Work at SourceForge, help us to make it a better place! We have an immediate need for a Support Technician in our San Francisco or Denver office.

Close

ISPConfig Hosting Control Panel / News: Recent posts

New Tutorial: How To Build PHP 5.6-beta3 on Debian for ISPConfig

How To Build PHP 5.6-beta3 (PHP-FPM & FastCGI) With ionCube Loader, Zend OPcache And APCu For ISPConfig 3 (Debian Wheezy)

Since ISPConfig 3.0.5, it is possible to use multiple PHP versions on one server and select the optimal PHP version for a website. This feature works with PHP-FPM (starting with PHP 5.3) and FastCGI (all PHP 5.x versions). This tutorial shows how to build PHP 5.5 as a PHP-FPM and a FastCGI version on a Debian Wheezy server. These PHP 5.6 builds include the ionCube Loader, Zend OPcache, and APCu.
Read full tutorial
link

Posted by SourceForge Robot 2014-05-30

New ISPConfig Tutorials available

Posted by SourceForge Robot 2014-05-12

ISPConfig 3.0.5.4 Patch1 released

ISPConfig 3.0.5.4 Patch 1 is available for download. This is a patch release for ISPConfig 3.0.5.4 that fixes some issues that were found in the last version. See changelog below for details.

-----------------------------------------------------
- Download
-----------------------------------------------------

The software can be downloaded here:

http://prdownloads.sourceforge.net/ispconfig/ISPConfig-3.0.5.4p1.tar.gz

------------------------------------
- Changelog
------------------------------------

http://bugtracker.ispconfig.org/index.php?do=index&tasks=&project=3&due=79&status

--------------------------------------
- Known Issues:
--------------------------------------

Please take a look at the bugtracker:

http://bugtracker.ispconfig.org

--------------------------------------
- BUG Reporting
--------------------------------------

Please report bugs to the ISPConfig bugtracking system:

http://bugtracker.ispconfig.org

----------------------------------------
- Supported Linux Distributions
----------------------------------------

- Debian Etch (4.0) - Wheezy (7.0) and Debian testing
- Ubuntu 7.10 - 14.04
- OpenSuSE 11 - 13.1
- CentOS 5.2 - 6.5
- Fedora 9 - 15

-----------------------------------------
- Installation
-----------------------------------------

The installation instructions for ISPConfig can be found here:

http://www.ispconfig.org/ispconfig-3/documentation/

or in the text files (named INSTALL_*.txt) which are inside the docs folder of the .tar.gz file.

------------------------------------------
- Update
------------------------------------------

To update existing ISPConfig 3 installations, run this command on the shell:

ispconfig_update.sh

Select "stable" as the update resource. The script will check if an updated version of ISPConfig 3 is available and then download the tar.gz and start the setup script.

A "reconfigure services" is not required for this patch update.

Detailed instructions for making a backup before you update can be found here:

http://www.faqforge.com/linux/controlpanels/ispconfig3/how-to-update-ispconfig-3/

If the ISPConfig version on your server does not have this script yet, follow the manual update instructions below.

-------------------------------------------
- Manual update instructions
-------------------------------------------

cd /tmp
wget http://www.ispconfig.org/downloads/ISPConfig-3-stable.tar.gz
tar xvfz ISPConfig-3-stable.tar.gz
cd ispconfig3_install/install
php -q update.php

link

Posted by SourceForge Robot 2014-04-25

ISPConfig 3.0.5.4 final released

ISPConfig 3.0.5.4 is available for download. This release includes new features and many bugfixes.

What's new in ISPConfig 3.0.5.4

  • Support for Apache 2.4.
  • Support for Ubuntu 13.10 and 14.04.
  • Support for OpenSuSE 12.3 and 13.1.
  • Added option to disable a whole client with one click.
  • Clients can be assigned to another reseller.
  • Added limit templates for resellers.
  • Added automatic welcome email for clients.
  • Added min. password length and strength check.
  • Add functions that allow clients to add their own nginx directives.
  • The "Login as client" function is now available for resellers too.
  • Added support for multiple email addresses in "send copy to" field of the mailbox.
  • Several other minor features have been added and a lot of bugs have been fixed. Please see release notes for a full list of changes.
  • -----------------------------------------------------
    - Download
    -----------------------------------------------------

