🔍
SIM — System Integrity Monitor
- System & services monitoring for SysVinit
- Verifies services are online continuously
- Load average & log file monitoring
⚡
SPRI — System Priority
- Queue processes by priority (high/med/low)
- Reduce average server load 5–20%
- CPU management optimization
🔄
PRM — Process Resource Monitor
- Monitor process table resource usage
- Kill over-limit processes automatically
- Email alerts & kernel logging
🛡️
BFD — Brute Force Detection
- Parse auth failure logs
- Block attacking IPs with firewall
- Works with APF recommended firewall
🐧
LES — Linux Environment Security
- Root-only permissions on system binaries
- Root-only path traversal enforcement
- Immutable bit on core packages
📧
Email Security / ClamAV
- Clam AntiVirus for mail servers
- Multi-threaded scanning daemon
- Auto-update via internet
📬
Mail Header Patch
- Identifies root cause of spam
- Tracks nobody-sent spam
- Email audit trail
📁
/tmp & /var/tmp Hardening
- Enforce noexec & nosuid on /tmp
- Prevent malicious script execution
- /var/tmp protection
🗂️
Dev/shm & /proc Hardening
- Prevent hacker exploitation of /dev/shm
- Secure /proc filesystem
- Execution prevention from shared memory
💿
MySQL & Apache Optimization
- Optimize MySQL for hardware ability
- Apache performance tuning
- Significant shared server improvement
🔒
Apache Security
- Security tweaks for Apache
- Better performance configuration
- Module hardening
🔥
CSF Firewall
- ConfigServer Security Firewall
- Comprehensive firewall rules
- Brute force protection