store | blogs | forums | twitter | facebook | wiki | mailing lists | downloads | support portal
Atomic Secure Linux
It is currently Tue May 21, 2013 10:50 am

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic Share/Bookmark  [ 7 posts ] 
Author Message
 Post subject: Disabling features geared towards handling email
Unread postPosted: Sat Jun 16, 2012 10:02 pm 
Offline
Forum Regular
Forum Regular

Joined: Tue Jun 09, 2009 12:57 pm
Posts: 134
during the setup I already disabled the available options that are related to handling email. since this webserver doesnt handle ANY email (aside from outgoing emails generated by the server itself) what else could I disable to spare some resources?

Some of the rulesets come to mind. How do I selectively disable unnecessary rulesets ?

What else could I disable?

Thanks


Top
 Profile  
 
 Post subject: Re: Disabling features geared towards handling email
Unread postPosted: Sat Jun 16, 2012 10:29 pm 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
User avatar

Joined: Thu Feb 07, 2008 7:49 pm
Posts: 3244
Location: Chantilly, VA
Quote:
During the setup I already disabled the available options that are related to handling email.


Do you mean ASL options that handle email? If so, nothing in ASL handles email. Or did you mean something else?

Quote:
How do I selectively disable unnecessary rulesets ?


Log into the ASL GUI, click on Configuration, click on ASL configuration, scroll down to the Mod_security configuration settings and you can disable rulesets there.

_________________
Michael Shinn
Atomicorp - Security For Everyone

Co-Author of Troubleshooting Linux Firewalls.


Top
 Profile  
 
 Post subject: Re: Disabling features geared towards handling email
Unread postPosted: Sat Jun 16, 2012 10:56 pm 
Offline
Forum Regular
Forum Regular

Joined: Tue Jun 09, 2009 12:57 pm
Posts: 134
mikeshinn wrote:
Do you mean ASL options that handle email? If so, nothing in ASL handles email. Or did you mean something else?


I mean SpamAssassin and ClamD

mikeshinn wrote:
Log into the ASL GUI, click on Configuration, click on ASL configuration, scroll down to the Mod_security configuration settings and you can disable rulesets there.


I only see

Code:
embedded   *   *   *   *   80   
embedded   *   *   *   *   443

_________________
CentOS 6.3 (2.6.32.60-40.art.x86_64)
ASL 3.2.13-30.el6.art
Webmin 1.6.2
Virtualmin 3.99.gpl
Apache 2.2.15
PHP 5.3.3 (mod_fcgid/2.3.7)


Top
 Profile  
 
 Post subject: Re: Disabling features geared towards handling email
Unread postPosted: Sat Jun 16, 2012 11:11 pm 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
User avatar

Joined: Thu Feb 07, 2008 7:49 pm
Posts: 3244
Location: Chantilly, VA
Quote:
I mean SpamAssassin and ClamD


Spamassasin is not part of ASL, nor does ASL install it.

Clamd is used to scan the system for malware, such as web and FTP uploads, and if you enable the realtime antimalware system.

Quote:
Quote:
Log into the ASL GUI, click on Configuration, click on ASL configuration, scroll down to the Mod_security configuration settings and you can disable rulesets there.


I only see

Code:
embedded * * * * 80
embedded * * * * 443


You clicked on the WAF tab, click on the tab all the way to right that says "Configuration". The click on ASL Configuration, then scroll down to Mod_security configuration.

_________________
Michael Shinn
Atomicorp - Security For Everyone

Co-Author of Troubleshooting Linux Firewalls.


Top
 Profile  
 
 Post subject: Re: Disabling features geared towards handling email
Unread postPosted: Sun Jun 17, 2012 8:44 am 
Offline
Forum Regular
Forum Regular

Joined: Tue Jun 09, 2009 12:57 pm
Posts: 134
mikeshinn wrote:
Spamassasin is not part of ASL, nor does ASL install it.


Yes, you are right. I confused ASL with the setup options for Virtualmin. I have been working some long hours...

mikeshinn wrote:
You clicked on the WAF tab, click on the tab all the way to right that says "Configuration". The click on ASL Configuration, then scroll down to Mod_security configuration.


is there an easier way to disable dozens and dozens of rules? I dont need any antispam rules...

_________________
CentOS 6.3 (2.6.32.60-40.art.x86_64)
ASL 3.2.13-30.el6.art
Webmin 1.6.2
Virtualmin 3.99.gpl
Apache 2.2.15
PHP 5.3.3 (mod_fcgid/2.3.7)


Top
 Profile  
 
 Post subject: Re: Disabling features geared towards handling email
Unread postPosted: Mon Jun 18, 2012 12:42 pm 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
User avatar

Joined: Thu Feb 07, 2008 7:49 pm
Posts: 3244
Location: Chantilly, VA
Yes, just disable the antispam class. Under modsecurity configuration thats these:

MODSEC_30_ANTISPAM

MODSEC_31_ANTISPAM_URI

_________________
Michael Shinn
Atomicorp - Security For Everyone

Co-Author of Troubleshooting Linux Firewalls.


Top
 Profile  
 
 Post subject: Re: Disabling features geared towards handling email
Unread postPosted: Mon Jun 18, 2012 4:10 pm 
Offline
Forum Regular
Forum Regular

Joined: Tue Jun 09, 2009 12:57 pm
Posts: 134
mikeshinn wrote:
Yes, just disable the antispam class. Under modsecurity configuration thats these:

MODSEC_30_ANTISPAM

MODSEC_31_ANTISPAM_URI


easy, thanks!

_________________
CentOS 6.3 (2.6.32.60-40.art.x86_64)
ASL 3.2.13-30.el6.art
Webmin 1.6.2
Virtualmin 3.99.gpl
Apache 2.2.15
PHP 5.3.3 (mod_fcgid/2.3.7)


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic Share/Bookmark  [ 7 posts ] 

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: Bing [Bot] and 3 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group