The software can be downloaded here:

http://prdownloads.sourceforge.net/ispconfig/ISPConfig-3.0.5.4.tar.gz

------------------------------------
- Changelog
------------------------------------

http://bugtracker.ispconfig.org/index.php?do=index&tasks=&project=3&due=77&status[]=

--------------------------------------
- Known Issues:
--------------------------------------

Please take a look at the bugtracker:

http://bugtracker.ispconfig.org

--------------------------------------
- BUG Reporting
--------------------------------------

Please report bugs to the ISPConfig bugtracking system:

http://bugtracker.ispconfig.org

----------------------------------------
- Supported Linux Distributions
----------------------------------------

- Debian Etch (4.0) - Wheezy (7.0) and Debian testing
- Ubuntu 7.10 - 14.04
- OpenSuSE 11 - 13.1
- CentOS 5.2 - 6.5
- Fedora 9 - 15

-----------------------------------------
- Installation
-----------------------------------------

The installation instructions for ISPConfig can be found here:

http://www.ispconfig.org/ispconfig-3/documentation/

or in the text files (named INSTALL_*.txt) which are inside the docs folder of the .tar.gz file.

------------------------------------------
- Update
------------------------------------------

To update existing ISPConfig 3 installations, run this command on the shell:

ispconfig_update.sh

Select "stable" as the update resource. The script will check if an updated version of ISPConfig 3 is available and then download the tar.gz and start the setup script.

Detailed instructions for making a backup before you update can be found here:

http://www.faqforge.com/linux/controlpanels/ispconfig3/how-to-update-ispconfig-3/

If the ISPConfig version on your server does not have this script yet, follow the manual update instructions below.

-------------------------------------------
- Manual update instructions
------------------------------------------- ... read more

Posted by SourceForge Robot 2014-04-23

ISPConfig 3.0.5.4 RC2 released

The second release candidate of the upcoming ISPConfig 3.0.5.4 is available for download. RC versions are released for testing purposes and should not be installed on production systems.

The final version will be released on april 23.

What's new in ISPConfig 3.0.5.4

  • Support for Apache 2.4.
  • Support for Ubuntu 13.10.
  • Support for OpenSuSE 12.3 and 13.1.
  • Added option to disable a whole client with one click.
  • Clients can be assigned to another reseller.
  • Added limit templates for resellers.
  • Added automatic welcome email for clients.
  • Added min. password length and strength check.
  • Add functions that allow clients to add their own nginx directives.
  • The "Login as client" function is now available for resellers too.
  • Added support for multiple email addresses in "send copy to" field of the mailbox.
  • Several other minor features have been added and a lot of bugs have been fixed. Please see release notes for a full list of changes.
    Detailed Changelog

http://www.ispconfig.org/downloads/ISPConfig-3.0.5.4rc2.tar.gz

Update instructions

cd /tmp
rm -rf /tmp/ispconfig3_install
wget http://www.ispconfig.org/downloads/ISPConfig-3.0.5.4rc2.tar.gz
tar xvfz ISPConfig-3.0.5.4rc2.tar.gz
cd ispconfig3_install/install
php -q update.php

link

Posted by SourceForge Robot 2014-04-15

How to find out if your server is affected from Openssl Heartbleed vulnerability (CVE-2014-0160) and how to fix that

A severe vulnerability in OpenSSL has been found, the vulnerability is named Heartbleed and affects the heartbeat implementation in Openssl version 1.0.1 up to version 1.0.1f. This velnerability can be used to get the private key of a SSL connection, so it is important to update the server immediately. The bug is fixed in OpenSSL 1.0.1g. All Major Linux Distributions have release updates to the vulnerability.

Read more
link

Posted by SourceForge Robot 2014-04-08

ISPConfig 3.0.5.4 RC1 released

The first release candidate of the upcoming ISPConfig 3.0.5.4 is available for download. RC versions are released for testing purposes and should not be installed on production systems.

