Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Sign In Register

Quick Links


Shells Virtual Desktop
BMail.ag - Secure Email Service
Server.net
CPLicense.net
VPS Server
Buy VPN
Vultr
VMs for AI
HostDare
ReliableSite White-Label Dedicated Hosting for Resellers
InterServer VPS
BMail.ag - Secure Email Service
Best VPN
High-Performance Bare Metal Server Solutions
Karvl.com
Server Mania Cloud Hosting
DataWagon Hosting
AlphaVPS Hosting
Evoxt.com
Clouvider
VPS Hosting with NVMe
Residential IPs in the US & 4G Mobile Proxies in EU & US with Unlimited Bandwidth
ReliableSite White-Label Dedicated Hosting for Resellers
Rabisu - Hosting Solutions
Shells Virtual Desktop

Categories

In this Discussion

Home › General
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

Directadmin Feedback Thread! Feedback wanted to help improve the product!

1…2930323435…51

Comments

  • FranciscoFrancisco Top Host, Host Rep, Veteran

    @smtalk I think a useful feature would be cPanel's Features option.

    It'd allow people to make a slimmed down account where they only want the user to have access to controlling email addresses and to hide the icons that aren't in use.

    Probably fairly involved since it'd require ACL's all over but still, a useful feature.

    Francisco

    Thanked by 2bikegremlin eva2000
  • DrukpaDrukpa Member

    I am using nginx reverse proxy with apache. Has anyone been able to use mod_security to block bruteforce attempts on wordpress (wp-login.php/xmlrpc.php) instead of DA's inbuilt brute force detection.

    If I recall, if I choose configure modsecurity with DA, it includes the mod security rules for both nginx and apache, but I only want apache to process the rules since the rules are apache specific. I can manually exclude the rules from nginx, but on updates, nginx configuration is overwritten to include those rules and since the rules are apache specific, nginx fails to start.

    When using cpanel, I had the bruteforce rules that blocks after certain attempts and adds the IP to csf/lfd.

  • mustafamw3mustafamw3 Member, Patron Provider, LIR

    Drukpa said: When using cpanel, I had the bruteforce rules that blocks after certain attempts and adds the IP to csf/lfd

    Cpanel has cphulk and plesk has fail2ban for brute force protection, directadmin is su*ks at brute force protection, the csf block ip after 20 and sometimes after 49 login attempts in directadmin.
    I didn't like DA. It consumes more resources than plesk or cpanel. The php.ini configuration editing didn't work even after restrating apache, nignx and the server
    I hope they will provide better brute force protection out of box and more features

  • KodisKodis Member

    Maybe someone can share the best Directadmin configuration for hosted Wordpress sites.
    My current setup is:
    Nginx_apache
    PHP 7.3 ( some plugins do not work on 7.4 version).
    PHP OPcache
    MariaDB
    Http/2
    What else do i need for better performance?

    I also tried OLS but it has some problems with htaccess redirects etc...

    I'm running on a dedicated server
    32GB ram
    SSD disks

  • smtalksmtalk Member

    @Drukpa said:
    I am using nginx reverse proxy with apache. Has anyone been able to use mod_security to block bruteforce attempts on wordpress (wp-login.php/xmlrpc.php) instead of DA's inbuilt brute force detection.

    If I recall, if I choose configure modsecurity with DA, it includes the mod security rules for both nginx and apache, but I only want apache to process the rules since the rules are apache specific. I can manually exclude the rules from nginx, but on updates, nginx configuration is overwritten to include those rules and since the rules are apache specific, nginx fails to start.

    When using cpanel, I had the bruteforce rules that blocks after certain attempts and adds the IP to csf/lfd.

    mod_security is only installed on nginx if nginx+apache is used. Nginx+apache combination is used to offload the load from apache, mod_security in front of apache does just that :smile: If you wouldn't like to use this approach, you may simply use standalone apache, that way mod_security would be loaded in apache as well.

    Regarding wp-login blocking - BFM should put an IP block in CSF/LFD, if integration isn't disabled.

