Yesterday afternoon (and then again at 9pm) I watched an IP from Korea use a dictionary attack against our PABX (Asterisk) located in Australia. It used a standard list of usernames and passwords, and then every extension from 0000 to 9999. While our setup would protects us from any substantial loss (most extensions are setup to allow 1-3 simultaneous calls, premium calls are disabled, and our VoIP billing is pre-paid), Fail2Ban is in the process of being setup.

Lighttpd is good, but is best used in specialised instances, for specific (mainly static content) tasks. Its pointless using it for PHP as the cost of forking out a process to run the script will outweigh any saving from running a lighter-weight http server.

That's why when we have FastCGI