New installation security concerns

[Guermo]

I have recently installed a trial of Litespeed web server. I understand that server security is not a simple process; however, all I want to accomplish is to secure Litespeed "enough" so that it does not create a risk to my current Apache server until I have a chance to go through the documentation and secure Litespeed fully. Currently, Litespeed is on offset ports and there are no services set to use it, and I do not intend for it to serve any content besides the web admin console until I am fully satisfied with the configuration. Having said that, is it enough to simply change the login name to something other than 'admin', have a really strong password, and only access the admin console from a separate SSL listener?

[anewday]

Yes and you can restrict web conosle to certain IPs too.

[Guermo]

Can the restricted ips be controlled from the command line? I would be accessing from a dynamic ip (home) which could change periodically, and I wouldn't be able to access the web console then to update it.

[mistwang]

You can update the configuration file lsws/admin/conf/admin_config.xml