more info

Media72 Hosting Articles and Tips

Archive for the 'Security' Category

Ruby on Rails 2.1.2 installed on all servers

Thursday, October 23rd, 2008
We have now installed Ruby on Rails 2.1.2 on all servers. As this release contains security fixes it's recommended that all users of Rails 2.1.x switch to the new 2.1.2 version ASAP.

Ruby on Rails 2.0.5 installed on all servers

Monday, October 20th, 2008
Rails 2.0.5 has been release which contains security fixes. It's advised all customers using a 2.0.x version of Rails update their applications to use the 2.0.5 version as soon as possible.

OpenDNS

Tuesday, October 3rd, 2006

We have recently discovered OpenDNS, a company offering free a DNS service with some very useful added features.

This service reports to being faster (that we have yet to confirm) that most other DNS services, but this is not the real gem of this service. It will attempt to block phishing scams by filtering websites involved in phishing operations using some pretty advanced methods. It will also try to correct typos in domain names.

OpenDNS is really easy to setup in just a few minutes, the site includes instructions for most network setups. We have been using OpenDNS for the last few days and have been impressed so fat

Let’s Make Our Lives a Little More Secure

Friday, August 4th, 2006

We all like to feel secure, it makes us feel all warm inside. At Media72 we like to make you feel all warm and fuzzy, that's why we provide secure connections for control panel, email and data connections. Why should you use secure connections? Quite simply, if you don't, unscrupulous characters on the internet could grab your password or any information contained within the files you transmit. That means any text within an email or a file you upload or download.

In this article we show you how to secure all of your connections so that everything you transmit to and from our servers is encrypted and secure. You should be able to connect securely with any host, if you can't find details on how to do this with your host you should contact them and ask them to provide you with connection details. If you don't know the difference between POP and IMAP or why you should use one method over the other take a look at our "Which Mail Connection Method Should I Use?" article before reading on. After secure email connections we go on to cover Secure FTP to finish things off.

Secure Email Connections

Most modern desktop email applications have the ability to connect securely to an email server. We will cover the setup of Outlook Express, Thunderbird, and Apple Mail, if you use another application to view your emails you should still be able to use this guide, although the option names may be slightly different. In this article we will assume you have already setup your email account and want to change the settings to use a secure connection. Select your email client:

Outlook Express:

Step 1 (POP): To setup Outlook Express to use secure connections with POP select "Tools > Accounts..." from the menu then select the "Mail" tab. From here highlight the account you want to edit and click the "Properties" button, under the "Servers" tab change "Incoming mail (POP3)" and "Outgoing mail (SMTP)" to the name of the server you are on, in this case bingo.media72.co.uk (see fig. 1).

Outlook Express Pop Settings

fig. 1

Step 2 (POP): Select the "Advanced" tab and check "This server requires a secure connection (SSL)" under both "Outgoing mail (SMTP)" and "Incoming mail (POP3)". Make use that the "Outgoing mail (SMTP)" port is 465 and the "Incoming mail (POP3)" port is 995 (see fig. 2). Click "OK" then "Close".

Outlook Express Pop 02

fig. 2

Step 1 (IMAP): To setup Outlook Express to use secure connections with IMAP select "Tools > Accounts..." from the menu then select the "Mail" tab. From here highlight the account you want to edit and click the "Properties" button, under the "Servers" tab change "Incoming mail (IMAP)" and "Outgoing mail (SMTP)" to the name of the server you are on, in this case bingo.media72.co.uk (see fig. 3).

Outlook Express Imap 01

fig. 3

Step 2 (IMAP): Select the "Advanced" tab and check "This server requires a secure connection (SSL)" under both "Outgoing mail (SMTP)" and "Incoming mail (IMAP)". Make use that the "Outgoing mail (SMTP)" port is 465 and the "Incoming mail (IMAP)" port is 993 (see fig. 4). Click "OK" then "Close".

Outlook Express Imap 02

fig. 4

Thunderbird:

Step 1 (POP): To setup Thunderbird to use secure connections with POP select "Tools > Account Settings..." from the menu. Choose "Server Settings" under the account you want to edit from the list on the left. Change the "Server Name" to the name of the server you are on, in this case bingo.media72.co.uk. Under "Security Settings" check the "SSL" option and make sure the port is set to 995 (see fig. 5).

Thunderbird Pop 01

fig. 5

Step 1 (IMAP): To setup Thunderbird to use secure connections with IMAP select "Tools > Account Settings..." from the menu. Choose "Server Settings" under the account you want to edit from the list on the left. Change the "Server Name" to the name of the server you are on, in this case bingo.media72.co.uk. Under "Security Settings" check the "SSL" option and make sure the port is set to 993 (see fig. 6).

Thunderbird Imap 01

fig. 6

Step 2 (SMTP): Select the "Outgoing Server (SMTP)" option from the list on the left, it's at the bottom of the list. Select the account you want to edit and click "Edit...". Change the "Server Name" to the server used in step 1, make sure the "Use name and password" box is checked. Under "Use secure connection" check the "SSL" option and make sure the port is 465 (see fig. 7).

Thunderbird Smtp 01

fig. 7

Apple Mail:

Step 1 (POP & IMAP): To setup Apple Mail to use secure connections with POP and IMAP click "Mail > Preferences > Accounts", from the account list on the left select your account, under the "Account Information" tab change the "Incoming Mail Server" to the server your account is on, in this case bingo.media72.co.uk (see fig. 8). If you use your own domain for this option you will receive a security popup every time you connect.

Apple Mail Pop 01

fig. 8

Step 2 (POP): Next click the "Advanced" tab, here make sure the "Use SSL" box is checked, the port should change to 995, if not change this manually yourself (see fig. 9). Make sure "Authentication" is set to "Password".

Apple Mail Pop 02

fig. 9

Step 2 (IMAP): Select the "Advanced" tab and check the "Use SSL" box, this should change the port to 993, if not change this manually yourself (fig. 10). Make sure "Authentication" is set to "Password".

Apple Mail Imap 02

fig. 10

Step 3 (SMTP): Under the "Account Information" tab make sure the "Outgoing Mail Server (SMTP)" option is set to your media72 account and click the "Server Settings..." button. Change the "Outgoing Mail Server" to your server, in this case bingo.media72.co.uk, then check the "Use Secure Sockets Layer (SSL)" box and make sure the port is 465. "Authentication" should be set to "Password" and your account username and password should be entered into the fields below (fig. 11).

Apple Mail Smtp 01

fig. 11

Thats it, now just test your connection be sending and receiving mail, if everything works you are now using secure connections for your emails.

Secure FTP

Secure FTP is just as important as secure email connections. Files containing password in plain text are often uploaded via FTP. Using secure FTP connections is as simple as selecting the TLS/SSL, or secure SFTP option (SFTP will only work for accounts with shell access enabled) in your file transfer application. The following is a list of applications that support secure connections

After following this guide all of your communications with your website should be secure and encrypted. Now you can feel safe and secure knowing that no one can grab your data as its being transfered to and from the server.

 

hedges