M\u00ebnyra e vetme p\u00ebr t\u00eb siguruar nj\u00eb server nga tmerret e internetit \u00ebsht\u00eb t\u00eb mos e lidhni kurr\u00eb at\u00eb me internetin. N\u00eb momentin q\u00eb lidhni ndonj\u00eb server n\u00eb nj\u00eb qend\u00ebr t\u00eb dh\u00ebnash ose rrjet, ai menj\u00ebher\u00eb do t\u00eb filloj\u00eb t\u00eb sulmohet nga robot\u00ebt q\u00eb p\u00ebrpiqen ta aksesojn\u00eb at\u00eb dhe ta marrin p\u00ebrsip\u00ebr. \u00cbsht\u00eb thjesht natyra e m\u00ebnyr\u00ebs se si jan\u00eb gj\u00ebrat n\u00eb internet. Shumica e k\u00ebtyre sulmeve jan\u00eb t\u00eb pad\u00ebmshme n\u00ebse keni marr\u00eb masat e duhura. Por asnj\u00eb kompjuter nuk \u00ebsht\u00eb 100% i sigurt.<\/p>\n
Pra, k\u00ebtu \u00ebsht\u00eb nj\u00eb p\u00ebrmbledhje e k\u00ebshillave baz\u00eb t\u00eb siguris\u00eb p\u00ebr t\u00eb mbajtur serverin tuaj t\u00eb dedikuar t\u00eb sigurt ndaj internetit, p\u00ebrve\u00e7 mbylljes s\u00eb tij. Kjo bazohet n\u00eb p\u00ebrvoj\u00ebn ton\u00eb dhe nuk duhet t\u00eb p\u00ebrb\u00ebj\u00eb n\u00eb asnj\u00eb m\u00ebnyr\u00eb k\u00ebshill\u00eb ligjore. Gjithmon\u00eb duhet t\u00eb konsultoheni me nj\u00eb profesionist t\u00eb IT. Derisa ta b\u00ebni k\u00ebt\u00eb, k\u00ebtu jan\u00eb disa gj\u00ebra q\u00eb mund t\u00eb b\u00ebni nd\u00ebrkoh\u00eb.<\/p>\n
(Sh\u00ebnim \u2013 shum\u00eb nga k\u00ebto parime zbatohen gjithashtu edhe p\u00ebr server\u00ebt tan\u00eb VPS)<\/p>\n
Gj\u00ebja e par\u00eb q\u00eb duhet t\u00eb instaloni, n\u00ebse nuk \u00ebsht\u00eb instaluar p\u00ebr ju nga hosti juaj, \u00ebsht\u00eb nj\u00eb firewall. Kjo do t\u00eb mbaj\u00eb shumic\u00ebn e robot\u00ebve dhe haker\u00ebve jasht\u00eb serverit tuaj. Hostinkos operon nj\u00eb firewall masiv brenda qendr\u00ebs s\u00eb t\u00eb dh\u00ebnave q\u00eb i mban serverin e vet t\u00eb sigurt.<\/p>\n
Jepni sa m\u00eb pak njer\u00ebz t\u00eb jet\u00eb e mundur akses n\u00eb nd\u00ebrfaqen mb\u00ebshtet\u00ebse\/administratore t\u00eb serverit tuaj (dhe aksesin e ngarkimit t\u00eb skedar\u00ebve), dhe madje edhe at\u00ebher\u00eb, jepuni edhe m\u00eb pak njer\u00ebzve akses root\/shell. Por edhe p\u00ebrdoruesit baz\u00eb n\u00eb nj\u00eb server mund t\u00eb shkaktojn\u00eb d\u00ebm. Nj\u00eb llogari e-mail q\u00eb \u00ebsht\u00eb e pasigurt mund t\u00eb shkat\u00ebrroj\u00eb reputacionin e serverit tuaj ose resurseve n\u00ebse merret nga nj\u00eb SPAMMER. Seriozisht, mbani sa m\u00eb shum\u00eb p\u00ebrdorues q\u00eb t\u00eb jet\u00eb e mundur larg serverit tuaj t\u00eb ‘production\/consumer-facing’<\/em>.