![]() |
|
|||||||
| View Poll Results: Do you like use update.script ? | |||
| yes, all time |
|
189 | 69.23% |
| no, some time |
|
34 | 12.45% |
| some time |
|
50 | 18.32% |
| Voters: 273. You may not vote on this poll | |||
![]() |
|
|
Thread Tools | Display Modes |
|
#1
|
||||
|
||||
|
Hello,
update script not part from directadmin.com **** USE IT YOUR OWN RISKS **** ***** ***** ***** GNU GENERAL PUBLIC LICENSE Version 2, June 1991 Copyright (C) 2006,2007 Free Software Foundation, Inc. 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. Update script made by Wael Isa H188, R4008, Arad 240, Kingdom of Bahrain http://www.web4host.net Version: 1.4 Release Date: 1 / 9 / 2006 ***** ***** ***** If you find update script useful, please consider to make a donation to support this freeware. Please keep in mind that donations are welcome, but in no way required to use and distribute update.script. You can donate using 2checkout.com & paypal accepted - CLICK HERE update.script Version: 1.4 update script tested in this OS 32bit and 64bit.
and update to
Just download/chmod Code:
mkdir /usr/local/updatescript cd /usr/local/updatescript wget http://tools.web4host.net/update.script chmod 755 update.script Code:
./update.script Code:
./update.script UPDATEME Code:
./update.script DATE Code:
./update.script CLEAN 1- Run this to clean or update update script before you use 2- Select best mirror for your server mirror.conf , if you want new mirror.conf file just delete old one in update script folder. ***** ***** ***** ClamAV Code:
nano -w /etc/exim.conf Code:
primary_hostname = Code:
av_scanner = clamd:127.0.0.1 3310 Code:
check_message: Code:
deny message = This message contains malformed MIME ($demime_reason)
demime = *
condition = ${if >{$demime_errorlevel}{2}{1}{0}}
deny message = This message contains a virus or other harmful content ($malware_name)
demime = *
malware = *
deny message = This message contains an attachment of a type which we do not accept (.$found_extension)
demime = bat:com:pif:prf:scr:vbs
warn message = X-Antivirus-Scanner: Clean mail though you should still use an Antivirus
Code:
/sbin/service exim restart ***** ***** ProFTP with mod_clamav Edit Code:
nano /etc/proftpd.conf Code:
<IfModule mod_clamav.c> ClamAV on ClamServer 127.0.0.1 ClamPort 3310 </IfModule> Code:
/sbin/service proftpd restart ***** ***** MODsecurity 2.x Code:
nano -w /etc/httpd/conf/extra/httpd-includes.conf 32bit Code:
LoadFile /usr/lib/libxml2.so LoadModule security2_module /usr/lib/apache/mod_security2.so <IfModule mod_security2.c> # ModSecurity2 ONLY # Do not change anything in included files # Include /etc/modsecurity2/*.conf </IfModule> Code:
LoadFile /usr/lib64/libxml2.so LoadModule security2_module /usr/lib/apache/mod_security2.so <IfModule mod_security2.c> # ModSecurity2 ONLY # Do not change anything in included files # Include /etc/modsecurity2/*.conf </IfModule> Code:
/sbin/service httpd restart ***** ***** MODsecurity 1.x Code:
nano -w /etc/httpd/conf/httpd.conf Code:
