Facebook
Twitter-
The BIND DNS server has already been deprecated and removed from Plesk for Windows.
If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release. -
The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.
Security Forum I think is needed.
- Thread starter lvalics
- Start date
I come with first questions, suggestions.
After this phpBB security things, I treid to see how people enter in servers and I find like:
They try to execute comand and install softwares like BNC or other into server.
The way to do is to use /tmp directory, writeable to anyone.
OK, because I cannot change this (even if in new PLESK I saw in each domain a /tmp) I can try to make to diable to install things in /tmp.
They try to get programs with WGET, NCFTP or LYNX usually, common used is WGET.
So I expect comments on changing WGET and other programs, LYNX, NCFTP to be executable only by root, like chmod 700 wget or to get out suid from wget like chmod -s wget.
Is a good way to try to stop them to install programs?
It will affect other softwares who will use wget ?
After this phpBB security things, I treid to see how people enter in servers and I find like:
They try to execute comand and install softwares like BNC or other into server.
The way to do is to use /tmp directory, writeable to anyone.
OK, because I cannot change this (even if in new PLESK I saw in each domain a /tmp) I can try to make to diable to install things in /tmp.
They try to get programs with WGET, NCFTP or LYNX usually, common used is WGET.
So I expect comments on changing WGET and other programs, LYNX, NCFTP to be executable only by root, like chmod 700 wget or to get out suid from wget like chmod -s wget.
Is a good way to try to stop them to install programs?
It will affect other softwares who will use wget ?
Similar threads