<\/p>\n Mos vet\u00ebm konfiguroni serverin tuaj dhe harroni at\u00eb. Monitoroni n\u00eb m\u00ebnyr\u00eb aktive. Shihni se kush po p\u00ebrpiqet t\u00eb identifikohet. Shihni se \u00e7far\u00eb resursesh po p\u00ebrdoren (dhe ndoshta abuzohen). Mbytni procesin q\u00eb v\u00ebreni se po d\u00ebmton performanc\u00ebn. Shum\u00eb panele kontrolli hostimi do t\u00eb ken\u00eb monitor t\u00eb integruar, por shum\u00eb monitorime jan\u00eb ad-hoc. Thjesht hyni \u00e7do dit\u00eb dhe mbani nj\u00eb sy n\u00eb gj\u00ebrat q\u00eb mund t\u00eb v\u00ebreni. N\u00ebse v\u00ebreni se faqet tuaja t\u00eb internetit jan\u00eb t\u00eb ngadalta ose v\u00ebllimi i emailit dal\u00ebs \u00ebsht\u00eb rritur, do t\u00eb kuptoni se di\u00e7ka nuk \u00ebsht\u00eb n\u00eb rregull. Gjithashtu, p\u00ebrdorni nj\u00eb mjet si UptimeRobot p\u00ebr t\u00eb monitoruar koh\u00ebn e funksionimit t\u00eb serverit tuaj.<\/p>\n TFA \u00ebsht\u00eb e ardhmja. Epo, t\u00eb pakt\u00ebn nuk \u00ebsht\u00eb e re. Aty ku \u00ebsht\u00eb i disponuesh\u00ebm, duhet t\u00eb aktivizoni v\u00ebrtetimin me dy faktor\u00eb. Kjo e mban softuerin dhe serverin tuaj t\u00eb sigurt duke k\u00ebrkuar nj\u00eb form\u00eb t\u00eb dyt\u00eb v\u00ebrtetimi, p\u00ebrve\u00e7 nj\u00eb fjal\u00ebkalimi. P\u00ebr t\u00eb hyr\u00eb n\u00eb serverin tuaj, p\u00ebr shembull, mund t\u00eb keni emrin tuaj t\u00eb zakonsh\u00ebm t\u00eb p\u00ebrdoruesit dhe fjal\u00ebkalimin. Pastaj mund t\u00eb konfiguroni me Google Authenticator q\u00eb gjeneron nj\u00eb kod unik. Dikush do t\u00eb duhej t\u00eb kishte fizikisht telefonin tuaj (dhe kodkalimin p\u00ebr t\u00eb) p\u00ebr t\u00eb marr\u00eb kodin. Thjesht nuk ka asnj\u00eb m\u00ebnyr\u00eb p\u00ebr t\u00eb hyr\u00eb n\u00eb server pa t\u00eb.<\/p>\n Mos p\u00ebrdorni nj\u00eb fjal\u00ebkalim duke p\u00ebrdorur fjal\u00eb, fraza dhe numra t\u00eb leht\u00eb p\u00ebr t’u gjetur (si dit\u00eblindja ose p\u00ebrvjetori juaj). Ju duhet t\u00eb gjeneroni fjal\u00ebkalime n\u00eb m\u00ebnyr\u00eb t\u00eb rast\u00ebsishme. P\u00ebrdorni nj\u00eb gjenerues fjal\u00ebkalimesh dhe nj\u00eb menaxher fjal\u00ebkalimesh p\u00ebr t’i mbajtur n\u00ebn kontroll ato. Asnj\u00ebher\u00eb mos i shkruani ato. Asnj\u00ebher\u00eb mos i ndani ato. Mos harroni kurr\u00eb fjal\u00ebkalimin kryesor.