Blog

New Tutorial: How to secure your ISPConfig 3 server against the poodle SSL attack

This post is from 2014. Versions, commands and links in it may be outdated. The current release is ISPConfig 3.3.2p1.

Dear ISPConfig Users,

you might have heard about the recent attack against the SSLv3 protocol named "poodle" which affects almost all servers and clients that communicate securely over SSL. We prepared a tutorial that shows you how to protect your ISPConfig server against this SSL vulnerability by disabling the outdated SSLv3 protocol in services like apache, Nginx, postfix, dovecot and pure-ftpd so that they use only the newer and secure TLS protocol versions.

The tutorial can be found at howtoforge:

http://www.howtoforge.com/how-to-secure-your-ispconfig-3-server-against-the-poodle-ssl-attack

Best Regards,

Your ISPConfig Team