What's new in ISPConfig 3.0.5.4

  • Support for Apache 2.4.
  • Support for Ubuntu 13.10.
  • Support for OpenSuSE 12.3 and 13.1.
  • Added option to disable a whole client with one click.
  • Clients can be assigned to another reseller.
  • Added limit templates for resellers.
  • Added automatic welcome email for clients.
  • Added min. password length and strength check.
  • Add functions that allow clients to add their own nginx directives.
  • The "Login as client" function is now available for resellers too.
  • Added support for multiple email addresses in "send copy to" field of the mailbox.
  • Several other minor features have been added and a lot of bugs have been fixed. Please see release notes for a full list of changes.
    Detailed Changelog

http://bugtracker.ispconfig.org/index.php?do=index&tasks=&project=3&due=77&status[]=

Download

http://www.ispconfig.org/downloads/ISPConfig-3.0.5.4rc1.tar.gz

Update instructions

cd /tmp
rm -rf /tmp/ispconfig3_install
wget http://www.ispconfig.org/downloads/ISPConfig-3.0.5.4rc1.tar.gz
tar xvfz ISPConfig-3.0.5.4rc1.tar.gz
cd ispconfig3_install/install
php -q update.php

link

Posted by SourceForge Robot 2014-04-03

ISPConfig 3.0.5.4 beta released

The first beta of the upcoming ISPConfig 3.0.5.4 is available for download. Beta versions are released for testing purposes and should not be installed on production systems.

What's new in ISPConfig 3.0.5.4

  • Support for Apache 2.4.
  • Support for Ubuntu 13.10.
  • Support for OpenSuSE 12.3 and 13.1.
  • Added option to disable a whole client with one click.
  • Clients can be assigned to another reseller.
  • Added limit templates for resellers.
  • Added automatic welcome email for clients.
  • Added min. password length and strength check.
  • Add functions that allow clients to add their own nginx directives.
  • The "Login as client" function is now available for resellers too.
  • Added support for multiple email addresses in "send copy to" field of the mailbox.
  • Several other minor features have been added and a loz of bugs have been fixed. Please see release notes for a full list of changes.

Detailed Changelog

http://bugtracker.ispconfig.org/index.php?do=index&tasks=&project=3&due=77&status[]=

Download

http://www.ispconfig.org/downloads/ISPConfig-3.0.5.4b.tar.gz

Update instructions
... read more

Posted by SourceForge Robot 2014-03-19

Tutorial: The Perfect Server - CentOS 5.10 x86_64

This tutorial shows how to prepare a CentOS 5.10 x86_64 server for the installation of ISPConfig 3, and how to install ISPConfig 3. ISPConfig 3 is a webhosting control panel that allows you to configure the following services through a web browser: Apache web server, Postfix mail server, MySQL, BIND nameserver, PureFTPd, SpamAssassin, ClamAV, and many more.

http://www.howtoforge.com/perfect-server-centos-5.10-x86_64-ispconfig-3
link

Posted by SourceForge Robot 2014-03-04

Tutorial: Use mount --bind To Move The Website And Email Directory Of a ISPConfig 3 Server To a New Directory

In the following guide, I will explain the procedure on how to move the email and website directory of a ISPConfig 3 installation to a new partition. This might become handy when your current partition runs out of space. I will use a bind mount for this, a symlink will not work here as ISPConfig checks path for symlink attacks, so if the website or email path contains a symlink, ISPConfig will reject to write to that directory. In this example, I will move the www and email directory to the /home partition. You dont have to move both partitions together, so moving just the email or web partition will work as well.

More...
link

Posted by SourceForge Robot 2014-02-28

Tutorial: Using Pydio webftp client in an ISPConfig 3 multiserver installation

This howto shows you, how you can use the webftp client pydio (formerly Ajaxplorer) in a multi-server installation of ISPConfig 3.
Prerequisites
You have to set up ISPConfig 3 on your servers. Best way to do this is to follow our "perfect server" tutorials.
More...
link

Posted by SourceForge Robot 2014-02-21

ISPConfig monitor app 2.1 for android released

The ISPConfig monitor app 2.1 is available in the android play store now.

This release adds a new dark theme. The option to switch between the light grey and the dark theme is on the settings page of the app.

About the app

The ISPConfig Monitor App for Android is for all servers, not only for servers running ISPConfig. With the ISPConfig Monitor App, you can check your server status and find out if all services are running as expected. You can check TCP and UDP ports and ping your servers. In addition to that you can use this app to request details from servers that have ISPConfig installed (please note that the minimum installed ISPConfig 3 version with support for the ISPConfig Monitor App is 3.0.3.3!); these details include everything you know from the Monitor module in the ISPConfig Control Panel (e.g. services, mail and system logs, mail queue, CPU and memory info, disk usage, quota, OS details, RKHunter log, etc.), and of course, as ISPConfig is multiserver-capable, you can check all servers that are controlled from your ISPConfig master server.

http://www.ispconfig...onitor-app.html
link

Posted by SourceForge Robot 2013-11-08

ISPConfig Authenticated Remote Code Execution (CVE-2013-3629)

Metasploit has released a vulnerability notice for the ISPConfig project:

http://packetstormsecurity.com/files/cve/CVE-2013-3629

Short Description

A correctly authenticated ISPconfig server administrator is able to upload language files into ISPConfig on his own server which potentially may contain malicious php code.