    @mustafamw3 said:

    Drukpa said: When using cpanel, I had the bruteforce rules that blocks after certain attempts and adds the IP to csf/lfd

    Cpanel has cphulk and plesk has fail2ban for brute force protection, directadmin is su*ks at brute force protection, the csf block ip after 20 and sometimes after 49 login attempts in directadmin.
    I didn't like DA. It consumes more resources than plesk or cpanel. The php.ini configuration editing didn't work even after restrating apache, nignx and the server
    I hope they will provide better brute force protection out of box and more features

    Is CSF active on the system? It has LF_DIRECTADMIN parameter, which is set to 5 login failures by default. CSF has full integration of DA.

    Regarding resource consumption - which service was it?

    php.ini - I guess wrong file has been modified, you may check the one currently in use by using "php --ini" command. If it's running in PHP-FPM mode - then it's PHP-FPM service which needs to be restarted. There is also a possibility that the website you checked had PHP settings set in .htaccess.

    @Kodis said:
    Maybe someone can share the best Directadmin configuration for hosted Wordpress sites.
    My current setup is:
    Nginx_apache
    PHP 7.3 ( some plugins do not work on 7.4 version).
    PHP OPcache
    MariaDB
    Http/2
    What else do i need for better performance?

    I also tried OLS but it has some problems with htaccess redirects etc...

    I'm running on a dedicated server
    32GB ram
    SSD disks

    I'd suggest optimizing MariaDB settings. Regarding OpenLiteSpeed - it should be compatible with WordPress and most common CMS .htaccess. If reload/restart is a problem on new .htaccess time - https://help.directadmin.com/item.php?id=2097

  • imokimok Member

    @smtalk said:

    AlwaysSkint said: IMO, there's a fundamental functional/documentation problem with DA. A series of manual steps/procedures in various places, with no indication on what is current/applicable. There's little point applying something from, say a year ago, that might break the efforts in later releases.

    https://docs.directadmin.dev is ready for the first feedback :smile: It doesn't have a lot of threads at the moment, but we'll keep filling the latest/updated data there. Suggestions are welcome. Thank you!

    Really? No mobile friendly?

  • smtalksmtalk Member

    @imok said:

    @smtalk said:
    https://docs.directadmin.dev is ready for the first feedback :smile: It doesn't have a lot of threads at the moment, but we'll keep filling the latest/updated data there. Suggestions are welcome. Thank you!

    Really? No mobile friendly?

    I'll definitely have improvements. That was just to ask for first opinions, we don't really call it final :smile:

    Thanked by 1imok
  • KodisKodis Member

    @smtalk said:

    @Drukpa said:
    I am using nginx reverse proxy with apache. Has anyone been able to use mod_security to block bruteforce attempts on wordpress (wp-login.php/xmlrpc.php) instead of DA's inbuilt brute force detection.

    If I recall, if I choose configure modsecurity with DA, it includes the mod security rules for both nginx and apache, but I only want apache to process the rules since the rules are apache specific. I can manually exclude the rules from nginx, but on updates, nginx configuration is overwritten to include those rules and since the rules are apache specific, nginx fails to start.

    When using cpanel, I had the bruteforce rules that blocks after certain attempts and adds the IP to csf/lfd.

    mod_security is only installed on nginx if nginx+apache is used. Nginx+apache combination is used to offload the load from apache, mod_security in front of apache does just that :smile: If you wouldn't like to use this approach, you may simply use standalone apache, that way mod_security would be loaded in apache as well.

    Regarding wp-login blocking - BFM should put an IP block in CSF/LFD, if integration isn't disabled.

    @mustafamw3 said:

    Drukpa said: When using cpanel, I had the bruteforce rules that blocks after certain attempts and adds the IP to csf/lfd

    Cpanel has cphulk and plesk has fail2ban for brute force protection, directadmin is su*ks at brute force protection, the csf block ip after 20 and sometimes after 49 login attempts in directadmin.
    I didn't like DA. It consumes more resources than plesk or cpanel. The php.ini configuration editing didn't work even after restrating apache, nignx and the server
    I hope they will provide better brute force protection out of box and more features

    Is CSF active on the system? It has LF_DIRECTADMIN parameter, which is set to 5 login failures by default. CSF has full integration of DA.

