Workarounds

[IgorG]

Need to add 'allow' firewall rule for port 9998 automatically when switch to Smarterm

Plesk 9.5.x

Need to add 'allow' rule to firewall for TCP port 9998 automatically when switch to SmarterMail.

SOLUTION:

Attach has implemented this feature as requested:
When smartermail webmail is switching on firewall rule for port 9998 is added. When SMWebmail is switching off the rule is disabled.

 

[IgorG]

Can not access Firewall configuration

Plesk Panel 9.5.2
Windows 2008

Can not access to Firewall configuration:

Home > Settings > IP Addresses > Firewall

winfwmng failed: Value does not fall within the expected range.
---------------------- Debug Info -------------------------------
0: common_func.php3:109
psaerror(string 'winfwmng failed: Value does not fall within the expected range.')
1: firewallmng.php:35
firewallmng->_call(string '<command><show><interfaces/></show></command>')
2: firewallmng.php:86
firewallmng->get_interfaces()
3: InterfaceList.php:35
InterfaceList->fetchInterfaceList()
4: class.cList.php3:105
cList->fetchList()
5: class.cList.php3:124
cList->init()
6: FirewallMainForm.php:46
FirewallMainForm->assign(boolean true, boolean false)
7: firewall.php:44

Windows Firewall and rules can be opened/viewed with no issue.

SOLUTION:

Use attached version of psa.ip.device.dll

 

[IgorG]

Security problem with permission

Plesk Panel 9.5.2

Customer has Plesk servers with Plesk default permissions and settings in windows\temp folder and php.ini for php5 version. He checked the IUSR permission and found that based on psacln group and its permission on temp folder, all php sessions and all windows temp folder is accessible for the users and it could cause some problems such as session hijacking and so on. He wants to know what is the best solution to protect temp folder and subfolders? And how can he prevent accessing temp folder without making problem for Plesk?

SOLUTION:

You can change session save_path as described at http://www.php.net/manual/en/configuration.changes.php#configuration.changes.windows:

1. Create key HKEY_LOCAL_MACHINE\SOFTWARE\PHP\Per Directory Values\c\inetpub\vhosts\<domain>.
2. Create string value 'session.save_path' = 'C:\Inetpub\vhosts\<domain>\private'.

Now session files for <domain> will be stored in 'private' dir.