Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 3 > Installation/Configuration

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 4th September 2009, 08:57
gwiz gwiz is offline
Junior Member
 
Join Date: Sep 2009
Posts: 10
Thanks: 0
Thanked 0 Times in 0 Posts
Arrow BUG or Not? Control Panel Log In -- Any Domain

Set up ISPConfig3 using 1 of my 20 registered domain names through GoDaddy.

None of the other 19 domain names are installed on my tester server for ISPConfig3.

Question Is:

In playing around I discovered I could log into Control Panel with any 1 of my other domains?

AS ADMINISTRATOR


So ISPConfig3 is not really using "example.com" for install, but the IP the name resolves too?

Another dumb question I know - It will be the last I promise

Shameless Plug: Have Domains For Sale -- See http://www.gwizit.com/?page_id=60

Last edited by gwiz; 4th September 2009 at 20:00. Reason: Shameless Plug
Reply With Quote
Sponsored Links
  #2  
Old 4th September 2009, 10:51
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lneburg, Germany
Posts: 36,794
Thanks: 840
Thanked 5,612 Times in 4,423 Posts
Default

Why shall this be a bug. It is normal and intended that you can log in with any domain or IP on the server as long as you use port 8080.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #3  
Old 4th September 2009, 19:57
gwiz gwiz is offline
Junior Member
 
Join Date: Sep 2009
Posts: 10
Thanks: 0
Thanked 0 Times in 0 Posts
Default re

Quote:
Originally Posted by till View Post
Why shall this be a bug. It is normal and intended that you can log in with any domain or IP on the server as long as you use port 8080.
Yup - that seems right.

But as I stated - The other 19 domains are not on the server.

Why bother with "domain name" setup.

Just use IP and everyone can be a number.
Reply With Quote
  #4  
Old 4th September 2009, 20:04
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lneburg, Germany
Posts: 36,794
Thanks: 840
Thanked 5,612 Times in 4,423 Posts
Default

But if the other domains are not pointing to the IP of the server in DNS, then no requests for these domains can be answered from this server. You should check the dns setup of your domains.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #5  
Old 5th September 2009, 12:07
gwiz gwiz is offline
Junior Member
 
Join Date: Sep 2009
Posts: 10
Thanks: 0
Thanked 0 Times in 0 Posts
Default OK Then

I guess it's a Non-Issue then!

But it seems to me having ISP configured to only allow "ADMIN" access through a designated "DOMAIN" name rather than the IP would be added security.

Lets say you have a seller/client that's a little mischievous, and likes cracking passwords.

And he/she realizes they can log in as ADMIN if they crack your password.

Already have 2 out of the 3 steps needed since "admin" user name can't be changed (or can it?) and if they have an account through you - their domain resolves to your server - correct.

So - Rather than using their log in name - They decide to crack your password and log in as ADMIN - Could create havoc if you didn't notice or realize someone could gain access so easily.

So why not add one more safety feature, and make ADMIN LOG IN resolve to the actual 'domain name" rather than IP -- Gives the crackers one more challenge, in having to figure out the domain name & password to the admin control panel.
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
421 Unexpected failure Lizard King Installation/Configuration 20 7th July 2009 21:43
[SOLVED] no access to control panel (port 81) atrias Installation/Configuration 6 23rd June 2008 00:21
slow download through webserver problem snewp Technical 14 9th May 2008 06:25
Daily mail logrotation?! schmidse Installation/Configuration 4 21st January 2008 14:55
No ftp login for ispconfig-webuser agri Installation/Configuration 12 19th March 2007 11:06


All times are GMT +2. The time now is 20:48.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.