Thursday, March 13, 2008

Webmin configuration

Initial Webmin Config

We need to secure webmin by editing /etc/webmin/miniserv.conf and make the following changes:

* Using SSL only:

SSL=1

* Change the port to 443 and bind to the second nic only:

port=443 bind=192.168.1.6

* Disable UDP broadcasts:

#listen=10000

* Change host lockout on login failures to 3 :

blockhost_failures=3

* Increase host lockout timeout to 120:

blockhost_time=120

* Change user lockout on login failures to 3:

blockuser_failures=3

* Change user lockout timeout to 120:

blockuser_time=120

* Change the realm to something else:

realm=cpanel

* Log logins to utmp:

utmp=1

No comments: