Managing your own server is an important responsibility.
Below is a list of 10 best practices to be a successful systems administrator.
No matter how good your passwords are, if you do not physically secure your server, it is vulnerable to intrusion. Remember, you are responsible for any damage caused to BSC network resources originating from your server.
The safest place for your password is in your head NOT on a post-it under your keyboard. A lot of damage can be done, not only to your server, but also to the BSC network. You are responsible for the security of your servereven if it is hacked. Dont forget to pick a good password.
Make sure you secure your server with a boot password, a bios password, and an OS password.
Be sure to give users of your server only the access they need and make sure they choose good passwords for their accounts. Passwords should be at least 6 characters and contain at least one number.
Always check the manufacturers website for your operating system to be sure you arent missing important security patches or fixes. If your OS manufacturer offers automatic update, we recommend that you turn it on.
Make sure you keep your antivirus program up to date to ensure it does not become infected.
Ports on a server allow people to access to your servers resources. However, they can also represent a vulnerability if they are open and do not need to be open for the services which are running on your server. Be sure to close all inbound and outbound ports that you arent using.
Some common ports include
The process for closing ports depends on your operating system. Please refer to your user manual for instructions.
Email lists are an excellent way to stay ahead of the curve and get technical tips. We recommend you join a mailing list for your operating system as well as your AV announcement list if they have one.
Post the number for tech support in an easily accessible place. Do not store it on your server.
Keep a regular backup schedule of your data and your OS configuration. This will save time later if anything happens to the server, and you need to rebuild.
Remember, managing your own server is a lot of work. But if you adhere to these 10 best practices, you can minimize your exposure to risk.
Last Modified: May 7, 2008