I have recently set up a managed VPS and it came per-installed with CentOs and WHM.
I have configured SSH logins to use private keys and i can SSH into the server with root privileges.
I realize that i lack a great deal of knowledge on how to look after a server properly but at the moment i can not afford a professional. And as such my approach might be extremely foolish and if so i would be grateful for any advice.
Here is what has been troubling me: I can access WHM panel as well as cpanel over HTTP but so can anyone if they tried (hackers and bots) and try to brute force into the backend. Now i was thinking whether it is advisable to block the ports used by WHM on the server to disable the web login, through SSH. And when i need to use the WHM backend i can first log in to my VPS through SSH and unblock the ports.
q1: Can such an arrangement ever result in me being locked out of my server?
q2: Will this provide any real security?
q3: Is this an overkill?
AS i said i am total beginner when it comes to server security and i am probably approaching the issue the wrong way. Any advice or link to a related resource will be much appreciated.