Help to secure my FreeBSD/Apache installation

2013-07-17 Thread Andy Wodfer
Hi everybody! I'm running a server on FreeBSD 8.1 STABLE (apache 2.2.16, mysql 5.1.50, php 5.3.3) and I server some websites from it, most of them using Joomla or Wordpress CMS. I recently had a security breach where someone used a hole in an older Joomla version and was able to install a php scr

Re: Help to secure my FreeBSD/Apache installation

2013-07-17 Thread Julian H. Stacey
Hi, Reference: > From: Andy Wodfer > Date: Wed, 17 Jul 2013 23:11:27 +0200 Andy Wodfer wrote: > Hi everybody! > > I'm running a server on FreeBSD 8.1 STABLE (apache 2.2.16, mysql 5.1.50, To quote front page of http://www.freebsd.org: * Production: 9.1 * Legacy: 8.4 My

Re: Help to secure my FreeBSD/Apache installation

2013-07-17 Thread Julian H. Stacey
Hi, Reference: > From: "Julian H. Stacey" > Date: Wed, 17 Jul 2013 23:38:51 +0200 "Julian H. Stacey" wrote: > Hi, Reference: > > From: Andy Wodfer > > Date: Wed, 17 Jul 2013 23:11:27 +0200 > > Andy Wodfer wrote: > > Hi everybody! > > > > I'm runn

Re: Help to secure my FreeBSD/Apache installation

2013-07-17 Thread Polytropon
On Wed, 17 Jul 2013 23:11:27 +0200, Andy Wodfer wrote: > Hi everybody! > > I'm running a server on FreeBSD 8.1 STABLE (apache 2.2.16, mysql 5.1.50, > php 5.3.3) and I server some websites from it, most of them using Joomla or > Wordpress CMS. Those are typical (and known) attack vectors. Make sur