Edmonds Ecommerce – PHP Web Developers

Over last few days we been doing a bit of work on doing some audits for people and one of the things that has come up is ssl. For the purpose of checking the servers ssl implementation we have been using Qualys SSL Labs which is a excelent tool.
The checker checks for the ssl certificate and tells you if your server setup is vulnerable to attacks such as Poodle and OpenSSL CCS Injection. We will produce a blog post shortly on the best practise setup to prevent these attcks....

atop is a server diagnostic tool to take snapshots of the server’s activity at specified intervals, so it’s useful for debugging intermitttent issues without watching the server constantly.
atop is available to install from the repos with a yum install atop or apt-get install atop depending if you’re on a RedHat or Debian-based server. By default atop will take snapshots every 10 minutes....

ModSecurity is a brilliant addition to web servers to block any nefarious requests before they hit your application.This improves security and reduces load if your server comes under attack as the requests are killed very quickly.
PageSpeed is a module provided by Google to automatically improve the performance of your web pages in the browser. In a stroke it can offer a much more responsive front end with just a few configuration options....

SELinux can be restrictive by defult but prevent alot of security issues. One thing we found while trying it is that by default it will block network connections from being made via the httpd daemon. This is an issue if say on a development system you...