Questions and answers

Q: Can someone attack my server trough this exploit remotely?
A: No.

Q: Is this a privilege escalation issue?
A: No.

Q: Can a client or reseller attack my server trough this vulnerability?
A: No.

Q: Is a fix available for this Issue?
A: Yes, a fix is available since september 4th
   http://www.ispconfig.org/page/en/ispconfig/patches.html
   The patch ID is: 3053_langimport

Q: How can my server be affected by this vulnerability?
A: The only way to misuse this potential vulnerability on an unpatched
   server is that the server administrator downloads a language file
   from an untrusted source and then uploads this language file into
   ISPConfig on his own server after he authenticated himself correctly
   as server administrator. So the risk that someone is affected by
   this issue at all is very low.

Q: How did you fix it?
A: We implemented a stricter parser for the language files to avaoid
   that language files with malicious code get written to disk when
   uploaded by the administrator. Additionally we added a warning text
   to remind the administrator to not upload files from untrusted
   sources to his server.

Q: What about the article at PCWorld and the blog from Metasploit?
A: Metasploit and PCWorld published a misleading article about this
   potential vulnerability in ISPConfig and some other OS projects
   were they claim that we haven't and even won't patch this issue while
   the issue is indeed patched since Sept 4th.
   We informed metasploit about that on Sept 4th. This can be verified
   by everyone in our svn log:
  
   Revision 4144 from our SVN stable branch:
   svn://svn.ispconfig.org/ispconfig3/branches/ispconfig-3.0.5
  
   The patch was also published on the ISPConfig patch page the same
   day. The disclosure was sent to us encrpyted with our pgp key and
   also our contact information is linked on every page on the
   ispconfig.org website, so the information that we can not be reached
   or that the disclosure could not be sent to us securely as stated by
   PCWorld is just wrong.
link

Posted by SourceForge Robot 2013-10-31

Ubuntu 13.10 upgrade warning

Ubuntu 13.10 has been released recently. This new Ubuntu versions uses apache 2.4 by default which causes various problems. The apache configuration Syntax has been changed from apache 2.2 to 2.4, so websites that were created for apache 2.2 will fail on the new version. ISPConfig 3.0.5.3 is not compatible with apache 2.4 yet, so we highly recommend to not update to Ubuntu 13.10 until we release a ISPConfig update with Apache 2.4 support.
link

Posted by SourceForge Robot 2013-10-23

Tutorial: Using RoundCube Webmail With ISPConfig 3 On Debian Wheezy (nginx)

This guide explains how to install the RoundCube webmail application on a Debian Wheezy server running ISPConfig and nginx, and how to enable the ISPConfig 3 plugins for RoundCube so that users can perform actions like changing their email passwords from within RoundCube. Roundcube webmail is a browser-based multilingual IMAP client with an application-like user interface; it comes with functions like MIME support, address book, folder manipulation, message searching and spell checking. More...
link

Posted by SourceForge Robot 2013-10-10

ISPConfig monitor app 2.0 for Android released

The ISPConfig monitor app 2.0 is available in the android play store now.

The ISPConfig Monitor App for Android is for all servers, not only for servers running ISPConfig. With the ISPConfig Monitor App, you can check your server status and find out if all services are running as expected. You can check TCP and UDP ports and ping your servers. In addition to that you can use this app to request details from servers that have ISPConfig installed (please note that the minimum installed ISPConfig 3 version with support for the ISPConfig Monitor App is 3.0.3.3!); these details include everything you know from the Monitor module in the ISPConfig Control Panel (e.g. services, mail and system logs, mail queue, CPU and memory info, disk usage, quota, OS details, RKHunter log, etc.), and of course, as ISPConfig is multiserver-capable, you can check all servers that are controlled from your ISPConfig master server.