<IfModule mod_security.c> # Only inspect dynamic requests # (YOU MUST TEST TO MAKE SURE IT WORKS AS EXPECTED) #SecFilterEngine DynamicOnly SecFilterEngine On # Reject requests with status 500 SecFilterDefaultAction "deny,log,status:500" # Some sane defaults SecFilterScanPOST On SecFilterCheckURLEncoding On SecFilterCheckCookieFormat On SecFilterCheckUnicodeEncoding Off SecFilterNormalizeCookies On # enable version 1 (RFC 2965) cookies SecFilterCookieFormat 1 #SecServerResponseToken Off #If you want to scan the output, uncomment these #SecFilterScanOutput On #SecFilterOutputMimeTypes "(null) text/html text/plain" # Accept almost all byte values SecFilterForceByteRange 1 255 # Server masking is optional #fake server banner - NOYB used - no one needs to know what we are using SecServerSignature "Power MOD by web4host.net" #SecUploadDir /tmp #SecUploadKeepFiles Off # Only record the interesting stuff SecAuditEngine RelevantOnly #SecAuditLog logs/audit_log # You normally won't need debug logging #SecFilterDebugLevel 0 #SecFilterDebugLog logs/modsec_debug_log # Mini Rules Include /etc/modsecurity/mini.conf </IfModule> Code:
/sbin/service httpd restart ***** ***** MODevasive Apache 1 Code:
nano -w /etc/httpd/conf/httpd.conf Code:
<IfModule mod_evasive.c> DOSHashTableSize 3097 DOSPageCount 2 DOSSiteCount 50 DOSPageInterval 1 DOSSiteInterval 1 DOSBlockingPeriod 10 DOSWhitelist 127.0.0.1 DOSEmailNotify your-email@your-domain.tld </IfModule> Code:
/sbin/service httpd restart Code:
/usr/local/directadmin/customapache/ Code:
nano -w /etc/httpd/conf/httpd.conf Code:
LoadModule perl_module /usr/lib/apache/libperl.so Code:
LoadModule evasive_module /usr/lib/apache/mod_evasive.so Code:
<IfDefine HAVE_PYTHON> AddModule mod_python.c </IfDefine> Code:
AddModule mod_evasive.c Code:
/sbin/service httpd restart Code:
nano -w /etc/httpd/conf/extra/httpd-includes.conf Code:
<IfModule mod_evasive20.c> DOSHashTableSize 3097 DOSPageCount 2 DOSSiteCount 50 DOSPageInterval 1 DOSSiteInterval 1 DOSBlockingPeriod 10 DOSWhitelist 127.0.0.1 DOSEmailNotify your-email@your-domain.tld </IfModule> Code:
/sbin/service httpd restart Code:
wget http://tools.web4host.net/modevasive/test.txt mv test.txt test.pl chmod 755 test.pl ./test.pl ***** ***** KISS My Firewall Ready for Direct Admin & Plesk & Webmin & cPanel. if you want use other SSH port just add in TCP_IN & TCP_OUT Running anywhere on the command line, you simply type: Code:
kiss start Code:
kiss stop Code:
kiss status Code:
kiss restart kiss restart edit kiss and set what os you use # Enabled this for Pre Fedora Core 2 or Red Hat Code:
EXTN="o" Code:
EXTN="ko" ***** ***** ***** eAccelerator when done you see link look like Code:
/usr/local/lib/php/extensions/no-debug-non-zts-20020429/eaccelerator.so edit php.ini Code:
nano -w /usr/local/lib/php.ini Code:
zend_extension="/usr/local/lib/php/extensions/no-debug-non-zts-20020429/eaccelerator.so" eaccelerator.shm_size="32" eaccelerator.cache_dir="/tmp/eaccelerator" eaccelerator.enable="1" eaccelerator.optimizer="1" eaccelerator.check_mtime="1" eaccelerator.debug="0" eaccelerator.filter="" eaccelerator.shm_max="0" eaccelerator.shm_ttl="0" eaccelerator.shm_prune_period="0" eaccelerator.shm_only="0" eaccelerator.compress="1" eaccelerator.compress_level="9" Code:
/sbin/service httpd restart ***** ***** Freetype Note: no need to use if if you use custombuild, only how use customapache. Code:
cd /usr/local/directadmin/customapache/ Code:
nano -w configure.php Code:
nano -w configure2.php Code:
--with-gd \ --with-gd-dir=/usr/local \ Code:
--with-gd \ --with-gd-dir=/usr/local/lib \ --with-freetype \ --with-freetype-dir=/usr/local/lib \ Code:
./build clean ./build gd Code:
./build clean ./build gd ./build php d service httpd restart Code:
./build clean ./build gd ./build php_ap2 d service httpd restart ***** ***** IMAP Apache 1 Code:
nano -w configure.php Code:
nano -w configure2.php Code:
--with-imap=/usr/local/imap-2004c1 \ Code:
--with-zip \ Code:
service httpd restart ***** ***** AVG Anti-Virus Clean folder HOME (full) Code:
