License Portal
Deutsch

Changelog for version 1.x

Changes in version 1.9.1-r3767 (09/17/2015):

  • fixed rare deadlock in GUI process when certain SSL handshake fails

Changes in version 1.9.1-r3749 (09/14/2015):

  • fixed bug when creating zones files with TXT records
  • fixed missing permissions when subscription was re-assigned within a reseller subscription
  • fixed bug when configuring Postfix 2.8+ with DNS whitelists

Changes in version 1.9.1-r3736 (09/04/2015):

  • added french translations (thanks to our customer post.lu!)
  • enabled croatian translations (thanks to our customer BitLab d.o.o.!)
  • allow sending mail with login information and subscriptions overview
  • supporting custom DH parameters with Apache 2.2.30+ respectively Debian 7 (Apache 2.2.22-13+deb7u5)
  • automatically refreshing all vHost configurations where SSL is enabled to enable custom DH parameters
  • DH parameters for ProFTPD replaced with 2048 bit parameters
  • supporting deletion of unused contacts
  • web apps (via AppInstaller) can also be protected with a password (#120)
  • locked/suspended customers are marked in reports/customer list (#138)
  • allow changing the default HTML pages permanently (#21)
  • fixed bug when editing an IP group assigned exclusively through a reseller
  • fixed bug when importing MD5-CRYPT mailbox passwords with ‘/’ in salt
  • fixed bug in dereferer (’#’ part of destination URL was ignored)
  • fixed bug when adding a subdomain via SOAP API to a DNS zone managed by LiveConfig
  • fixed bug when enabling DNSSEC for domains already managed by LiveConfig (NSEC3PARAM wasn’t included)
  • custom DNS records weren’t included when domain was switched from own DNS servers to external DNS servers and back
  • fixed bug when disabling DNSSEC (key files were not deleted)
  • fixed bug with missing permissions when additional user adds subscription (#111)
  • split translations for mail templates into separate pages
  • moved OpenDKIM socket from /var/run/opendkim/opendkim.sock to /var/spool/postfix/opendkim/opendkim.sock to also sign locally generated mails
  • better error handlng when PHP detection fails (#136)
  • changed SOA retry time for new DNS templates from 2 hours to 3 hours
  • enabling OCSP only when certificate contains an OCSP URL
  • allow modification of aliases and forwards with SOAP method HostingMailboxEdit()
  • customizable OTP issuer name (LCDefaults option “login.ots.issuer”)
  • updated time zone database (2015f)
  • improved handling of SSL handshake errors

Changes in version 1.9.0-r3657 (07/10/2015):

  • displaying signature algorithm and OCSP URL of SSL certificates
  • supporting custom Application Installer repositories (#185)
  • Fixed bug in DKIM configuration (KeyTable/SigningTable)
  • table size can be changed (20/50/100/all rows per page)
  • added support for negative numbers in php.ini
  • display path and allow editing path of additional FTP accounts (#189)
  • support for DANE/TLSA with Postfix (#146)
  • allow more flexible wildcard subdomains (eg. “*.sub” instead of “*”)
  • allow subdomains with underscore for DNS RRs (eg. “_25._tcp”)
  • configuring OCSP stapling with Apache 2.4 (#188)
  • configuring OCSP stapling with NGINX 1.3.7+ (#188)
  • configuring SSL session caching with NGINX
  • fixed bug in DKIM configuration (KeyTable/SigningTable)
  • fixed bug when setting individual TTL for custom DNS records
  • NGINX: fixed missing backslash at “location ~ .php”
  • fixed possible problem with some Apache 2.4 installations regarding “Require all granted” (#170)
  • lclogparse sometimes wasn’t started automatically after installation
  • fixed bug when changing shell in hosting plan
  • fixed bug when adding a new subdomain with e-mail while DKIM is not available/enabled
  • improved logging when Lua functions crash
  • upgraded openSSL from 1.0.1m to 1.0.2d
  • updated default SSL cipher suite
  • LiveConfig now only uses 2048 bit DH parameters (#190)
  • show warning when unencrypted login to SMTP/POP/IMAP is allowed
  • lcsam: only send debug messages to syslog when run in debug mode (-d) (#191)
  • lcsam: set “X-Spam-Flag: YES” on warn threshold (#192)
  • enabling U2F authentication by default

Changes in version 1.8.3-r3577 (05/11/2015):

