The issue does not affect vBulletin 3.x.

To improve the security of your vBulletin 4 installation please download the patch from the members area of vBulletin: http://members.vbulletin.com/
We recommend you install this security patch as soon as possible.

The upgrade process is the same as previous patch level releases – simply download the patch from the Members’ Area, extract the files and upload to your webserver, overwriting the existing files. There is no upgrade script required.

Technorati Tags: vBulletin security patch, vBulletin v4

Please perform the following steps to recreate Qmail`s queue.

Attention!
All current messages will be removed from the queue in this case and cannot be restored.

1. Stop Qmail and xinetd.

/etc/init.d/qmail stop
/etc/init.d/xinetd stop

2. Move current queue to another location.

mv /var/qmail/queue /var/qmail/queue_old

3 Reinstall ‘psa-qmail‘ RPM to recreate qmail queue structure with the command like:

rpm -Uvh –force psa-qmail….

4.(Optional).Reinstall drweb-qmail RPM if you use DrWeb antivirus feature which comes with Plesk.

rpm -Uvh –force drweb-qmail….

5.Start Qmail and xinetd:

/etc/init.d/qmail start
/etc/init.d/xinetd start

Note: you should get the both psa-qmail and drweb-qmail RPMs from the same Plesk version distributive that is installed on the server.
You can obtain current psa-qmail, drweb-qmail RPMs and Plesk build versions by running the following commands on Linux systems:

rpm -q psa-qmail
rpm -q drweb-qmail
rpm -q psa

Technorati Tags: lots of spam in qmail, Plesk qmail issue, Plesk Qmail Queue has damaged, Rebuilding qmail's queue in plesk

2. A box will appear. Click Add and select Mail.

3. Enter your name as you want it to appear on your emails and click Next.

4. Put in your email address, which consists of a user you set up in webmail and @yourdomain.xyz, and then click Next.

5. Set the server type as POP3.

6. For incoming and outgoing mail servers, enter mail.yourdomain.xyz (where yourdomain.xyz is your domain name and extension such as .com).

7. Click on Next.

8. Enter your email address for the Account Name. Enter the password you set for this account. Note: Do NOT check the box “Log on using Secure Password Authentication”.

9. Click Next and then click Finish. After you click Finish, you should see the following window. If not, go to the Tools menu, and click on Accounts. After clicking Accounts the window will appear. In this window, click on your domain until it is highlighted, then click on Properties.

10. When the next screen appears, click on the Servers tab. Under Outgoing Mail Server, check the box next to My server requires authentication. Click Okay. Note: You MUST do this step so you can send mail from your domain.

11. Now, you’re ready to send and receive mail. To set up multiple accounts, follow these steps again.

Technorati Tags: Configure Outlook Express on Windows, Configure POP3 and SMTP settings in Outlook Express, Email Hosting, Email web host, My server requires authentication, POP3 and SMTP ports in Outlook Express

1.  Browse to the folder in which the message was deleted from (i.e. inbox, sent, deleted items)

2.  Expand the Tools menu and select Recover Deleted Items

3.  Select the email(s) that you would like to recover

4.  Click the envelope icon to recover the email(s)

Technorati Tags: 2011 email hosting, Email Hosting, Emails deleted in Outlook 2007, Outlook 2007 email recovery, Recover Outlook Email, UK Email Hosting

2. On the E-mail tab, click New.

3. Select Microsoft Exchange, POP3, IMAP, or HTTP and click Next.

4. Check Manually configure server settings or additional server types and click Next.

5. Select Internet E-mail and click Next.

6. Enter the requested information:

* Your Name: your name
* Email Address: the email address the messages will be sent from
* Account Type: POP3
* Incoming Mail server: mail.domainname.com
* Outgoing Mail server: mail.domainname.com
* User Name: the full email address
* Password: the password for the email address

7. Click More Settings

8. On the Outgoing Server tab, check My outgoing server (SMTP) requires authentication

9. Select Use same settings as my incoming mail server and click OK.
10. Click Test Account Settings to verify everything is configured correctly.
11. Click Next and then click Finish.

Technorati Tags: Configure Microsoft Outlook, Configure Outlook 2003, Configure Outlook 2007, email hosting 2011, email UK hosting, Email web hosting, My outgoing server (SMTP) requires authentication, Outlook Email client, POP3 settings, SMTP settings

CentOS-3 updates until Oct 31, 2010

CentOS-4 updates until Feb 29, 2012

CentOS-5 updates until Mar 31, 2014

2 . What architectures are supported ?