<\/p>\n Ka raste t\u00eb shpeshta t\u00eb incidenteve ku serveri p\u00ebrmbytet nga trafiku i nj\u00eb roboti q\u00eb p\u00ebrpiqet t\u00eb hyn me forc\u00eb n\u00eb uebsajte t\u00eb bazuara n\u00eb WordPress. Kjo b\u00ebn q\u00eb serveri t\u00eb ndalon dhe t\u00eb mbingarkoj gjith\u00e7ka. N\u00eb k\u00ebt\u00eb rast do duhej t\u00eb instalohet softuer p\u00ebr zbulimin dhe monitorimin e forc\u00ebs brutale n\u00eb WordPress q\u00eb pengon dik\u00eb q\u00eb p\u00ebrpiqet vazhdimisht t\u00eb identifikohet. Ka mjete falas q\u00eb e b\u00ebjn\u00eb k\u00ebt\u00eb, por ka edhe sh\u00ebrbime me pages\u00eb. Ju gjithashtu duhet t\u00eb instaloni mbrojtjen e forc\u00ebs brutale n\u00eb nivelin e serverit, n\u00eb m\u00ebnyr\u00eb q\u00eb t\u00eb bllokoni njer\u00ebzit q\u00eb p\u00ebrpiqen t\u00eb hyjn\u00eb n\u00eb administratorin e serverit tuaj. cPanel ka cPHULK, i cili do t\u00eb bllokoj\u00eb ata q\u00eb p\u00ebrpiqen t\u00eb identifikohen shum\u00ebher\u00eb (dhe do t’i bllokoj\u00eb ata p\u00ebr nj\u00eb periudh\u00eb t\u00eb caktuar kohe). Ju gjithashtu mund t\u00eb bllokoni sipas shtetit dhe t\u00eb krijoni lista t\u00eb bardha (ang. whitelists). Plesk ka nj\u00eb thirrje t\u00eb ngjashme programore fail2ban.<\/p>\n N\u00ebse po ekzekutoni nj\u00eb mail server, njer\u00ebzit do t\u00eb p\u00ebrpiqen ta p\u00ebrdorin at\u00eb p\u00ebr t\u00eb d\u00ebrguar SPAM. Ju duhet t\u00eb monitoroni post\u00ebn dal\u00ebse n\u00eb serverin tuaj dhe t\u00eb mbani nj\u00eb sy n\u00eb at\u00eb q\u00eb po del. Ju gjithashtu duhet t\u00eb kufizoni kujt i jepni akses n\u00eb email dhe t\u00eb siguroheni q\u00eb t\u00eb k\u00ebrkoni q\u00eb ata t\u00eb ken\u00eb fjal\u00ebkalime t\u00eb nd\u00ebrlikuara. T\u00eb dy Plesk dhe cPanel kan\u00eb mjete t\u00eb integruara p\u00ebr monitorimin e emailit q\u00eb po d\u00ebrgon serveri juaj (dhe do t’ju njoftoj\u00eb automatikisht n\u00ebse di\u00e7ka e pazakont\u00eb po ndodh).<\/p>\n Ky \u00ebsht\u00eb rregulli i art\u00eb i ekzekutimit t\u00eb softuerit n\u00eb nj\u00eb server: ju duhet ta mbani at\u00eb t\u00eb p\u00ebrdit\u00ebsuar. Kjo nuk do t\u00eb thot\u00eb vet\u00ebm mbajtjen e WordPress t\u00eb p\u00ebrdit\u00ebsuar; do t\u00eb thot\u00eb t\u00eb mbani \u00e7do gj\u00eb t\u00eb p\u00ebrdit\u00ebsuar. Kjo p\u00ebrfshin sistemin operativ, MySQL, PHP, Javascript, t\u00eb gjitha. Softueri i vjet\u00ebruar \u00ebsht\u00eb softuer i pasigurt. Ka skripta q\u00eb do ta mbajn\u00eb automatikisht softuerin tuaj t\u00eb p\u00ebrdit\u00ebsuar, por ju duhet ta monitoroni at\u00eb dhe t’i kushtoni v\u00ebmendje \u00e7do alarmi sigurie.