avgscan -clean -ext=* -rt -arc /home Code:
avgscan -clean -ext=* -rt /home Code:
avgupdate --path="/opt/avg/avg8/update/download" ***** ***** ***** Nobody Check Security Tool The Nobody Check tool is a new and unique security tool that can detect malicious processes that are running on your Linux server and report them to you in real time or by email. The tool can be configured to run at selected times and doesn’t eat up resources or interfere with server operations. edit and set your email then save Code:
nano -w /usr/local/nobody_check/nc.conf Code:
nano -w /etc/crontab Code:
# nobody_check */15 * * * * root /usr/local/nobody_check/nobody_check >/dev/null 2>&1 ***** ***** ***** MailScanner Edit Code:
nano -w /etc/exim.conf Code:
primary_hostname Code:
spool_directory = /var/spool/exim.in queue_only = true queue_only_override = false Code:
nano -w /etc/init.d/exim Code:
QUEUE= [ -f /etc/sysconfig/exim ] && . /etc/sysconfig/exim [ "$DAEMON" = yes ] && EXIM_OPTS="$EXIM_OPTS -bd" [ -n "$QUEUE" ] && EXIM_OPTS="$EXIM_OPTS -q$QUEUE" Code:
QUEUE="15m" [ -f /etc/sysconfig/exim ] && . /etc/sysconfig/exim [ "$DAEMON" = yes ] && EXIM_OPTS="$EXIM_OPTS -bd" [ -f /etc/sysconfig/exim ] && . /etc/sysconfig/exim [ "$DAEMON" = yes ] && EXIM_OPTS="$EXIM_OPTS -C /etc/exim_outgoing.conf" [ -n "$QUEUE" ] && EXIM_OPTS="$EXIM_OPTS -q$QUEUE" Code:
nano -w /opt/MailScanner/etc/MailScanner.conf Code:
%org-name% = yoursite %org-long-name% = Your Organisation Name Here %web-site% = www.your-organisation.com Code:
Run As User = mail Run As Group = mail Incoming Queue Dir = /var/spool/exim.in/input Outgoing Queue Dir = /var/spool/exim/input MTA = exim Sendmail = /usr/sbin/exim -C /etc/exim.conf Sendmail2 = /usr/sbin/exim -C /etc/exim_outgoing.conf Virus Scanners = none Use SpamAssassin = yes Always Include SpamAssassin Report = yes ![]() you can scan all mail using AVG, ClamAV or BOTH same timejust install AVG and ClamAV then edit Code:
nano -w /opt/MailScanner/etc/MailScanner.conf Code:
Virus Scanners = none Code:
Virus Scanners = avg Code:
killall -9 MailScanner /opt/MailScanner/bin/check_mailscanner Code:
nano -w /etc/crontab Code:
37 5 * * * /opt/MailScanner/bin/update_phishing_sites 07 * * * * /opt/MailScanner/bin/update_bad_phishing_sites 58 23 * * * /opt/MailScanner/bin/clean.quarantine 3,23,43 * * * * /opt/MailScanner/bin/check_mailscanner # Remove # if you want MailScanner to update anti virus #42 * * * * /opt/MailScanner/bin/update_virus_scanners ***** ***** ***** MODclamAV Code:
nano -w /etc/httpd/conf/extra/httpd-includes.conf Code:
# mod ClamAV Include conf/extra/mod_clamav.conf Code:
/sbin/service httpd restart ***** ***** Suhosin Code:
nano -w /usr/local/lib/php.ini Code:
;************************************************************************
; suhosin Parameters
; For a full list of parameters and their documentation go to:
; (http://www.hardened-php.net/suhosin/configuration.html)
;************************************************************************
[suhosin]
extension="/usr/local/lib/php/extensions/no-debug-non-zts-20060613/suhosin.so"
; Logging Configuration
# Use your link in place of web4host.net
suhosin.filter.action = [302,]http://www.web4host.net/index.php
suhosin.log.syslog.facility = 9
suhosin.log.syslog.priority = 1
suhosin.log.use-x-forwarded-for = Off
; Executor Options
suhosin.executor.max_depth = 0
suhosin.executor.include.max_traversal = 4
suhosin.executor.include.whitelist =
