secure bind a bit
in the normal configuration of ispconfig the system is vulnerable for this http://www.cert.org/incident_notes/IN-2000-04.html kind of attack.
I had installed ispconfig on a fresh ubuntu 5.10 Server install. So i can't say if this is Ubuntu or ispconfig vault. But solving is really easy.
So if you modified the named.conf.master (found in /root/ispconfig/isp/conf/) to the following, everthing is fine !
replace xxx.xxx.xxx.xxx with your puplic IP!
Maybe it has to be placed here
http://www.howtoforge.com/perfect_setup_ubuntu_5.10_p3 cause i don't take a look if ispconfig will get entrys from named.conf ...
|All times are GMT +2. The time now is 11:37.|
Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.