i have a linux hosting working with cakephp.some sites got intrusion/hacked.i used nmap to see the open ports.
i found 21/tcp open ftp
is the port which should be restricted and not accessible via public.
also i am thinking to restrict /app/config from 777 to 755 and also change databse.php
file 'login' => 'root',
to user
.
can i restrict ftp port 21 to set priviledge if yes, what effect it will have.
how to set priviledge on ftp port 21
of a host.
other ideas regarding security is also welcomed.
Enable fw
To allow packets from xxx.xxx.xxx.xxx
To allow packets from network xxx.xxx.xxx.xxx/24
allow IP address xxx.xxx.xxx.xxx access to port 21 for all protocols
allow IP address xxx.xxx.xxx.xxx access to port 21 using TCP