The following architectures are supported by each version of CentOS:

CentOS 3 currently supports x86, x86_64 (AMD64 and Intel EM64T), s390, s390x, ia64 (Intel Itanium2).

CentOS 4 currently supports x86, x86_64, s390, s390x and ia64. ppc (PowerPC), alpha (DEC Alpha) and sparc are released in beta for CentOS 4.

CentOS 5 currently supports x86 and x86_64. ia64, ppc (PowerPC) and sparc are being developed.

3. How can I easily compare what major package versions are in CentOS 3, CentOS 4 and CentOS 5?

On the CentOS Distro Page at DistroWatch.com you can compare Major packages and All tracked packages. DistroWatch is an good resource for comparing Linux and BSD distributions.

Technorati Tags: architectures are supported in centos, Centos 3, Centos 4, Centos 5, Compare Centos packages, EOL for Centos 3, EOL for Centos 4, EOL for Centos 5

CentOS 6.0 has been released. This is, some might say, the most anticipated release to date with CentOS pushing out the date numerous times. Finally CentOS 6.0, an Enterprise-class Linux Distribution, is available for download to the public.

CentOS-6.0 is based on the upstream release EL 6.0 and includes packages
from all variants. All upstream repositories have been combined into
one, to make it easier for end users to work with.

We highly recommend reading this announcement along with the Release Notes 

WebhostUK Limited now provides Reseller clients hosted on server with latest CentOS 6, following feature we offer with reseller hosting plan

* Free WHMCS billing Software: Allows you to automate web hosting and take care of billing for your end user clients.
* 100% private labelled end user support: Get 100% private labelled, free end user support, where your clients can now submit support requests, and our experienced staff will resolve them for you – working as YOUR own company staff.
* Free Vision Helpdesk Software: Most powerful ticket system serving as a helpdesk so that your clients can contact you for their support.
* Free Enom reseller account: Most trusted domain registrar where you can register domains under your ownership for your clients.
* Free private lablelled nameservers: Keeps you completely anonymous not letting your clients know that you are our reseller.
* Free SSL Certificates (on selected reseller plans): Securing your website for critical data that should be protected and encrypted.
* Free RvSiteBuilder: Allows you to design your website in less than 5 minutes with the selection of number of readymade templates.
* And many other things including RvSkin, Fantastico, account migration, etc..

** For More Information on Reseller Hosting plan, please click here

CentOS 6 Downloads

You can download CentOS Linux 6 via the web/ftp server or via BitTorrent (recommended) client.

CentOS 6 DVD ISO downloads

• Download CentOS 6 32 bit i386 DVD ISO image 1 (4.4 GB)
• Download CentOS 6 64 bit x86_64 DVD ISO image 1 (3.9 GB) and image 2 (1.1GB)

CentOS 6 DVD ISO Torrents

Torrent files for the DVD’s are available at the following location:

• Download 32 bit i386 torrent file
• Download 64 bit x86_64 torrent file

Technorati Tags: 100% private labelled, Centos 6.0 released, free end user support, free enom account, Free Vision HelpDesk, Free WHMCS, reseller web hosting 2011, Reseller web hosting on centos 6, UK reseller web hosting

cPanel PCI Compliance Step 1

First thing first, run a package update.

yum -y update

If it installed a new kernel, reboot the server so the new kernel takes affect. If its a live production server you may want to wait until an off-peak hour to do the reboot and continue with this article.

cPanel PCI Compliance Step 2

Now that you have the OS packages secure, its time to setup a firewall if you don’t have one already.

A good free IPtables based firewall is the APF (Advanced Policy Firewall) firewall from RF-X Networks, you can download that here:

wget http://www.rfxn.com/downloads/apf-current.tar.gz

While your at it, get and install the BFD (Brute Force Detector) and LSM (Linux Socket Monitor) which are also available on the RF-X Networks site.

The main things you want to configure are the allowed ports in the APF config file, both ingress AND egress, and then you want to setup an ACL by using the allow and deny hosts files that come with APF. For the ACL’s you want to block everything you don’t want public access to, but still need certain IPs to access. For example SSH, cPanel, WHM, and maybe webmail. For example your allow line for cpanel will look like this:

tcp:in:d=2083:s=123.123.123.123

Noticed, we used port 2083 and not the insecure cpanel port 2082, which we have blocked in the APF config file. And then so you have a deny from all that are not explicitly allows, add this to the deny hosts file:

tcp:in:d=2083:s=0/0

The reasoning behind this is to not even give anyone a chance to get in, if #1, they have your password, #2, they are trying to brute force their way in, #3, there is an exploit in which they are able to bypass the authentication means.

cPanel PCI Compliance Step 3

Back to Linux hardening, you want to do a few things here, first disable any unused packages/services, for example cups and portmap, delete any unneeded users, disable shell for any users that don’t need it in /etc/passwd.

