If you are going to host more than 300 domains or web sites on your server, you should switch on support for piped logs in the Apache Web Server.
To enable piped logs:
Log in to the server shell.
Issue the command mysql -uadmin -p`cat /etc/psa/.psa.shadow` -D psa -e “replace into misc (param,val) values (’apache_pipelog’, ‘true’);”
Rebuild Apache configuration by issuing the command /usr/local/psa/admin/sbin/websrvmng -a -v
Source from Plesk.
Modify global setting for the Apache server in the main Apache configuration file:
/etc/httpd/conf/httpd.conf for RedHat-based systems;
/etc/apache2/apache2.conf (or a corresponding file from /etc/apache2/conf.d/ /etc/apache2/sites-enabled/) for Debian-based systems;
/etc/apache2/httpd.con (or /etc/apache2/vhosts.d/*) for SuSE;
Virtual Host Structure and Permissions
Vhost permissions should satisfy the following conditions:
Home directory should be readable by apache, psaadm and psaftp.
The user cannot change some catalogues of their directories.
Other users should not have access to the user’s home directory.
To set up antivirus for Plesk on a Linux-based hosting server
1. Go to Home > Updates.
2. Click your Parallels Plesk Panel version.
3. In the list of components, select either Dr.Web antivirus or Kaspersky antivirus.
4. Click Install.
After the installation is completed, obtain and install a license key for the selected antivirus program, as described in the following steps.
5. Go to Home > License Management.
6. Click Order Control Panel Add-ons. The Parallels online store page listing available add-ons opens in a new browser window.
7. On this page, select the check box next to the Dr. Web Antivirus or Kaspersky Antivirus item and click ADD TO MY BASKET.
8. Because Parallels Plesk Panel add-ons are added to the license keys that already exist, the Parallels Plesk Panel Number Checking System page will open. Enter the number of your license key to which you add this feature and click Submit.
9. In the next steps, indicate the currency, number of keys, provide contact details, billing address, and payment method, and submit the form. You will be notified by e-mail when your order is processed.
10. When you receive the e-mail notice, return to the License Management screen (Home > License Management) and click Retrieve Keys to retrieve the ordered license key. Parallels Plesk Panel License Manager will retrieve the upgraded license key from the Parallels licensing server and install it to your control panel.
11. Go to Settings > Virus Protection Settings.
12. Under Antivirus preferences, select the antivirus you need and click OK.
Simplifying Setup of User Accounts in Plesk
Before you start signing up new users for your services, you should create account configuration presets, referred to as reseller account templates and client account templates. They will simplify setting up user accounts for new customers. The templates cover all resource usage allotments, permissions and limits that you can define for a user account. There are predefined reseller account and client account templates: You can modify them as required and use them, or you can create your own templates. The default templates cannot be removed.
To create a reseller account template:
1. Go to Resellers > Reseller Account Templates > Create Reseller Account Template.
Click OK to complete creation of a template.
During setup of a new reseller account, you will select the required template and the account will be created and allocated the resources you defined.
To create a client account template:
1. Go to Clients > Client Account Templates > Create Client Account Template.
Click OK to complete creation of a template.
During setup of a new user account, you will select the required template and the account will be created and allocated the resources you defined.
Securing the /tmp Partition
It is recommended to create /tmp as separate partition and mount it with the noexec and nosuid options.
The noexec option disables the executable file attribute within an entire file system, effectively preventing any files within that file system from being executed.
The nosuid option disables the SUID file-attribute within an entire file system. This prevents SUID attacks on, say, the /tmp file system.
To secure the /tmp partition of your Parallels Plesk Panel server:
If /tmp is a separate partition on the server, you only need to edit /etc/fstab and add the noexec and nosuid options for /tmp. Then remount the partition.
If the /tmp directory resides on the / partition:
Create a new partition for /tmp, for example with size 512 MB:
# mkdir /filesystems
# dd if=/dev/zero of=/filesystems/tmp_fs seek=512 count=512 bs=1M
# mkfs.ext3 /filesystems/tmp_fs
Add the string into /etc/fstab:
/filesystems/tmp_fs /tmp ext3 noexec,nosuid,loop 1 1
Move current /tmp directory content to another location.
Mount new /tmpp partition:
# mount /tmp
Move content from old /tmp directory to the new one.
