Apache mod_security settings for WordPress and ModX

If you use the apache mod_security module on your apache server, you might encounter wrong 403 errors for several URL's of the cms systems. Here are some exception rules to avoid that: For WordPress Blogs <locationmatch "/wp-admin/admin-ajax.php"> SecRuleRemoveById 300013 SecRuleRemoveById 300015 SecRuleRemoveById 300016 SecRuleRemoveById 300017 </locationmatch> <locationmatch "/wp-admin/page.php"> SecRuleRemoveById 300013 SecRuleRemoveById 300015 SecRuleRemoveById 300016 SecRuleRemoveById ... Read more

Change of mail header form field identifier from ISPConfig 2 to ISPConfig 3

If you have a local mail server installed and change your server controlpanel to ISPConfig 3, having used ISPConfig 2 in the past, you may have to change the value that defines the form field observed by all functions in need of the address that mails are supposed to be delivered to (catchalls, etc.) on ... Read more

Update to latest Spamassassin filter rules in ISPConfig 2

The ISPConfig 2 controlpanel installs its own copy of Spamassassin in the folder /home/admispconfig/ispconfig/tools/spamassassin . To update the Spamassassin filter rules in ISPConfig 2, run this command as root user: /home/admispconfig/ispconfig/tools/spamassassin/usr/bin/sa-update To test if Spamassassin works with the new ruleset, run this command: /home/admispconfig/ispconfig/tools/spamassassin/usr/bin/spamassassin --lint If it does not return an error message, then Spamassassin is ... Read more

Send all outgoing email trough one IP address in postfix

When a server has more than one IP address, then postfix will use all IP addresses randomly to send out emails. This can cause your emails to be listed as SPAM on other servers because the sending IP does not match the reverse IP of the server hostname. The solution is to bind postfix to ... Read more

Fix for Courier IMAP Error: check for configuration errors with the FAM/Gamin library

I've got the following error message on Debian Linux (6.0) with Courier IMAP server: Filesystem notification initialization error -- contact your mail administrator (check for configuration errors with the FAM/Gamin library) when I tried to access a IMAP share. The resaon for the problem seems to be that the "fam" package was not working correctly. ... Read more

Prevent DOS attacks on apache webserver for DEBIAN linux with mod_evasive

The following guide explains the installation of the apache module "mod_evasive". Mod_evasive tracks the number of requests of files at the apache webserver and blocks the delivery in case that a certain limit has been reached. Installation apt-get install libapache2-mod-evasive Create the log directory for mod_evasive mkdir -p /var/log/apache2/evasive chown -R www-data:root /var/log/apache2/evasive Now we ... Read more

How to solve the PHP XCache error: /dev/zero: No space left on device

If you get the error "/dev/zero: No space left on device" in the apache error.log on a OpenVZ virtual machine, then the shared memory size in the xcache.ini is too high or the xcache.mm_path is set wrong. Edit the file /etc/php5/conf.d/xcache.ini vi /etc/php5/conf.d/xcache.ini and check the mm_path. On a OpenVZ virtual machine it should be ... Read more

Secure /tmp and /dev/shm directories in a OpenVZ enviroment

The /tmp and /dev/shm directories of a OpenVZ virtual machine shall be mounted without suid and exec permissions. To achieve this, create a a shell script on the host server for every virtual machine which contains the commands to remount the directories. This script will be started automatically by openvz when the VM is started. ... Read more

How to update Spamassassin on ISPConfig 2

The spamassassin installation on a ISPConfig 2 server is normally updated together with ISPConfig. Here are the steps iIf you want to update spamassassin manually without updating ISPConfig 2: Download the latest Spamassassin sources and unpack the tar.gz file cd /tmp wget http://ftp.fernuni-hagen.de/ftp-dir/pub/mirrors/\ www.apache.org/spamassassin/source/Mail-SpamAssassin-3.3.1.tar.gz tar xfz Mail-SpamAssassin-3.3.1.tar.gz Configure, make and install spamassassin cd Mail-SpamAssassin-3.3.1 perl ... Read more