Thread: Getting an OVH server, and want to use it secure!

Hello,

First of all, I know there is no complete security, but I want atleast a bit :P .
Me and my mate are going to get an 100Mbit unmetered OVH server (ubuntu server*) and want to use it for seedboxing/IRC and browsing trackers.
We now want to know if our ideas for accessing the server are good. Thanks in advance!



: We are thinking about using SSH putty for irssi, putty SSH SOCKS proxy for firefox and having our webui also over this firefox. We are thinking about using SFTP for downloading.
Now I got some little questions :

1) Everyone says a VPN is best, but our idea of using a SOCKS proxy (over the OVH server!) with putty for firefox, should be completely the same as a VPN?! do you agree or not?
2) IRC with SHH putty via irssi should be quite secure?
3) Using webui via what I mentioned in 1) should be also quite secure
4) Using SFTP should be the best for downloading, but I dont know about the speeds, I want to get 1.5MB/s atleast (my home connection gets 2MB/s max). Now I use CuteFTP pro but it seems I cant choose multi-part values ?! So its only 1 thread for SFTP, or cant you choose more threads? (do you think Ill get 1.5MB/s via 1 thread :X)
5) OVH says for the unmetered OVH this : Traffic /month Unlimited **
** Unlimited traffic on peering, low priority on the transit;
what does this mean?
Is there anything we should use differently?
Thank you guys so much in advance! :D

Everything u have stated above is more then good enough to run a secure server for torrenting. Just make sure u secure your actual server so it doesnt get hi-jacked or anything like that. U could also take it a step furhter and encrypt your data as well, but thats not needed imo. Also, your right and using a SOCKS proxy is just the same as using a VPN and everything else u stated is perfectly fine to do and would be the optimal solution anyway.

Im not sure if u can multi-thread download using SFTP, but i would think u couldnt. If u want to be secure just setup your FTP server with SSL/FTPS. That will give u multi-thread and keep u secuire at the same time. Your speeds should still be ok as well.

When OVH says "Unlimited traffic on peering, low priority on the transit" they mean that they have unlimited bandwidth inside the OVH network and low priority outside OVH network. So this actaully means u will get full/great speed transfereing data back-n-forth to another OVH server and low priority on say transferring data back-n-forth to your home computer. So your HTTP/FTP speeds may suffer with low priority outside OVH network.

Sounds like a pretty decent setup. I'd probably go with a BNC on the server, instead of using Irssi through SSH. But that's just a matter of taste! ;) I've never actually used CuteFTP, but can't imagine that it wouldn't support multi-threaded transfers.. poke around the settings and see what you find out.

From a security point of view, I think the WebUI is probably your weakest point. So if you're incredibly worried about security, maybe drop the WebUI and just run rtorrent inside a screen session or some shit. Personally, I wouldn't worry about it! :laugh:

And yeah, like MikeD said - be sure to secure the actual box as well. You could set up a firewall, block traffic on port 21/22/80 (+ ports for any other services you're running) and whitelist only your own and your buddies IP address. Only do this if you've got a static IP address at home though, haha! Otherwise you might lock yourself out (no, that's never ever happened to me.. ever). :001_tongue:

Good luck dude! :)

I use OVH, haven't had issues. Don't use the usual ports. Use strong passwords. I use IPTables to lockdown. SFTP, SHTTP, and SSH. I prefer using a ubuntu server. I haven't had any issue with SFTP. You actually can do a lot of the admin stuff from Webmin WebUI. I like it, makes a lot of things easy. SSH proxy and you have a headless server. I wouldn't mess with VNC. Some SFTP clients will do directory synchronization, just limit the speeds and let it go in the background.

Ubuntu/rutorrent/rtorrent from ovh is my setup aswell. No problems there.

I have a kimsufi (ovh) box, I don't know what you're worried about, you certainly don't need to ban IPs and encryption I can't see the point of really unless you have the CIA after you.

Originally Posted by Aeryn237

Sounds like a pretty decent setup. I'd probably go with a BNC on the server, instead of using Irssi through SSH. But that's just a matter of taste! ;)

I totally agree, I have no idea how I lived without an IRC bouncer before. Very cool.

Whats the difference of security between FTPES and SFTP btw? :/

Originally Posted by Pleadr3

Whats the difference of security between FTPES and SFTP btw? :/

SFTP is a protocol that runs over the SSH protocol. So its actually an SSH connection. SFTP isn't really FTP at all. To use SFTP login to your SSH port wtih a SFTP client. That user must have SSH access. OpenSSH support this. Filezilla client should support this also.

FTPES is FTP with security and encryption added on. Uses TLS and SSL.

Then there is also FTP tunneled through SSH.

I don't know which is better, or more secure. I typically max out my home connection with SFTP no problem.