Weak SSL Ciphers

[EdwardDekker]

How do i deactivate old and weak SSL ciphers of my Plesk 10.2 webserver.

I got a lot of of it as you can see at this website.

Also do i want to deactivate SSL v2.0.

Regards,
Edward

 

[IgorG]

Look at this documentation - http://download1.parallels.com/Plesk/PP10/10.2.0/Doc/en-US/online/plesk-pci-compliance-guide/

 

[EdwardDekker]

Thanks a lot.

Just what i'll need.

Edward

 

[EdwardDekker]

Securing Mysql into Virtuozzo

How could i secure Mysql into Virtuozzo.
All of my firewall rules are located there.
Otherwise it will be get too complicated to do it so by Plesk.

A quote of the link from Igor:

You also need to prohibit access to MySQL database server from external addresses. To do this, in a firewall that protects your Panel-managed server, add or enable a rule that prohibits TCP and UDP connections to the port 3306 from all addresses except 127.0.0.1.

To use the firewall that comes with your Parallels Plesk Panel for Linux:

Log in to the Panel as administrator.
If you did not install the firewall component, install it:
Go to Home > Updates (in the Help & Support group).
Click the link corresponding to your version of the Panel.
Locate Plesk Firewall module, select the corresponding check box, and click Install.
Configure the firewall rule that blocks external MySQL connections and switch the firewall on:
Click the Settings link in the navigation pane.
Click Manage Firewall Rules, and then Edit Firewall Configuration.
Click the MySQL server link.
Select the Deny option and click OK.
Click Activate to apply the configuration, and then click Activate again to switch on the firewall.

By the way i dont see in httpd.conf not anny line with these rules:

FileETag INode MTime Size

 

[IgorG]

You can just add string

FileETag MTime Size

to Apache config.

 

[EdwardDekker]

Thanks for the info.

I have totally secured my web-server except the rules for Mysql