Te Haumarutanga: He Aha te Tuatahi

The security controls KapsuleHost gives you, the ones you have to switch on yourself, and what to do first if something has already gone wrong.

Ngā āhuatanga tohu me te whakamahi: Kei hea te tīmatanga

Ngā āhuatanga tohu e āwhina nei a KapsuleHost ki a koe, ko ērā anō e tika me whakahohe e koe ake, me te āhea te mahi tuatahi mēnā kua hē tētahi mea.

Ko te tohu o te kaupapa whakatunga tūmau he whakatuturutanga tahi. Ka tiaki mātou i te pūnaha, i te rohe, i te whakatika i te ahumahi kaupapa, ā, i te tiakitanga o āu raraunga. Ka tiaki koe i āu kupuhipa, i te whakauru kōrero, i te waehere tono ā-kaupapa me ngā tūmomo kupu e tohu ai koe. Ko te tokoiti o ngā take tūturu e tiimata ana i tērā taha tuarua, ā, mō tēnei take, he mea nui tēnei whārangi mō ngā mea e āhuatia e koe.

Mēnā e whakapae ana koe he mate kua pā ki tō pae tukutuku, tō kōrero rānei i ēnei wā, whakamutu i te titiro i te tirohanga-ā-matawhānui, haere ki If Your Site Is Hacked. Ko te tere he mea nui ake i te otinga i te haora tuatahi.

Taumata 1: Tō Kōrero KapsuleHost

Ko tō kōrero KapsuleHost e taea ai te whakaui i te DNS, te pānui i ngā waihanga, ā, te whakamahi i te moni. Ko te mea nui rawa tēnei hei tiaki, ā, e tiakina ana e ētahi mea e rua: he kupuhipa kahore atu i te atu tangata e mōhio ana, ā, he tohu tuarua.

Whakahohe i te whakamana tohu e rua. Ngā tūmitanga, katahi te Tohu. Ko te tekau meneti nui rawa tēnei i roto i tēnei pokapū āwhina katoa. Tiakina ngā whakawhiwhinga tōpūtanga ki tētahi wāhi ehara i tō pūkete rānei. Titiro atu ki Two-Factor Authentication me Account Security.

Whakamahia he kupuhipa ahurei. Ko te whakamahinga anō i te kupuhipa te āhuatanga e ngaromitia ai te maha o ngā kōrero, nā te mea ka puta te whakaroa ki tētahi wāhi ē.

Hoatu ki ngā tāngata ō rātou ake whakauru. Mēnā e hiahia ana he hoa mahi, he kaihanga, he kaupapa rānei ki te whakauru, tono mai hei mema rōpū me te tūmomo e hiahia ana koe rather than me te whare i ō ahuatanga. I te wā e haere ana rātou, ka whakakaore koe i tētahi kōrero anake hoki te whakahou i ngā kupuhipa katoa e mau ana. Titiro atu ki Team Members.

Mārama i te āhuatanga i puta. Ko te aoakiri haumanu e tuhia ana te ngoikohanga o te kōrero, he mea e hiahia ana koe i te wā e whakatau ana koe he kupu nā koe, nā tō kaihanga, nā tētahi atu rānei. Titiro atu ki Audit Log.

Ngā ara hoki anō, i mua tonu i te hiahia: Lost 2FA Recovery me Lost Account Email.

Taumata 2: Tō Rohe

He rohe i tangohia atu i a koe he mea kino ake i tētahi pae tukutuku kua whakaharamaratia, nā te mea ka whai atu i ērā atu mea katoa: tō pae tukutuku, tō īmēra, tō ngā tukunga kupuhipa anō.

Te rakuraku rohe he mea tūturu ā te tīmatanga, ā, ka aukati i ngā whakawhiti hē. Me tūturu tonu mēnā ehara i te wā e karanga ana koe ki te whakawhiti atu.
Me tiaki te whakawhiti koniti kia taea. Ka tuku te rete i ngā pānui mutunga me te whakamatautau i reira, ā, ka hinga he īmēra whakamatautau ka whakamoe taku rohe. Titiro atu ki Contact Details.
Ako anō te whakataunga e whakakore ana i te take e tino ngaro ai te rohe i te tangata, arā, te wareware. Titiro atu ki Renewals and Expiry.
DNSSEC e whakatairite ana i ō ngā whakautu DNS kia kore e taea te whakawhiu ā-haere. Titiro atu ki DNSSEC.

Ko te tango i te DNSSEC i te raupapa hē ka whakataka i tō rohe ki te mutunga. Me tangohia te whakawhiti DS ki te rete whakatunga, ā, me whakatūturu kua ngaro atu i te wāhanga mātua i mua tonu i te whakamutu i te whakainoi. Pānuia te aratohu i mua tonu i te whakatutaki.

Taumata 3: Whakawao I Te Huarahi

Me whakaputa i ngā pae tukutuku KapsuleHost katoa mā HTTPS, ā, ka tonoa ā-ā-otomaka ā te huihuingahinga ka whakapoutoko mai te DNS ki a mātou. E rua ērā e he ai:

Kaore i tonoa te tohu-ā-ā-otomaka. Otirā, he kaupapa te DNS kaore anō i whakawhakatika ki a mātou, he rekoata CAA rānei i runga i te rohe e aukati ana i te kawekawe whakatonao. Titiro atu ki SSL Certificates.
Ka pakaru te āhuatanga o te pūkawe ki runga i tētahi pae tukutuku e mahi ana. Whakatupuranga whakapiringa: he whārangi HTTPS e uta ana i tētahi āhua, i tētahi tūmomo whakahaere rānei mā te HTTP ngā. Titiro atu ki Fixing Mixed Content.