#suhosin.executor.include.blacklist = "php://, http://, ftp://, gzip://,https://, ftps://, compress.zlib://"
suhosin.executor.include.blacklist = "php://, http://, ftp://, gzip://,https://, ftps://"
suhosin.executor.func.whitelist =
suhosin.executor.func.blacklist = system, shell_exec, exec, passthru, php_uname, popen, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, posix_setgid, posix_uname, proc_close, proc_nice, proc_open, proc_terminate
#suhosin.executor.func.blacklist = dl, system, passthru, pclose, proc_nice, proc_terminate, posix_getpwuid, posix_uname, pfosckopen, leak, posix_setuid, escapeshellcmd, escapeshellarg, hypot, pg_host, pos, posix_access, posix_getcwd, posix_getgid, posix_getservbyname,myshellexec,getpid, posix_getsid, posix_isatty, posix_kill, posix_mkfifo, posix_mknod, posix_setgid, posix_setsid, posix_setuid, posix_times, posix_uname, ps_fill, posix_getpwuid, ini_restore, symlink, ini_get_all, zip_open, zip_read, rar_open, bzopen, bzread, bzwrite, shellcode, backtick, cmd, virtual, pcntl_exec, ini_alter, show_source, apache_get_modules, apache_get_version, apache_note, openlog, tmpfile, crack_check, crack_closedict, php_ini_scanned_files, inurl, apache_setenv, closelog, debugger_off, debugger_on, define_syslog_variables, syslog, ftp_exec, posix_setpgid, posix_setsid, posix_setuid, get_current_user, getmyuid, getmygid, listen, netscript, ini_restore, php.ini, id, popen, shell_exec, php_uname, getPath, dir_writeable, read_dir, execute_command, diskfreespace, disk_total_space, proc_open, switch, mkdir
suhosin.executor.eval.whitelist =
suhosin.executor.eval.blacklist =
suhosin.executor.allow_symlink = Off
suhosin.executor.disable_emodifier = Off
suhosin.executor.disable_eval = Off
; Misc Options
suhosin.apc_bug_workaround = Off
suhosin.sql.bailout_on_error = Off
suhosin.sql.comment = 0
suhosin.sql.multiselect = 0
suhosin.sql.opencomment = 0
suhosin.sql.union = 0
suhosin.sql.user_postfix =
suhosin.sql.user_prefix =
suhosin.multiheader = Off
suhosin.memory_limit = 128
suhosin.mail.protect = 1
; Transparent Encryption Options
suhosin.session.encrypt = On
suhosin.session.cryptkey =
suhosin.session.cryptua = On
suhosin.session.cryptdocroot = On
suhosin.session.cryptraddr = 0
suhosin.session.checkraddr = 0
suhosin.session.max_id_length = 128
suhosin.cookie.checkraddr = 0
suhosin.cookie.cryptdocroot = On
suhosin.cookie.cryptkey =
suhosin.cookie.cryptlist =
suhosin.cookie.cryptraddr = 0
suhosin.cookie.cryptua = On
suhosin.cookie.disallow_nul = 1
suhosin.cookie.disallow_ws = 0
suhosin.cookie.encrypt = On
suhosin.cookie.plainlist =
; Filtering Optionins
suhosin.cookie.max_array_depth = 100
suhosin.cookie.max_array_index_length = 64
suhosin.cookie.max_name_length = 64
suhosin.cookie.max_totalname_length = 256
suhosin.cookie.max_value_length = 10000
suhosin.cookie.max_vars = 2048
suhosin.get.disallow_nul = On
suhosin.get.disallow_ws = 0
suhosin.get.max_array_depth = 50
suhosin.get.max_array_index_length = 64
suhosin.get.max_name_length = 64
suhosin.get.max_totalname_length = 256
suhosin.get.max_value_length = 512
suhosin.get.max_vars = 2048
suhosin.perdir = 0
suhosin.coredump = Off
suhosin.post.disallow_nul = On
suhosin.post.disallow_ws = 0
suhosin.post.max_array_depth = 100
suhosin.post.max_array_index_length = 64
suhosin.post.max_name_length = 64
suhosin.post.max_totalname_length = 256
suhosin.post.max_value_length = 65000
suhosin.post.max_vars = 2048
suhosin.protectkey = On
suhosin.request.disallow_nul = On
suhosin.request.disallow_ws = 0
suhosin.request.max_array_depth = 100