<\/p>\n FTP \u2013 protokolli i transferimit t\u00eb skedar\u00ebve \u2013 \u00ebsht\u00eb thelb\u00ebsisht i pasigurt. SFTP p\u00ebrdor nj\u00eb SSL p\u00ebr t\u00eb siguruar lidhjen midis jush dhe serverit tuaj, dhe \u00ebsht\u00eb shum\u00eb m\u00eb i sigurt. Mos p\u00ebrdorni FTP dhe mos i jepni askujt emrat e p\u00ebrdoruesve\/fjal\u00ebkalimet e FTP-s\u00eb. Ekziston edhe FTPS (i cili p\u00ebrdor TLS) dhe po b\u00ebhet gjithnj\u00eb e m\u00eb popullor.<\/p>\n Do t\u00eb ket\u00eb forca online q\u00eb p\u00ebrpiqen t\u00eb vjedhin gjer\u00ebsin\u00eb e brezit tuaj. Duke qen\u00eb se \u00ebsht\u00eb nj\u00eb burim i kufizuar p\u00ebr t\u00eb cilin po paguani, nuk d\u00ebshironi q\u00eb dikush ta b\u00ebj\u00eb k\u00ebt\u00eb. Hotlinking \u00ebsht\u00eb nj\u00eb abuzim i zakonsh\u00ebm, ku nj\u00eb faqe tjet\u00ebr interneti do t\u00eb lidhet me nj\u00eb imazh q\u00eb po hostoni dhe do ta vendos\u00eb n\u00eb faqen e tij t\u00eb internetit. Ju mund ta \u00e7aktivizoni k\u00ebt\u00eb n\u00eb cPanel\/Plex.<\/p>\n \u00cbsht\u00eb nj\u00eb rregull tjet\u00ebr i mir\u00eb q\u00eb ju duhet t\u00eb p\u00ebrdorni vazhdimisht softuer q\u00eb ju nevojitet n\u00eb t\u00eb v\u00ebrtet\u00eb. N\u00ebse nuk e p\u00ebrdorni n\u00eb m\u00ebnyr\u00eb aktive, fikeni. Mbyllni portat TCP\/IP q\u00eb nuk po p\u00ebrdorni. Kjo kufizon aksesin p\u00ebr \u00e7do gj\u00eb q\u00eb p\u00ebrpiqet t\u00eb lidhet me serverin tuaj (dhe e b\u00ebn t\u00eb leht\u00eb zbulimin).<\/p>\n Ky \u00ebsht\u00eb minimumi q\u00eb duhet t\u00eb keni p\u00ebr \u00e7do domen q\u00eb jeni duke hostuar dhe duke e p\u00ebrdorur n\u00eb m\u00ebnyr\u00eb aktive. Nj\u00eb SSL nuk \u00ebsht\u00eb pluhur magjik, thjesht t\u00eb kesh nj\u00eb t\u00eb till\u00eb nuk e b\u00ebn automatikisht t\u00eb sigurt serverin t\u00ebnd. Por i b\u00ebn lidhjet me dhe nga serveri juaj t\u00eb sigurta. Ju duhet t\u00eb keni nj\u00eb.