I'm transitioning from a shared account to a VPS and am trying to run it as securely as practical.
I've been looking at ways of keeping administrative connections to the server secure. So far I've considered VPN technologies like L2TP/IPSec and RAS but they don't seem suitable for what I need.
I just want a simple encypted, tamper-proof, computer-to-server connection in a Windows Server environment.
I'm not sure why but this happen when I try to use SSL on WHM.. it just say "Secure Connection Failed" [url]
Quote:
The certificate is not trusted because it is self signed.
The certificate is only valid for luna.ndx2.com
But when I try [url]it worked fine. My SSL cert is sign by Comodo CA Limited.
From my observation, it looks like my host shared SSL cert is interrupting with WHM.
An error occurred during a connection to site.com.
SSL received a record that exceeded the maximum permissible length.
(Error code: ssl_error_rx_record_too_long)
The page you are trying to view can not be shown because the authenticity of the received data could not be verified.
I'm not sure on how to fix this. Running CPanel.
I can access WHM/CPanel fine on SSL from the main IP. Just not any of the sites or CPanel from the other IPs.
I'm using plesk with CentOS 6.6 and the postfix/courier mail services...I tried to connect an existing mail account with a mail program like thunderbird. But I'm not able to connect to it, except when I'm using "no connection security"...So I tried, if manually contacting the POP3s Port is working:
Code:
openssl s_client -ssl3 -host mail.domain.de -port 995
with the following result:
Code:
CONNECTED(00000003)
write:errno=104
---
no peer certificate available
---
No client certificate CA names sent
[code]....
the same results come for trying to connect to port 465 (ssmtp) and 993 (imaps)port 443 (https) seems to work fine..i already checked if the corresponding certificates exist (e.g. /usr/share/imapd.pem) and filled with the standard certificate informtaion given by plesk checking openssl on the server gives the following result:
Code:
# openssl version
OpenSSL 1.0.1e-fips 11 Feb 2013
is there anything I have missed to configure?
I have used the patch : [URL] .... to disable ssl v3.
After I applied the patch getting error below when i try to send email via horde webmail:
There was an error sending your message: Could not open secure TLS connection to the server.
Roundcube can send mails well but horde not. Otherwise since applied the parch i can't get mails from gmail and maybe other providers i don't know yet.
I've written a script to send property data to rightmove.co.uk as part of their new automated data feed. However they require a secure connection to their systems when posting the data. They have provided me with a .pem file which is a security certificate. I need to install this on my plesk server but where to start as most certificates require a private key and the actual certificate. The private key I have been provided is only an 8 charter string, like a password.
View 1 Replies View RelatedI found a site[url].it, that use IIS 7 with expiring links. Is there any similar module available for IIS web server like mod_secdownload in lighttpd?
View 0 Replies View Relatedwhat software You Used for securing your windows server.
How Can I Securing My server from All DDOS Attack and All remote hacking?
What kind of software you Used to protect your windows server?
where we can read over tutorials on how to secure/optimise windows server?
View 5 Replies View RelatedI want to secure the webmail access (webmail.mydomain.com) with an SSL certificate. In this case, a self signed certificate should be enough because the users using the webmail will trust it.
Latest Plesk 12 and Windows Server 2012 R2, MailEnable WebMail as shipped with Plesk. Horde Webmail.
How would I set this up? I found no setting to enable SSL for the webmail subdomain. And I can not add it as subdomain and assign the self-signed certificate on it (Plesk panel does not allow webmail.mydomain.com as subdomain as it is already in use).
I found these links but they did not really answer my question as the information is mostly outdated (Windows 200):
[URL]
I've just ordered my new Windows 2003 server with 49Pence.com and will be taking "delivery" of it once they have commissioned it.
Anyway, I would appreciate some advice on how to secure it. I have been used to the luxury of a hardware firewall, but budgetary constraints mean I will have to rely upon a software firewall (something that scares me a little). It will be running our company websites, MSSQL and MDaemon mailserver.
