pci dss failures - should ispconfig be running all the time ?

[sygram]

Hi there,

i recently had a pci dss scan on one our my servers and i got a few vulnerability detections to ispconfig service.

As i do not have to have ispconfig running all the time (ispconfig is used only for my domains) will it be ok if i shut it down and start it on demand ? My crontab shows though various tasks :

30 00 * * * /root/ispconfig/php/php /root/ispconfig/scripts/shell/logs.php &> /dev/null
59 23 * * * /root/ispconfig/php/php /root/ispconfig/scripts/shell/ftp_logs.php &> /dev/null
59 23 * * * /root/ispconfig/php/php /root/ispconfig/scripts/shell/mail_logs.php &> /dev/null
59 23 * * * /root/ispconfig/php/php /root/ispconfig/scripts/shell/cleanup.php &> /dev/null
0 4 * * * /root/ispconfig/php/php /root/ispconfig/scripts/shell/webalizer.php &> /dev/null
0,30 * * * * /root/ispconfig/php/php /root/ispconfig/scripts/shell/check_services.php &> /dev/null
15 3,15 * * * /root/ispconfig/php/php /root/ispconfig/scripts/shell/quota_msg.php &> /dev/null
40 00 * * * /root/ispconfig/php/php /root/ispconfig/scripts/shell/traffic.php &> /dev/null
05 02 * * * /root/ispconfig/php/php /root/ispconfig/scripts/shell/backup.php &> /dev/null
0 4 * * * /root/ispconfig/php/php /root/ispconfig/scripts/shell/awstats.php &> /dev/null

Thank you for your replies.

Regards,

Leon

[till]

As i do not have to have ispconfig running all the time (ispconfig is used only for my domains) will it be ok if i shut it down and start it on demand ?

Yes, thats ok.

Dont edit anything in the crontab as these cronjobs must run, if you want to shutdownd ispconfig, use the ispconfig_server init script.

[sygram]

thank you very much Till