System security of ISPadmin

1. ISPADMIN


1.1 SettingsSyst. settingsSecurity

  • Click on Enable
  • Maximum security = Global line; all columns withicon check ko (i.e.disabled). If you use client portal, you have to enable it here. (HTTP 80 = icon check ok)
  • Here you enter enabled IP addresses/ranges and related ports (you must enable IP addresses for technical support along with a note, should you need technical support in the future)

1.2 SettingsAdministratorsAdministrators

  • Enable access for login via web interface to specific administrator from defined IP addresses

1.3 SettingsSyst. settingsBackups

  • Back up system  
  • Current information on last backup is displayed on the top, e.g.2.12.2015 - Backup Completed Successfully
  • Server backups: recommended settings are: Full backup = Weekly, and Count of system backup archives = 3 (at least). Following each successful backup, an email is sent to system email address as specified in Settings Syst. settings General, ID admin_email
  • Router backups: All routers are text-backed up, Mikrotik-type routers can also be backed up in binary format
  • Storing in FTP: it is highly recommended to store backups elsewhere. We also recommend to turn on Secure FTP for encrypted transmission of backups

2. LINUX

2.1 Change of default passwords after installation

  • root password to SSH
  • user password for root and ispadmin to the database (if you keep default password, ISPadmin displays a warning after login)

2.2 backup encryption

  • If not set, ISPadmin displays a warning after login along with an instruction how to set it up ( /usr/local/script/ispadmin/ispadmin_backup_crypt.pl )

3. IN GENERAL

  • Do not install third-party SW, if possible
  • Install ISPadmin on inner network behind outer firewall which filters incoming communication (SSH)
  • Do not add other users to OS Linux
  • Update ISPadmin to the latest version

CONTACT

NET service solution, s.r.o.
Žerotínova 3056/81a
787 01 Šumperk
Czech Republic