Web Hosting Talk : Web Hosting Main Forums : Dedicated Server : Help needed to choose a control panel

[martin33]

Hi,

I would like to get some advises concerning the kind of control panel you suggest to run an e-commerce website (prestashop).

I would like to use an Open Source control panel. I thought about ISPConfig, since i already know this one.

But, i ran a PCI test on a server with ISPConfig on it, and the result is not good... ...i can see there are lots of issues detected. Lots of theses issues are concerning old software versions...

...i would like to know if you would recommend to host and ecommerce website (no credit cards are stored in the database) on this kind of server, or if you have some other control panel (open source) to recommend?

Thank you,

Martin

[zervex]

Have you looked at webmin?

[martin33]

Just wanted to brind this clarification : i am aware than paying a bit can worth it sometimes... ...but the thing is i told my customer who would like to save money i was going to look if there is an open source control panel available that should correspond to what he need.

...if there are really no good alternative on the open source side, we will go with either cPanel or Plesk, but i preferred to open this post before, just to see what other are thinking...

So please do not just tell me to pay for a control panel if you are going to do this, i am aware there are some commercial alternatives... ...i am looking for an open source one.

[martin33]

Originally Posted by zervex

Have you looked at webmin?

Hi,

Yes i did, but it looks so ugly, not really user friendly. Also, i saw many posts on other forums from peoples saying to do not use this one in a real production environment. I must say ISPConfig is looking good, friendly user interface, but it really do not pass the security tests at Comodo.

I do not want to be fully PCI compliant (no need to have a separate server for mail, web, dns, etc... since we do not store credit cards infos), but at the minimum, i want to get a success using a PCI scan tool like Comodo or McAfee... ...i am getting a success with cPanel, Plesk, but i cannot find any open source control panel who will get a success on this.

[Rob Hivelocity]

I would give a +1 to Webmin. As a free product, it is not bad at all. http://www.webmin.com/

[martin33]

Originally Posted by Rob Hivelocity

I would give a +1 to Webmin. As a free product, it is not bad at all. http://www.webmin.com/

I really don't like the way Webmin is working... it's ugly, and not user friendly at all...

[Rob Hivelocity]

I have no experience with it personally, but have seen some positive reviews about Kloxo. Not sure it will work for you, but worth a look - http://lxcenter.org/software/kloxo

[martin33]

I heard there are lots of security issues with Kloxo... don't know if theses are resolved now, but i prefer to stay away for now.

[martin33]

...but if there is a Kloxo user who can confirm Kloxo apply pci compliance guidelines and no longer have any major security issues, i am open to test. (makes a long time i heard this).

[trige]

I'd recommend to look at EHCP for debian/ubuntu alike or Kloxo on rhel5 alike.

[martin33]

Originally Posted by trige

I'd recommend to look at EHCP for debian/ubuntu alike or Kloxo on rhel5 alike.

Thank you for your reply!

Why do you recommend ehcp exactly? And what do you think about e-commerce on kloxo? Is it secure now?

Have you ever ran some PCI compliance tests on theses server control panel?

[trige]

ehcp is very simple and easy configurable panel.
Kloxo is secure as long as you run latest software and run updates frequently. The scandal about it was not on security hole. The company who had many servers with it had weak password that was brute-forced and the hacker deleted many data on servers- i advise to check this on google.

[martin33]

Originally Posted by trige

ehcp is very simple and easy configurable panel.
Kloxo is secure as long as you run latest software and run updates frequently. The scandal about it was not on security hole. The company who had many servers with it had weak password that was brute-forced and the hacker deleted many data on servers- i advise to check this on google.

Have you ever got a success on a pci scan with one of theses control panel (i.e. mcafee, or comodo)?

[trige]

Originally Posted by martin33

Have you ever got a success on a pci scan with one of theses control panel (i.e. mcafee, or comodo)?

No, sorry. I just suggested good panels for you.

If you are so worry about this you'd better get some commercial panels like cpanel, directadmin or ispmanager. I recommend ispmanager as the most affordable as it has onetime licenses for not big money if compare with its rivals.

[martin33]

Hi,

I know there are commercial control panel, but i am currently looking for an alternative on the open source side...
...but it seems at first, open source control panel are only for hobby, not for real production... ..am i right saying this?