suhosin.request.max_array_index_length = 64
suhosin.request.max_totalname_length = 256
suhosin.request.max_value_length = 65000
suhosin.request.max_varname_length = 64
suhosin.request.max_vars = 2048
suhosin.stealth = On
suhosin.upload.max_uploads = 25
suhosin.upload.disallow_elf = 1
suhosin.upload.disallow_binary = Off
suhosin.upload.remove_binary =
suhosin.upload.verification_script =
suhosin.session.max_id_length = 128
suhosin.simulation = Off
;************************************************************************
; End suhosin Parameters
;************************************************************************
Code:
/sbin/service httpd restart ***** ***** Thanks for smtalk and SeLLeRoNe ***** ***** ***** Best Regards, Wael Isa
__________________
Web for host serving the web since 2004 ((( update.script ))) help you to upgrade OpenSSL / Exim / OpenSSH / ProFTP / phpMyAdmin / MySQL / SquirrelMail AVG Anti-Virus / Clam Anti-Virus / MODclamAV / MRTG / SpamAssassin / IMAP SquirrelMail / MODsecurity / MODsecurity Rules / MODevasive / MailScanner KISS My Firewall / eAccelerator / Freetype / Control panel Webmin Last edited by @how@; 06-11-2010 at 11:24 PM. |
|
#2
|
|||
|
|||
|
Wael thanks for this wonderful script, yet how about keeping the version number of each release installed? This way running a command would let us know what needs to be updated. This could save a lot of time.
|
|
#3
|
||||
|
||||
|
I cant seem to download the script
it saysCode:
[root@tehl33tbox updatescript]# wget http://tools.supernamechange.com/updatescript
--10:39:35-- http://tools.supernamechange.com/updatescript
=> `updatescript'
Resolving tools.supernamechange.com... 72.55.156.182
Connecting to tools.supernamechange.com|72.55.156.182|:80... connected.
HTTP request sent, awaiting response... 404 Not Found
10:39:37 ERROR 404: Not Found.
Thanks for bringing it back btw ![]() *edit * link should be http://tools.supernamechange.com/update.script and not http://tools.supernamechange.com/updatescript
__________________
Hans (at) Tind.nl van der Toorn Internetdiensten Did i help? maybe u would like to Donate to me Last edited by HanSieT; 11-24-2007 at 01:47 AM. Reason: Edit |
|
#4
|
||||
|
||||
|
main post updated now.
thanks. Wael
__________________
Web for host serving the web since 2004 ((( update.script ))) help you to upgrade OpenSSL / Exim / OpenSSH / ProFTP / phpMyAdmin / MySQL / SquirrelMail AVG Anti-Virus / Clam Anti-Virus / MODclamAV / MRTG / SpamAssassin / IMAP SquirrelMail / MODsecurity / MODsecurity Rules / MODevasive / MailScanner KISS My Firewall / eAccelerator / Freetype / Control panel Webmin |
|
#5
|
|||
|
|||
|
Thanks @how@ for all of your hard work mate. It has been a script that has helped me a lot.
I was wondering where freetype went to?
__________________
ServerTweak Networks, LLC >> ServerTweak.com Experience the fastest network and superior servers, feel the power of ServerTweak! Fremont, CA DataCenter | Dedicated Servers | Colocation | Cross Connects HE.net | 1/4 - Full Cab Sales |
|
#6
|
||||
|
||||
|
yes, updated again.
Wael
__________________
Web for host serving the web since 2004 ((( update.script ))) help you to upgrade OpenSSL / Exim / OpenSSH / ProFTP / phpMyAdmin / MySQL / SquirrelMail AVG Anti-Virus / Clam Anti-Virus / MODclamAV / MRTG / SpamAssassin / IMAP SquirrelMail / MODsecurity / MODsecurity Rules / MODevasive / MailScanner KISS My Firewall / eAccelerator / Freetype / Control panel Webmin |
|
#7
|
|||
|
|||
|
AVG link is dead. can you check it?
