Thank you for that, I found the firewall section very useful. I am new here, having come from managed servers where all that was done for me, the only time, before, that I had fiddled with iptables, I managed to lock myself out oompletely! I need a little bit of advice. I have followed those instructions and locked out all ipv6 and all ports except ssh. I now want to open up port 80 for apache. I assume I just copy and edit the line from the guide to read:
sudo iptables --append INPUT -p tcp --dport 80 -j ACCEPT
and then add that (obviously before the drop rule!). Uploading the site files will be done through sftp, and that port is opened. What other ports should I open? It is only going to be straight http not https and no mailserver etc.
And if I may, one more question. I want to use public/private key login. I read a really interesting article recently about using this with the private key kept on a usb key for added security on a machine that others may use. OTT for me, but do I edit the conf file for openssh to add the public key or can I do it in the control panel (security tab). i know I could submit a ticket to ask for it to be done, but would rather do everything myself (that's how you learn)
Then it's just down to configuring apache and mysql, but I am a lot more competant and confident about them
Thanks in advance
Keith Williams