[Comm-en] ALT Server 4.0 - Preventing Root Log-ins

[Virtual Sky]

> On Tue, Mar 02, 2010 at 11:34:01AM -0600, Virtual Sky Solutions wrote:
>   
>> Now, I'm not an expert on Apache or other such things - I just
>> know enough to work my way around basic configurations.
>> However, thinking about it some more, would I be correct in
>> saying:  I could help prevent unwanted hacking of my server by
>> changing the web configurator access port, from 8080 to another
>> unused port?
>>     
> Somewhat yes, since 8080 is well known http-related port;
> but moreso with firewall setup blocking access to this or
> another configured port by default and allowing it from a
> few select IPs.
>
> If feeling adventurous, you could also look into "knock"
> package to employ so called port knocking technique on top
> of "deny by default" firewall policy for web interface.
>
>   
Ah, yes... port "knocking".  I forgot all about that.  I'll look in to 
it for sure.  Thanks for the suggestion!

David.