Release notes

The app has been developed from scratch to solve the issues of the former app version 1.4.... read more

Posted by SourceForge Robot 2013-09-24

Patches for ISPConfig 3.0.5.3 and a new patch tool available

We published today a new patch tool for ISPConfig 3 and some patches for ISPConfig 3.0.5.3. The tool and patch descriptions are available on the new "patches" subpage in the downloads section at ispconfig.org. http://www.ispconfig.org/download/patches/
link

Posted by SourceForge Robot 2013-08-27

ISPConfig 3.0.5.3 released

ISPConfig 3.0.5.3 is available for download. This release is a bugfix release for ISPConfig 3.0.5 and contains a important security patch. It is highly recommended to install this update. Please see security advisory for details: http://www.ispconfig.org/dev/ispconfig-3-security-advisory-20130808/ For a detailed list of changes, please see the changelog section below. For a detailed list of changes, please [...]
link

Posted by SourceForge Robot 2013-08-09

ISPConfig 3 Security Advisory 2013/08/08

Summary A security issue has been found in the sites module which allows customers to create website users for websites which they do not own from within the ISPConfig interface. This issue requires a valid ISPConfig client login and the manipulation of http variables. If a client would try to create a login for a [...]
link

Posted by SourceForge Robot 2013-08-08

Tutorial: How To Use PHP 4.4.9 (FastCGI) With Apache & ISPConfig 3 (Debian Wheezy)

Since ISPConfig 3.0.5, it is possible to use multiple PHP versions on one server and select the optimal PHP version for a website. If you have some very old websites on your server, they might not work with PHP5, but only with PHP4. This tutorial shows how to build PHP 4.4.9 as a FastCGI version for use with Apache2 on a Debian Wheezy server. This PHP version can be used together with the default PHP (installed through apt) in ISPConfig. More…
link

Posted by SourceForge Robot 2013-06-19

Tutorial: How To Use PHP 4.4.9 (FastCGI) With Apache & ISPConfig 3 (Debian Wheezy)

Since ISPConfig 3.0.5, it is possible to use multiple PHP versions on one server and select the optimal PHP version for a website. If you have some very old websites on your server, they might not work with PHP5, but only with PHP4. This tutorial shows how to build PHP 4.4.9 as a FastCGI version [...] link

Posted by SourceForge Robot 2013-06-19

Tutorial: Using RoundCube Webmail With ISPConfig 3 On Debian Wheezy (Apache2)

This guide explains how to install the RoundCube webmail application on a Debian Wheezy server running ISPConfig and Apache2, and how to enable the ISPConfig 3 plugins for RoundCube so that users can perform actions like changing their email passwords from within RoundCube. Roundcube webmail is a browser-based multilingual IMAP client with an application-like user [...] link

Posted by SourceForge Robot 2013-06-11

Tutorial: How To Use Multiple PHP Versions (PHP-FPM & FastCGI) With ISPConfig 3 (Ubuntu 13.04)

Since ISPConfig 3.0.5, it is possible to use multiple PHP versions on one server and select the optimal PHP version for a website. This feature works with PHP-FPM (starting with PHP 5.3) and FastCGI (all PHP 5.x versions). This tutorial shows how to build PHP 5.3 and PHP 5.4 as a PHP-FPM and a FastCGI version on an Ubuntu 13.04 server. These PHP versions can be used together with the default PHP (installed through apt) in ISPConfig. More…
link

Posted by SourceForge Robot 2013-05-23

Tutorial: How To Use Multiple PHP Versions (PHP-FPM & FastCGI) With ISPConfig 3 (Ubuntu 13.04)

Since ISPConfig 3.0.5, it is possible to use multiple PHP versions on one server and select the optimal PHP version for a website. This feature works with PHP-FPM (starting with PHP 5.3) and FastCGI (all PHP 5.x versions). This tutorial shows how to build PHP 5.3 and PHP 5.4 as a PHP-FPM and a FastCGI [...] link

Posted by SourceForge Robot 2013-05-23

Tutorial: The Perfect Server – Debian Wheezy (nginx, BIND, Dovecot, ISPConfig 3)

This tutorial shows how to prepare a Debian Wheezy server (with nginx, BIND, Dovecot) for the installation of ISPConfig 3, and how to install ISPConfig 3. ISPConfig 3 is a webhosting control panel that allows you to configure the following services through a web browser: Apache or nginx web server, Postfix mail server, Courier or Dovecot IMAP/POP3 server, MySQL, BIND or MyDNS nameserver, PureFTPd, SpamAssassin, ClamAV, and many more. This setup covers nginx (instead of Apache), BIND (instead of MyDNS), and Dovecot (instead of Courier). More…
link

Posted by SourceForge Robot 2013-05-12