  • showing LiveConfig version in Reports -> Server (#176)
  • optionally allow multiple concurrent logins with the same account (using LCDEFAULTS key “login.concurrent”) (#160)
  • optionally allow “FollowSymLinks” with Apache (using custom.lua: apache.FOLLOWSYMLINKS=true) (#171)
  • no SMTP HELO restrictions for authenticated users (#177)
  • allow larger customer IDs (up to 18 digits) (#179)
  • allow removal of FIDO U2F devices (#167)
  • show externally accessible databases (#152)
  • show disk usage (#155)
  • show disk usage & number of deployed customers in server report
  • hide DNS server option when no managed DNS servers available (#153)
  • don’t suggest random passwords with ‘, " or \ characters
  • allow filtering e-mail addresses by subscription name
  • renaming Apache config file “liveconfig” to “liveconfig.conf” for Debian 8 (#169)
  • DKIM support (#145)
  • Mass mail: fixed display error with floating text (#158)
  • Mass mail: fixed error in recipient selection (#157)
  • displayed wrong “default” logo when admin uploaded a custom logo
  • HTTP traffic graph not displayed for end-customers (#166)
  • fixed NGINX PHP configuration within password-protected directories
  • dereferer didn’t work with IDN domains (#184)

Changes in version 1.8.2-r3508 (03/27/2015):

  • improved default vHost configuration for Apache 2.4 (use /usr/share/liveconfig/html instead of compiled-in default DocumentRoot)

Changes in version 1.8.2-r3494 (03/19/2015):

  • updated OpenSSL library to v1.0.1m

Changes in version 1.8.2-r3493 (03/12/2015):

  • added support for FIDO U2F (universal two factor authentication)
  • “admin” user can now be renamed
  • contact data of LiveConfig users can now be modified
  • supporting configuration of PHP extensions in php.ini management
  • fixed bug in intermediate SSL certificate cache (last certificate of a chain wasn’t cached)
  • fixed bug in nginx.lua when configuring SSL with NGINX 1.0.x
  • fixed “missing permissions” bug when displaying DNSSEC key for a customer domain
  • fixed bug when changing IP group of a domain didn’t trigger DNS update
  • displayed wrong “default” logo within reseller settings
  • individual reseller subscriptions couldn’t be edited
  • zones.liveconfig file could be corrupted after mass updates due to missing thread synchronization
  • fixed bug when parsing multiple IP addresses of external name servers
  • fixed bug when editing php.ini expression value within subscription
  • improved handling of invalid input in table search
  • displaying web server name and database server name in webspace overview
  • increased size of “Select Contact” popup (to prevent scrolling)
  • spam filter: warn threshold can now be set to same value as reject threshold (no messages will then be marked as being “suspicious”)
  • multiple concurrent sessions with the same login are now forbidden (“admin sessions” are not affected by this)
  • each OTP code can now only be used once to log in (to prevent session hijacking)

Changes in version 1.8.2-r3457 (02/19/2015):

  • fixed error in NGINX SSL configuration with more than one IP address
  • fixed bug when using syslog for LiveConfig messages
  • fixed bug when only changing comment of a database (without changing password too)
  • added parameters “webserver”, “mailserver” and “dbserver” to SOAP method HostingSubscriptionEdit() (required when resources are initially added to a subscription)

Changes in version 1.8.2-r3451 (02/13/2015):

  • fixed database error when trying to edit web statistics settings
  • fixed error when entering a website address at contact data
  • improved detail level in 7d HTTP traffic graph
  • made restart of LiveConfig with start-stop-daemon more robust

Changes in version 1.8.2-r3447 (02/11/2015):

  • displaying DNS template name in domain table
  • show notice when a new LiveConfig version is available
  • checking certification path on intermediate CA certificates
  • caching and automatic configuration of intermediate CA certificates
  • fixed bug when deleting a subdomain with DNS managed by LiveConfig
  • fixed bug when reassigning an IP group to another reseller subscription
  • fixed error when selecting start directory for formerly disabled subdomains
  • fixed bug when displaying 24h/7d graphs
  • [r3447] fixed display bug on (not) expired SSL certificates
  • [r3447] fixed display bug with 24h/7d graphs on MySQL 5.5.5+ backend
  • improved security of Apache vHost configuration
  • improved checks for DNSSEC prerequisites
  • marking expired SSL certificates in certificate list
  • fixed SSL/SNI configuration for NGINX
  • increased input sizes of contact data fields (for multibyte UTF8 input)
  • increased maximum length of subscription names from 10 to 63 characters
  • improved directory password protection with NGINX
  • showing traffic contained with hosting subscription
  • supporting TSIG keys with up to 512 bit (instead of 128 bit)
  • allow assigning DNS templates to reseller subscriptions
  • added parameter “dnstemplate” to SOAP method HostingDomainAdd()

In .htaccess files, the option FollowSymLinks can’t be used any more. LiveConfig already has enabled the option SymLinksIfOwnerMatch by default, so the effective permissions don’t change. Existing .htaccess files will be adjusted automatically with sed. Informations about the supported .htaccess settings can be found in our knowledge base: KB#25 - allowed .htaccess options.