You also want to change the SSH port, disable SSH version 1, and disallow direct root login:

pico /etc/ssh/sshd_config

Remember to allow the new SSH port in the APF config file, and add an underprivileged user to the wheel group, so you can su to root. and then restart the firewall and sshd.

cPanel PCI Compliance Step 4

Run a couple cpanel scripts, the first upcp, and the second easyapache. For upcp its recommend to use the “current” build, this is set in the update config in WHM.

/scripts/upcp

Remember to run upcp before running easyapache

/scripts/easyapache

When running easyapache, select the latest apache and PHP versions, and also ensure the following PHP options are checked:
CGI
Mod suPHP
suhosin fo PHP
Mod Security

This will ensure the most secure way to run PHP.

cPanel PCI Compliance Step 5

Install a ModSecurity rule set, ModSecurity, your layer 7, Web Application Firewall (WAF) is only as good as the rule set you are using. GotRoot.com is a good place for free ModSecurity rules.

wget http://www.gotroot.com/downloads/ftp/mod_security/apache2/apache2-gotrootrules-latest.tar.gz

Download, untar and install the different rules files, and then test and edit if needed.

cPanel PCI Compliance Step 6

The next step is to disable dangerous and PCI unfriendly PHP functions. For example a phpinfo page will cause you to fail a PCI scan. You disable line should contain at least the following functions:

phpinfo,passthru,shell_exec,system,proc_open,popen,curl_multi_exec,
show_source,escapeshellarg,escapeshellcmd,inject_code

cPanel PCI Compliance Step 7

Now its time to go to WHM. There are a number of built-in WHM security features, and PCI friendly features.
Going down the list on the left hand side of WHM you want to look at:

Apache mod_userdir Tweak – Here Check “Enable mod_userdir Protection” and click save
Compiler Access – Click “Disable Compilers”
Configure Security Policies – Check the first 3 and next 2 if necessary, and click save
cPHulk Brute Force Protection – Enable cPhulk, and under White/Black list Management enter your IP(s)
Password Strength Configuration – Set this to 100
PHP open_basedir Tweak – Check “Enable php open_basedir Protection.” click save
Shell Fork Bomb Protection – Click “Enable Protection”
SMTP Tweak – Click “Disable”

Apache Configuration–>Global Configuration
- For SSLCipherSuite Change the + by Medium to a -, you line should look like this “ALL:!ADH:+HIGH:-MEDIUM:-LOW:-SSLv2:-EXP”
- Set TraceEnable and ServerSignature to Off
- Set ServerTokens to ProductOnly
- Set FileETag to None
- For Directory ‘/’ Options uncheck “indexes”

Now click save, then click Rebuild Configuration and Restart Apache
For Manage Service SSL Certificates, make sure all your services have a valid SSL cert
Under Service Manager, disable any services you don’t need, for example if you don’t have your database on this server, disable mySQL, if you don’t use it for email, disable the email related services

cPanel PCI Compliance Step 8

In order to pass a PCI scan your server must have at least one SSL certificate signed by a recognized certificate authority, and any services using SSL need to be using a certificate as well. Buy a decent 128 / 256 bit  SSL certificate and install it not just for Apache, but also for all of your active services. WebHost Manager has a section for installing service SSL certificates to make this process easier.

cPanel PCI Compliance Step 9

Finally document your versions. A part of your PCI docs file, you should have a screen shot of the version you are running of at least the following:
Apache, PHP, ModSecurity, Linux Kernel, CentOS, OpenSSH, and OpenSSL. Your output will look something like this:

root@server [/]# httpd -v
Server version: Apache/2.2.17 (Unix)
Server built: Dec 14 2010 17:23:57
Cpanel::Easy::Apache v3.2.0 rev5277

root@server [/]# php -v
PHP 5.3.4 (cli) (built: Dec 14 2010 17:30:39)
Copyright (c) 1997-2010 The PHP Group
Zend Engine v2.3.0, Copyright (c) 1998-2010 Zend Technologies
with the ionCube PHP Loader v3.3.20, Copyright (c) 2002-2010, by ionCube Ltd.
with Suhosin v0.9.32.1, Copyright (c) 2007-2010, by SektionEins GmbH