__________________
Ucuz Hosting |
|
#8
|
||||
|
||||
|
I love this however I'm terrified to do the openssh and/or openssl upgrades remotely. last time I did this over ssh it failed and i was locked out. and when i tried to update over KVMoIP, I kept over-running the buffer (and I used screen but the process would hang after I disconnected).
Soooo...anyone tried the SSL or SSH update or have any pointers for me? I'm on all brand new hardware but like I said, scary to try this update (for me at least, call me a *ussy lol) |
|
#9
|
|||
|
|||
|
I've never had any problems, yet there's only a first time. I also keep webmin in case of a fail in ssh so I can login though there to fix things.
|
|
#10
|
||||
|
||||
|
I am having one problem:
Quote:
Quote:
|
|
#11
|
||||
|
||||
|
nevermind:
http://www.directadmin.com/forum/showthread.php?t=21291 sorry for the spam on this thread. This is an excellent script! well done! |
|
#12
|
||||
|
||||
|
how I can enable LibClamAV support for PHP settings?
|
|
#13
|
||||
|
||||
|
AVG updated & add Control panel Webmin
Wael
__________________
Web for host serving the web since 2004 ((( update.script ))) help you to upgrade OpenSSL / Exim / OpenSSH / ProFTP / phpMyAdmin / MySQL / SquirrelMail AVG Anti-Virus / Clam Anti-Virus / MODclamAV / MRTG / SpamAssassin / IMAP SquirrelMail / MODsecurity / MODsecurity Rules / MODevasive / MailScanner KISS My Firewall / eAccelerator / Freetype / Control panel Webmin |
|
#14
|
|||
|
|||
|
Does it work with dovecot?
|
|
#15
|
|||
|
|||
|
Hi Wael
I updated from MODsecurity 1.9.4 to MODsecurity 1.9.5 and found that a few scripts was blocked. MODsecurity 1.9.4 worked okay. I guess the best thing to do, is to go back to MODsecurity 1.9.4 and therefore I hope that you have a copy of that version. Thanks for a good script and any help |
|
#16
|
||||
|
||||
|
try to use other rules, just run this
./update.script CLEAN ./update.script use L,M or H Wael
__________________
Web for host serving the web since 2004 ((( update.script ))) help you to upgrade OpenSSL / Exim / OpenSSH / ProFTP / phpMyAdmin / MySQL / SquirrelMail AVG Anti-Virus / Clam Anti-Virus / MODclamAV / MRTG / SpamAssassin / IMAP SquirrelMail / MODsecurity / MODsecurity Rules / MODevasive / MailScanner KISS My Firewall / eAccelerator / Freetype / Control panel Webmin |
|
#17
|
|||
|
|||
|
Quote:
This fault happens with every command |
|
#18
|
|||
|
|||
|
DutchTSE try to reinstall it.
Code:
cd /usr/local/updatescript wget http://tools.supernamechange.com/update.script chmod 755 update.script |
|
#19
|
|||
|
|||
|
Thanks for a very quick reply Wael
Remember: You are way over my league. I am sorry, but the information must be fed by spoon. ./update.script CLEAN ./update.script use L,M or H ??? The two rules that are available after download is apache2.conf and mini.conf. What I did was to firstly update MODsecurity to 1.9.5 I saw that some scripts was blocked, so I downloaded the MODsecurity Rules again. Still the same. I compared the new mini.conf with the past version and could not see any changes. So, I assumed that it was MODsecurity 1.9.5 it selves and an lib.so, lib.a etc that is the reason for this. Regards Oddis |
|
#20
|
||||
|
||||
|
Same error as DutchTSE :
./update.script: line 1012: syntax error: unexpected end of file Something broke the script...
__________________
Keep on learning.... Using CentOS 5 on VDS with DirectAdmin. DA 1.35.1 - Apache 2.2.15 - Php 5.2.13 - MySQL 5.0.90 - Exim 4.71 - Dovecot 1.2.11 - Custombuild 1.2 |
![]() |
| Thread Tools | |
| Display Modes | |
|
|