Posts Tagged ‘ISPConfig 2’
How to access a namebased website without a DNS record
If you want to access a namebased website that you created e.g. in ISPConfig before the DNS records are setup, edit the hosts file on your workstation computer and add a line like this:
192.168.0.100 www.mydomain.com
Replace the IP address with the IP of your server and www.mydomain.com with the domain name of the website.
The hosts file on linux and MAC systems is /etc/hosts, on Windows systems the hosts file is C:\Windows\system32\drivers\etc\hosts
The above trick also works if you want to run a website in your internal network (intranet) without having a DNS server availalble for local dns resolving.
ISPConfig 2: External mailserver setting does not work
Problem: I have set the website to external mailserver in ISPConfig but emails get still delivered to the local server.
Solution: Set all co-domains of this website to external mailserver too. You find the external mailserver setting on the options tab of every co-domain.
Postfix: “queue file write error”
If you get an error like:
Aug 21 12:41:03 webb4 postfix/sendmail[11234]: fatal: web1_user(12967): queue file write error
in your mail log, then the vale for message_size_limit in postfix main.cf is too low. Edit postfix main.cf:
vi /etc/postfix/main.cf
and set the message size limit to a higher value. E.g.
mesage_size_limit = 900000000
and restart postfix:
/etc/init.d/postfix restart
If there is no message_size_limit set in main.cf, just add the line.
Set stricter PHP settings to secure joomla and wordpress installations
If you run a joomla or wordpress installation with mod_php, the following settings in the vhost configuration file or the “Apache directives” field in ISPConfig can be used to set stricter securitypolicys. This helps limit the impact of a possible hack to this websiteand protect the other sites on the server.
php_admin_value disable_functions "show_source system shell_exec passthru exec phpinfo popen proc_open" php_admin_flag allow_url_fopen Off php_admin_value session.save_path "/var/www/webXXX/phptmp/" php_admin_value open_basedir "/var/www/webXXX/:/tmp" <p class="system">
Explanation
disable_functions disables functions that have a potential security impact e.g. because they allow the execution of external applications.
allow_url_fopen disables the ablity to open files via an URL.
session.save_path sets the path were php stores its session files. For ISPConfig 2, the path is e.g. “/var/www/webXXX/phptmp/” and for ISPConfig 3 the path is like “/var/www/clients/client1/web1/tmp/” If you dont use ISPConfig, set this path to a directory which is writable for the webserver user. the directory should be unique for every website.
open_basedir sets the path were php scripts are allowed to open files. For ISPConfig 2, the path is like “/var/www/webXXX/” and for ISPConfig 3 the path is like “/var/www/clients/client1/web1/” If you dont use ISPConfig, set this path to a the root directory of this vhost. With :/tmp we allow php scripts to use also the /tmp directory of the server.
Where is the ISPConfig roadmap?
ISPConfig 3 roadmap:
http://bugtracker.ispconfig.org/index.php?do=roadmap&project=3
ISPConfig 2 roadmap:
http://bugtracker.ispconfig.org/index.php?do=roadmap&project=2
Where can I request ISPConfig features?
Please post feature requests to the ISPConfig bugtracking system:
http://bugtracker.ispconfig.org
Where can I report bugs in ISPConfig?
Please report bugs in ISPConfig to the bugtracking system:
http://bugtracker.ispconfig.org
How to create a new SSL certificate for the ISPConfig webserver on port 81?
Execute the following commands as root user on the shell:
openssl genrsa -des3 -passout pass:yourpassword -out /root/ispconfig/httpd/conf/ssl.key/server.key2 1024
openssl req -new -passin pass:yourpassword -passout pass:yourpassword -key /root/ispconfig/httpd/conf/ssl.key/server.key2 -out /root/ispconfig/httpd/conf/ssl.csr/server.csr -days 365
openssl req -x509 -passin pass:yourpassword -passout pass:yourpassword -key /root/ispconfig/httpd/conf/ssl.key/server.key2 -in /root/ispconfig/httpd/conf/ssl.csr/server.csr -out /root/ispconfig/httpd/conf/ssl.crt/server.crt -days 365
openssl rsa -passin pass:yourpassword -in /root/ispconfig/httpd/conf/ssl.key/server.key2 -out /root/ispconfig/httpd/conf/ssl.key/server.key
chmod 400 /root/ispconfig/httpd/conf/ssl.key/server.key
ISPConfig 2: I have deleted a site/domain and now want to create a new site/domain with the same name but ISPConfig does not allow it.
Most probably the deleted site/domain is still in the recycle bin. You have to delete them first in the recycle bin before you are able to create a new object with that name.
How do I authenticate myself to see the website statistics in ISPConfig?
ISPConfig 2:
All users belonging to that site can log in with their username and password.
If there are no users you can log in like this:
Username: admin
Password: stats
ISPConfig 3:
The password for the statistic login can be set on the “stats” tab in the website settings. The username is always “admin”.