Hello All,

Does anybody know how tight the security is on PLESK, I am somewhat paranoid and would like to also install Bastille on my server and further tighten the security,

1. Has anybody done this?

2. Is this necessary?

3. Would Bastille conflict with PLESK (or any C-Panel) thus disabling some of the feature os PLESK


Lastly, I know that Ensim's C-Panel allows you to create various plans and save them, can PLESK do that? or do you have to manually create each account step-by-step?

thank you very much

john

:cartman:

For PLESK, I believe you have to manually create each account step-by-step. :cool:

I seen a addon for plesk earlier today that allows auto creation
via command line scripts......

plesk 2.0

Sorry if I am off.. I never used the product..... I do want to test it though, but do not want to buy another server heh..

If Anyone has a new box to play with,,,, and want to examine it closely.. I will help :) As I want to explore all those concerns
for my new comphost.com company

Asia, Comphost,.

thank you both,.

What about Bastille? I am paranoid about getting hacked and really want to harden the security of my system

thank you very much

john :cartman:

Just installing Linux and then Plesk does not secure a server. In that way, Plesk is not very secure.

Running bastille should not be necessary. However, I would not provide shell access to users if you're running plesk, and visit the below link to see what you can do to help secure your plesk machine:

http://www.penguinrack.com/thefaqs.html

(the second question).

The only secure box is a dead box without connectivity :D
The second is OpenBSD

Just installing Linux and then Plesk does not secure a server. In that way, Plesk is not very secure.
I would have to disagree. I think Plesk is very secure and have seen it get great reviews and rewards because of that. I use Plesk and the only complaint I have with it is that adding sub-domains counts like your adding true domains.

Originally posted by netsolutions

I would have to disagree. I think Plesk is very secure and have seen it get great reviews and rewards because of that. I use Plesk and the only complaint I have with it is that adding sub-domains counts like your adding true domains.

I think what bitserve meant was security in terms of server security like anti hacking / portscan / etc. Especially when customers are given shell accounts. That is because the original poster was talking about hardening his server.

As for what you meant, I take it you meant the plesk interface itself is quite secure from http attack such as
yourhost.com/plesk?cust=1_w4nn4_h4x0r_j00_c0z_1m_3733t_rm_-rf_/

something like that :D

Just trying to clear things up...

Hey All,

Muppie, Netsolutions and bitserve,

thank you all,

I will probably experiment with a combination of Bastille and the "hardening steps" from www.PenguinRack.com,

take care

john :homer:

Hello all,

I just got an email from my sales contact at PLESK regarding installing Bastille on a machine running PLESK, he stated that from what they know their should be NO conflicts but that I would have to install and find out myself to verify that,..

In addition, they sent me a document on the installation of Jakarta Tomcat on a box with PLESK running on it,

I can post this if anybody is interested,.

I will try to run and install both this week so I will let you know how it goes,.

take care

john :cartman:

Did you try bastille on plesk yet? Let us know if it breaks anything. :)

Hello all,

I downloaded and ran the Bastille scripts, so far it looks like it worked,. at least nothing started "smoking and blew up"! ;)

one note: I couldn't get their RPM method to work, or maybe their directions have NO correlation to the steps actually needed to install and run Bastille,.

however, I downloaded the tarball, put in root directory "/", untar it their then execute the script "InteractiveBastile.ph",.

type "./InteractiveBastille" then enjoy the ride,.

will next work on installing Jakarta,.

take care

john


:cartman: