Archive for December, 2009

Updating Apache to the latest version in DirectAdmin

If you wish to update your 1.3 version of apache to the most recent, run the following:

cd /usr/local/directadmin/customapache
./build clean
./build update
./build apache_mod_ssl

If you’re using apache 2.x, use “./build apache_2″ isntead of apache_mod_ssl.

This should update both the configure options and the version of apache to the most recent version. Once the update has completed, you’ll need to restart apache:

You can check the current version of apache by running

httpd -v

Restart Apache.

/sbin/service httpd restart

Source : http://directadmin.com/

Script to enable SpamAssassin for new accounts

By default (if enabled), DA gives the User the option to enable spamassassin, but it is not turned on by default.

The above script can be used to also enable spamassassin for all existing accounts. You can create another simple script to do it called (for example) spam.sh with the following code:

#!/bin/sh
for i in `ls /usr/local/directadmin/data/users`; do
{
username=$i spam=ON /usr/local/directadmin/scripts/custom/user_create_post.sh
};
done;
exit 0;

Save this new spam.sh script, chmod it to 755, and run it once.

How to enable realtime blocklists (RBLs) with exim

To enable RBL blocking, as root, run the following:

cd /etc/virtual
rm -f use_rbl_domains
ln -s domains use_rbl_domains

This will setup the list of domains to be filtered to match the active domains list, so new domains added to the server are also included for the spammer IP blocking.

The RBLs will connect out to remote servers for each email, check to see if the sending IP is a spammer, and prevent that email from arriving. These lists are regularly updated, so they are highly effective.

Note that some lists also block entire ISP IP ranges, so if your clients are not able to send email, then can switch to sending email through port 587 instead of port 25.

or to disable RBLs, you can do the followig:

cd /etc/virtual
rm -f use_rbl_domains
touch use_rbl_domains

Source : http://directadmin.com/

Uisng quotacheck program in DirectAdmin

DirectAdmin relies on the system quotas to return a value for how much space is being used.

DirectAdmin will run

/usr/sbin/repquota /home

If the “used” column is not showing anything, or users are not in the list, then you’ll need to run the quotacheck program:

Redhat:

/sbin/quotaoff -a; /sbin/quotacheck -avugm; /sbin/quotaon -a;

FreeBSD:

/usr/sbin/quotaoff -a; /sbin/quotacheck -avug; /usr/sbin/quotaon -a;

If are getting errors and no output is displayed for the repquota command, you’ll need to check your /etc/fstab file to make sure that it contains the rw,userquota,groupquota line beside the partition that is using the quotas.

Important: On Linux (Redhat/Debian), it’s usrquota,grpquota, and on FreeBSD it’s userquota,groupquota.

Reference : http://directadmin.com/

How to force SSLv3 ssl_cipher option in DirectAdmin

Edit - /usr/local/directadmin/conf/directadmin.conf file

directadmin.conf option called:

ssl_cipher=

default value is internally ‘null’ (not used).
If anything is set for that variable (has to be added) then those values are passed to the ssl function:

SSL_set_cipher_list

so as to enforce which versions of ssl are allowed to connect.
The main reason to use this feature is to pass low level security scans which don’t like SSLv2.

A sample value for this option would be:

ssl_cipher=ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP

Reference - http://www.directadmin.com/

« Prev - Next »