Changes in version 1.8.1-r3397 (01/22/2015):

  • limit of e-mail aliases and e-mail forwards is configurable (via LCDEFAULTS)
  • added optional parameter “ipgroup” to SOAP method HostingSubdomainAdd()
  • support for custom configuration options with proftpd.conf
  • support for custom configuration options with dovecot.conf
  • restored missing translation of logout button (“abmelden”)
  • fixed bug in application installer to allow other languages than EN/DE
  • fixed race-condition deadlock in LiveConfig client process in some very rare cases (after executing external programs through Lua)
  • fixed bug in Apache default vHost rewrite rule
  • fixed double-escaping of HTML entities in password inputs after form reload
  • updated OpenSSL from 1.0.1j to 1.0.1k
  • disabled use of (wrong) passwords from browser password manager when setting or updating passwords eg. for mailboxes or FTP accounts
  • more log messages when deleting a webspace directory

Changes in version 1.8.0-r3363 (01/05/2015):

  • fixed bug on escaping MySQL passwords

Changes in version 1.8.0-r3361 (01/05/2015):

  • fixed typo in PCI-compliant Postfix SSL configuration
  • removed “required” attribute from TEXTAREA fields due to an error in Internet Explorer
  • fixed bug when deleting a subdomain from DNS
  • Server overview showed no more existing network interfaces (#143)
  • fixed bug when adding a subdomain to DNS
  • fixed GUI bug when selecting webspace directory for a new subdomain

Changes in version 1.8.0-r3350 (12/24/2014):

  • added missing SSL error pages (“not-available-ssl.(s)html”)
  • removed “–symlink” option from ZIP backup creation due to bug/limitation in info-zip
  • improved error logging when creating backup streams

Changes in version 1.8.0-r3345 (12/22/2014):

  • optionally logging LiveConfig messages to syslog service
  • configurable minimum length of additional FTP accounts (#84)
  • renewed GUI (HTML5) with customizable CSS templates
  • management of custom DNS records (A/AAAA/CNAME/MX/TXT/SRV) (#34)
  • configurable “help” link on LiveConfig login page (see KB#24)
  • support for expressions in php.ini (eg. “E_ALL”)
  • fixed SSL CA chain configuration in ProFTPd
  • fixed bug with too large messages in LCCP protocol
  • “lcsam” init script wasn’t enabled on Ubuntu 12.x
  • fixed broken pagination in subscription list when assigning an exclusive IP address group & added some more columns
  • Lua: allow overriding Postfix configuration with “postfix.LOCALCONFIG” table
  • allow special chars in web redirect URLs (using [NE] flag in RewriteRule)
  • when a subscription is reassigned within the same admin/reseller, the selected hosting plan is preserved
  • Apache: smarter configuration for default 404 page on unknown domains/vhosts (RewriteRule using [R=404,L])
  • separate error page when requesting a non-ssl website with HTTPS
  • improved handling of MySQL bugs #41119, #42041 (adaptive & limited retries)
  • will not start LiveConfig (or lcclient) if an error in a Lua script was detected
  • creating new MySQL table statistics 15 minutes after last run has finished
  • updated timezone database (2014i)
  • using precomputed 2048bit DH parameters instead of calculating them (would require 10-12 minutes)
  • allow renaming the “main user” of a customer (#76)
  • allow changing the contact data of a customers’ “main user”
  • moved MySQL statistics update into separate worker thread with its own (dedicated) MySQL connection
  • improved detection of MariaDB server (also search with upper-case letters)
  • intermediate CA certificates can now be deleted

Changes in version 1.7.5-r3221 (11/26/2014):

  • fixed SSL CA chain configuration in ProFTPd
  • fixed bug with too large messages in LCCP protocol
  • will not start LiveConfig (or lcclient) if an error in a Lua script was detected
  • creating new MySQL table statistics 15 minutes after last run has finished

Changes in version 1.7.5-r3127 (10/16/2014):

  • configuring default SSL certificate for SNI configurations with Apache httpd
  • automatically reconnecting to MySQL database on LiveConfig server process restart
  • updated OpenSSL from 1.0.1i to 1.0.1j
  • disabled SSLv3 for LiveConfig HTTPS/LCCP interfaces
  • disabled SSLv3 for all configured services (Apache, NGINX, Postfix, Dovecot, ProFTPd, vsftpd) due to POODLE attack

Changes in version 1.7.4-r3112 (10/08/2014):

  • fixed some minor table display bugs

Changes in version 1.7.4-r3110 (10/07/2014):

  • fixed table output for Cron jobs (new style)
  • implemented table sorting for Cron jobs and databases

Changes in version 1.7.4-r3109 (10/07/2014):

  • refactored tables (sortable, saving filter/position/sorting)
  • use default SpamAssassin values (LCDEFAULTS) also on e-mail login
  • fixed bug in nameserver IP selection (server management)
  • fixed bug in LCCP parser leading to client hangup in rare cases

Changes in version 1.7.4-r3086 (09/25/2014):

