Christian Heutger
My feedback
-
3 votesopen discussion · 1 comment · Feature Suggestions » Panel/Mail · Flag idea as inappropriate… · Admin →Christian Heutger
shared this idea
·
-
16 votesChristian Heutger
commented
1. or EC (https://tools.ietf.org/html/rfc8463) as 2048 bit also already going down to be insecure in the near future
Christian Heutger
supported this idea
·
-
2 votesChristian Heutger
commented
Addendum: And do you also allow to set ciphers for other services like Plesk Panel here and different ciphers (because of worse support on client side) for mail server and to adjust DH param and EC DH param at cipher adjustment as otherwise it's still required to use sslmng in addition to what's provided in the plugin.
Christian Heutger
shared this idea
·
-
18 votes
Thank you for your input! We will consider this functionality in upcoming releases if it will be popular.
Everyone, please continue voting for this feature if you consider it important.— rk
Christian Heutger
supported this idea
·
-
22 votes
Thank you for your input! We will consider this functionality in upcoming releases if it will be popular.
Everyone, please continue voting for this feature if you consider it important.
—
IGChristian Heutger
supported this idea
·
-
35 votes
Thank you for your input! We will consider this functionality in upcoming releases if it will be popular.
Everyone, please continue voting for this feature if you consider it important.
—
AAChristian Heutger
commented
Fully agree, for VPS as well as for Raspberry Pi there are many install scripts on how to install OpenVPN, Sophos UTM and others integrate OpenVPN as well, however none of such setups is such restricted and unusable as the Plesk VPN. Also need to adjust to use with MacOS Viscosity.
Christian Heutger
supported this idea
·
-
100 votes
Thank you for your input! We will consider this functionality in upcoming releases, if it will be popular.
Everyone, please continue voting for this feature if you consider it important.—
IGChristian Heutger
commented
I would welcome rspamd. SA needs very much tweaks (additional to post-greet and rbl tweaks on postfix) to get close: Pyzor, Razor(2), DCC, adjustable/addable different rulesets, special plugins, GeoIP filtering, bayes could be fed with spam by spam archives like http://artinvoice.hu/spams/, should be tweaked by KAM rules etc. Look at my post on Proxmox Mail Gateway which is an antispam gateway, but also need tweaks. Great would be to have all of this in Plesk. A global bayes database for all Plesk users may help.
Christian Heutger
supported this idea
·
-
1 voteChristian Heutger
shared this idea
·
-
44 votesopen discussion · 1 comment · Feature Suggestions » Security · Flag idea as inappropriate… · Admin →Christian Heutger
supported this idea
·
-
17 votesopen discussion · 2 comments · Feature Suggestions » Security · Flag idea as inappropriate… · Admin →Christian Heutger
commented
For the first step would be great to automatically apply:
plesk sbin sslmng -vvv --strong-dh --dhparams-size=2048
And add:
plesk sbin sslmng --ciphers="ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES256-SHA" --protocols="TLSv1.2" --services="proftpd sw-cp-server nginx apache autoinstaller dovecot" --custom -vvv
-
8 votesopen discussion · 5 comments · Feature Suggestions » Security · Flag idea as inappropriate… · Admin →Christian Heutger
commented
There are many issues with selinux enabled, so that's no support.
Christian Heutger
supported this idea
·
-
300 votesplanned · 70 comments · Feature Suggestions » Plesk (general) · Flag idea as inappropriate… · Admin →Christian Heutger
supported this idea
·
Christian Heutger
commented
Support the idea for multi-homed environment requiring a local IP for local access in addition with a VPN IP for VPN access. With an alias I could choose a local and a VPN name.
-
14 votesChristian Heutger
shared this idea
·
DMARC will fail similar to SPF on forwarding, which is e.g. supported and widely used in Plesk. You implemented SRS to prevent SPF to fail, ARC is the same for DMARC.