MRatWork Forum by Mustafa Ramadhan

Sawo Project - Kloxo-MR Discussions => Kloxo-MR Tips and Tricks => Topic started by: sandipcd on 2015-05-01, 16:38:02

Title: Security Tips
Post by: sandipcd on 2015-05-01, 16:38:02

Hello MRatWork,

Can you please recommend "list of security tips" for Kloxo-MR panel, CentOS 6 and CMS website (which will be host on Kloxo-MR panel)?

Title: Re: Security Tips
Post by: MRatWork on 2015-05-01, 16:43:22

Enough change port for ssh, KLoxo-MR panel and ftp.

Title: Re: Security Tips
Post by: sandipcd on 2015-05-01, 16:49:48

I do resale web hosting. Suppose if my client web hosting panel hacked or intentionally someone put malicious php file in the panel to corrupt others website. How do I know that? Will Kloxo-MR remind me?

Title: Re: Security Tips
Post by: MRatWork on 2015-05-01, 17:15:27

1. Add 'mail' in 'disable_functions' and then send mail via mail() will be fail
2. Tell to customer using/set their website to use smtp instead 'php mail()'

Title: Re: Security Tips
Post by: sandipcd on 2016-04-16, 12:33:53

I have change the access 7777 / 7778 port Kloxo-MR 7 through Kloxo-MR 7 panel. And reboot server. But when I am trying to access it from that changed port it is showing "unable to connect". And the port 7777 / 7778 has not been changed.

Can you please help me to change the port permanently and solve the problem ?

Also before this I have change SSH port through Kloxo-MR 7 panel. SSH is working fine.

Title: Re: Security Tips
Post by: sandipcd on 2016-04-16, 19:35:02

I have tried to change the FTP Port through Kloxo-MR 7 panel. But after changing the FTP port, SSH automatically sending error report to my email id.

Any suggestion to solve this?

Title: Re: Security Tips
Post by: MRatWork on 2016-04-16, 19:43:03

Quote from: sandipcd on 2016-04-16, 19:35:02

I have tried to change the FTP Port through Kloxo-MR 7 panel. But after changing the FTP port, SSH automatically sending error report to my email id.

Any suggestion to solve this?

Go to 'admin > watchdog > ftp' and then change port.

Title: Re: Security Tips
Post by: sandipcd on 2016-04-16, 19:54:45

Still getting errors in email. Email message given below -

Subject - System Monitor on server1.xxxxx.com

Body -
Host: server1.xxxxx.com
Date: Apr-16 07:12
Port: 28
Action: sh /script/restart-ftp --force >/dev/null 2>&1

Title: Re: Security Tips
Post by: MRatWork on 2016-04-16, 20:24:52

Don't use low number port. Better using higher than 10000.

So, for ftp you can use 10021, 20021 and etc.

Title: Re: Security Tips
Post by: sandipcd on 2016-04-17, 05:10:26

First I have changed FTP port in Watchdog with 20021, it is not sending errors but it is not working through FTP file zila software.
Then I have change both in Watchdog and FTP Configure but still it is not working with FTP file zilla.

Any suggestion ?

Title: Re: Security Tips
Post by: MRatWork on 2016-04-17, 06:23:49

Try 'sh /script/restart-all -y'.

Title: Re: Security Tips
Post by: sandipcd on 2016-04-17, 07:18:57

Thanks, now ftp is working.
Now, what port should I give in Kloxo-MR 7 and how?

Title: Re: Security Tips
Post by: sandipcd on 2016-04-18, 11:23:35

Any suggestion how to change Koloxo-mr 7 port ? And which port number should I give ?

Title: Re: Security Tips
Post by: MRatWork on 2016-04-18, 12:05:04

After change kloxo port, need restart kloxo with 'sh /script/restart -y'.

Title: Re: Security Tips
Post by: sandipcd on 2016-04-18, 16:53:08

I have given kloxo-mr 7 port 25000 and 25001.
After some hours I am getting an error message in Email -

Subject - System Monitor on server1.xxxxx.com

Host: server1.xxxxx.com
Date: Apr-18 02:35
Port: 80
Action: sh /script/restart-web --force >/dev/null 2>&1

I have run the script, but nothing happens, still getting error messages.

Can you please help?

Title: Re: Security Tips
Post by: sandipcd on 2016-04-19, 12:24:48

I have Add 'mail' in 'disable_functions' for security reason. But then, the email is not going through roundcube webmail. So what should I do to secure email?

Title: Re: Security Tips
Post by: MRatWork on 2016-04-19, 12:31:19

Set 'disable functions' for 'mail' make all sendmail process will be blocked.