@yzahn said in How to secure a server:
BTW, the general rule in the industry is that once bad guys have gotten on to your server, you should never trust it again. i.e. wipe it and start fresh.
So true, just had a crazy story where someone had all his server resources being eaten up, it was a no-brainer checking the PID’s and seeing what the culprit was, turnd out he had some kind of breach long time ago and had some securtiy consultant supposley take care of it,
and as we say the rest is history…