Debian - The Perfect Server Setup

Discussion in 'Installation/Configuration' started by micko_escalade, Jan 4, 2011.

  1. micko_escalade

    micko_escalade New Member

    Hi all,

    phpMyAdmin on my server was attacked with this exploit
    http://www.google.com/support/forum/p/Webmasters/thread?tid=6064dab9e288d60f&hl=en
    and there's so many tables that were filled with code to the point of no repair.
    I was running FC8 and today I decided to make a switch to Debian. I'm hoping its good decision because I was debating between FC14 and CentOS? Mostly I'm worried about dependencies when installing something.

    I would like to install ISPConfig 3 and make whole server more secure so this or something else does not happen again.

    Right now I'm in process of backing up all my files to a attached USB drive in data center and after that I was gonna start "The Perfect Server Setup".

    Can someone please provide me with link to most current ISO so that people at the data center can burn on DVD/CD and I can start install process with help howto on this site.

    Also, does "The Perfect Server - Debian Lenny" for ISPConfig 3 exist?

    Thanks in advance!
     
  2. falko

    falko Super Moderator Howtoforge Staff Moderator HowtoForge Supporter ISPConfig Developer

    http://debian.org/CD/netinst/#netinst-stable

    Yes:
    http://www.howtoforge.com/perfect-server-debian-lenny-ispconfig3
    http://www.howtoforge.com/perfect-server-debian-lenny-debian-5.0-with-bind-and-dovecot-ispconfig-3
     
  3. micko_escalade

    micko_escalade New Member

    Thanks Falko!

    I thought my thread will go into archives for no replies :)
    Wow, CD image is so small. Hopefully I won't run into any problems during the install.

    I know you're supporter of Debian but can you tell me when comes to dependencies is Debian "better" then CentOS?

    Like I said I was using FC8 for a while and had troubles with dependencies when installing various packages.
     
  4. falko

    falko Super Moderator Howtoforge Staff Moderator HowtoForge Supporter ISPConfig Developer

    I always use the netinstall image and never had any problems. :)

    Yes.
     
  5. micko_escalade

    micko_escalade New Member

    Thanks!
    ..
     
  6. micko_escalade

    micko_escalade New Member

    I installed VM virtualbox and downloaded above net install .iso
    I'm trying to test it first before I start messing with it on a real server.
    Couple of questions:

    1. What's the difference between BIND+Dovecot and MyDNS+Courier? which one is better?
    2. In step 6 http://www.howtoforge.com/perfect-s...bian-5.0-with-bind-and-dovecot-ispconfig-3-p3 it talks about setting up a static ip but my server has only public ip, how do I set that up?

    Thanks!
     
  7. falko

    falko Super Moderator Howtoforge Staff Moderator HowtoForge Supporter ISPConfig Developer

    Both work equally good; personally, I'd go for BIND + Courier, but that's just my preference. :)

    If the VM is in a LAN, you can use an unused local IP. If it's not in a LAN, and you just have one public IP which in in use already by the host, then you need to get another public IP.
     
  8. micko_escalade

    micko_escalade New Member

    Thanks!
    I will go with Bind+Dovecot setup.
    I've contacted my host and they provided me with Gateway IP and other info so Debian basic install went fine.

    Now under #7 on this setup guide http://www.howtoforge.com/perfect-s...bian-5.0-with-bind-and-dovecot-ispconfig-3-p3
    it says to add
    Code:
    deb http://volatile.debian.org/debian-volatile lenny/volatile main contrib non-free
    
    but in my current /etc/apt/sources.list
    I have this
    Code:
    # 
    # deb cdrom:[Debian GNU/Linux 5.0.7 _Lenny_ - Official i386 NETINST Binary-1 20101128-01:05]/ lenny main
    
    #deb cdrom:[Debian GNU/Linux 5.0.7 _Lenny_ - Official i386 NETINST Binary-1 20101128-01:05]/ lenny main
    
    deb http://ftp.us.debian.org/debian/ lenny main
    deb-src http://ftp.us.debian.org/debian/ lenny main
    
    deb http://security.debian.org/ lenny/updates main
    deb-src http://security.debian.org/ lenny/updates main
    
    deb http://volatile.debian.org/debian-volatile lenny/volatile main
    deb-src http://volatile.debian.org/debian-volatile lenny/volatile main
    
    
    Only difference is that setup guide has contrib non-free
    do I just add another line on the buttom?
    Code:
    deb http://volatile.debian.org/debian-volatile lenny/volatile main contrib non-free
    
     
  9. till

    till Super Moderator Howtoforge Staff HowtoForge Supporter ISPConfig Developer

    No. The volatile repository lines are ok. Just proceed with the next step in the tutorial.
     
  10. falko

    falko Super Moderator Howtoforge Staff Moderator HowtoForge Supporter ISPConfig Developer

    You can simply add contrib non-free at the end of your existing volatile.debian.org lines.
     
  11. micko_escalade

    micko_escalade New Member

    Ok, thanks.
    What does contrib non-free means?
     
  12. falko

    falko Super Moderator Howtoforge Staff Moderator HowtoForge Supporter ISPConfig Developer

  13. micko_escalade

    micko_escalade New Member

  14. falko

    falko Super Moderator Howtoforge Staff Moderator HowtoForge Supporter ISPConfig Developer

    On Debian Lenny, the configuration is split up in many small files that are in the /etc/pure-ftpd/ directory and its subdirectories.
     
  15. micko_escalade

    micko_escalade New Member

    I have to admit it was confusing on how to change the default port.

    This might help someone in the future all I did was this:
    echo "55555" > /etc/pure-ftpd/conf/Bind
    which creates new file Bind inside /etc/pure-ftpd/conf with port 55555 inside that file then I restarted pure-ftpd.
     
  16. micko_escalade

    micko_escalade New Member

    I'm not sure why this is happening but I can't open any of email options:
    All what I did is changed default FTP port.


    [​IMG]

    also ever since I've changed default FTP port it says that server is offline but its actually working?
    [​IMG]
     
    Last edited: Jan 24, 2011
  17. falko

    falko Super Moderator Howtoforge Staff Moderator HowtoForge Supporter ISPConfig Developer

    Does this happen only in Internet Explorer, or in other browsers as well?
     
  18. micko_escalade

    micko_escalade New Member

    It happens with both IE8 and firefox 3.6.
    IE8 shows above error, FF does not display any error. In FF each tab in Email Accounts gets highlighted but nothing happens.
     
  19. till

    till Super Moderator Howtoforge Staff HowtoForge Supporter ISPConfig Developer

    ISPConfig tests for a ftp service on the FTP port. If you used a non standard port, ispconfig is not able to monitor FTP and will show it as offline.
     
  20. micko_escalade

    micko_escalade New Member

    Ok, that makes sense but could it be as a new feature in future versions where you can set the port to something else other then default?
     

Share This Page