+- ispCP - Board - Support (http://www.isp-control.net/forum)
+-- Forum: ispCP Omega Development Area (/forum-1.html)
+--- Forum: General discussion (/forum-11.html)
+--- Thread: alias autoadd (/thread-3495.html)
Pages: 1 2
alias autoadd - artkiller - 06-11-2008 07:58 AM
Hello there,
I feel uncomfortable having to approve every alias addded by a user, is there any chance to get rid of this ? Any mod/hack available ? Please help, this bacame real trouble as i have to leave for vocations and wont be able to manage my users (more than 120 customers). i would like that aliases get automatically added without reseler's care. please help
p.s. i am running debian lenny and rc3 , tuned to use mod_php instead of fcgi.
RE: alias autoadd - platzwart - 06-11-2008 12:54 PM
hi,
this is needed for security reasons! and if you don't controll your system for a couple of days, a customer might use this security-hole in a very easy way...
RE: alias autoadd - kilburn - 06-11-2008 04:06 PM
Actions: A malicious user adds an alias for a domain he doesn't own (ie: gmail.com) and then adds a catchall mail account to it.
Result: Any mail your customers send to a "whatever@gmail.com" account is delivered to the mailicious user catchall account.
So no, there is no way to disable this security feature, sorry.
RE: alias autoadd - artkiller - 06-11-2008 07:01 PM
this is really bad that isp-control can't work as fully automated system
RE: alias autoadd - artkiller - 06-11-2008 07:16 PM
in 21 centery everything going to be automated, man drinks beer, computers work
. also i think isp-control lacks api for autouseradd functionality .
RE: alias autoadd - kilburn - 06-11-2008 07:16 PM
No system can work fully automated, that's why sysadmins exist. It seems that you want to earn money for doing nothing
RE: alias autoadd - artkiller - 06-11-2008 07:24 PM
it's better doing nothing than pressing approve alias, man. i do lot of sysadmin works but sometimes it's really annoying to check new alias orders . that's not a work for sysadmin anyway . russian internet grows very fast and if you lack automation you lose points due such delays . sure we could use some commercial product that has all required features, but here we have another problem - low budget
RE: alias autoadd - egor - 06-11-2008 08:59 PM
kilburn: first of all, thanks for the tip. I have a reseller account ispCP Omega, which means I can approve my aliases myself. Hence, this approval thing does not add too much security - many people have reseller accounts. And on many hosting providers it's more than easy to get a reseller account. Thus, many people can still abuse the system.
If a reseller can be trusted enough to be able to add and approve accounts without further approval from the owner of the server, I do not understand why some specified users can not be trusted.
RE: alias autoadd - Quemeros - 06-11-2008 11:22 PM
I think this is a good enchantment, if you could activate reseller by reseller, then you can autoadd in your/trusted resellers-accounts... BUT with another thing: Adding place to create a deny list for the autoadd...
In that way, security is included... it's just not the same, but it could works.
RE: alias autoadd - artkiller - 06-11-2008 11:27 PM
Quemeros Wrote:I think this is a good enchantment, if you could activate reseller by reseller, then you can autoadd in your/trusted resellers-accounts... BUT with another thing: Adding place to create a deny list for the autoadd...
In that way, security is included... it's just not the same, but it could works.
sounds cool