A call to all Server Admins ! Lets keep servers UP and Healthy!

[BMF-cetniksoldier]

Hey,

I am taking this opportunity to make a call to all server admins!

Lets keep the PR servers maintained and secured to keep this MOD alive!

After working recently with some PR communities to increase network security on their servers to stop some DDOS attacks, I've come to realize that some clans may need some help or advice on securing systems. I currently have 8+ years work experience in network and server security and wanted to share some insight to all server admins. These are the basics so if you already have this covered then good, if not maybe this may help or PM me I can discuss this issue further with your server techs.

1. Hosted VS local server -

If your server is hosted , this may be good or bad, depending on your provider. Find out what type of security they have (firewall, network security appliance, IDS etc ) and what ports are blocked on their level. Some hosted solutions just leave you onto the internet with no protection and will expect you to set up some sort of software firewall or virtual appliance.

If you are forced to run a software firewall I recommend Comodo Free.
Firewall - Personal Free Internet Firewall Software
Windows Server to Workstation • View topic - Comodo Firewall on R2 ?

This will provide you with some DDOS protection.
Just remember when installing a software firewall from remote access if you do not allow RDP before the firewall is enabled it may kill your remote session.

Local Server - Physical FIREWALL! If you have physical access to server put a good used Cisco ASA or PIX or even an Endian Open source firewall to protect from DDOS. Limit only open ports that need to be used by the server. Watch the connection counts. Set up proactive DDOS and hacking protection.

Endian - ?Open Source Firewall Appliance - UTM Linux Security Distribution?

2. AntiVirus - Make sure you have a good antivirus client. I cannot stress this enough, hackers will use trojans to remote connect and exploit your server. Be sure you have atleast a "Free" Antivirus.

3. Keep server OS updated - Run all of your windows updates weekly (microsoft releases patches on tuesdays) to make sure any exploits are patched. Very Very important, hackers use a vulnerability scanner to see if you have any unpatched issues.

4. STRONG PASSWORDS - I cannot stress this enough, especially if you have a webserver hosted on the same server as the gaming server. Make sure it is atleast 16 charecters and using special charecters. (ie ;:,/? ) <--- very important makes a brute force attack soo much harder. Also the length at 16 changes the way the password is stored in a windows server sam file making it much more difficult to crack if somehow a hacker had remote access. Also make sure you have strong passwords on your system for all admin accounts and on FTP or other services.

Thanks, again these are the basics and I am offering my services free of charge to any clan needing to fix security issues for their PR servers. I am doing this as a thank you to the community for the years of enjoyment from this MOD so if anyone has any questions please feel free to PM me and we can discuss anything in the security or server field of IT.

Thanks,

Dusko
Network Security Specialist
CCNA, Network +
8+ Years Work Experiance

[brezmans]

Thanks for the info and the offer, cetniksoldier. I will PM you to discuss some stuff that I have not much experience with.

With the recent attacks on many servers this is a great initiative.

-Brez

[SyntheticCoyote]

Cool, rarely do we see members of the community offering their assistance to the clans/communities of PR. It is a refreshing sight.

[BMF-cetniksoldier]

Cool, rarely do we see members of the community offering their assistance to the clans/communities of PR. It is a refreshing sight.

Anytime! The mod is great and Ive enjoyed it for many years and was disapointed to see so many servers effected by hackers. I figure Ive enjoyed this mod I can donate my skill set to help the community as a whole.

[Tit4Tat]

Cool, rarely do we see members of the community offering their assistance to the clans/communities of PR. It is a refreshing sight.

+1



Will speak to our Tech guys and see if they can cross reference what they have with what you suggested. Much appreciated





Merry Christmas to PR community,

[Wicca]

Cetnik was really helpful, setting up security for PRTA, and advising us on some stuff we overlooked.

Thanks Cetnik.

And Merry Christmas

[Acemantura]

Cetnik was really helpful, setting up security for PRTA, and advising us on some stuff we overlooked.

Thanks Cetnik.

And Merry Christmas

Soooooooo, retry of NAvEU?

[Deathtrap]

Cetnik! How goes it? Good writeup

[BMF-cetniksoldier]

Cetnik was really helpful, setting up security for PRTA, and advising us on some stuff we overlooked.

Thanks Cetnik.

And Merry Christmas

Your welcome Wicca, any time. Also Merry Christmas and Happy New Years to you to!

I to would also like to know when the NA vs EU rematch will be