Search results

  1. D

    change letsencrypt default keysize

    Hi I would like to change the default DirectAdmin keysize for new certificates. It defaults to secp384r1 when requesting a new certificate. I would like to change it to prime256v1. Lower keysize means a certificate will be validated a little bit faster by the client when browsing websites...
  2. D

    Privilege escalation vulnerability glibc

    Hi all This is a heads up, because I don't know there are patches ready. There is another glibc vulnerability. Multiple distro's are affected. The flaw is serious, so we should update when a new glibc version comes out. More info here: https://www.cvedetails.com/cve/CVE-2023-6246/ Kind...
  3. D

    require randomized passwords

    Hi all A couple of years ago, I have made a feature request suggestion on feedback.directadmin.com. Many hosting providers only allow users to receive a at random generated password when changing or configuring e-mail accounts, ftp accounts, databases,... This prevents users from choosing a too...
  4. D

    custombuild PHP 8.0 and older on Rocky 9

    Hi I want to compile PHP 7.4 on Rocky 9, I have wrote my own patch to get it running, no problem here. How can I get custombuild to ignore the fact PHP does 'not officially' compile against openssl 3.0? php 5.x, 7.x and 8.0 cannot compile against openssl 3.0 or higher. Try php 8.1 or higher...
  5. D

    libiconv 1.16 unable to remove

    Hi I wanted to update PHP8 but was unable because of the old library libiconv 1.16. There are more threads to find on this forum, but none are very clear on how to proceed without downtime. I want to delete libiconv 1.16 and move over to the system provided libiconv library 2.28 I am running...
  6. D

    serverwide POST captcha validation

    Hi I have programmed a system wide captcha that redirects all POST requests via this captcha validation page. It is not based on recaptcha, I have fixed something easy myself: the sum of two numbers. (example: What is the sum of 'two' and 'fourteen') and a dropdown to chose from. I suspect no...
  7. D

    manage outgoing spam via php mail()

    Hi all I am wondering how different hosting providers are managing outgoing spam sent from their servers. In other words; what do you do to limit or remedy this spam issue? Many clients use the mail() command to sent contact form messages (many to their hotmail) (and ofcourse many are spam)...
  8. D

    directadmin backup roundcube contacts

    Hi I am running nightly directadmin backups of all users for all data except for 'domains directory', 'e-mail data', 'delete trash data'. In addition a nightly rsync is being run. Roundcube contacts falls under 'e-mail data' and is therefore not in backup. Is there a way I could backup...
  9. D

    old password algorithm ignored during backup/restore

    Hi I am running CentOS 8 with MariaDB 10.3. During a restore I noticed directadmin not backing up (or maybe restoring) the mysql passwords for some users. These users seem to be using an old encryption algorithm like SHA1. I suspect new encryption algorithm passwords are stored in the Password...
  10. D

    custombuild mod_php fails to update

    Hi I am trying to update mod_php on centos 7 but it fails. After the update, the build script has to move the binaries to the folder /usr/local/php74/bin/ but it seems to 'forget' to do this. It just creates symlinks instead deleting the newly built binaries. The file...
  11. D

    exim issue diffie hellman

    Hi I have noticed an issue with exim when updated the exim configuration files via custombuild via ./build exim_conf. A new exim parameter 'tls_dhparam = /etc/exim_dh.pem' was added and it causes issues for us. When this paramter is active exim loses 2 ciphers...
  12. D

    editing forwarders deletes 'username: username' in aliases file

    Hi I have found an issue with the latest directadmin version 1.61.3 running on CentOS 8. When adding or deleting a forwarder, directadmin seems to be deleting an important rule in the aliases file for that domain. the rule 'username: username' gets deleted. This causes e-mail to get rejected...
  13. D

    rsync directadmin server migration

    CentOS 6 will be EOL by the end of this year. Because of that, we will be migrating a bunch of servers to CentOS 8 this year. In the past we would have been migrating DA servers with the directadmin backup / restore functionality and changing DNS. This suited us well and we still use this for...
  14. D

    allow user to reset their own e-mail sent limit to 0

    Hi We are setting an e-mail sent limit to 200 to prevent an account with a lost password to be used for spamming. Some users want to sent many e-mails and are hitting the limit. They need to contact support to reset the limit. We, maybe others, could use a feature that would let reset users...
  15. D

    Limit PHP requests per IP

    Hello We seen occasional crawlers, possible searching for vulnerabilities, requesting many PHP pages at once on different domains. This causes load to spike, and eventually long (>10 seconds) load times for legitimate requests. I was wondering if there is an apache module that could limit PHP...
  16. D

    added to ip_blacklist file too many repeated failed login into '' account

    Dear all I am having trouble with 1 particular case where a legitimate IP gets blocked from time to time. (in this case it is an IPv6 address, I don't know if this is relevant) I tried adding this IPv6 IP range to the ip_ignore list without success, the ip range seems 'ignored' (wink ;) ) I am...
  17. D

    disable e-mail forwarding

    E-mail forwarders on busy servers are causing gmail, hotmail to blacklist. Gmail and hotmail sees spam characteristics before the message is delivered denying the message. the exim mailserver has to bounce the message back, in the event also causing backscatter. And more importantly when the a...
  18. D

    disable admin-account e-mail password recovery

    Hello I am concerned about the global "e-mail password recovery" feature in directadmin. If a hacker could hack ones e-mail account, and if the company has multiple directadmin servers with the "password recovery feature" enabled for its customers, the hacker could gain admin access to their...
  19. D

    magic_quotes_gpc On or Off

    Hello As a webhoster, I am receiving many questions about how to disable magic_quotes_gpc. A default installation of Joomla asks to disable magic_quotes_gpc. We are running PHP 5.3 I am wondering, because the function is deprecated in PHP 5.3 , should I, as a webhoster, disable...
  20. D

    suspended account - server doesnt reject e-mail

    Hello Recently I am receiving e-mail from suspended accounts in my root's e-mail box. I am forwarding my root's e-mail to an apart account for system mail. I am adding in /etc/virtual/webserver.hostname.com/aliases the entry: root: [email protected] I have done this, because I want to receive...
Back
Top