[HowTo] Make ispCP more Secure !

[BeNe]

I added this to the Wiki now --> http://www.isp-control.net/ispcp/wiki/howto_secure

[MrLight]

Nice Work!

I just read it.

Mr Light :-)

[Zothos]

haven't you postet the same thing on vhcs.net a few years ago? ^^

but its definitly goot to know

[BeNe]

No, i never had a account on vhcs.net

But this is not all, i will add something to SSH, mod_evasive and mod_security these days.

[BeNe]

Added fail2ban and SSL for Mailservice (courier)

[BeNe]

And now, "Make SSH safer"

[bertus51]

BeNe Wrote:Added fail2ban and SSL for Mailservice (courier)

I had some problems with SSL for Mailservice.

Code:

VO11919:/etc/courier# apt-get install courier-imap-ssl
Reading package lists... Done
Building dependency tree... Done
courier-imap-ssl is already the newest version.
0 upgraded, 0 newly installed, 0 to remove and 1 not upgraded.
1 not fully installed or removed.
Need to get 0B of archives.
After unpacking 0B of additional disk space will be used.
Setting up courier-imap-ssl (4.1.1.20060828-5) ...
Starting Courier IMAP-SSL server:0022
/etc/init.d/courier-imap-ssl: xmalloc: ../bash/variables.c:2569: cannot allocate 808 bytes (0 bytes allocated)
invoke-rc.d: initscript courier-imap-ssl, action "start" failed.
dpkg: error processing courier-imap-ssl (--configure):
subprocess post-installation script returned error exit status 2
Errors were encountered while processing:
courier-imap-ssl
E: Sub-process /usr/bin/dpkg returned an error code (1)

But the fix was quit simple. Had to increase the IMAP_ULIMITD in /etc/courier/imapd from the default 65536 to 131072

[BeNe]

mmmhh i installed it many times, but this error is new for me.
Thanks for your solution.

Hope some will use my Docu about the Security....

[BeNe]

* Added SSL for ProFTPD

[BioALIEN]

I've been keeping track of your changes. Very very helpful!

Keep it up BeNe