ConfigServer Security & Firewall (CSF) is a popular firewall for Linux servers that includes a login failure daemon (lfd) to detect and block brute-force attacks. This guide will walk you through installing and configuring CSF on your server.
Start from a fresh, supported operating system (for example AlmaLinux 9), set a fully qualified hostname, update the system, then run the installer as root inside screen: cd /home && curl -o latest -L https://securedownloads.cpanel.net/latest && sh latest. When it finishes, open https://your-server-ip:2087 and complete the setup in WHM. Most install errors come from a server that is not fresh, a bad hostname, or too little disk space.
The IP Deny Manager in cPanel allows you to block specific IP addresses, domains, or entire IP ranges from accessing your website. This feature is useful for preventing malicious visitors, spam attacks, and unauthorized access.
An addon domain is a second, separate website on the same cPanel account, with its own folder, email addresses and SSL certificate. In current cPanel, open Domains > Domains, click Create A New Domain, enter the domain, untick Share document root, choose a folder such as example.net, and submit. Point the domain's DNS to your hosting first.
Set folders to 755 and files to 644, make sure every file is owned by your cPanel user, and never use 777. On cPanel, PHP runs as your account, so Joomla can write to its cache, tmp, logs and images folders without any world-writable permissions. Check the result in Joomla under System > System Information > Folder Permissions.
On cPanel hosting, set folders to 755 and files to 644. Protect configuration files that hold passwords, such as wp-config.php, with 600 or 640. Never use 777. Change permissions in Files > File Manager: select the item, click Permissions, tick the boxes or type the number, and save.
Encountering the "/usr/bin/crontab permissions are wrong. Please set to 4755" error in cPanel? Follow this simple guide to resolve it on RedHat, CentOS, or Fedora servers.
Disable Mailman mailing lists on your cPanel server by modifying its execute permissions.
Secure sensitive directories on your website by enabling password protection in cPanel.