history":[{"count":2,"href":"https:\/\/ownwebservers.com\/kb\/wp-json\/wp\/v2\/posts\/1755\/revisions"}],"predecessor-version":[{"id":1757,"href":"https:\/\/ownwebservers.com\/kb\/wp-json\/wp\/v2\/posts\/1755\/revisions\/1757"}],"wp:attachment":[{"href":"https:\/\/ownwebservers.com\/kb\/wp-json\/wp\/v2\/media?parent=1755"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ownwebservers.com\/kb\/wp-json\/wp\/v2\/categories?post=1755"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ownwebservers.com\/kb\/wp-json\/wp\/v2\/tags?post=1755"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}