HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials

HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials (
-   Installation/Configuration (
-   -   Host Based Intrusion Detection on ISPConfig3 (

sheshes 1st April 2013 18:20

Host Based Intrusion Detection on ISPConfig3
I am trying to follow the how-to guide Host Base Intrusion Detection to install samhain on already running ISPConfig 3.

There is a part we I need to edit the samhain.conf in /etc/apache2/conf.d

Usually this conf should have been created but I cannot see it. If I create a new conf and put only the lines suggested in the guide, I still can't view yule.html so i can continue further more.

What am I doing wrong?

zapyahoo 1st April 2013 20:01

Take a look at the apache error log. Usually helps to troubleshoot.

sheshes 1st April 2013 20:31

already checked nothing that actually is informative in there.

I think is better if I explained my setup better. I have an ISPConfig 3 server installation using multiple domains. The main FQDN domain that ISPconfig control panel is and I don't have any website setup on it.

With mydomain I can access the ISPConfig control panel and phpmyadmin.

I want to make the same as phpmyadmin uses i.e

I hope this info helps

zapyahoo 1st April 2013 21:21

How different is your samhain.conf when compared to phpmyadmin.conf file?
Maybe if you take a look at the phpmyadmin file you can create samhain.conf with the necessary alias and folder path corrections.

sheshes 2nd April 2013 17:36

Firstly, samhain.conf isn't created when installed the software. I have to recreate it.

I did copying phpmyadmin.conf to samhain.conf and fixed the alias and directory but still nothing!

Also I notice that yule cannot start without giving any error or write anything in the logs.

zapyahoo 3rd April 2013 19:25

I would try and fix the logging first... without that it's pretty hard to troubleshoot :(

sheshes 3rd April 2013 21:31

yeah I would do so myself as well, if only I knew how!

I think the only person who can answer this thread is falko who written the Host Based Intrusion Detection tutorial, if that applies on an ISPConfig 3 running server and if on Ubuntu 12.10 there some additional adjustments needed to be done.

Please falko....

All times are GMT +2. The time now is 01:29.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.