    Regarding resource consumption - which service was it?

    php.ini - I guess wrong file has been modified, you may check the one currently in use by using "php --ini" command. If it's running in PHP-FPM mode - then it's PHP-FPM service which needs to be restarted. There is also a possibility that the website you checked had PHP settings set in .htaccess.

    @Kodis said:
    Maybe someone can share the best Directadmin configuration for hosted Wordpress sites.
    My current setup is:
    Nginx_apache
    PHP 7.3 ( some plugins do not work on 7.4 version).
    PHP OPcache
    MariaDB
    Http/2
    What else do i need for better performance?

    I also tried OLS but it has some problems with htaccess redirects etc...

    I'm running on a dedicated server
    32GB ram
    SSD disks

    I'd suggest optimizing MariaDB settings. Regarding OpenLiteSpeed - it should be compatible with WordPress and most common CMS .htaccess. If reload/restart is a problem on new .htaccess time - https://help.directadmin.com/item.php?id=2097

    Maybe some link there to find info on how to optimize my.cnf
    mysqltuner does not give me any usefull info :)

  • fburgerfburger Member

    Is it possible to help with translations? I would love to see a german translation at buyshared's reseller accounts and could help.. :-)

  • FranciscoFrancisco Top Host, Host Rep, Veteran

    @fburger said:
    Is it possible to help with translations? I would love to see a german translation at buyshared's reseller accounts and could help.. :-)

    Log a ticket linking to https://forum.directadmin.com/threads/evolution-german-translation-1-595.56375/ and i'll get it loaded up :)

    Francisco

  • smtalksmtalk Member

    @MikePT said:

    @smtalk said:

    @Francisco said:
    @DA_Mark I'd really like a way to do an administrative suspend of an email address, or a whole accounts ability to send emails.

    In cPanel we have whampi1 suspend_outgoing_email user=$username which is helpful when you have a user that has a compromised mail box.

    Francisco

    https://help.directadmin.com/item.php?id=655

    If you want to block just a global system path (php mail()), you can just use /etc/exim.blockcracking/script.denied_paths.txt for it, for example:
    ^./wp-content/cache.
    ^./wp-content/uploads.

    To block an email account until he changes his password (button would appear in GUI):
    /var/spool/exim/blocked_authenticated_users

    To block just a single PHP path:
    /var/spool/exim/blocked_script_paths

    Nah. Just automate this. Providers cant spend time on CLI 😁.

    Oh, https://customerdomain:2222 pls....
    All our resellers have asked for this. It can just share their own SSL. Doesnt look hard to implement as the origin SSL already exists. Like cPanel does it.

    Added some of the blocking functionality to Admin Settings -> E-mail Settings section, already in 1.60RC1.

    Feedback from the community is still welcome :smile:

    Thanked by 2MikePT Francisco
  • AlwaysSkintAlwaysSkint Member
    edited January 2020

    a. Is it possible to suppress the "your backups are ready" messages?

    b. I have one installation that does automatic updates but the other one doesn't, even though it is set to do so, in the Edit options section. Have I missed something obvious?

  • smtalksmtalk Member

    @AlwaysSkint said:
    Is it possible to suppress the "your backups are ready" messages?

    I have one installation that does automatic updates but the other one doesn't, even though it is set to do so, in the Edit options section. Have I missed something obvious?

    There is “ Send a message when a backup has finished.” in backup/restore settings.

    Thanked by 1AlwaysSkint
  • smtalksmtalk Member

    @AlwaysSkint said:
    b. I have one installation that does automatic updates but the other one doesn't, even though it is set to do so, in the Edit options section. Have I missed something obvious?

    Try “./build cron” for it.

    Thanked by 1AlwaysSkint
  • smtalksmtalk Member

    1.60 has been released!

    Thanked by 3MikePT Limpan MichaelCee
  • seriesnseriesn Member

    @smtalk said:
    1.60 has been released!

