, security etc.

Discussion in 'Installation/Configuration' started by rabrol, Nov 13, 2007.

  1. rabrol

    rabrol New Member


    My ISPConfig system seems to be running rather nicely now, although I am a few versions behind...currently running 2.2.12.

    So here are the questions that are on my mind.

    1 - Can I upgrade straight to the latest version? If I do, will all my sites / databases etc remain intact?

    2 - I notice in mail.log that clam AV definitions are up to date, but the program itself isn't. Is there a procedure for updating the program itself?

    3 - The server is currently behind a firewall that is blocking most incoming ports. When server goes live I will need to open ports 80, 25 & 110. I am mostly concerned about spammers trying to use ISPC as a relay / smtp server. Is the default installation secure? What security measures should I put in place to protect myself from becoming a relay? I have already updated the OS (Ubuntu) with all the latest security packages.

    4 - I need to consider backups. Is there a good way to back up the entire system on a regular basis in case a crash happens? Would this back up all the databases in addition to the OS and general setup?

    5 - Does anyone have any other advice for a newbie preparing to open the server up to the www?

    BTW, thanks to all who contribute to ISPC and the forums. If there is one thing I love, it is OSS!

  2. till

    till Super Moderator Staff Member ISPConfig Developer

    1) Yes.
    2) ClamAV will be updated when you update ISPConfig.
    3) If you instaled your server as described in the perfect setup guide, then your mail system is secure. If not, you should test it with a open relay checker.
    4) Please search the forum for backup methods, this has been covered several times.
    5) Update your system and ISPConfig regularily.
  3. daveb

    daveb Member


    when you upgrade ispconfig it will update clamav

    if you followed the perfect setup you shouldn't have that problem, you can always test it though

    you can start here
  4. rabrol

    rabrol New Member

    Going well

    Thank you for the replies. Things are going well right now.

    All above mentioned step have been taken.

    Ubuntu is up to date (although it is the 6.06 Dapper Drake LTS edition)
    ISPConfig updated perfectly
    It is not functioning as an open relay - I had originally followed the Perfect Setup instructions

    I have another question though. If I upgrade the server edition via apt-get dist-upgrade would I be asking or trouble? Would ISPConfig break? Would it even need to be re-installed?

  5. till

    till Super Moderator Staff Member ISPConfig Developer

    This normally does not break ISPConfig itself, but it might be that you have to reconfigure applications like e.g. sasl when config file locations or variables had been changed.

Share This Page