Panel absichern mit Redirect

  • Also ich will ja nix sagen, aber bei mir klappts :D Leere mal deinen Browser cache und starte diesen gegebenenfalls neu.

  • Also ich will ja nix sagen, aber bei mir klappts :D Leere mal deinen Browser cache und starte diesen gegebenenfalls neu.


    Ok ich werde es morgen nochmals mit deinem Post probieren und cache leeren + Browser neustarten und nochmals bescheid geben :)

  • @Ninos


    Habs heute nochmals mit dem redirect getestet und NEIN es funktioniert nicht so ganz, das Panel wird auch dann umgeleitet...


    00_master.conf

    Code
    1. <VirtualHost {BASE_SERVER_IP}:80> Redirect / http://kmedia.hopto.org</VirtualHost><VirtualHost {BASE_SERVER_IP}:80> ServerName {BASE_SERVER_VHOST} ServerAdmin {DEFAULT_ADMIN_ADDRESS} DocumentRoot {WEB_DIR}/public LogLevel error ErrorLog {APACHE_LOG_DIR}/{BASE_SERVER_VHOST}/error.log Alias /errors {WEB_DIR}/public/errordocs Alias /ftp {WEB_DIR}/public/tools/filemanager Alias /ispLogos {WEB_DIR}/data/persistent/ispLogos Alias /pma {WEB_DIR}/public/tools/pma Alias /webmail {WEB_DIR}/public/tools/webmail AliasMatch ^/themes/(.*)/assets/(.*)$ {WEB_DIR}/themes/$1/assets/$2 AliasMatch ^/(.*)/themes/(.*)/assets/(.*)$ {WEB_DIR}/plugins/$1/themes/$2/assets/$3 # SECTION itk BEGIN. AssignUserID {SYSTEM_USER_PREFIX}{SYSTEM_USER_MIN_UID} {SYSTEM_USER_PREFIX}{SYSTEM_USER_MIN_UID} # SECTION itk END. # SECTION suexec BEGIN. SuexecUserGroup {SYSTEM_USER_PREFIX}{SYSTEM_USER_MIN_UID} {SYSTEM_USER_PREFIX}{SYSTEM_USER_MIN_UID} # SECTION suexec END. <Directory {WEB_DIR}/public> Options +FollowSymlinks AllowOverride All # SECTION fcgid BEGIN. Options +ExecCGI FCGIWrapper {PHP_STARTER_DIR}/master/php5-fcgid-starter # SECTION fcgid END. # SECTION itk BEGIN. php_admin_value open_basedir "{HOME_DIR}/:{CONF_DIR}/:/proc/:/bin/df:/bin/mount:{RKHUNTER_LOG}:{CHKROOTKIT_LOG}:{PEAR_DIR}/{OTHER_ROOTKIT_LOG}" php_admin_value session.save_path "{WEB_DIR}/data/sessions" php_admin_value upload_tmp_dir "{WEB_DIR}/data/tmp" php_value include_path ".:{WEB_DIR}/library:{PEAR_DIR}" php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f webmaster@{BASE_SERVER_VHOST}" # SECTION itk END. RewriteEngine On RewriteCond %{REQUEST_FILENAME} -s [OR] RewriteCond %{REQUEST_FILENAME} -l [OR] RewriteCond %{REQUEST_FILENAME} -d RewriteRule ^.*$ - [NC,L] RewriteRule ^.*$ plugins.php [NC,L] {AUTHZ_ALLOW_ALL} </Directory> <Location /ispLogos> {AUTHZ_ALLOW_ALL} </Location> <LocationMatch ^/themes/.*/assets/.*$> {AUTHZ_ALLOW_ALL} </LocationMatch> <LocationMatch ^/.*/themes/.*/assets/.*$> {AUTHZ_ALLOW_ALL} </LocationMatch> # SECTION php_fpm BEGIN. Alias /php5-fcgi /var/lib/apache2/fastcgi/php5-fcgi-master FastCGIExternalServer /var/lib/apache2/fastcgi/php5-fcgi-master \ -socket /var/run/php5-fpm-master.socket \ -idle-timeout 300 \ -pass-header Authorization # SECTION php_fpm END. # SECTION custom BEGIN. # SECTION custom END.</VirtualHost>


