Is Plesk affected by CVE-2021-44228 and CVE-2021-45046?

The big question is if Plesk is affected by CVE-2021-44228 and CVE-2021-45046. For most normal installations, Plesk is not affected. The only way to get affected by these Log4j exploits in Plesk is if you are using a Java application using an extension or a custom installed (web) installation. However, most servers do not and therefore you do not have to worry about a Log4j 2 exploit for Plesk.

Is cPanel affected by CVE-2021-44228 and CVE-2021-45046?

Update December 15: An update has been provided by cPanel.

Another large used panel is cPanel, which is affected by CVE-2021-44228 and CVE-2021-45046. In particular Log4j 2 is used in the cPanel solr extension. The purpose of cPanel solr is to support faster search capabilities for IMAP. However, in this case it also adds an extra issue to worry about.

To resolve the issue, you have two options. You can either update cPanel Dovecot Solr or uninstall the Solr extension for now. You can do this by using the following these steps:

1. Log in to WHM.
2. Go to cPanel -> Manage Plugins.
3. Click “Uninstall “Full Text Search Indexing for IMAP powered by Apache Solr”
4. You are safe now.

You can always enable Solr again, however, for now we advise to leave it uninstalled and let some time pass. Even when a patch is created, chances are that another exploit is being discovered. The software is non-essential and only allows improved search performance, but searching does work without it as well.

At the time of writing, only a patch for the first exploit is released. However, the second exploit has not been patched yet. Note: there may be other extensions on a cPanel server that use Java, just like with other systems like Plesk and DirectAdmin. However, this is not common.

Is DirectAdmin affected by CVE-2021-44228 and CVE-2021-45046?

The same question is if DirectAdmin is affected by CVE-2021-44228 and CVE-2021-45046. By default, DirectAdmin does not use Java and therefore Log4j 2 is not used. Only when you have custom installed Java with an application that utilizes Log4j 2 you have this problem. However, most users do not.

How did Yourwebhoster.eu solve this on Managed servers?

We have applied the first update on cPanel servers. However, due to the second issue, we have decided to uninstall the affected module in cPanel. We may enable this again when we deem this issue resolved.

Can you help me with Log4j2 CVE-2021-44228 and CVE-2021-45046?

Of course! You can contact us any time or call us at +31 085 273 48 10.

The post How does the Log4j 2 security issue CVE-2021-44228 and CVE-2021-45046 affect cPanel, Plesk and DirectAdmin appeared first on Yourwebhoster.eu.

More knowledge base articles

We took the opportunity to supplement our knowledge base articles. This increases the chance that you can immediately find the answer to your question. Do you still have questions? Then you can contact us right away!

Improved layout

We took the opportunity to rearrange the knowledge base. This makes it easier for you to find the right information based on your service.

Support via social media

You can also receive support via Facebook and Twitter. And we are working on even more contact options!

The post Get the best customer service for hosting services with our new support dashboard appeared first on Yourwebhoster.eu.

Do you want to get started with Chia? Use our cheap cloud Chia plotting service and start almost immediately with plotting.

Is Hpool a safe Chia pool?

Hpool dates from 2017 and exists long before Chia allowed transactions. Hpool has build their own clients and does not publish the source code. They also offer other coins like BitcoinHD and Burst. Windows, MacOS and Linux is supported. Pay-outs are done on a daily basis, although it seems like they have slowed down a bit.

While Hpool is probably the first to support unofficial Chia pooling, the facts is that they have a closed source and nobody can confirm or deny with proof that your wallet keys are being transferred to Hpool. Therefore, it is unclear how safe your wallet is during and after having used Hpool. Even when you have stopped using Hpool, it is still unclear whether they have hold your keys or not.

Pros Hpool

• Daily payout
• Minimum payout is 0.1 XCH

Cons Hpool

• Chinese only (use Google Translate instead of the English version)
• Software is propiertary (closed-source)
• Recently had a name change from hpool.com to hpool.co.
• No official Chia pooling

Is Foxypool a safe Chia pool?

A less known unofficial Chia pool is Foxypool. They are working (as far as I can tell) on an official version on chia.foxypool.io, however, you can find an unofficial Chia OG Foxypool  version here.

Pros Foxypool Chia OG

• Seems to be opensource
• Foxypool is more transparant about their users and transactions.

Cons Foxypool Chia OG

• Minimum payout is 1.75 XCH
• No official Chia pooling.

Which unofficial Chia pool is safe to use in June 2021?

