What else can atomicorp do to help your company? Do you need more support options from us? Changes in the products? New products we haven't thought of? Please let us know. We're here for you, its what we do - so please don't be shy let us know what we can do to help you!

I believe since ASL is a threat manager you must give us some more help or integration within the web interface for firewalling and mysql.

A new control panel :
viewtopic.php?f=5&t=3855

regards

Yes, a decent firewall control panel would be great. I seem to recollect come vote about it some time ago...

Thank you both for the feedback. The firewall GUI is being worked on. On this request:

"and mysql"

What sort of security features for mysql are you looking for?

Really looking forward for the firewall gui !

Asl offers fix and rules for the php.ini.

Why not provide as well rulesets and suggestions for the my.cnf ?
At least a tutorial with a template and suggestions in the wiki.
Think it would come real handy.

Oh for my.cnf, check out mysqltuner from the atomic repo. Its fantastic

Damn fine idea. I'll add it in now to the future feature list.

This is going to be a tall order but I might as well ask...

Modsec does a superb job at filtering but it can be a frustrating experience for clients and their clients when they hit a false positive. It only gets more frustrating for myself as an admin to then track it down because they don't always tell me immediately (especially if it's a client of a client) so I can't just hop into the web interface and report it (often the report comes in as "Oh, yeah, Bob said he got blocked a couple of times last week. Can you look into that?"). What would be nice is some sort of scoring mechanism (not dissimilar to how spamassassin works) where, if an odd block happens, you can be proactively notified as an admin. Maybe options for either an instant notice or a rollup report. Options to pick what rules you ignore, what rules always alert you (if you're having problems with a certain rule), track domains where you're having problems (this would be huge for me), etc. This strikes me as more of a paradigm change so I don't expect it by tomorrow (I'll give you til at least next week ) but as part of the next iteration of ASL it would certainly make a big difference in not only how admins use it, but how readily we can get the false positive data to you guys.

So how is ASL 3 helping you with these requirements Highland? What can we do to help you in the next pre-4 release of ASL?

I have in mind something that would help me big time.
There is a huge issue with the permissions of websites on plesk. Fastcgi is not working as we have all noticed. And Safe Mode is being depreciated. Installation of suphp breaks a few websites.
A solution to that issue from ASL would be amazing...
In Cpanel servers you setup the customer and it simply plays. No problems at all. In plesk there is always an issue ...

I know there's a great commerical product out there already, but how about an ASL (i.e. supported, commercial) mod_ruid plugin for Plesk?

Just curious...isn't Plesk 10.4.4 doing a better job regarding fastcgid?
mod_ruid2 is already in the atomic repo.

Regarding the alerting. Wouldn't it be a nice idea instead of reinventing the wheel going for a combination with an existing project/solution?
What immediately came into my mind was. "Two" additional packages.
Install "asl-monitoring" and get as a dependency the fork of nagios called icinga https://www.icinga.org/.
In the ASL Gui Atomicorp would add additional interface to create icinga configs.

I'm not sure if that is so easy and if it is useful doing so. But that came into my mind immediately.