Search results

I think the template diff idea is great, but it doesn't work properly http://www.directadmin.com/features.php?id=1669 Only the first 2 links or correct, any link after that is using the 2nd URL.

Getting rid of SSLv3 is nice, but CBC mode and SHA1 without PFS is just not good enough these days. DA really needs to fix the ssl_cipher variable.

If this is not sorted out by now and you want a PHP-FPM solution which works alongside the standard PHP1 and PHP2 of Custombuild, you can PM me for a quote. We did set it up for a client.

Did you add this beforehand? SSLProtocol All -SSLv2 -SSLv3

Nice summary page :) Hopefully the cipher order bug is also fixed. A nice tool which can be used to check your setup https://github.com/jvehent/cipherscan

http://googleonlinesecurity.blogspot.nl/2014/10/this-poodle-bites-exploiting-ssl-30.html SSLv3 has to be disabled today from the web server and that's easy enough to do. Next steps are to get rid of it completely asap. It's easy to get rid of SSLv3 on FreeBSD, compiling OpenSSL ourselves, not...

Ah, well done :)

Mailpile replaces Thunderbird, not Horde. If you want the features found in Mailpile (encryption) you're better off configuring Roundcube if your customers prefer that interface to the one found in Horde. Your customers will install Mailpile in their OS in order to safely store messages, away...

From the logs ALERT - script tried to disable memory_limit by setting it to a negative value -1 bytes which is not allowed (attacker 'REMOTE_ADDR not set', file '/var/www/html/roundcubemail-1.0.3/bin/indexcontacts.sh', line 25) The sushosin config in the .ini file should perhaps add an...

This has got nothing to do with DA. Have you tried downgrading PHP?

*facepalm* :) But good news about feature 1666. Very useful.

If it's your server and you want to have an easy access to your emails, then yes, but if you have a hosting business, then it's not a good idea because you're a 3rd party for the end user. In their own words https://github.com/pagekite/Mailpile/wiki/Security-roadmap Python can easily be...

It's not designed for the hosting business as using it on a 3rd party server defeats its main purpose: privacy. Also, DA and CB don't support Python.

I think that page was created in order to make it easier for some webmasters to use external services such as gmail to collect their emails, so I think it's best if it stays. The local mail check box is what some resellers need access to, but it doesn't make much sense to have it on the DNS page...

Just like resellers can have access to the DNS manager even for users which don't have the feature enabled, I think it would be good if they could have access to the MX records page. The currently get the following error message

Could we get more details on CUSTOMX? http://www.directadmin.com/features.php?id=1654 It doesn't seem to work to customise a domain. I've added some directives to the CUSTOM4 field and nothing seems to have been written to httpd.conf

It's 2 clicks to go to the homepage and 3 to go back to where you were before. It's not horrible, but after having used this on another panel, I would prefer 1 click.

As soon as you have more than one domain, it's a bit of a pain to switch between them. It would be great to have a domain dropdown either in the header or in the right column, as a replacement for the "current domain" section.

I agree. DA puts almost everything in core, it would be good to have an extra button on the server summary page. On top of that, they already collect most of the information at the user level, so methods are already written. A plugin could take a different, deeper approach, using existats, but...

Seems "user/add_domain.html" was forgotten