I am not sure exactly how the server will be delivered, but I assume it will arrive fully patched with Remote Desktop access, and Windows Firewall installed.
First question: Is Windows Firewall sufficent? I am more used to configuring firewalls with Ports/Protocols/IP's rather than "applications". I also understand that Windows Firewall cannot restrict access to specific IP's.
I read that IPSec / TCP Filtering should also be used. I've looked at various links and have an idea how to do this, but I do not want to make a mistake and get "locked out". I saw a post saying that during testing they set up a scheduled job to reset the IPSec policies every x minutes so that they can log back in if they do make a mistake. How would this be done (in terms of IPSec) .. or is this a matter of stopping a service?
If I go with another software firewall, is there an easy way to install remotely without getting locked out of the Remote Desktop? KVM over IP is a charged by the hour.
It is "safe" to leave Port 3389 open and rely upon passwords (and potentially IPSEC IP policies), or should I administer by VPN?
If so, it seems that in order to create a VPN connection on the server, it requires that the Windows Firewall is shut down (at least on my test server here). Obviously this is something I don't want to do!
On windows 2008 server with Plesk 11.5, the Secure your Sites option is not displayed. In addition unable to share SSL certificates across many sites with shared IP address.
View 4 Replies View RelatedPlesk Panel for Windows 11.5
Windows 2012
MailEnable 7.5
- Is it possible to secure webmail with SSL through the Plesk Control Panel?
- Is it possible to secure webmail per domain with SSL through the Plesk Control Panel?
I have win2003 server and running plesk 8.4, there is a website on it and it gives me error with mysql max_connection even I set the limit 1 million or 10000 no matters.
View 3 Replies View RelatedI am currently using a VPSland windows 2003 vps, and noticed that on IRC, (via mIRC), i can't really connect to irc ports such as 6667, etc, but i can connect through other uncommon ports like 8080, or BNC ports. Does anybody know how to enable those irc ports on the windows vps?
View 2 Replies View RelatedI know we can get remote Desktop connection only on those servers based on Windows 2003 OS or Windows 2008 OS.
But what about Linux? Can I have such remote desktop connection on CentOS 5?
Another question is, what is nxclient?
[url]
Im bit confused. Can I get remote desktop connection of Linux OS ( CentOS ) on my Windows XP by using this software?
[url]
This is the most instable Plesk version. I use the new Plesk 11.5, but really this is the most suck Plesk version
Web Deploy used to work and now it is not working. I use Web Matrix and when I try to connect, this is the error message:
UNABLE TO ESTABLISH CONNECTION
I install wordPress and cant login to admin with this Address:
mydomain.com/wordpress_9/wp-login.php?redirect_to=http%3A%2F%2Fmydomain.com%2Fwordpress_9%2Fwp-admin%2F&reauth=1
And can't load
Show this error: The connection was reset
if i try this address can login > mydomain.com/wordpress_9/wp-login.php
I installed Plesk 12 on the Windows server 2012...
I just configured the plesk server to only allow ftps connections.
When I try to access with a ftp account on the server itself it works well, however when I try to access it from a client PC it get these errors :
(...)
Response: 200 Type set to I.
Command: PASV
Response: 227 Entering Passive Mode (XXX,XXX,XX,XX,XXX,XX).
Command: LIST
Response: 150 Opening BINARY mode data connection.
Error: The data connection could not be established: ECONNREFUSED - Connection refused by server
On the client PC I configured Filezilla in Passive mode with "Require explicit FTP over TLS".
Normally for the firewall only the port 21 is needed or am I wrong (with explicit FTP and passif configured)?
I am using connection string that written below but it does not work in your host.
<add name="LocalSqlServer" connectionString="Data Source=mssql.mydomain.at; Initial Catalog= mydb; User ID= myuserid; Password= mypassword; MultipleActiveResultSets=True;"/>
Any connection string instance for mssql webadmin ?
I'm trying to create a network connection from Windows (8.1) to my Plesk filesharing folder, which should be straight forward. For some strange reason my Windows desktop PC doesn't establish the connection but shows me an error message, saying that the provided folder is invalid (see attached images).
