I came across this very detailed step-by-step tutorial on how to secure a Plesk based VPS. It's up-to-date and was just written so the info is accurate.
Here's the link to the full tutorial: ...
Every time i use Dovecot secure IMAP server with Sieve support.I can not receive emails note. Upgraded from 11.5 to 12
Jun 18 08:03:36 CO6302 postfix/qmgr[1523]: 284FAA0E86: from=<my@gmail.com>, size=1943, nrcpt=1 (queue active)
Jun 18 08:03:36 CO6302 postfix-local[2036]: postfix-local: from=my@gmail.com, to=the@domain.com, dirname=/var/qmail/mailnames
Jun 18 08:03:36 CO6302 postfix/pipe[2035]: 284FAA0E86: to=<the@domain.com>, relay=plesk_virtual, delay=336, delays=335/0.01/0/0.19, dsn=4.3.0, status=deferred (temporary failure. Command output: lda: Error: user the@domain.com: Error reading configuration: Invalid settings: postmaster_address setting not given lda: Fatal: Internal error occurred. Refer to server log for more information. 4.2.1 Message can not be delivered at this time )
[code]...
I have used the patch : [URL] .... to disable ssl v3.
After I applied the patch getting error below when i try to send email via horde webmail:
There was an error sending your message: Could not open secure TLS connection to the server.
Roundcube can send mails well but horde not. Otherwise since applied the parch i can't get mails from gmail and maybe other providers i don't know yet.
I have a task of converting a current Win Server based apache server from multiple IP based virtual hosts to a full name based virtual hosting.I'm famiilar with the steps but I was wondering if there are any gotchas in Windows that I should be aware of. It seems that now matter what I change in the new config it doesn't work or work as expected.
View 1 Replies View RelatedSaw this very detailed tutorial just posted on how to secure your Plesk based VPS. Lots of good step-by-step detail ...
View 2 Replies View RelatedI have a small problem. I have a install directory on my website, who are only for me. I have a password protected directory, and thats no problem to create in Plesk on Linux.
But the main diffrent from Windows based Plesk, are that I can not create a directory there I can browse the files in my webreader.
In windows plesk they have a option called Web directory, but I have never seen thats option in Linux plesk.
Are there any easy way to password protect and allow directory browsing in Plesk for Linux? Or do anybody have a easy way to do that?
One option, is to access the directory thru FTP interface in Internet explorer (ftp://mysite/directory). But I want to access the site thru HTTP if possible.
I am planning to move this moodle installation
[url]
to this one
[url]
However as you may have noticed the second one runs very slow.
On the first one I am using Microsoft's Wincache, however on the second
one I am not using any cache solution as it seems that Wincache does not work.
I tried to follow the following instructions
[url]
but all I got was this FastCGI Error message "Error Number: -1073741819 (0xc0000005)"
So I was wondering if someone can recommend me any alternative solution
If there was reliable plesk based FFmpeg hosting out there would you try it?
View 14 Replies View RelatedI am running on Fedora 5 and RHLE 4.
I am also using the latest version of stand alone plesk with a single server installation. I am not running database or email on this server, those are all done from an external server base.
Shell scripts will not be given out.
besides doing some of the basic tmp and restricing compilers, turning off unneeded services, etc.
is there anything in specific you guys have found that you need to do in order to secure your systems?
For the first Time now i was trying to grant a User SSH Access via Plesk Panel (chrooted/non chrooted), but it doesnt work out really .. Abonnement > Edit Permissions > Allow Access chrooted (or non chrooted doesnt matter) doesnt change anything when im trying to Login with the created System User by Plesk. Login doesnt work!
Regular SSH Login as root works as always without any problems, but even via "su user" it doesnt works.
Till now I didn't had any Problems with my VPS Setup based on Centos 6.6 and Plesk 12.0.18 #50.
I have configured the DNS zones for DNSBL service as follows;
"zen.spamhaus.org;b.barracudacentral.org;bl.spamcop.net"
but I continue to to get spam from ip adressess that are confirmed as blacklisted at the above zones by testing them at [URL] ...
Is there something that I have missed in the config.
We have a PPA environment with 7 service nodes (one management node, two web-, two database- and two e-mail servers). We also have 2 variants of hosting, a consumer and business variant.
We want separate the consumers from the business variants on the service nodes.
I want to use webserver1, databaseserver1 and emailserver1 for consumer hosting and webserver2, databaseserver2 and emailserver2 for business hosting
I want to make two service templates, one consumer and one business template.
Is it possible to configure ppa : When we subscript a consumer template, everything must provision only on the consumer service nodes automatically (web01, db01 and email01) and not on the business services nodes.
I want to secure the webmail access (webmail.mydomain.com) with an SSL certificate. In this case, a self signed certificate should be enough because the users using the webmail will trust it.
Latest Plesk 12 and Windows Server 2012 R2, MailEnable WebMail as shipped with Plesk. Horde Webmail.
How would I set this up? I found no setting to enable SSL for the webmail subdomain. And I can not add it as subdomain and assign the self-signed certificate on it (Plesk panel does not allow webmail.mydomain.com as subdomain as it is already in use).
I found these links but they did not really answer my question as the information is mostly outdated (Windows 200):
[URL]
When this option is enabled on the Mail Server Settings page, the page loads with the bottom of the page in focus and not the top.
View 1 Replies View RelatedMy company and I are currently discovering Plesk on a CentOS 6.6 based system. We are migrating from an old system on which FTP usernames could hold uppercase letters, which apparently is not the case in Plesk 11 (or is it because of CentOS?).
