There is VDS/VPS (VIRTUAL PRIVATE DEDICATED SERVER) 2 GHZ 1 GB RAM,
WINDOWS 2003, APACHE 2.2.3 + PHP 5.2
VIRTUOZZO, NO PLESK (changed to XAMPP 🙂)

I've tried to install Antivirus DRWEB, NOD32 and many others. But all they failed to monitor on run-time.
For now I've been using ClamAV but it does not monitor neither

Any AV that might fully work on VDS?

Also my concern is hackers, DDOS, brute forcing and so on…

Is there any Anti Hacker Software for Windows 2003?

I’ve tried lots of Traffic Analyzing Software but all they failed as well since there is no hardware or virtual network card detected on Windows 2003 VDS/VPS…
How to analyze incoming HTTP HTTPS traffic – I am really interested in what’s going on my VDS 😉

Thanks for support!

    I don't understand quite what you're trying to do. Perhaps you should contact the hosting support people.

    I'm not sure what you're expecting these various win32 programs to achieve. Even a virtual server will have a virtual network interface that it must be using, or traffic would not be able to get to it. If a specific application is unable to use it, then that's something you must take up with that vendor's support people (it is REALLY nothing to do with php 🙂 )

    You should use whichever antivirus aplication you've tested on your development server and works. If it fails, contact the vendor's support.

    If you're trying to do traffic analysis, you might want to consider:
    - Have Apache make access logs in "combined" format
    - Use one of the many long analysis applications

    If you're trying to do intrusion detection / prevention, you might want to consider
    - mod_security - but read ALL documentation thoroughly and test it extensively on your dev server before deploying it (this generates false positives easily)

    Mark

      No amount of third party software will prevent your application from being vulnerable, if it is coded that way. If you are really concerned, you should put extensive mitigation code in (e.g. rate-limiting for everything, CAPTCHAs). Correct design of your application will prevent most types of attack, however.

      If you are in the UK or EU, I am happy to do a paid source code audit for a reasonable rate.

      Mark

        Write a Reply...