deka

1. Community
2. Security
3. Remove the new ModSecurity™ Tools from WHM

Re: New ModSecurity Is it possible to remove the ModSecurity" Tools and revert back to the display that used to be in the plugin? The new set up reqiures you to click a link to see the target URL...

• View comment
• deka
• October 23, 2014 13:50
• 0 votes

1. Community
2. Security
3. SSLv3 Vulnerability : http://documentation.cpanel.net/display/CKB/How+to+Adjust+Cipher+Protocols

]I added : SSLProtocol All -SSLv2 -SSLv3 SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS SSLHonorCipher...

• View comment
• deka
• October 19, 2014 17:25
• 0 votes

1. Community
2. Security
3. SSLv3 Vulnerability : http://documentation.cpanel.net/display/CKB/How+to+Adjust+Cipher+Protocols

]The only SSL connection is for WHM and Cpanel access. Disable the SSL3 protocol in Apache as mentioned already, then run SSL Labs test using your server hostname: name.domain.com

• View comment
• deka
• October 16, 2014 21:24
• 0 votes

1. Community
2. Security
3. SSLv3 Vulnerability : http://documentation.cpanel.net/display/CKB/How+to+Adjust+Cipher+Protocols

]Still waiting for OpenSSL 1.0.1j to be made available through the CentOS repos. I tried searching/asking on the CentOS forum, but it keeps timing out. Because it's generally not advised by cPanel ...

• View comment
• deka
• October 16, 2014 02:13
• 0 votes

1. Community
2. Security
3. SSLv3 Vulnerability : http://documentation.cpanel.net/display/CKB/How+to+Adjust+Cipher+Protocols

]To fix this in WHM go to Service Configuration > cPanel Web Services Configuration and change the field "TLS/SSL Cipher List" from "ALL:!ADH:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP" to "ALL:!ADH:+HIGH:+MED...

• View comment
• deka
• October 15, 2014 16:13
• 0 votes

1. Community
2. Security
3. SSLv3 Vulnerability : http://documentation.cpanel.net/display/CKB/How+to+Adjust+Cipher+Protocols

]There is rumour that Firefox does not support TLS on any port that is not 443, any confirmations about that? That is correct. FireFox cannot access cPanel, WHM or webmail secure ports when SSLv3 ...

• View comment
• deka
• October 15, 2014 15:56
• 0 votes

1. Community
2. Domain Management
3. Does BIND have to be disabled in local server to use remote DNSOnly servers?

I was mistaken in believing that propagation was the reason for domains not resolving with the nameservers. My cPanel DNS changes are wrote to DNSONLY and the /var/named/domain.com.db is updated, ...

• View comment
• deka
• July 26, 2014 10:23
• 0 votes

1. Community
2. Domain Management
3. Does BIND have to be disabled in local server to use remote DNSOnly servers?

Since my lasy post the domain has propagated and now resolves without errors. The following showed the NS's were correct but there was no A record: root@host [~]# dig NS domain.com +trace Furth...

• View comment
• deka
• July 25, 2014 16:51
• 0 votes

1. Community
2. Domain Management
3. Does BIND have to be disabled in local server to use remote DNSOnly servers?

Thanks Michael The problem is the domain is not resolving with the nameservers but I can't work out why as all looks good. I may just need to give propagation more time, though it has been 24 hour...

• View comment
• deka
• July 25, 2014 13:29
• 0 votes

1. Community
2. Domain Management
3. Does BIND have to be disabled in local server to use remote DNSOnly servers?

Can somebody just tell me if BIND *has* to be disabled in local server for remote DNSOnly to handle DNS requests?

• View comment
• deka
• July 25, 2014 03:28
• 0 votes