Anyway, as we can't change these FTP account names, I was thinking about creating a rule with mod_rewrite in the proftpd.conf file.
So the question is: how can I reinstall/reconfigure proftpd with this module activated? I don't even know where to find the corresponding package (which repo, correct version, etc...)
On windows 2008 server with Plesk 11.5, the Secure your Sites option is not displayed. In addition unable to share SSL certificates across many sites with shared IP address.
View 4 Replies View RelatedI'm using plesk with CentOS 6.6 and the postfix/courier mail services...I tried to connect an existing mail account with a mail program like thunderbird. But I'm not able to connect to it, except when I'm using "no connection security"...So I tried, if manually contacting the POP3s Port is working:
Code:
openssl s_client -ssl3 -host mail.domain.de -port 995
with the following result:
Code:
CONNECTED(00000003)
write:errno=104
---
no peer certificate available
---
No client certificate CA names sent
[code]....
the same results come for trying to connect to port 465 (ssmtp) and 993 (imaps)port 443 (https) seems to work fine..i already checked if the corresponding certificates exist (e.g. /usr/share/imapd.pem) and filled with the standard certificate informtaion given by plesk checking openssl on the server gives the following result:
Code:
# openssl version
OpenSSL 1.0.1e-fips 11 Feb 2013
is there anything I have missed to configure?
Plesk Panel for Windows 11.5
Windows 2012
MailEnable 7.5
- Is it possible to secure webmail with SSL through the Plesk Control Panel?
- Is it possible to secure webmail per domain with SSL through the Plesk Control Panel?
I am mainly using asp.net2.0 (C#, VB) for programming), so I need the server pc meets the requirement for that.
Would you please let me know where to find those information such as minim requirement for the hardware, also related software?
any1 know a free and good script (prefer php) for monitoring server such as http, ftp, smtp?
View 5 Replies View RelatedI have setup a CentOS 4.5 on a server with no fancy options enabled.
The only thing I have is the ssh service running on port 22.
The server comes up fine but is inaccessible until I login into the console and pings an external IP or domain.
Once I have done this, I am able to remotely login into the server via ssh.
And then few minutes after, the server becomes unavailable again until I do the same routine...ping an external IP or domain.
When I try to change a domain name preference from www to non-www i am getting the error
"Error: No secure shell available"
I am using plesk 12 ....
One failure cited by a recent PCI compliance report was that of the Plesk non-https login at port 8880. I believe we can resolve this by adding a firewall rule to block access to this port but wanted to check first if this will have any negative consequences elsewhere. Or is there a better way to achieve PCI compliance on this point?
View 2 Replies View RelatedI am looking for Xen VPS servers hosted High end equipment
Ie RAID 10 / SAN with good support willing to pay upto 70 USD per month.
I don't need them to be managed, just very reliable with excellent and reactive support. I have looked on the forums and cannot find any that suit my needs.
Few things I found that :
- they do not support mod_rewrite so that url cannot be rewritten or something like it
- they do not support unlimited subdomains, I do not mean actually unlimited, but 100 or 200 (eg. you allot usera.yoursite.com to some 200 or 500 members of your site) should not be a taboo, but Zeus administrator seems to think that can be a resource issue
- addition of space, currently apache hosts seem to be very liberal, and zeusbased ones not so, does zeus server typically still run on hard drives with lesser space
Anyone has any recommendation for Zeus, and if so, any recent experience with such host, who has been in business for last 8-10 years and also runs a support forum on their site where users freely communicate?
The reason for this post is some slight unhappiness with my current US-based server provider. In the last sixth months, they've upped their prices over 30%, turned my server off for 6 and 24 hours by accident on two separate respective occasions (then tried to cover it up), before finally giving me some less than brilliant customer service.
That, combined with the fact that the pound is rapidly weakening against the US dollar has led to me paying for an overly expensive server, and also leaves to me wanting to move to a different and UK-based provider.
Now, I don't need (nor can afford) a massively powerful server - the one I'm currently on is fairly basic (single core Athlon, 512mb RAM, 10mbit and a fair whack of bandwidth) - but I do need the control it provides. A VPS providing a similar amount of processing power could be considered, but obviously on the guarantee that the provider isn't overselling etc. I'd like the server to come with DirectAdmin, to simplify migration a bit.
It's also important that the UK-based provider actually has their servers in the UK, rather than just being registered in the UK - the former would still leave me rather vulnerable to exchange rate fluctuation.
Does anyone have any suggestions: either to swing me one way in the dedi/vps decision, or for some decent providers?
i have question about securety of our DNS Server.
View 8 Replies View RelatedMy server hacked!
my server hacked for tow time in less than one month (both times they were similar to each other), and my previous securing company work on my server in previous hack but the server hack again!
anybody can work on my server? this is very URGENT because my server and all of our sites are down!
so while we all obsess over hardening our servers against sophisticated hacking attempts, how many of us consider the security of our own host's control panel?
Just today i'd forgotten my login for my host's helpdesk. I couldn't find their password recovery form, so i opened their public support chat and asked support for a link to their password recovery form. Apparently they didn't have a password recovery form. Here is the chat transcript:
Support: Hello
Tom: Hi, where is your password recovery form for the helpdesk?
Support: How may i help you?
Tom: Did you see my message?
Support: Yes
Support: Let me know your email address
Tom: [REMOVED]
Support: Okay Let me check
Support: Your new password is [REMOVED]
So, the only think really stopping someone from logging into my helpdesk and posting a server cancellation ticket is a little bit of research to find my email address and a traceroute to find my host.