So, which unofficial Chia pools are safe to use? Perhaps this is not the answer what you are looking for, but neither pools are safe nor can be trusted. At least, not the unsafe version. The best thing you can do is wait until there is official Chia pooling support. The Official Chia Pool Github page refers to  miningpoolstats.stream/chia for a list of pools. However, do note that this list includes hpool as well, so the list does not guarantee that these are safe pools.

The post What is a safe unofficial Chia pool and is it dangerous appeared first on Yourwebhoster.eu.

Our new reseller plans make use of Plesk. With this control panel, you have a much more user friendly system and more features.

 

As reseller, you can configure the service plans as you wish.

We also support the latest technology, including http/3 and quic. And, all our reseller plans come by default with the full page cache solution (Litespeed). You can use this technology virtually with any app, including WordPress, Joomla and Laravel.

The reseller plans include WordPress toolkit. This is an easy to use WordPress manager where you can easily run updates, log in, create a staging version and/or install plugins/themes. Need to update the staging environment (or vice versa)? You can copy data in a jiffy.

The post Grow further with our new reseller plans appeared first on Yourwebhoster.eu.

Since our servers include 50 TB of data transfer, you do not have to be concerned about hitting the limit of your monthly data transfer.

What is Jitsi?

With Jitsi you can host your own “video conferencing software”. It is an opensource solution for online communication. The team behind Jitsi has started in 2003 by offering such solutions. In a nutshell, here are some interesting features:

• Communicate using your phone or tablet (iPhone/iPad or Android)
• Communicate using your PC/Laptop – Linux / Windows / Mac (with a modern browser such as Chrome or Firefox).
• Record sessions.
• Encryption included.
• Raise your hand (to speak).
• Statistics (so you finally have proof which colleague talks too much).
• For more features, check out https://jitsi.org/user-faq/ → What are the features of Jitsi Meet?

What are the server requirements for Jitsi?

To start, we recommend to use at least a M4 VPS. This version includes a food amount of processing power to start with. You can always upgrade to larger plans (check out our high performance VPS page).

The amount of processing power you need highly depends on the use case. The software is fairly efficient, which makes M4 an ideal starter kit for your Jitsi server. If you need to, you can upgrade to 20 cores. You can upgrade your server any time. This is ideal if you are not sure what specifications you require.

A test of Jitsi shows that you can have up to 1000 users with a Quad core CPU. The “gotcha” is that in their test, only one person streams to 1000 users at a time. In reality, however, you will probably stream with multiple video streams. So your results may vary.

Jitsi installation tutorial for Ubuntu of Debian

Before you start:

• Make sure that you at least have 2 GB of RAM. We recommend to have M4 or at minimum.
• Prepare a subdomain and point it to the server. Edit the /etc/hosts file on the server to include the name as well.
  127.0.0.1 localhost yourdomain.com
• Open ports 80 (TCP), 443 (TCP) and 10000 (UDP) in your firewall.

Instructions:

1. Log in as root. This is required to install the software. If needed, use sudo or sudo su.
2. Add the Jitsi repository:

   echo 'deb https://download.jitsi.org stable/' >> /etc/apt/sources.list.d/jitsi-stable.list
   wget -qO - https://download.jitsi.org/jitsi-key.gpg.key | sudo apt-key add

3. Install Jitsi:

   apt-get install apt-transport-https
   apt-get update
   apt-get -y install jitsi-meet
   
   

4. Enter the hostname. In our case, this is jitsi.yourwebhoster.eu.
5. Navigate with your  Tab key to <Ok> and press Enter.
6. By default, the option below is selected. Navigate with your  Tab key to <Ok> and press Enter.
   Generate a new self-signed certificate (You will later get a chance to obtain a Let’s encrypt certificate)
   
   
7. Create a free SSL certificate:

   /usr/share/jitsi-meet/scripts/install-letsencrypt-cert.sh

8. Enter your email address. This is required to get a notification in case there is something wrong with your certificate.
9. Jitsi will request a certificate. If it fails, make sure that you have configured your DNS correctly and the settings have been propagated over the internet (this may take up to 24 hours in the worst case). If it succeeds, you can start using Jitsi now.

How to use your self-hosted Jitsi video conferencing software?

How to use Jitsi on Linux/Windows/MacOS

1. Open your modern browser (like Chrome or Firefox) and go to your Jitsi install. In our case, this is https://jitsi.yourwebhoster.eu.
2. Pick a name of the room and click Go.
3. Tip: Do you want to secure the session with a password? Click on the (i) at the right bottom and enter a password. Only then, new users can join using the password.
4. Use the legend below

Legend

Click on the screen to share your screen.
Click on the hand to raise attention.
Click on the chat icon to chat.

