Hardening TS Servers

[mooxe]

Hey guys...


Well my servers are still being hacked. Heres what I have done so far..

1. /tmp directory will no longer allow executables
2. Restarted my servers from scratch, new passwords which are 8+ characters, upper/lower case & numbers.
3. IPTables blocking all IPs to the TCPQuery port, except those IPs from www.tsviewer.com.

What I want to do now is..

1. Password protect the webadmin panel with an .htaccess file or similair type security. However, the httpdocs directory is not in a normal web accessable directory. An .htaccess file I used there did not work.

2. Using IPTables to drop all incoming requests to the HTTPServer Port from all but my own IP range. I cannot get this rule correct.

3. Change the login.html and slogin.html names to something else. I tried this myself but for some reason I could not get to the superadmin login. I renamed the link in the login.html fpr the slogin.html, and also rename the slogin.html but it would not forward me to that url.

[bibabu]

Hey,

u use the latest server_linux? The latest version contains a lot of bugfixes!

1) .htaccess is just supported by apache 1 / 2. Teamspeak uses his own webserver.

2) iptables -I INPUT -p tcp --dport 14534 -j DROP && iptables -I INPUT -p tcp --dport 14534 -s yourip -j ACCEPT (untested)

[BHKai]

Are you using sqllite or mysql?

[ghost0cnc]

2. Restarted my servers from scratch, new passwords which are 8+ characters, upper/lower case & numbers.
Do you mean the whole server or just the TeamSpeak 2 server?
Which user is the TS2 server running on?
Which TS2 server version are you running?

[crazyandy]

Hello

With the iptables command :
iptables -I INPUT -p tcp --dport 14534 -j DROP && iptables -I INPUT -p tcp --dport 14534 -s yourip -j ACCEPT

is it possible to list multiple IP address to be accepted, but all others to be dropped?

Thanks,
Andy