Server Software and Configuration Services
New csf v2.62
Changes:
- Fixed CIDR support issue with csf.ignore only recognising the first listed entry
General
New csf v2.61
Changes:
- Fixed problem (that happened on some OS’s) with lfd not being killed by /etc/init.d/lfd
New csf v2.60
Changes and additional OS support:
- Added log file locations to csf.conf
- openSUSE v10 compatible (generic)
- Debian v3.1 (sarge) compatible (generic)
- Unbuntu v6.06 LTS compatible (generic)
- Added installation check for the LWP (libwww-perl) perl module
- Ran spell checker against the readme.txt file
ConfigServer cPanel Services
We’ve decided to simplify our cPanel Server Service packages to a single package (with a MailScanner option). This has been done for a one main reason – we’ve found that many people who were purchasing the smaller packages were needing the security features of the large packages and weren’t benefitting from them, frequently purchasing additional services from us to bring their servers up to the Full Service spec.To better service our customers we’ve created a single package that tackles all of the apsects of server security and management that we deal with. We’ve reduced the price of what was the cPanel Full Service package for the new all encompassing package.We have not removed any features at all whilst doing this.We hope the change benefits our customers in making their servers more secure and managable.
chkrootkit v0.47 released
chkrootkit 0.47 is now available! This version includes: * chkproc.c - some bug fixes, thanks to Lantz Moore - use of getpriority() to identify LKMs, thanks to Yjesus(unhide) and Slider/Flimbo (skdet) - new rootkit detected: - Enye LKM * chkrootkit - new test: - crontab - new rootkits/worms detected: - Enye LKM - Lupper.Worm - shv5 - more ports added to the bindshell test - some minor bug fixeschkrootkit is a tool to locally check for signs of a rootkit. Moreinformation about chkrootkit and rootkits can be found athttp://www.chkrootkit.org/.
New rkhunter v1.2.9
The rkhunter developer has finally released a long awaited update:
- This release added support for RHEL WS/AS/ES 3 Taroon update 8, Fedora Core 5, and SuSE 10. Checks were added for packet capturing applications and processes using deleted files. The netstat check was enabled for AIX and the backdoor check was enabled for SunOS. Logfile specification and checks were added.
http://rkhunter.sourceforge.net/Unfortunately, it looks like they still don’t support the most popular OS’s md5sums, i.e. RHEv4/CentOSv4To upgrade:
/bin/rm -Rf rkhunter*wget http://surfnet.dl.sourceforge.net/sourceforge/rkhunter/rkhunter-1.2.9.tar.gztar -xzf rkhunter-*cd rkhunter-*./installer.sh cd ../bin/rm -Rf rkhunter*rkhunter –updaterkhunter -c –skip-keypress
New csf v1.31
I have released another new versiob of csf with the following changes:
- Removed some redundant code from csf
- Display error in csf if IP already in allow/deny file
- Stopped install.sh from overwriting email templates
- Added email notification for login tracking including a new email template tracking.txt
- Added mod_security apache module IP blocking in lfd
Upgrade either through WHM or follow upgrade.txt in the tarball.
New csf v1.2
I’ve released a new version of csf with the following changes:
Fixed uninstall script to remove lfd from chkservdFixed lfd so that checks were not made on options where a log file is sharedFixed lfd stop/start to dis/enable chkservd optionAdded upgrade feature to WHM when a new version of csf is available
Follow the upgrade.txt file within the csf tarball – the last time you’ll need to do this manually if you use the new WHM upgrade feature 😉
EV1 and The Planet Announce Merger
Wow.I’m sure the forums will be a hive of activity with this news:
DALLAS, TX — Everyones Internet (EV1) and The Planet, two leading providers of dedicated hosting, announced today that they have merged.
New mod_security v1.9.3
A new version of mod_security has been released with the following changes:
10/4/2006 1.9.3—————