Home | Community | Message Board


This site includes paid links. Please support our sponsors.


Welcome to the Shroomery Message Board! You are experiencing a small sample of what the site has to offer. Please login or register to post messages and view our exclusive members-only content. You'll gain access to additional forums, file attachments, board customizations, encrypted private messages, and much more!

Kraken Kratom Shop: Red Vein Kratom

Jump to first unread post Pages: 1
OfflinegENERIX
/usr/bin/drinking?
 User Gallery


Registered: 10/18/05
Posts: 5,697
Loc: Skyward Bound
Last seen: 3 months, 8 days
Security concern with hosting a website from home
    #18818890 - 09/09/13 01:17 PM (10 years, 4 months ago)

Like the title says, I'm currently in the process of building a small website as a side project during my free time. Now since the site is nothing too serious, I was considering hosting it on my HP Proliant server that runs pretty much 24/7. This would save me any hosting costs.

My only concern is how open I'd be leaving myself to attack. Is there anything that I'd need to consider before attempting to host a website myself. Could I possibly run it through a virtual machine to prevent any intruders from getting any further than the VM? These are all things I'm unsure about so I was really looking for some advice.

Thanks again people,
g


--------------------


Extras: Filter Print Post Top
OfflineAlan RockefellerM
Mycologist
Male User Gallery
Registered: 03/10/07
Posts: 48,276
Last seen: 9 hours, 13 minutes
Re: Security concern with hosting a website from home [Re: gENERIX]
    #18820594 - 09/09/13 08:19 PM (10 years, 4 months ago)

It would be a good idea to run a Nessus scan on your IP to see if it comes up with anything.


Extras: Filter Print Post Top
OfflinegENERIX
/usr/bin/drinking?
 User Gallery


Registered: 10/18/05
Posts: 5,697
Loc: Skyward Bound
Last seen: 3 months, 8 days
Re: Security concern with hosting a website from home [Re: Alan Rockefeller]
    #18823123 - 09/10/13 11:50 AM (10 years, 4 months ago)

Thanks for the heads up Alan, I'll get on the case shortly and see if anything alarming pops up.

From a security aspect, would you recommend that if I intend on hosting a fairly small website  from home, that I run it using a virtual machine?


--------------------


Extras: Filter Print Post Top
Offlinetotal
Post Office Tyvek Advocator
Male User Gallery

Folding@home Statistics
Registered: 10/03/04
Posts: 11,405
Last seen: 6 months, 23 days
Re: Security concern with hosting a website from home [Re: gENERIX]
    #18827170 - 09/11/13 10:23 AM (10 years, 4 months ago)

Seems you already know a little about virtualization.

Throw Vmware Vsphere on that bad boy.
Run 2 virtual machines, 1 a nice firewall, maybe Pfsense, and the other your webserver.
Pass the in/out with the virtual switch through the firewall and then to your webserver.
Install an intrusion detection package in pfsense.

The biggest worry you should have would be some script kiddie ddos'ing your home connection.
Make sure any unnecessary ports are not open.


Extras: Filter Print Post Top
OfflineAlan RockefellerM
Mycologist
Male User Gallery
Registered: 03/10/07
Posts: 48,276
Last seen: 9 hours, 13 minutes
Re: Security concern with hosting a website from home [Re: gENERIX]
    #18845396 - 09/15/13 05:18 PM (10 years, 4 months ago)

Quote:

gENERIX said:
Thanks for the heads up Alan, I'll get on the case shortly and see if anything alarming pops up.

From a security aspect, would you recommend that if I intend on hosting a fairly small website  from home, that I run it using a virtual machine?






VM's are good.  Chroot is also good, that way if they break in, they only get access to a small part of the machine.  But if it is a dedicated VM anyway, that might not matter much.


Extras: Filter Print Post Top
OfflinegENERIX
/usr/bin/drinking?
 User Gallery


Registered: 10/18/05
Posts: 5,697
Loc: Skyward Bound
Last seen: 3 months, 8 days
Re: Security concern with hosting a website from home [Re: Alan Rockefeller]
    #18845710 - 09/15/13 06:23 PM (10 years, 4 months ago)

Thanks for the sound advice guys. Since I have access to MSDN, I can get my hands on VMware products free of charge so that'll be the route that I decide to go down.

Total, could you expand a little more, or better yet, do you have any walk through guides? I've heard pfSense being mentioned an awful lot but I've yet to have any hands on experience with it.

Oh, and one last thing, I'm hiding behind a VPN. Would it be wise to host the site using the VPN?


