Security improvements

[avispa987]

Hello ispcp community, im Facundo, from argentina, i started using ispcp again and i really love the changes!, really intuitive, easy to install, zero complaints!
I just want to know if the security is good in default installation,
im using Debian 5 (lenny) latest version, with ispcp Omega 1.0.5 stable, I have a little 128mb vps, because its just for few personal webs, But some friends of mine asked for reseller accounts, i want to give them some accounts, but the thing is i dont know how secure the installation is.
If anybody can tellme no worry, or a suggestion to make better the security, i will be thankfull

Cordially,
Facundo Caselles

[kilburn]

Being hosting-oriented, ispcp is fairly secure by default. Each domain has it's own totally independent user, and not even the panel GUI can access other website's files.

Additionally, the only privilege that resellers have over "normal" users is to add new domains/aliases themselves, and this can be used to capture outgoing e-mails from others. Unfortunately this is unavoidable (in *all* control panels, not just ispcp), so you will have to trust your colleagues in this front.

Anyway, it is advisable to setup ssl for the panel itself if your resellers are going to access it from untrusted networks.

[avispa987]

Thank you very much im glad to be using ispcp now,


P.S: The webserver is secure too?
P.S2: How do i install SSL for ispcp? (with a bought ssl licence?) Or just https (how)


Thanks in advance

Cordially,
Facundo Caselles

[sakal]

Easy way is :

http://isp-control.net/documentation/dok..._made_easy

EnJoY

(04-01-2010 11:54 PM)avispa987 Wrote:  Thank you very much im glad to be using ispcp now,


P.S: The webserver is secure too?
P.S2: How do i install SSL for ispcp? (with a bought ssl licence?) Or just https (how)


Thanks in advance

Cordially,
Facundo Caselles