Archive for July, 2009

ConfigServer Explorer (cse)

This is an exclusive! and free! add-on product for cPanel/WHM. The product provides you with a full featured Filesystem explorer and a Virtual Console to use within your web browser in WHM. It gives you root access from the top level of your disks and allows you to enter non-interactive commands and see the output.

The File Manager/Console can be an essential tool for:

  • Server Administrators unfamiliar with server shell commands
  • Repairing a server where access via SSH is not available*
  • Repair access to a server due to an incorrectly configured firewall or SSH
  • Edit files directly on the server
  • Functions for files and directories:
    • Copy
    • Delete
    • Rename
    • Move
    • CHMOD (change permissions)
    • CHOWN (change ownership)
  • Uploading files to the server in BINARY or ASCII mode
  • Downloading files from the server
  • Easy access to your server configuration from within your browser
  • Access restricted to the root user through WHM only (no access for resellers)

Read the rest of this entry

DA comes with support for ProFTPD mod_tls however there are several problems with mod_tls. 1) It only encrypts the control channel of FTP, leaving the actual data transferred still in clear text. 2) That also causes problems with FTP traversal of firewalls since the firewall can’t see which ports are going to be needed, although that can be worked around with PassivePorts configuration in ProFTPD. 3) FTP/TLS support is also less common in FTP clients.

Read the rest of this entry

Disable wget

wget is one of the largest threats for your server security. A single abuser that gains access to wget can download and run any script that he wants, totally compromising your server.
It is highly recommended that you allow only root to use wget and you restrict all other users from it. Read the rest of this entry