--------------------


Extras: Filter Print Post Top
OfflineAlan RockefellerM
Mycologist
Male User Gallery
Registered: 03/10/07
Posts: 48,276
Last seen: 9 hours, 13 minutes
Re: Security concern with hosting a website from home [Re: gENERIX]
    #18845811 - 09/15/13 06:47 PM (10 years, 4 months ago)

Quote:

gENERIX said:
Oh, and one last thing, I'm hiding behind a VPN. Would it be wise to host the site using the VPN?





You mean run the web server on the same box as is running the VPN client?  Or host it on the other side of the VPN, so people do not connect to your house, but connect to the VPN ip?


Extras: Filter Print Post Top
OfflinegENERIX
/usr/bin/drinking?
 User Gallery


Registered: 10/18/05
Posts: 5,697
Loc: Skyward Bound
Last seen: 3 months, 8 days
Re: Security concern with hosting a website from home [Re: Alan Rockefeller]
    #18863249 - 09/19/13 02:10 PM (10 years, 4 months ago)

Quote:

Alan Rockefeller said:
You mean run the web server on the same box as is running the VPN client?  Or host it on the other side of the VPN, so people do not connect to your house, but connect to the VPN ip?




Well, when I was first thinking it through, I had considered running the web server on the same VM as the VPN client, but the more I think about it, the more sensible it would seem to host it on the other side of the VPN so people don't connect to my own home IP, but instead the IP of the VPN. 

Out of the two options? Which one seems more wise?


--------------------


Extras: Filter Print Post Top
OfflinegENERIX
/usr/bin/drinking?
 User Gallery


Registered: 10/18/05
Posts: 5,697
Loc: Skyward Bound
Last seen: 3 months, 8 days
Re: Security concern with hosting a website from home [Re: gENERIX]
    #18863256 - 09/19/13 02:12 PM (10 years, 4 months ago)

Or for the security/privacy mentality that seems to possess me, do you think I'd just be best having the site hosted elsewhere on a cheap hosting company some where?

I just thought the setup that I had initially mentioned seemed like a good idea to learn a thing or two whilst at the same time, saving myself a little cash at the same time.


--------------------


Extras: Filter Print Post Top
Invisiblefastfred
Old Hand
Male User Gallery

Folding@home Statistics
Registered: 05/17/04
Posts: 6,899
Loc: Dark side of the moon
Re: Security concern with hosting a website from home [Re: gENERIX]
    #18867570 - 09/20/13 12:44 PM (10 years, 4 months ago)

It's only a few bucks a month to have it hosted.  It's really not worth the effort to host it yourself.

Hosted sites get hacked just as much, but at least you're only risking the website and not every scrap of personal data you have.


-FF


Extras: Filter Print Post Top
OfflinegENERIX
/usr/bin/drinking?
 User Gallery


Registered: 10/18/05
Posts: 5,697
Loc: Skyward Bound
Last seen: 3 months, 8 days
Re: Security concern with hosting a website from home [Re: fastfred]
    #18868628 - 09/20/13 04:53 PM (10 years, 4 months ago)

Yeah, the more I think about it, the more I'm swaying in that direction. I just thought it would be a good little side project to help me gain a little more hands on experience. But at the same time, I want to protect my security/privacy so I was never too keen on hosting the site using my own IP address. Ideally, I wanted to use a VPN but I knoe the IP of my VPN changes fairly frequent which is no good to anyone really!


--------------------


Extras: Filter Print Post Top
Jump to top Pages: 1

Kraken Kratom Shop: Red Vein Kratom


Similar ThreadsPosterViewsRepliesLast post
* Security tips that EVERYONE should read twice!
( 1 2 all )
daba 25,294 22 05/02/06 08:56 PM
by Pashasan
* Internet Security abhi 966 2 06/27/04 10:45 PM
by Vvellum
* Secure Email theocean06 1,420 12 01/24/05 08:58 AM
by nife
* How to Purchase Securely 101
( 1 2 3 4 all )
Lana 44,765 64 05/22/13 01:31 AM
by 1ve5w4hu
* Any recommendations for maintaining security? TheHobbit 2,299 10 11/19/02 08:38 PM
by BuzzDoctor
* Computer Security SoopaX 875 4 11/29/04 10:31 PM
by onetime
* How long will websites store my IP address? kon 728 3 05/26/05 03:53 AM
by tak
* Internet Security - IP Address & Proxeys
( 1 2 all )
Twirling 6,874 27 01/27/05 11:36 AM
by Hamurabi

Extra information
You cannot start new topics / You cannot reply to topics
HTML is disabled / BBCode is enabled
Moderator: Enlil, Alan Rockefeller
152 topic views. 0 members, 2 guests and 1 web crawlers are browsing this forum.
[ Show Images Only | Sort by Score | Print Topic ]
Search this thread:

Copyright 1997-2024 Mind Media. Some rights reserved.

Generated in 0.024 seconds spending 0.007 seconds on 15 queries.