  • fixed double-slashes bug on Apache HTTP redirects with ‘/*’ option
  • fixed bug when adding multiple IPs to web server IP group
  • fixed “Error 500” when selecting own subscription (“My Hosting”) from Top 10 report
  • updated translations
  • configurable prefix for suspected SPAM mails
  • quick search now also searches subscription names in “My Hosting”

Changes in version 1.7.4-r3079 (09/24/2014):

  • no more restart of LiveConfig required after enabling SpamAssassin

Changes in version 1.7.4-r3077 (09/23/2014):

  • setting correct default spam filter values for existing mailboxes

Changes in version 1.7.4-r3072 (09/22/2014):

  • added support for SpamAssassin (configurable per mailbox)
  • added support for switching the PHP version per (sub)domain (#86)
  • allow customization of some default values through database
  • advanced PFS configuration for Postfix
  • allow preserving the URL path with 301/302 redirects
  • added comment field for SSL certificates
  • allow editing mail forwards within mail login
  • supporting CentOS 7
  • supporting Ubuntu 14
  • fixed bug in WSDL for HostingMailboxEdit()
  • fixed missing permissions for subscriptions created using SOAP API
  • fixed parser bug in lclogparse (mail statistics)
  • updating quota when modifying hosting plan (#11)
  • updated/improved SSL ciphers for LiveConfig, supporting PFS with older browsers; RC4 generally disabled
  • updated SSL cipher list from Mozilla OpSec
  • upgraded OpenSSL from 1.0.1h to 1.0.1i

Changes in version 1.7.3-r2934 (07/01/2014):

  • fixed bug with missing permissions for web applications
  • fixed bug in cron job input check when using commas in interval specification

Changes in version 1.7.3-r2921 (06/14/2014):

  • fixed bug from r2910 when saving a cron job

Changes in version 1.7.3-r2914 (06/11/2014):

  • showing number of sent/received mails within last 24 hours in mail overview
  • Top 10 reports now can also be sorted by traffic or mail
  • added SOAP method HostingMailboxEdit() (#63)
  • allow disabling IPv6 for outbound SMTP connections
  • allow selecting individual IP addressess for inbound SMTP
  • fixed too restrictive permissions for ~/stats/.htpasswd with mpm_itk
  • allowing newTLDs (with more than 6 characters) in SOAP method ContactAdd()
  • fixed invalid CustomLog directive (’||’ instead of ‘|exec’) (#141)
  • fixed wrong line breaks in e-mail templates when using SQLite backend db
  • fixed bug in RRD aggregation
  • fixed bug when reseller belatedly enables e-mail/databases for an existing subscription
  • improved SSL ciphers (using Mozilla’s OpSec recommendations)
  • LiveConfig passwords now always hashed with PBKDF2
  • improved security when editing users as “non-admin” user
  • automatically updating SSL certificates on server (#109)
  • catching error messages when installation of a new crontab fails
  • improved form checks when editing cron jobs
  • unblocking IP after brute-force block when password was reset successfully
  • added “greylisting” option to SOAP method HostingMailboxAdd()
  • upgraded OpenSSL from 1.0.1g to 1.0.1h

Changes in version 1.7.2-r2824 (04/08/2014):

Due to a serious bug in the OpenSSL library (CVE-2014-0160) we **strongly** encourage you to upgrade LiveConfig (and of course the "rest" of your server) as soon as possible!
  • now also showing traffic of last 24 hours in “top 10” report
  • reassign subscription: subscriptions can now be transferred into reseller subscriptions
  • added page to manage e-mail templates (eg. for password recovery)
  • allow selection of IP address to use with Postfix for outbound SMTP connections (#137)
  • fixed display bug in IP address count (server overview with business license)
  • improved reliability of lclogsplit restart after reloading Apache
  • automatically removing stale shared memory segment if LiveConfig process died unexpectedly
  • upgraded OpenSSL from 1.0.1f to 1.0.1g (due to CVE-2014-0160)

Changes in version 1.7.1-r2775 (03/10/2014):

  • improved Autodiscover service
  • fixed buffer overflow when calculating backup checksums

Changes in version 1.7.1-r2770 (03/04/2014):

Due to an important modification in the header of the internal LCCP protocol, you need to upgrade both LiveConfig server and client to the latest version (1.7.1).
**The version 1.7.0 (and before) can't communicate with version 1.7.1 (and later)!**
However, the upgrade order doesn't matter.
  • added subdomains to output of HostingSubscriptionGet()
  • quick search now also searches for subscription names within resellers (exact matches only) (#132)
  • added serbian translations (thanks to Bojan Suzic)
  • MySQL driver for LiveConfig database now supports configuration options ([liveconfig] section in my.cnf and some db_options in liveconfig.conf)
  • support for Ubuntu 13.10
  • support for OpenSUSE 13.1
  • manage FcgidIOTimeout with PHP max_execution_time (#135)
  • fixed wrong number of subdomains displayed in domain overview (#127)
  • fixed bug in date calculation causing no stats being displayed for 12/2013 since 01/2014
  • fixed bug in NGINX configuration (introduced with v1.7.0-r2666)
  • fixed problem with AWStats and upper-case subscription names (#133)
  • fixed quota check when adding/editing a POP3/IMAP mailbox (#134)
  • fixed bug when changing webspace quota to “unlimited”
  • showing mailbox quota instead of real (used) size in e-mail overview
  • displaying overall mail quota now also at subscriptions -> statistics
  • checking recursively for sufficient resources in higher reseller subscriptions (PHP/CGI/SSI/Shell)
  • fixed bug in resource selection dropdown when adding a new subscription