    That is awesome man! Any update on getting a centralized config? Either through CLI or GUI?

  • JamesFJamesF Member, Host Rep

    New version looks good and a couple of new features. Just wish they would have the same mail log as cPanel to easily track incoming / outgoing mail.

    Also looks like JetBackup will be out soon.

  • kp93kp93 Member

    Hi !

    Today got strange issue on my DA dedicated server.

    My OS : Centos 7
    DirectAdmin 1.59.5
    Apache 2.4.41

    Suddenly server started throwing 403 Error on all domains, even DirectAdmin panel was not accessible and SSH network connection rejected.

    MySQL database was remotely available , and Server was pinging .

    After reboot error disappeared

    Did anyone faced this issue ever ?

  • MikePTMikePT Veteran

    @kp93 said:
    Hi !

    Today got strange issue on my DA dedicated server.

    My OS : Centos 7
    DirectAdmin 1.59.5
    Apache 2.4.41

    Suddenly server started throwing 403 Error on all domains, even DirectAdmin panel was not accessible and SSH network connection rejected.

    MySQL database was remotely available , and Server was pinging .

    After reboot error disappeared

    Did anyone faced this issue ever ?

    Open a ticket with DA if needed.

  • kp93kp93 Member

    @MikePT Thanks

    Thanked by 1MikePT
  • smtalksmtalk Member

    eva2000 said: definitely useful if you intend follow through on highest voted feature requests

    Finally it's here: https://feedback.directadmin.com

    Thanked by 1eva2000
  • MechanicWebMechanicWeb Member, Patron Provider

    MS said: Those Modern/Flat icons look good!

    They are really nice. For the first time since I started using a DA, they look prettier than cPanel's icons.

    smtalk said: Yes, because not all the articles have been migrated yet There won't be any help.directadmin.com URLs there in the future.

    That's a nice approach, too. help.dierctadmin.com confuses people.

    While you are at it, instead of splitting an entire process into multiple sections in multiple KBs, try to create a large, complete article. Smaller KBs don't help people who are new to DA, and the the experienced admins don't need them at all.

    smtalk said: Regarding wp-login blocking - BFM should put an IP block in CSF/LFD, if integration isn't disabled.

    Does that mean we no longer have to use csf-bfm-install.sh and install CSF directly downloaded from CSF website?

    In addition to the improvements, I would really like to see a GUI to parse email delivery reports built into DA Admin level. It really saves a lot of time since you can log into DA with a single click from WHMCS.

  • MechanicWebMechanicWeb Member, Patron Provider

    In addition to what I have said earlier, I would also like to see a timestamp on all the docs, including on docs.directadmin.dev

    Thanked by 1AlwaysSkint
  • FranciscoFrancisco Top Host, Host Rep, Veteran
    edited February 2020

    One change I'd like to see is how changing an accounts password works.

    Right now you have to go to /reseller/passwords and manually type the username.

    This should at the very least be linked from the user lists page in the right side, if not turned into a modal on that same page.

    This page isn't linked on modify user page either and should be if possible.

    EDIT - clarifying a few parts.

    EDIT 2 - I think the modify user link should be added to the right side drop down of the show users page as well.

    Francisco

  • anonym_useranonym_user Member

    We need backup encryption to comply with privacy laws.
    Any news about JetBackup?

  • desfiredesfire Member

    It would be great to be able to upgrade user to reseller directly from GUI

  • Tr33nTr33n Member

    anonym_user said: Any news about JetBackup?

    https://request.jetapps.com/topic/support-for-direct-admin#comment-498

    First public ALPHA is expected end of Q1 this year, we will then probably will need some feedback from the community.

    Thanked by 1anonym_user
  • JamesFJamesF Member, Host Rep

    JetBackup is taking forever......

  • LeeLee Veteran

    experttechit said: JetBackup is taking forever......

    It's really not, they didn't start it until fairly recently and besides, what do you want? Something that works properly or shit?

  • JamesFJamesF Member, Host Rep

    Personally I’d love Acronis Cloud Backup for DirectAdmin, but I am not sure if that will happen.....

Sign In or Register to comment.