Dev {Tricks}

https://www.transip.eu/knowledgebase/entry/653-directadmin-tutorial-series-securing-your/

• Change SSH port.
• Restrict access to DirectAdmin to specific IPs.
• Brute force protection in the form of Fail2Ban and a configuration adjustment in DirectAdmin.
• Anti-virus/malware protection with ClamAV.
• Optional: Restrict access on ‘Admin Level’ to specific IPs.

Change SSH port

1. Check your used ports

   netstat -tulpn | less

2. Choose a random port number between 0 and 65535 that is not shown in the overview (for example 56316) and press ‘q‘ to stop netstat.
3. Open the SSH configuration file

   nano /etc/ssh/sshd_config

4. Configuration file will open and search for #Port 22 and replace it with Port 5 (remove # and put your desired port number)
5. Save the file and close it CTRL+x > y
6. Add the chosen port to your firewall

   firewall-cmd --permanent --zone=public --add-port=56316/tcp

8. Your SSH port has been changed

You must be using the latest version of CustomBuild 2.0.

The first php version will be the default, and will run all webapps. Everything else is optional.

Users can select between versions on their “Domain Setup” page in DirectAdmin.

Sample install of multiple php versions:

cd /usr/local/directadmin/custombuild
./build update
./build set php1_release 7.1
./build set php2_release 5.6
./build set php3_release 7.0
./build set php4_release 7.3
./build set php1_mode php-fpm
./build set php2_mode php-fpm
./build set php3_mode php-fpm
./build set php4_mode php-fpm
./build php n
./build rewrite_confs