Changes in version 1.7.0-r2704 (12/09/2013):

  • fixed bug in RPM installer (liveconfig.conf got deleted during upgrade)
  • fixed bug showing only “0” in e-mail usage summary
  • fixed subscription sort order (wasn’t correctly updated with new subscriptions)
  • fixed wrong sort order in DNS zone files on primary DNS
  • fixed bug when updating lcclient on Debian/Ubuntu (init script sometimes didn’t stop lcclient correctly)

Changes in version 1.7.0-r2696 (12/03/2013):

  • fixed bug when modifying IP addresses of external nameservers (zones were not updated)
  • management of php.ini settings now also available in hosting plans (tab was missing)
  • fixed possibly invalid quoting of php.ini settings
  • show traffic usage per subscription in reports (#125)

Changes in version 1.7.0-r2690 (11/28/2013):

  • management of logrotate settings per hosting plan and per subscription
  • added brute-force prevention for GUI and SOAP API (#102)
  • AppInstaller now writes output of STDERR while installation/uninstallation into log file (~/logs/appinstall.log) (#108)
  • support for mpm_itk (#110)
  • anonymization of IP addresses for access.log (#113)
  • webspace backup on-the-fly (single-server setup only) (#115)
  • remove additional servers from LiveConfig (#116)
  • edit server details (host id, description) (#116)
  • edit php.ini settings per subscription (by reseller or by customer) (#28)
  • fixed bug in javascript code for mini graphs which led to browser hangup
  • fixed bug when disabling SSL option for IP groups (#97)
  • fixed bug when redirecting from HTTP to HTTPS with IPv6 address (#101)
  • fixed file descriptor leak with LCCP protocol in certain environments (#103)
  • fixed display error of database sizes in subscriptions report (#96)
  • MySQL users were not deleted if the database name contained an underscore (#106)
  • fixed bug in webspace usage display when a customer has multiple webspace subscriptions (#107)
  • fixed bug when adding a new IP group with SSL enabled (#99)
  • removing unfinished uninstallations from AppInstaller (#80)
  • fixed bug when displaying Apache modules with “–diag” option (#109)
  • fixed bug in package detection via ’emerge’ on Gentoo Linux
  • fixed bug when creating a SSL CSR with IE10+ (#117)
  • fixed missing quote escape in generated config files (#118)
  • fixed bug in traffic calculation and other RRD data (#95)
  • fixed bug in NGINX configuration (missing escape character)
  • fixed bug when adding subdomain to “own subscription” using SOAP API (122)
  • fixed display bug in Top10 subscriptions report (#123)
  • fixed calculation of available mailbox size and improved display of current mailbox quota (#124)
  • added “disable_vrfy_command=yes” to Postfix configuration
  • allow using mod_php and suPHP simultaneously
  • added TMPDIR environment variable to FastCGI starter
  • allow dash in MySQL user names and database names (#104)
  • reassigning subscriptions is now forbidden in demo mode
  • disabling APC for webspace subscriptions using suPHP
  • change shell option per subscription (#47)
  • updating quota immediately after changing it in subscription (#11)
  • optionally disable additional reselling for resellers (#114)
  • updated timezone database to version 2013g
  • don’t display (unavailable) customer reports with basic license
  • limit selection of PHP method (mod_php, suPHP, FastCGI) to actually available Apache modules (#87)
  • setting FcgidMaxRequestsPerProcess/PHP_FCGI_MAX_REQUESTS to 5000 for better stability with PHP/FastCGI

Changes in version 1.6.4-r2534 (09/04/2013):

  • fixed file descriptor leak with LCCP protocol in certain environments (#103)

Changes in version 1.6.4-r2509 (08/06/2013):

  • fixed deadlock in client process
  • added mail quota script (mailquota.sh) to lcclient package

Changes in version 1.6.4-r2488 (07/17/2013):

  • workaround for bug in SQLite (some queries didn’t return any data)

Changes in version 1.6.4-r2487 (07/16/2013):

  • workaround for JavaScript bug in IE8 with php.ini management
  • fixed bug in vsftpd configuration for PASV ports
  • fixed error when calling HostingDatabaseAdd() without password and ‘create’=1

