Atomicorp

Hi everyone, I am new to Plesk 12 and the concept of the multi php is cool, and while exploring it more it appears that all of the alternatives offered are from plesk themselves. Is there an option (and if so how?) to use atomic packages for 5.3, 5.4, 5.5, etc that come with the hardened options (li...

How would you disable SSL v3 for the plesk control panel itself for us folks who are stuck on the 9.5 linux release?

Hi, I wanted to use a script to create an asl web user on dozens of boxes. Something like /var/asl/bin/asl-web-useradd user password email Is such a thing possible? This section of the wiki doesnt appear to work anymore How can I create new accounts in the ASL GUI ? Just run this command as root: /v...

So the solution would be to either not use cidr blocks, or disable the whitelist?

Tortix also doesnt appear to like the cidr blocks anymore either. [root@box.com ~]# service tortixd start Starting tortixd: Syntax error on line 31 of /var/asl/etc/httpd/modsecurity.d/00_asl_whitelist.conf: Error creating rule: Could not add entry "10.0.0.0/8" in line 1 of file /etc/asl/wh...

Started getting mass spammed by psmon, right around the time of your update, 25 minutes now and still going.... Command executed: /sbin/service tortixd restart Exit value: 1 Signal number: 0 Dumped core?: 0 Stopping tortixd: [FAILED] Starting tortixd: Syntax error on line 25 of /var/asl/etc/httpd/mo...

Opened case.

Hi, not sure exactly when this happened - could have been when upgrading to 4.x, but it seems like ASL is no longer removing the old asl audit and logging directories/files in the same way it used to. For example, on one of my boxes I have this set: MODSEC_CLEAN_ALERT="3" MODSEC_DATADIR=&q...

Just following up, do you have any documentation on this type of thing you can point me to? Would using this be what I would need? https://atomicorp.com/wiki/index.php/Atomic_ModSecurity_Rules#.28Optional.29_Do_It_Yourself_Installation https://atomicorp.com/wiki/index.php/Downloading_Rules#Do_it_You...

Hi Mike, Thanks for the reply, that is definitely encouraging! Do you have any documentation on where to find the rule set, how to import it, and how to keep it up to date in a similar fashion to the linux side, or is this all things that we would need to discover and build on our end? I've looked t...

Hi guys, I'm investigating an option to potentially install Mod_Security on IIS using the following https://github.com/SpiderLabs/ModSecurity/wiki/Reference-Manual#installation-for-microsoft-iis I was curious if in doing so, it would allow us to use your real time rules - do you think this would be ...

Yeah I saw that in the release, but I was hoping for some guidance on how to install it

Ahh I see, I thought that was upgrade instructions for 3.2 users, and for a new 4.0 install run the installer ...
I'll give that a shot.

btw is there a way to do an unattended install, or bypass the human prompts so I can script this against multiple machines?

Mike, I followed those instructions, both from this line If this is set to "all", ASL will automatically upgrade itself based on your upgrade configuration, which is by default to check for updates daily. You can change this to hourly if you wish the system to check more often, or you can ...

Following the upgrade instructions, it says to just run "aum -uf" and it will happen. Unfortunately that doesnt seem to work for me, is there something else I can do? Additionally, is there a way to script this so I can run it across dozens of boxes with out having a manual human agree to ...