Mēnā ka tuu koe i tētahi arahanga pūmua ā-toru ki mua i tō pae tukutuku, me mārama i te āhuatanga e huri ana ki te tonao tohu-ā-ā-otomaka, ki te whakatikanga tuatahi o te kaimimi e kite atu ai mātou i mua tonu i te whakahohe. Titiro atu ki Using a Third-Party Proxy or CDN.

Taumata 4: Tō Pae Tukutuku me Āna Waehere

Koinei te wāhi e kite ai te tokoiti o ngā mate tūturu, ā, kē tonutanga mā roto i tētahi wāhi e toru: he tūmomo kupu kaore i te whakatika, he kupuhipa tono ngoikohanga, he kōnae rānei i uta mai e tētahi tawhito kāore e whai i te āhuatanga tūturu.

Whakahou i ngā mea. Kahore he hiahia tūturu, ā, ko te mahinga katoa tēnei. Ka rapu ngā kaiwhakatukutuku ātetahi plugin kaore i te whakatika, e whānui tōnutanga. Titiro atu ki WordPress Updates, Automatic Updates me WordPress Plugins.

Whakakore i ngā mea kaore e whakamahia. He plugin kaore i te whakahohe he kōnae tonu i te papa, ā, e taea tonu ana ngā kōnae i te papa te whakauru. Tango i te tika.

Whakamahia ngā āhuatanga tohu pae tukutuku. E whai ana i te pae tukutuku i tētahi ripa Tohu me ngā pakari taumata-pae mō tērā pae tukutuku. Titiro atu ki Site Security.

Whakaiti i te whakauru i ngā wāhi e tika ai. Ko te whakaparipari tohu he pare whakamana i mua i tētahi pae tuatahi, i tētahi pae waihanga rānei. Ko te whakaiti tohu-ā-whenua kaore i te tautoko mai i ngā motu kaore e whakarite ai. Kaore he whakakapinga mō te whakatika, engari e whakaiti ana i tō whakaputa. Titiro atu ki Password Protection me Geo-Blocking.

Whakatipuranga ngā whakatupuranga ki tō waehere. Ko ngā kupuhipa pūnaha raraunga me ngā tohu API e tika ana kei roto i ngā whakatupuranga, kei roto i ngā āhuatanga kaupapa rānei, kāore i te tutuki i tētahi apu tāpiri. Titiro atu ki Site Secrets me Environment Variables.

Kia tupato i te whakauru kōnae. Ko te SFTP me te SSH e whai ana i te tohu-ā-tohu ā, e hāngai ana ki tō pae tukutuku. Kaua me hoatu ngā āhuatanga ki te kaihanga kupu kaore e taea te whakakaore. Titiro atu ki SFTP Access me Adding SSH Keys.

Taumata 5: Īmēra

Ko te tohu īmēra he mea nui noa atu pēnei ki te whakapakanga he īmēra e whakatau nei i a koe he tūturu tonu.

Ko te SPF, te DKIM me te DMARC he rekoata e toru e whakamana ai te whakawhiti i ō īmēra ā, e whakatakoto ai i ngā whakawhiu. Ki te kore ēnei, e taea te tuku e te atu tangata i tō rohe ā, e pāu ana ō īmēra ki te pūkete kararehe. Titiro atu ki SPF, DKIM and DMARC.
He pouaka īmēra i mate te pūtake nui rawa o tētahi rohe ka raru tūturu ki ngā wāhi katoa. Titiro atu ki Spam Sent From Your Domain me Blacklist Delisting.
Ko te whakatupuranga e parakuihi ana i a koe, i a mātou rānei me whakapanui, kaua tāua e whakakaore. Titiro atu ki Phishing and Impersonation.

Taumata 6: Te Āhea Te Tukituki Anō

E taea e te atu taumata katoa te hapa. Ko tēnei te mea ka whakatika i tērā.

Ngā waihanga ātetahi rā ātetahi rā ka mahi mō koe ā, ka tiakina mō te rau tau e 30, ki te pēhitanga kēkē atu i te miihine i hanga ai. He whānui ake te tiakitanga e āwhingia e te huamata. Ko te ora-i-te-wā ka whakaiti i te nui o te mahi hē ka taea te utu.

Te āhuatanga kaore i whakawhitia e te tangata: Whakatae i te hoki anō i mua i te hiahia. He waihanga kaore e hoki anō i te tawhito he whakatūpuranga noa iho. Titiro atu ki Taking a Backup, Restoring From a Backup me Point-in-Time Recovery.

Mēnā Kua Puta he Mea

If Your Site Is Hacked mō te raupapa tuatahi.
Malware Cleanup mō te whakamate i te pae tukutuku me te tiakitanga kia rite.
Account Suspended mēnā kua tapahia te whakauru, he āhuatanga parekaretanga ātetahi wā hoki tēnei rather than he kaupapa utu.
Reporting Abuse mēnā ko te kaupapa he whanonga atu tangata, ehara i a koe.
Opening a Support Ticket, me te rohe, me te whakatakotoranga ā-wā, me ngā mea kua mahia e koe.

Pānui Hoa

Server Firewall mō ngā rauemi kapua me ngā rauemi noa.
Protect mō te huihuinga tohu whakahaere.
Developer API Access mō te whakamahi i ngā tohu API kia ōrite ki ngā kupuhipa.
Websites, Domains, Email.
Hosting Glossary.