root@server [/]# uname -r
2.6.18-194.32.1.el5

root@server [/]# cat /etc/redhat-release
CentOS release 5.5 (Final)

root@server [/]# cat /home/cpeasyapache/src/modsecurity-apache_1.9.5/apache2/mod_security.c
|grep MODULE_RELEASE |head -1
#define MODULE_RELEASE “1.9.5″

root@server [/]# rpm -qa |grep openssl
openssl-devel-0.9.8e-12.el5_5.7
openssl-0.9.8e-12.el5_5.7

root@server [/]# rpm -qa |grep openssh
openssh-4.3p2-41.el5_5.1
openssh-server-4.3p2-41.el5_5.1
openssh-clients-4.3p2-41.el5_5.1

Since RedHat type operating systems, including CentOS and Fedora, use backporting for OpenSSH and OpenSSL, you may get a false positive on your PCI scan for these. If that happens to you, send the screen shots showing your OpenSSH, OpenSSL, as well as your CentOS version and kernel version to your PCI scanner and let them know your a running a seucre, backported version, and request that they test that version manually.
If your PCI ASV requests more proof you are running a secure version of OpenSSH and OpenSSL, you can send them a screen shot of the following commands, which show specifically what patches have been applied to your version.

rpm -q --changelog openssh | head -50
rpm -q --changelog openssl | head -50

This will produce output similar to:

# rpm -q --changelog openssl | head -50
* Tue Dec 07 2010 Tomas Mraz 0.9.8e-12.7
- fix CVE-2010-4180 - completely disable code for
SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG (#659462)

* Fri Mar 12 2010 Tomas Mraz 0.9.8e-12.6
- fix CVE-2009-3245 – add missing bn_wexpand return checks (#570924)
(output truncated)

Another common false positive with cPanel servers, is your scan might detect Exim as an open relay, this is because the server will sending the mail headers before authentication, even though a successful authentication is needed before it will allow email to go through. If this shows up on your scan you will want to ask the scanning vendor to test this vulnerability manually.

We hope you have enjoyed this article and found it useful for helping make your cPanel Linux server PCI compliant. Please remember to try and test the steps listed here on a test server before applying them to your production cPanel servers. In addition this article does not cover everything your need to do to be PCI compliant, and it meant to be a starting point, and provide information for a cPanel, CentOS specific server. We plan on bringing your future articles and howto’s to cover the PCI compliant information missing from this article.

Technorati Tags: Best UK Web Hosting 2011, Britain Web Hosting, England Web Hosting, fasthosts Alternative, Godaddy Alternative, London Web Hosting, PCI Compliant, Top UK Web Hosting 2011, UK2 alternative, Web Hosting 2011, WebHosting UK alternative

1. Begin by downloading the latest version of WHMCS, either from our client area here
2. Next, unzip the contents of the latest WHMCS zip file download to a folder on your computer
3. Now remove the /images/logo.jpg file to avoid overwriting your customised logo image
4. Next if you have customised your WHMCS admin folder name, you should rename the admin folder in the new files to match
5. Upload the new files to your existing installation folder overwriting any existing files
6. Visit the admin area as you normally would to login and you should then see the upgrade script
7. Accept the license agreement
8. Now take a full backup of your database using a tool such as phpMyAdmin
9. Tick to confirm you have backed up your database and click the upgrade button
10. Once the updates finish, delete the install folder from your server
11. Now proceed to update your custom templates with any new or changed files in the version you’ve upgraded to. These are listed in the Template Changes section of our Release Notes (see below).

As is normal with all major updates, this update 4 weeks after the initial release is a roll up of all the changes and fixes that have been made and distributed since the initial V4.5 stable was announced last month. It contains both bug fixes and improvements from the initial feedback we’ve received from you all. A changelog will be posted below shortly.

As this is a file based update only, no database upgrades are required and therefore no install/upgrade script. It’s simply a case of downloading the new files and uploading them to your installation. The version number in your system will then update automatically.

To aid and simplify upgrading, we have created 2 different downloads – there’s the full version to be used for all new installations and upgrades from any version earlier than V4.5.1, and an incremental version which only includes folders and templates which have changed, to make incremental updating a quicker & simpler process.

These are both available from the My Licenses section of the client area as usual to download at our Download Center

Security Patch Notice: V4.5.2 also includes the security patch we announced on Monday here  so if you upgrade to V4.5.2, you do not need to apply that patch separately again.