    00_master_ssl.conf

    Code
    1. <VirtualHost {BASE_SERVER_IP}:443> Redirect / http://kmedia.hopto.org SSLEngine On SSLCertificateFile {GUI_CERT_DIR}/{SERVER_HOSTNAME}.pem SSLCertificateChainFile {GUI_CERT_DIR}/{SERVER_HOSTNAME}.pem</VirtualHost><VirtualHost {BASE_SERVER_IP}:443> ServerName {BASE_SERVER_VHOST} ServerAdmin {DEFAULT_ADMIN_ADDRESS} DocumentRoot {WEB_DIR}/public LogLevel error ErrorLog {APACHE_LOG_DIR}/{BASE_SERVER_VHOST}/error.log Alias /errors {WEB_DIR}/public/errordocs Alias /ftp {WEB_DIR}/public/tools/filemanager Alias /ispLogos {WEB_DIR}/data/persistent/ispLogos Alias /pma {WEB_DIR}/public/tools/pma Alias /webmail {WEB_DIR}/public/tools/webmail AliasMatch ^/themes/(.*)/assets/(.*)$ {WEB_DIR}/themes/$1/assets/$2 AliasMatch ^/(.*)/themes/(.*)/assets/(.*)$ {WEB_DIR}/plugins/$1/themes/$2/assets/$3 # SECTION itk BEGIN. AssignUserID {SYSTEM_USER_PREFIX}{SYSTEM_USER_MIN_UID} {SYSTEM_USER_PREFIX}{SYSTEM_USER_MIN_UID} # SECTION itk END. # SECTION suexec BEGIN. SuexecUserGroup {SYSTEM_USER_PREFIX}{SYSTEM_USER_MIN_UID} {SYSTEM_USER_PREFIX}{SYSTEM_USER_MIN_UID} # SECTION suexec END. <Directory {WEB_DIR}/public> Options +FollowSymlinks AllowOverride All # SECTION fcgid BEGIN. Options +ExecCGI FCGIWrapper {PHP_STARTER_DIR}/master/php5-fcgid-starter # SECTION fcgid END. # SECTION itk BEGIN. php_admin_value open_basedir "{HOME_DIR}/:{CONF_DIR}/:/proc/:/bin/df:/bin/mount:{RKHUNTER_LOG}:{CHKROOTKIT_LOG}:{PEAR_DIR}/{OTHER_ROOTKIT_LOG}" php_admin_value session.save_path "{WEB_DIR}/data/sessions" php_admin_value upload_tmp_dir "{WEB_DIR}/data/tmp" php_value include_path ".:{WEB_DIR}/library:{PEAR_DIR}" php_admin_value sendmail_path "/usr/sbin/sendmail -t -i -f webmaster@{BASE_SERVER_VHOST}" # SECTION itk END. RewriteEngine On RewriteCond %{REQUEST_FILENAME} -s [OR] RewriteCond %{REQUEST_FILENAME} -l [OR] RewriteCond %{REQUEST_FILENAME} -d RewriteRule ^.*$ - [NC,L] RewriteRule ^.*$ plugins.php [NC,L] {AUTHZ_ALLOW_ALL} </Directory> <Location /ispLogos> {AUTHZ_ALLOW_ALL} </Location> <LocationMatch ^/themes/.*/assets/.*$> {AUTHZ_ALLOW_ALL} </LocationMatch> <LocationMatch ^/.*/themes/.*/assets/.*$> {AUTHZ_ALLOW_ALL} </LocationMatch> # SECTION php_fpm BEGIN. Alias /php5-fcgi /var/lib/apache2/fastcgi/php5-fcgi-master-ssl FastCGIExternalServer /var/lib/apache2/fastcgi/php5-fcgi-master-ssl \ -socket /var/run/php5-fpm-master.socket \ -idle-timeout 300 \ -pass-header Authorization # SECTION php_fpm END. SSLEngine On SSLCertificateFile {GUI_CERT_DIR}/{SERVER_HOSTNAME}.pem SSLCertificateChainFile {GUI_CERT_DIR}/{SERVER_HOSTNAME}.pem # SECTION custom BEGIN. # SECTION custom END.</VirtualHost>


    /etc/apache2/sites-enabled/00_master.conf


    /etc/apache2/sites-enabled/00_master_ssl.conf
    Wurde keine generiert da ich kein SSL derzeit auf der VM habe


    Danke im voraus

  • Ich werde das Plugin die Tage (wenn ich frei bin) final testen und dann bereitstellen. Sollte es damit noch Probleme geben werde ich mir mal deinen Server per teamviewer anschauen (sofern in Ordnung) :)

  • Ich werde das Plugin die Tage (wenn ich frei bin) final testen und dann bereitstellen. Sollte es damit noch Probleme geben werde ich mir mal deinen Server per teamviewer anschauen (sofern in Ordnung) :)


    Hallo,


    Ok ich warte mal das Plugin ab und dann mal sehen obs klappt.
    Bei dem Server handelt es sich nur um eine Virtual Machine local auf dem PC :) aber auch dort kannst du gern per Teamviewer mal reinschauen.


    Danke für die Hilfe, warte dann erstmal das Plugin ab das wird sicher abhilfe bringen :)