[nlug] blacklist removal / HOW IS SITELOCK FOR SECURITY?, ClamAV, Codeguard? / managed dedicated?

2015-08-06 Thread Michael L
Hello NLUG, I found on the cPanel that standard email security features involving spf and DKIM were disabled, so I enabled them; that helped matters somewhat. I've gotten a few notifications that 'someone' is logging into our cpanel. One of those cPanel logins at 3am July 30th was supposedly the IP

[nlug] blacklist removal / HOW IS SITELOCK FOR SECURITY?, ClamAV, Codeguard? / managed dedicated?

2015-08-06 Thread Michael L
Also, regarding security, this is for the non-profit ministry, www.GraceAndTruth.Net ; just want to keep the site functioning and email from being hacked every day and blacklisted. It's all information that he wants the whole world to know. A functioning level of security is acceptable. Thank you

Re: [nlug] blacklist removal / HOW IS SITELOCK FOR SECURITY?, ClamAV, Codeguard? / managed dedicated?

2015-08-06 Thread Chris McQuistion
What are you using for mail service for that domain, right now? Are you running your own mail server? Google offers free email hosting for non-profits. I have a few clients that I've moved to free Google Apps. MUCH better to let Google be your mail server (if you're small and don't have dedicat

Re: [nlug] blacklist removal / HOW IS SITELOCK FOR SECURITY?, ClamAV, Codeguard? / managed dedicated?

2015-08-06 Thread Michael L
Email (hacked on the server) is what got them blacklisted. Free sounds pretty good for non-profits. On Thu, Aug 6, 2015 at 1:40 PM, Chris McQuistion wrote: > What are you using for mail service for that domain, right now? Are you > running your own mail server? > > Google offers free email ho

Re: [nlug] blacklist removal / HOW IS SITELOCK FOR SECURITY?, ClamAV, Codeguard? / managed dedicated?

2015-08-06 Thread Michael Chaney
I have to again ask: is there *anything* besides these services running on that server? 1. Email 2. Webserver Let's start there. Michael On Thu, Aug 6, 2015 at 12:56 PM, Michael L wrote: > Hello NLUG, > I found on the cPanel that standard email security features involving spf > and DKIM were

Re: [nlug] blacklist removal / HOW IS SITELOCK FOR SECURITY?, ClamAV, Codeguard? / managed dedicated?

2015-08-06 Thread Chris McQuistion
Google has a bit of a procedure that you have to go through, to prove your a non-profit and everything, but once you've done that, you can get a free Google Apps account and Google has some pretty sharp email administrators On Thu, Aug 6, 2015 at 1:52 PM, Michael L wrote: > Email (hacked on

Re: [nlug] blacklist removal / HOW IS SITELOCK FOR SECURITY?, ClamAV, Codeguard? / managed dedicated?

2015-08-06 Thread Michael L
Webserver and Email is all I know of; I know there is a litlle mySQL db of about 13MB. I can look in the cPanel if I know what to look for. Thank you M On Thu, Aug 6, 2015 at 2:03 PM, Michael Chaney wrote: > I have to again ask: is there *anything* besides these services running on > that ser

Re: [nlug] blacklist removal / HOW IS SITELOCK FOR SECURITY?, ClamAV, Codeguard? / managed dedicated?

2015-08-06 Thread Michael Chaney
I again strongly suggest: 1. Move email *immediately* to gmail or another like service. 2. Identify issues with the web site that allow attackers in. 3. Move web hosting elsewhere if possible. It's a Joomla site, so I assume the database is simply the Joomla stuff. If that's the case, your best b

Re: [nlug] blacklist removal / HOW IS SITELOCK FOR SECURITY?, ClamAV, Codeguard? / managed dedicated?

2015-08-06 Thread John Eldredge
Does Google Apps also have free and/or inexpensive mail services for private domains, such as jfeldredge.com, that aren't nonprofit organizations, but aren't commercial enterprises either? I found recently that my hosting service's SMTP server, which is shared among multiple hosted domains, is

Re: [nlug] blacklist removal / HOW IS SITELOCK FOR SECURITY?, ClamAV, Codeguard? / managed dedicated?

2015-08-06 Thread Michael Chaney
It's $5/month/email address. I was grandfathered in when it was free, and you can bet I'm never giving that up :) On Thu, Aug 6, 2015 at 5:17 PM, John Eldredge wrote: > Does Google Apps also have free and/or inexpensive mail services for > private domains, such as jfeldredge.com, that aren't no

Re: [nlug] blacklist removal / HOW IS SITELOCK FOR SECURITY?, ClamAV, Codeguard? / managed dedicated?

2015-08-06 Thread Michael L
I'm thankful for all the input, I 'believe' webserver and email is all that's there, so it crossed my mind going back to just a "cheap" shared hosting arrangement for $5-$30 / month. BUT, two reasons I don't know for sure that will be adequate are: 1. I'm (obviously) not a web admin / IT pro,

Re: [nlug] blacklist removal / HOW IS SITELOCK FOR SECURITY?, ClamAV, Codeguard? / managed dedicated?

2015-08-06 Thread Michael L
And the email switchover is in progress On Thu, Aug 6, 2015 at 5:15 PM, Michael Chaney wrote: > I again strongly suggest: > > 1. Move email *immediately* to gmail or another like service. > 2. Identify issues with the web site that allow attackers in. > 3. Move web hosting elsewhere if possible.

Re: [nlug] blacklist removal / HOW IS SITELOCK FOR SECURITY?, ClamAV, Codeguard? / managed dedicated?

2015-08-06 Thread Michael Chaney
If the big content is on aws s3 then it doesn't matter where the front end lives. On Thursday, August 6, 2015, Michael L wrote: > I'm thankful for all the input, > > I 'believe' webserver and email is all that's there, so it crossed my mind > going back to just a "cheap" shared hosting arrangeme

Re: [nlug] blacklist removal / HOW IS SITELOCK FOR SECURITY?, ClamAV, Codeguard? / managed dedicated?

2015-08-07 Thread Dagmar d'Surreal
Those services you mentioned in the initial post are as useful for preventing break-ins as fire insurance is for preventing fires. Sitelock at least provides vulnerability scans, but if it turns something up (like a recently-published vulnerability in cPanel), to extend the above metaphor further,