View 1 Replies View RelatedWINDOWS SERVER Plesk Panel version 12.0.18
Error: Test the database server connection failed:
mysqlnd cannot connect to MySQL 4.1+ using the old insecure authentication. Please use an administration tool to reset your password with the command SET PASSWORD = PASSWORD('your_existing_password'). This will store a new, and more secure, hash value in mysql.user. If this user is used in other scripts executed by PHP 5.2 or earlier you might need to remove the old-passwords flag from your my.cnf file
I have ftp server (pure-ftp). with firewall.
i allowed 20 and 21 port in "CSF" firewall
now when i or our client connect to the server connection done.
and the they fire dir or ls command they will receive error
"425 Could not open data connection to port 2535: Connection timed out"
what is the problem.i have already allowed passive port 2500:3500 then why i received this types of error
if it's possible to use ODBC to connect to a Windows box from a Linux cPanel server. We have attempted connections from PHP (both as CGI as well as Apache module) and we get:
Fatal error: Call to undefined function odbc_pconnect() in...
and
Fatal error: Call to undefined function odbc_connect() in...
Is ODBC possible on cPanel servers?
how can i secure my tmp on vps?
mount -o loop,noexec,nosuid,rw /dev/tmpMnt /tmp
it isnt work on vps and i have this error:
[root@ dev]# mount -o loop,noexec,nosuid,rw /dev/tmpMnt /tmp
mount: could not find any device /dev/loop#
i want to secure my /tmp and do this:
so i try this link
[url]
so:
cd /dev
dd if=/dev/zero of=tmpMnt bs=1024 count=150000
/sbin/mke2fs /dev/tmpMnt
cd /
cp -R /tmp /tmp_backup
mount -o loop,noexec,nosuid,rw /dev/tmpMnt /tmp
but i have this error:
root@server [/]# mount -o loop,noexec,nosuid,rw /dev/tmpMnt /tmp
mount: no permission to look at /dev/loop#
when I get a dedi server for shared hosting. I secure it as much as i can and then just incase I miss stuff etc I hire 2 other companys to check over everything. Since I bought a vps from fsckvps are there any guides to secure and optimize a vps other then the one located in the vps section? thanks. I Dont feel like spending 50+ dollars on securing a vps that costs less then 15 a month.
View 14 Replies View Relatedvbulletin.com/forum/showthread.php?t=281011
How secure is my VPS? Anyone who has some free time and is reading this thread could please try to do some penetration-testing or something related (I really do not know much about network security) in order to know if my server configuration could be the problem?
Do you find any way to download the full database without login on the system (cPanel or phpMyAdmin)?
i'v been Installed all these In my VPS server
1)Disable Functions:
system,system_exec,shell,shell_exec,exec,passthru,escapeshellarg, escapeshellcmd,proc_close,proc_open,ini_alter,dl, popen,parse_ini_file,show_source
and Enable The Safe_Mode.
---------------------------------------
2)Hide_your_apache_Version
---------------------------------------
3)Install LogWatch in a Server
---------------------------------------
4)Mod-Security-Install
---------------------------------------
5)Root-Login (IP Sent).
---------------------------------------
6)Disable Login Root and Change SSH Port .
---------------------------------------
7)Installing eAccelerator .
---------------------------------------
8)Install Nobody Check
---------------------------------------
9)Updateing All of
/scripts/upcp
/scripts/updatenow
/scripts/sysup
/scripts/fixeverything
/scripts/exim4
/scripts/easyapache
/scripts/securetmp
----------------------------------------
but doesnt know yet what the better to secure my vps ..
and about Firewall two .. wich firewall better
CSF or APF+BFD ..
I have an application that requires a Secure FTP connection to a server to work. I am having trouble connecting to one server, a windows based server, while the CentOS Linux server is working fine.
Does anyone know where I can find test Secure FTP locations so I can determine if the issue is with misconfiguration or with an incompatibility of the program with windows Secure FTP sites?
I am able to connect to both sites using WinSCP and choosing Secure FTP.