A Couple Questions

Discussion in 'Server Operation' started by Xtreme2damax, Mar 1, 2013.

  1. Xtreme2damax

    Xtreme2damax New Member

    I recently followed this guide to set up a CentOS server with ISPCOnfig3.

    One things I noticed is that secure traffic isn't redirected to port *443 which means if I try to access a secure page with http:// instead of https:// I either get a blank page or with the ISPConfig 3 control panel get some html informing me I am trying to access a secure page and to try typing https:// instead.

    Another thing since I've followed the tutorial to the end I am wondering what's left to do to secure/harden the server?
     
  2. falko

    falko Super Moderator

    Do you use rewrite rules that redirect http traffic to https?
     
  3. Xtreme2damax

    Xtreme2damax New Member

    No, not currently but I was wondering how to do this on the server level so it applies to all websites and domains hosted on the system.
     
  4. till

    till Super Moderator

    You can add the rewrite rule in the apache vhost master template which is used to create ne vhosts. You find the templates in /usr/local/ispconfig/server/conf/
     
  5. Xtreme2damax

    Xtreme2damax New Member

    What's the name of the file I need to edit? Is it apache_apps.vhost.master or apache_ispconfig.conf.master?
     
  6. Xtreme2damax

    Xtreme2damax New Member

    Just to be a bit clearer I would like to set this on a server level so when any website/domain hosted on the server tries to access a secure page using http:// instead of https:// (such as the ISPConfig panel) they are auto redirected to https:// and can login to the panel. I don't want to redirect normal http traffic accessing non-secure pages.

    I am a bit confused how to do this and was wondering if someone can post instructions on how to accomplish this? I don't have much experience with setting up and configuring a webserver from scratch.
     
    Last edited: Mar 1, 2013
  7. Xtreme2damax

    Xtreme2damax New Member

    For some reason mail isn't working. I set up a forum and created a new user but the welcome/verification email never arrives.
     
  8. falko

    falko Super Moderator

    Any errors in your mail log?
     
  9. Xtreme2damax

    Xtreme2damax New Member

    Don't think there's any errors but this is what's in /var/log/maillog

    Edit: Do I need PHP-Sendmail? The forum script's mail settings gives an option of either PHP-Mail or SMTP.

    Edit: Alright, I did find the proper mail log.

    Another question, what should /etc/hosts and /etc/resolv.conf contain? I am a bit confused with those so any help would be appreciated.

    My current /etc/hosts:

    This is what I currently have in /etc/resolv.conf:

     
    Last edited: Mar 3, 2013
  10. Xtreme2damax

    Xtreme2damax New Member

    Another problem I am experiencing is with Mybb (bulletin board), whenever I try to upload attachments I get a 500 internal server error.
     
  11. falko

    falko Super Moderator

    There seems to be a problem with your network connection.

    Did you check your website's error log?
     
  12. Xtreme2damax

    Xtreme2damax New Member

    Well I did find out I have to use authentication since Verizon is my isp, I have a residential account with a dynamic ip and they block port 25. Still can't get mail to work but at least it's a step in the right direction. Now I get the following in the mail log:

     
    Last edited: Mar 4, 2013
  13. falko

    falko Super Moderator

     

Share This Page