manu Fixed Fixed file manager file editor issues for RTL languages. Mailbox size collection continues for the rest of the server if one mailbox fails. Reuse of domain from soft-deleted websites would fail if the assigned email server was separate to the application server. Installation of standalone DB server would fail to apply the licence key. Enhanced Improvements to Arabic language pack. Name server ordering for SOA selection is now alphabetic so ns1 will always take precedence over ns2, ns3, etc. WordPress cron job emails now silenced by default for new installations. mod_security disabled by default on new service websites (panel, phpmyadmin, webmail). Let’s Encrypt interactive timeout increased to 120 seconds. Ran the update and update went smoothly!
cosmoshosting Rolled out well, have got around to removing the last of the images directory with 'rm -rf /var/enhance_container_images/' and side effects
marvine Can someone explain why this is done ? mod_security disabled by default on new service websites (panel, phpmyadmin, webmail).
Adam marvine The default OWASP rule set can cause Javascript errors on webmail and phpMyAdmin, this change was by very popular request.
exobit Adam Just a question, but wouldnt it be an idea to identify the OWASP rules that are creating problems with webmail and phpmyadmin, and disable those rules from the start ? or make so that they dont load on webmail and phpmyadmin 🙂 ?
Adam exobit In the future we will release curated rule sets, subject to any licensing restrictions. At the moment Enhance just fetches the latest version of the OWASP mod_security rules and applies them with no modification.
