[SMS]

simbad · Senior Member Joined: 30 Jun 2011 Posts: 106

Can i sugestions to add:

http://www.hardened-php.net/suhosin/

Do we have fail2ban for webmin? Smile

gerasimos_h · Posted: Sun Jun 03, 2012 11:09 am Post subject:

As far as I know, I don't know a webmin module for fail2ban.
Do you really need suhosin?
Have you use it before, on another distribution?

gerasimos_h

simbad · Senior Member Joined: 30 Jun 2011 Posts: 106

I was thniking for blocking password guesting to integrate to fail2ban Smile

No, not yet, but I would like it, it brings some security improvements to the entire server.

simbad · Senior Member Joined: 30 Jun 2011 Posts: 106

gerasimos_h · Posted: Sat Nov 03, 2012 4:28 pm Post subject:

I prefer to avoid patching, and thus if there is a patched php package will be in extra, but there is an extension available, for doing half the job.
I'll add the extension disabled by default, and check for the patch...

Also suhosin is not compatible with php-5.4, not that it matters to us now, since we are using php-5.3.x by default Smile

gerasimos_h

gerasimos_h · Posted: Sat Nov 03, 2012 8:23 pm Post subject:

Packages created and will upload later today...

php-suhosin is the extension by default disabled, and part of main packages.
to enable it edit /etc/php/suhosin.ini

php_suhosin is the php built with suhosin-patch available in /extra/packages.
It's recommended to remove php before installing it, for the sanity of package information.

gerasimos_h