Changes in version 1.6.4-r2480 (07/12/2013):

  • hiding SSL options for Postfix/Dovecot if no SSL certificates are available
  • hiding Greylisting option in mailbox configuration if Greylisting is not enabled on mail server
  • fixed postfix configuration for v2.10+ (smtpd_relay_restrictions)
  • added support for multi-domain SSL certificates
  • changed configuration of sockets for incoming HTTP/HTTPS/LCCP connections
    Use “*” now for any IPv4/IPv6 interface. Before, ‘::’ also accepted IPv6-mapped IPv4-addresses. Now both address families can/must be configured independently.
  • disabling two factor authentication when admin password is reset via console (with “–init”)
  • using PBKDF2 as new default algorithm for password hashes
  • added support for HostingSubscriptionAdd() and HostingDomainAdd() with subscriptions at “My Hosting”
  • fixed bug when modifying permissions for external database access for a subscription
  • added stack trace support for Lua API
  • improved stability of Lua API
  • upgraded SQLite due to bug in 3.7.17
  • improved SSL cipher configuration for services (for PCI compliance)
  • added support for ECDH ciphers (TLSv1)
  • automatically adjusting FcgidMaxRequestLen to PHP post_max_size
  • added support for HSTS - HTTP Strict Transport Security (RFC6797)
  • fixed broken check for password length on login page
  • added workaround to filter available apps from AppInstaller
  • fixed bug when updating HTTP traffic per subscription
  • better protection of per-subscription php.ini file
  • optimized syntax check for ’timestamp’ parameter on SOAP requests
  • workaround for optimizer bug in SQLite 3.7.17
  • allowing wildcard subdomains with HostingSubdomainAdd()
  • fixed pagination bug when entering a search term in tables on page >1
  • allow configuration of PASV ports for FTP server
  • fixed bug when editing mailbox limit for individual subscriptions
  • fixed missing permissions with individual reseller subscriptions
  • added new report “Top 10 subscriptions”

Changes in version 1.6.3-r2383 (06/04/2013):

  • fixed bug in directory password protection with NGINX
  • fixed problem with live log viewer when no error.log exists
  • added option ‘weblogin’ to SOAP method HostingMailboxAdd
  • fixed bug in SOAP method CustomerEdit()
  • fixed configuration problem with wildcard subdomains and Apache httpd
  • reassigning hosting subscriptions to another customer (#22)
  • fixed bug when deleting a user account
  • fixed problem with missing subscriptions when reassigning a subscription
  • upgraded MySQL driver and SQLite driver
  • improved stability of MySQL driver after lost connection to database server
  • improved logging to prevent flooding log file with identical messages
  • [r2383] fixed bug in SOAP method HostingMailboxAdd() (introduced with r2381)

Changes in version 1.6.2-r2361 (05/22/2013):

Important: with version 1.6.2 LiveConfig brings a complex php.ini management. If you’re upgrading from an earlier version to 1.6.2 (or later), please log on as admin after applying the upgrade, open the php.ini management page and check if the preset default values are ok for you and your customers. Only after clicking the apply template… button these settings will be applied to all customers’ php.ini files.

  • added support to change name/domain of an e-mail address
  • fixed rounding bug in display of mailbox sizes
  • fixed bug when deleting external domain with empty hostname
  • fixed bug when disabling a custom logo as login logo
  • configure e-mail address for cron output (#45)
  • displaying “pause” icon on disabled cron jobs (#46)
  • added configuration option “log_level” to LiveConfig Client
  • fixed some bugs when using subscription names with uppercase letters
  • started work on FreeBSD support
  • improved NGINX PHP-FCGI starter script (using PID files)
  • E-Mail self-service login (#51)
  • improved detection of MySQL packages, also supporting Percona and MariaDB
  • added “allow_writeable_chroot” option to vsftpd 3.x configuration (see also #73)
  • writing error message to log file (instead of only stderr) if license renewal failed
  • allow webspace customer to enable error.log for 24 hours (#37)
  • added missing “mail_max_userip_connections” option to Dovecot 2.x config
  • added live viewer for log files
  • fixed bug in Application Installer when system call (select()) was interrupted
  • improved Postfix configuration (reject_unknown_reverse_client_hostname, reject_invalid_helo_hostname, reject_unknown_recipient_domain)
  • fixed bug in Apache module detection
  • fixed GUI bug when adding a new IP address group for NGINX
  • preserving hash in URLs on dereferer
  • disabling all websites when a customer is suspended
  • returning list of assigned databases in HostingSubscriptionGet()
  • improved sort order of hosting subscription names (web1, web10, web2, web20 -> web1, web2, web10, web20, …)
  • automatically detecting if MySQL server has SSL support enabled
  • RPM installer: keeping existing liveconfig.conf/lcclient.conf and mailquota.txt during upgrade if locally modified
  • allow users to enable external MySQL access (#54)
  • manage comments for databases (#26)
  • not deleting MySQL user when deleting a database if user still has access to other databases
  • added SOAP method UserGet()
  • fixed a bug when configuring a “shared IP group” as reseller
  • fixed bug in WSDL schema for HostingSubscriptionGet (list of databases is now returned as “databaseList” instead of “databases”)
  • Dovecot configuration parameter “mail_max_userip_connections” disabled for v1.0.x (CentOS 5 ships Dovecot 1.0.7 by default)
  • added configuration option for “SSL session reuse” on FTP server (#85)
  • allow selection of end customer when assigning a SSL certificate to a reseller
  • added support for two factor authentication (eg. with Google Authenticator)
  • allow restriction of configuration of external database access (#54)
  • editing the maximum number of allowed customers in reseller subscriptions(#9)
  • added “O” flag to Postfix’ master.cf (adding X-Original-To: header)
  • fixed minor bug in SSL CSR generation (#88)
  • added GUI for directory password protection (#9)
  • fixed bug in packet search (using ’eix’) with Gentoo
  • fixed Apache module detection with Gentoo and RedHat/CentOS
  • added support for Linux Malware Detect to PHP upload scan script (http://www.rfxn.com/projects/linux-malware-detect/)
  • management of global php.ini settings (#28)
  • added support for other languages with AWStats
  • added support for wildcard subdomains (#38)
  • fixed bug with individual php.ini settings for mod_php
  • fixed problem with Application Installer using too restrictive php.ini settings
  • fixed bug in AWStats configuration (LogFormat)
  • added SOAP method CustomerEdit()
  • various minor bugfixes and improvements
  • fixed directory permissions for ‘apps’ (broken with r2347)
  • added subdirectory support for log viewer