<\/p>\n Ju duhet t\u00eb keni nj\u00eb strategji backup-i. Rregulloret rregullojn\u00eb tre: nj\u00eb kopje rezerv\u00eb, nj\u00eb kopje rezerv\u00eb e brendshme dhe nj\u00eb kopje rezerv\u00eb jo me lidhje me internetin. Dhe p\u00ebrdit\u00ebsoni ato rregullisht. N\u00ebse nj\u00eb sulmues ransomware merr p\u00ebrsip\u00ebr dhe ju nuk keni nj\u00eb kopje rezerv\u00eb, mund t’ju duhet t\u00eb paguani shp\u00ebrblimin (q\u00eb \u00ebsht\u00eb di\u00e7ka q\u00eb nuk duhet t\u00eb b\u00ebni). Pra, krjoni backup-in tuaj. Dhe mbajini ato kopje rezerv\u00eb t\u00eb p\u00ebrdit\u00ebsuara. Automatizimi. Mbajtja e nj\u00eb backup-i offline \u00ebsht\u00eb m\u00eb e v\u00ebshtir\u00eb p\u00ebr t’u automatizuar, por b\u00ebn q\u00eb t\u00eb ket\u00eb nj\u00eb her\u00eb n\u00eb muaj.<\/p>\n Sigurisht, Hostinkos mund t’ju ndihmoj\u00eb me t\u00eb gjitha k\u00ebto n\u00ebse keni nj\u00eb server t\u00eb menaxhuar me ne. Kontaktoni me ekipin ton\u00eb sot p\u00ebr t\u00eb audituar serverin dhe praktikat tuaja dhe ne do t’ju ndihmojm\u00eb ta mbani serverin tuaj t\u00eb sigurt nga forcat e k\u00ebqija online.<\/p>\n A keni ndonj\u00eb k\u00ebshill\u00eb tjet\u00ebr p\u00ebr t\u00eb mbajtur t\u00eb sigurt nj\u00eb server? Ju lutemi na tregoni n\u00eb komente.<\/p>\n","protected":false},"excerpt":{"rendered":" M\u00ebnyra e vetme p\u00ebr t\u00eb siguruar nj\u00eb server nga tmerret e internetit \u00ebsht\u00eb t\u00eb mos e lidhni kurr\u00eb at\u00eb me internetin. N\u00eb momentin q\u00eb lidhni ndonj\u00eb server n\u00eb nj\u00eb qend\u00ebr t\u00eb dh\u00ebnash ose rrjet, ai menj\u00ebher\u00eb do t\u00eb filloj\u00eb t\u00eb sulmohet nga robot\u00ebt q\u00eb p\u00ebrpiqen […]<\/p>\n","protected":false},"author":1,"featured_media":3553,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[881,5],"tags":[673,672,36,63,641],"class_list":["post-3552","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-server","category-web-hosting","tag-bestpractices","tag-decicated-server","tag-security","tag-tips","tag-vps-server"],"yoast_head":"\nMonitoro<\/h2>\n
P\u00ebrdorni Autentifikimin me dy faktor\u00eb p\u00ebr gjith\u00e7ka<\/h2>\n
P\u00ebrdorni fjal\u00ebkalime t\u00eb gjeneruara, t\u00eb v\u00ebshtira (por ruajini ato)<\/h2>\n
Krjoni mbrojtje nga forca brutale (ang. Brute Force Protection)<\/h2>\n
Monitoroni emailin p\u00ebr email spam (aktivizo TFA ose fjal\u00ebkalime t\u00eb nd\u00ebrlikuara)<\/h2>\n
Mbani t\u00eb p\u00ebrdit\u00ebsuar softuerin q\u00eb p\u00ebrdorni<\/h2>\n
P\u00ebrdorni SFTP ose FTPS p\u00ebr transferimin e skedar\u00ebve<\/h2>\n
\u00c7aktivizo hotlinking<\/h2>\n
\u00c7aktivizo portat dhe sh\u00ebrbimet e panevojshme t\u00eb rrjetit<\/h2>\n
Merr nj\u00eb SSL, padyshim<\/h2>\n
Krijoni kopje rezerv\u00eb (ang. backup)<\/h2>\n