Here, you can configure the microphone and video camera settings. Oh, and you can hang up of course…

The first symbol allows you to change the screen structure.
The (i) symbol allows you to change the password.
The three dots opens a menu (see below).

There are a ton of options in this menu. You can even blur your background!

How to use Jitsi on Android/iPhone

1. Install the app:
   1. Apple
   2. Android
   3. F-Droid
2. Click on the hamburger icon.
3. Click Settings
   
4. Enter your Jitsi server. In our case, this is https://jitsi.yourwebhostere.eu. You can also enter your personal email address (for your Gravatar icon) and nickname. Your nickname is viewable for everybody.

Jitsi installation FAQ

Q: Do I need to compile the Android and iPhone app and put it in the store?
A: No, you can simply use the normal Jitsi apps.

Q: How many users can I have on one VPS?
A: Great question! You can check out https://jitsi.org/jitsi-videobridge-performance-evaluation/ for an indication what Jitsi can do with a Quad core CPU. They require only 20% of their CPU for 1000 viewers. 

Q: Can I only use Jitsi with Yourwebhoster.eu?
A: Jitsi is a great piece of opensource software which you can use on any server with Linux/Docker.

The post Host your own zoom alternative open source video conferencing alternatives appeared first on Yourwebhoster.eu.

The post Free upgrade to 50 TB data traffic for your VPS appeared first on Yourwebhoster.eu.

In short, our operations run good while working at home and our infrastructure works perfectly. Before this started, everyone already was able to work from home. Our infrastructure is perfectly optimized for this. Normally, when we work from home we can pick up the phone using the smart phone. In this case, however, everyone has taken their own phone home. Due to the design of VOIP setup within the office, only a small network adjustment was required to make the phones work from home as well.

Capacity

Despite the increased demand, we have more than enough capacity. So if you need more servers, more space or support, feel free to get in touch. We’re happy to help you. Working from home also presents the necessary challenges. We notice that this has also increased the demand for backup. After all, how do you remotely provide a safe backup? Although we react quickly in these days, sometimes it may take a little more time than usual. If you have an emergency assignment, please mark them as high priority.

Datacenters

We have minimalized the amount of visits to the datacenter. Despite strong demand, there is sufficient capacity. Due to the use of quality brand material, we hardly have to go to the data center. Here and there, sometimes a hard drive has to be replaced, but that can often be done by the data center itself. In addition, our system is designed in such a way that the failure of one hard drive can be directly absorbed without losing the redundancy.

Working remotely

As an internet company we can work perfectly from home. Partly because of our expertise, on the other hand, because we already know the need for working from home. Or rather, said, remotely. As the crow flies we have already tested our platform to function at least 10,000 KM and high in the air. That sounds impressive, but any place with internet is useful to us. We have also gained the necessary experience. Not every internet connection allows you to connect to your VPN. I do not mean the internet restrictive countries, but even hotspots in the Netherlands or universities that block your connection. Simple solutions help with this.

Working from home is less efficient, because you’re less likely to call a colleague than you walk there for a while. Online tasks systems, chat and call tools help tremendously. In addition, we do not use Zoom internally for safety reasons. While the situation we are in is unprecedented, it is the ultimate test to see how working from home is going. At first, you will like it. You no longer have to go into traffic jams (or for colleagues: the bus). You’re right at work. But the separation between work and private life is suddenly a lot smaller.

How to proceed now

As long as COVID-19 is in place, we will take the right measures to prevent infections and thereby do our bit. We have enough capacity to cope with growth. We do notice that customers have more and more problems with the payment of the invoices on time. Please let us know if you have problems with making the payment. Please contact our support. We would like to look at a long-term plan. This will be reviewed on an individual case.

Do you have any other questions? Contact us! We are happy to help.

The post How we deal with COVID-19 appeared first on Yourwebhoster.eu.

The post Launching the new status page appeared first on Yourwebhoster.eu.

The post How to make docker-compose cross-platform (Mac, Windows, Linux) appeared first on Yourwebhoster.eu.

New: Snapshots

With the brand-new snapshot technology, you can easily create a snap. Creating snapshots is ideal to make before making an upgrade. Of course, you can still use the Acronis backup.

SSD space upgradable

With the next-gen fast SSD VPS you can upgrade the SSD space up to 3 TB. There is no need to upgrade the entire plan if you just need the extra SSD space.

The new high-end VPS plans start from € 3.95 per month.

The post NEW: High-performance SSD VPS appeared first on Yourwebhoster.eu.