Recently I’ve been reviewing security and realised I’ve been relying too much on my routers firewall - which isn’t even present if I work on an open wifi connection somewhere.

Steps so far

Drupal has been in the new today for all the wrong reasons

Millions of websites hit by Drupal hack attack

A few days ago I was notified by my ISP that my server was “emitting a UDP-based denial of service attack”, as a result the VM had been rebooted and taken off the network.

With console access I was able to verify there was a problem, and the ISP was able to give me a clean VM, with my old system available as a mount, in read-only mode

Historical note : Hudson is what Jenkins was called a long time ago.

I want the drupal user uploaded files to be manageable by both apache and a non-root user

In my case I’m using hudson to rebuild the site with data and “files” from live periodically.