Changes in version 1.6.1-r2140 (02/21/2013):

  • optionally display custom logo on login pages (#43)
  • CentOS 6: added support for AWStats package from EPEL repository (#55)
  • CentOS: adjusted nginx-php-fcgi script to work with CentOS (#56)
  • CentOS: fixed “status” action of init script (#57)
  • fixed escaping of HTML characters in some data tables (#58)
  • fixed error in ProFTPd configuration with unlimited connections (#59)
  • fixed SQL query when selecting a folder for a new subdomain (#60)
  • various minor bugfixes & optimizations in GUI
  • fixed error in application installer if databases should be created on external database server
  • if a SSL certificate was assigned to a customer, the customer name was not displayed (#61)
  • increased timeouts for application installer
  • fixed bug in logrotate configuration when a subscription name contains a dash character (#62)
  • added support for vsftpd with Debian
  • added support for mailbox quota warning (#64)
  • fixed bug when disabling PHP in existing subscriptions (#65)
  • displaying mailbox quota usage in mail overview (#66)
  • deletion of “empty” subdomain isn’t allowed any more (#67)
  • fixed bug with AWStats and upper-case subscription names (#68)
  • improved import of pre-hashed MySQL passwords
  • displaying list of enabled Apache modules (#3)
  • configure max. concurrent POP3/IMAP connections per user and IP (#69)
  • fixed bug regarding issue #43 when using SQLite database
  • allow “Options ExecCGI” on subscriptions with CGI
  • added support for “dovecot21” package with OpenSUSE 12.2 (#73)
  • allow decreasing quota of overbooked mailboxes
  • added server configuration option ’log_level’
  • fixed bug when deleting a hosting subscription without webspace
  • improved browser compatibility with Internet Explorer
  • added workaround for bug in AWStats 7.x with Perl >=5.14 (statistics didn’t get updated)
  • fixing permissions of ~/htdocs/cgi-bin to work correctly with suexec on OpenSUSE (#74)
  • fixed bug on sending data via SSL (error SSL_WANT_WRITE)
  • improved postfix configuration
  • optionally disable CRAM-MD5 authentication for Dovecot when using imported passwords in MD5-CRYPT scheme
  • fixed bug when dealing with big group files on recent Linux kernels (#77)
  • added missing “unix:” prefix in ClamAV configuration for Postfix/OpenSUSE
  • fixed display bug for traffic graph on “My Hosting” page
  • fixed detection of Apache module “proxy_http”
  • improved error output when starting via init script
  • fixed bug with virtual FTP users when using vsftpd with “dash” shell (eg. on Debian linux)

Changes in version 1.6.0-r2047 (11/27/2012):

