<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">I think using fail2ban is a good idea as well. I don't know how many of those scripts are checking for obscured urls, but I like doing a mixture of the two. Also, depending on your set up, inner and outer DMZs and firewall rules regulating access (you can only access the inner if you are coming from the outer, etc) are also a good idea (I believe it is security best practices to do it that way, if your'e using DMZs). I know that for some PCI compliance issues, the DB server has to be on a separate server than the site itself, and if that's the case you're probably going to have to be restricting access anyway.<div><br></div><div><div>But regarding setting up both issues, I think Ken had it right when he said that you had to explicitly give the users the ability to create new databases.</div><div><br></div><div><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div>Kind regards,</div><div><br><div><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><font class="Apple-style-span" face="Verdana" size="3"><span class="Apple-style-span" style="font-size: 12px; "><font class="Apple-style-span" size="2"><span class="Apple-style-span" style="font-size: 10px; ">Titus Bolton<br>Antenna Systems & Solutions, Inc.<br>931 Albion Avenue<br>Schaumburg, Illinois 60193-4550<br>United States of America<br>Phone: +1-847-584-1000 Fax: +1-847-584-9951<br><a href="http://www.antennasystems.com/">http://www.antennasystems.com</a><br> <br>GSA Contract Number: GS-35F-0479T <br>Electronic Counter Measures, Trap and Trace Devices, and accessories.<br> <br>Watch our network broadcast television interviews on <a href="http://www.youtube.com/antennasystems">www.youtube.com/antennasystems</a><br> <br><b><i>Confidentiality note</i></b><i>: <br>This message is the property of Antenna Systems & Solutions, Inc. and contains information which may be privileged or confidential. It is meant only for the intended recipients and/or their authorized agents. If you believe you have received this message in error, please notify us immediately by return e-mail and destroy any printed or electronic copies of this message. Any unauthorized use, dissemination, disclosure, or copying of this message or the information contained in it, is strictly prohibited and may be unlawful. Thank you for your cooperation</i>.</span></font></span></font><br></span></div><div><font class="Apple-style-span" face="Verdana" size="2"><span class="Apple-style-span" style="font-size: 10px; "><br></span></font></div></div></span><br class="Apple-interchange-newline"></span><br class="Apple-interchange-newline">
</div>
<br><div><div>On Jan 26, 2011, at 11:47 AM, Gerald Waugh wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div><br>On Wed, 2011-01-26 at 09:18 -0800, Ken - Precision Web Hosting, Inc<br>wrote:<br><br><blockquote type="cite">Also, on a different note, I don't really like having a url like phpmyadmin <br></blockquote><blockquote type="cite">since it is just another way for brute force attacks to try to guess <br></blockquote><blockquote type="cite">passwords (unless you have software checking those logins and blocking the <br></blockquote><blockquote type="cite">attacks). It would be nice if the GUI let you rename the url to something <br></blockquote><blockquote type="cite">random (and then automatically link to that url).<br></blockquote><blockquote type="cite"><br></blockquote><br>Not sure if it will survive updates.<br>But you can edit <br> /etc/httpd/conf.d/phpMyAdmin.conf<br> Alias /phpMyAdmin /usr/share/phpMyAdmin<br> Alias /phpmyadmin /usr/share/phpMyAdmin<br>I changed mine to;<br> #Alias /phpMyAdmin /usr/share/phpMyAdmin<br> #Alias /phpmyadmin /usr/share/phpMyAdmin<br> Alias /MySQL-Admin /usr/share/phpMyAdmin<br><br>restarted httpd, now only accessible as<br> <a href="http://host.domain.tld/MySQL-Admin">http://host.domain.tld/MySQL-Admin</a><br><br>Gerald<br><br>_______________________________________________<br>Blueonyx mailing list<br><a href="mailto:Blueonyx@blueonyx.it">Blueonyx@blueonyx.it</a><br>http://www.blueonyx.it/mailman/listinfo/blueonyx<br></div></blockquote></div><br></div></body></html>