Comprehensive check and protection of the office server + email setup

Software & Server Configuration, System & Network Administration — incorrectly specified categories?

90 USD

Project translated automatically. Log in or register, to view the original

A specialist is needed for a comprehensive check and adjustment of the server infrastructure in the office. Currently, several virtual machines on Ubuntu are running through Proxmox, with the main database and virtual machines for Laravel websites. There were previous issues with the server because an old version of Laravel was running a miner that overloaded the entire server. Therefore, we need someone who specializes in this segment and can ensure a long-term and secure operation from A to Z.
Regarding the router, mainly we need to configure the firewall, as important documents are stored online on the NAS server in the office, and additionally, we want to switch from rented email to our own.
We tested Mail on Mailcow and quite like it, but I am open to suggestions.

What we have now:
1. Dell R640 NVME Server
2. UniFi Router UDM SE
3. Connection via UniFi Teleport

What needs to be done:
Complete server and network check
Security analysis of the server
Check open ports, access, users
Check network settings
Check the operation of UniFi / Teleport
Identify potential or existing backdoors
Check and configure backups
Check and adjust possible bugs in Proxmox
Configure full autonomy of the server

2. Fixing and configuration
Resolving identified issues
Server protection
Recommendations and implementation of secure settings

3. Email configuration and protection
Complete Mail setup
Protect email from hacking and spam
Configure SPF / DKIM / DMARC
Check account security
Recommendations for safe usage

4. Documentation and instructions

After the work is completed, a checklist is needed:

How to properly manage email
What to pay attention to
Basic security rules
Recommendations for the server and maintenance

Important:
A specialist with experience in UniFi is needed
Possible ongoing collaboration

In your proposal, please indicate immediately:
the price
the completion time
a brief overview of your experience

Payment is negotiable.

Proposals 14 Discussions 1

Denis Kruchin

1 0

Projects -
Rating -
Rating 528

Budget: 4000 UAH Deadline: 5 days

Good day! I have experience in server administration. I would be happy to collaborate with you :)

Vitalii Shutenko

591 6

Projects 555
Rating -
Rating 10 624

Budget: 10000 UAH Deadline: 5 days

Ready to take on the job, write to me, I will do everything with quality. I have over 14 years of work experience!

Matvii Marchenko

20 0

Projects 20
Rating -
Rating 2 116

Budget: 4000 UAH Deadline: 5 days

Hello. I understand the task: a complete audit and protection of the office's server infrastructure is needed, specifically Proxmox with virtual machines on Ubuntu, the main database and websites on Laravel, and NAS with documents, following the incident where an old Laravel was exploited to deploy a miner. Additionally, I need to configure the firewall, backups, and migrate email to our own Mailcow setup with SPF, DKIM, DMARC, and provide a checklist.

For security, I would approach it systematically: inventory what is running on each virtual machine, check open ports, users and access, search for traces of the miner and possible backdoors, such as suspicious cron jobs, systemd units, autostarts, connections, updates, and hardening of Ubuntu and Proxmox, segregating the network through the firewall to isolate the websites and internal database. I will also separately configure and verify backups, as any protection is incomplete without a working backup.

For email, I would set up Mailcow with correct DNS and SPF, DKIM, DMARC policies to prevent emails from going to spam, plus account protection and basic rules. In the end, I will provide documentation and a checklist for managing email and the server, as requested.

I have experience in auditing and hardening Ubuntu servers, configuring email and DNS policies, working with Docker, and security in production. To better assess the scope: how many virtual machines are currently on Proxmox and is there already a backup we can work from, or are we starting from scratch? I am ready to begin with an audit of the current state of the server and network, followed by addressing the findings and migrating the email.

Petro Marushevsky

13 1

Projects 14
Rating -
Rating 1 083

Budget: 10000 UAH Deadline: 14 days

Good day! I have experience with Proxmos and the technology stack described by you, feel free to reach out - I will help you.

Roman Pavlovsky

Winning proposal

23 1

Budget: 10000 UAH Deadline: 20 days

Hello Lyubomyr!
Regarding the websites: If the infection occurs due to an old version of Laravel, it will be very difficult to close the gap to prevent further infections.
The optimal option I would recommend is to update Laravel to the latest version. Because infections can constantly arise from other vulnerabilities, and it turns out that the programmer will be patching holes after the fact.

It is possible to configure a firewall. You can cover the ports that are not in use. Although your server is behind a router, unnecessary ports are not exposed on the internet - the router simply does not allow them through. That's already a plus.

Regarding the infection of the virtual machines themselves - you need to check if there is a backdoor installed on the servers. If the servers are clean, then it will be easier. If the virtual servers are also infected, then the only correct option is to completely reinstall the virtual server. Because fighting a backdoor on an infected server makes no sense. It is unknown what has been changed on the server, which programs have been modified to work with the backdoor, and searching for a needle in a haystack will simply be a waste of time and finances.

What is meant by: checking network settings?

To use your server for mail:
- you need to find out if your dedicated external IP is not on any blacklists
- you need to ask your provider if they can change the PTR record on their server for your mail domain. The domain for mail should already be registered/purchased. For example: mail.example.com
- find out from the provider if they can open mail ports on the edge firewall for you: 25, 110, 143, 465, 587, 993, 995.
- If all points are fulfilled, then you can proceed to the installation and configuration of mail on the server.

In principle, you can also set up Mailcow.
I usually set up Postfix+Dovecot+Rspamd+ClamAV+MariaDB+Roundcube.

Support and monitoring of the email server will be needed constantly. If spam starts being sent from the server, there is a high probability that it will immediately end up on blacklists, and mail will stop reaching some users. Excluding your IP from blacklists is usually possible, but it is not always simple and not always a free procedure.

If you have any questions or if the offer interests you, feel free to reach out.