  • added SSL support for Postfix and Dovecot
  • configurable DNS blacklists for Postfix
  • extended application installer to support <select> input (for XTC modified)
  • allow editing of customer ID (#33)
  • improved button for captcha reload (#15)
  • removing empty configuration files from purged subscriptions (#17)
  • removing empty mail directories (#17)
  • open external website links from application installer in new tab/window
  • updated internal zime zone database
  • fixed bug in time zone query (now also showing time zones without any DST rule)
  • setting time zone for new users added via SOAP function UserAdd() (#36)
  • fixed php.ini setting for mod_php (PHPIniDir)
  • added configuration options “http_canonical_host” and “http_canonical_redirect” to configure a canonical server name for the web interface
  • hosting subscriptions can now be deleted at once without having to delete all mailboxes/databases/etc. first
  • improved detection of NGINX packages under Debian linux
  • fixed serious bug when deleting an e-mail address with a dash (-) in the domain name
  • added Greylisting support (via Postgrey)
  • webspace directory (‘htdocs’) now can be named differently (eg. ‘html’)
  • removed some unnecessary error messages (#39)
  • optionally allow only SSL connections to POP3/IMAP server
  • fixed possible problem when deleting multiple MySQL database at a time (eg. when deleting a whole subscription)
  • improved SSL security to mitigate BEAST attack possibility (#42)
  • added support for TLSv1.1 and TLSv1.2
  • disabled client-initiated SSL renegotiation (CVE-2009-3555)
  • added detection of NGINX web server on CentOS
  • added support for rssh (scponly replacement)
  • fixed display error when MySQL database is >4 GB big
  • added option to disable POP3S/IMAPS
  • improved autodiscover/autoconfig service
  • added SSL support for FTP servers (vsftpd/ProFTPd) (#12)
  • fixed bug in Debian installer for LiveConfig client (configuration file overwritten on upgrade)
  • added management of external DNS servers (#34)
  • fixed bug preventing generation of statistics with AWStats on CentOS
  • fixed bug in Postfix configuration leading to bounces (instead of rejects) of mails to unknown local recipients
  • fixed bug in Dovecot 2.x configuration (mail quota not enforced)
  • fixed bug in application installer (database name length was limited to 12 instead of 16 characters)
  • fixed bug in UTF8-encoding of multibyte characters with >2 bytes
  • fixed display bug in folder selection popup with IE9
  • added deletion of unused IP groups (#49)
  • allow limiting the maximum number of concurrent FTP connections (#50)

Changes in version 1.5.3-r1932 (10/10/2012):

  • returning list of webserver IP addresses where the new domain is configured on SOAP function HostingDomainAdd()
  • SSL certificates: checking that the private key matches the certificate key
  • fixed creation of PHP FastCGI starter script on new subscriptions
  • improved performance on setups with large RRD tables
  • added configuration directive “db_options”
  • improved permission fix script (now also moving cgi-bin if destination is empty)
  • fixed bug in liveconfig.lua preventing permissions-fix to run on first time
  • fixed suPHP configuration for Debian7 and OpenSUSE when mod_php is enabled
  • fixed “Error 500” on path selection popup
  • opening web statistics in new browser tab/window
  • added SOAP methods HostingPasswordUserAdd() and HostingPasswordPathAdd()
  • Apps (installed via App Installer) can now be configured directly with HTTPS
  • improved readability of password recovery captcha
  • returning list of webserver IP addresses where the new domain is configured on SOAP function HostingSubdomainAdd()

Changes in version 1.5.2-r1893 (10/02/2012):

  • fixed bug in database creation via AppInstaller when running in certain multi-server setups
  • disallowing use of UTF-8 special chars (umlauts etc.) for POP/IMAP passwords
  • fixed configuration error in Postfix’ master.cf when using submission port (587) and ClamAV-Milter
  • not listing webspace properties which are not available in current subscription
  • fixed overflow bug in Round Robin Database implementation (tables are automatically cleaned up when running the LiveConfig upgrade)
  • added SOAP methods ContactEdit() and ContactGet()
  • implemented locking/suspending customers
  • fixed bug in HTTP redirect configuration for SSL webspace
  • automatically removing crontab when deleting a webspace account
  • improved fault tolerance when removing a webspace account
  • added support for AWstats
  • added software selection option for web analytics configuration
  • optimized display of reseller subscription statistics and subscription list
  • fixed minor bug in Debian/Ubuntu installer when running non-interactively
  • fixed installer bug when installing on OpenSUSE12 without SuSEfirewall2
  • added cron job to remove expired PHP session files from user directories
  • fixed minor JavaScript GUI bugs with Internet Explorer
  • added selection of PHP execution mode (suPHP/FastCGI/mod_php)
  • domains/subdomains with Apache httpd are from now on configured using separate <VirtualHost> sections, optionally still possible with RewriteRules
  • if a user or customer is deleted, all open sessions are immediately terminated
  • checking permissions for configuration file (aborting startup if insecure)
  • showing subscription properties differing from hosting plan on subscription details page
  • fixed permissions for webspace home directories for better security
  • fixed Apache SSL configuration on CentOS5/6 (renaming “ssl.conf”)
  • added placeholder ##LC_WEBROOT## for php.ini files
  • improved SELinux configuration for CentOS
  • added “umask 0022” to PHP FastCGI starter (Apache & NGINX)