Copyright Notice. ISBN: N/A Parallels 660 SW 39th Street Suite 205 Renton, Washington USA Phone: +1 (425) Fax: +1 (425)

Transcription

1 Parallels Panel

2 Copyright Notice ISBN: N/A Parallels 660 SW 39th Street Suite 205 Renton, Washington USA Phone: +1 (425) Fax: +1 (425) Copyright , Parallels, Inc. All rights reserved Distribution of this work or derivative of this work in any form is prohibited unless prior written permission is obtained from the copyright holder. Patented technology protected by U.S.Patents 7,328,225; 7,325,017; 7,293,033; 7,099,948; 7,076,633. Patents pending in the U.S. Product and service names mentioned herein are the trademarks of their respective owners.

3 Contents Preface 6 Typographical Conventions... 6 Feedback... 7 About This Guide 8 About Parallels Small Business Panel 9 Hardware and Software Requirements Operating Inside Parallels Containers 11 Becoming Familiar with the Panel 12 Customizing the Panel Changing Your Password and Contact Information Setting Up and Managing the Server 17 Obtaining and Installing a License Key Securing Connections to the Panel with SSL Setting System Date and Time Adding and Removing IP Addresses Configuring DNS Service Configuring the Panel to Run Behind Router with NAT Configuring the Panel to Run Behind a Firewall Using the Software Firewall Built into Your Panel (Windows Hosting) Using the Software Firewall Built into Your Panel (Linux Hosting) Setting Up Mail Services Setting Up Database Servers Setting Up Remote Database Hosting Managing Database Servers Managing System Services Using the System Monitoring Tool (Linux Hosting) Enabling Windows Users to Access Files and Printers on Your Linux-based Server Setting Up File Server Managing Shares Managing Users Managing Broadcast Interfaces Limiting Access to File Server from Other Computers or Networks Connecting to Your Company's Network over VPN (Linux Hosting) Setting Up a VPN Connection Managing Keys Using Client Packages Starting and Stopping a VPN Connection Configuring ASP.NET (Windows Hosting) Restarting the Server... 80

4 Preface 4 Updating the Panel Scheduling Tasks Scheduling Tasks (Linux Hosting) Scheduling Tasks (Windows Hosting) Extending Panel's Capabilities with Add-on Modules Establishing Online Presence 89 Setting Up a Website Reviewing and Updating Web Hosting Settings Making Your Website Accessible When the Panel Is Running Behind Router with NAT. 95 Creating Site Content with Site Editor Publishing a Site Through FTP Publishing Sites Through the Panel's File Manager Previewing a Site Installing Applications Deploying Databases Turning Your Website Into an E-commerce Portal Obtaining and Installing an SSL Certificate Installing an E-commerce Application Setting Up Alternative Domain Names for a Site Organizing Site Structure with Subdomains Setting Up Subdomains (Linux Hosting) Setting Up Subdomains (Windows Hosting) Setting File and Directory Access Permissions (Linux Hosting) Setting File and Directory Access Permissions (Windows Hosting) Setting and Changing Access Permissions for Groups and Users Removing Access Permissions from Groups and Users Setting Up Access Permissions Inheritance for Files and Folders Setting, Changing and Removing Special Access Permissions Changing DNS Settings for Domains Customizing Web Server Error Messages Suspending and Unsuspending Websites Removing Websites Managing User Accounts 135 Setting Up Addresses 138 Accessing Mailboxes Setting Up Microsoft Office Outlook Setting Up Microsoft Outlook Express Setting Up Mozilla Thunderbird Setting Up Apple Mail Setting Up Mailing Lists Sharing Files and Folders 161 Setting Up File Sharing Using File Sharing to Share and Access Files Sharing Files with Other Users Within the Organization Publishing Files for Partners Publishing Files for Your Customers Uploading Your Files to a Private Directory on the Server Transferring Large Files that Cannot Be Sent by Accessing and Working with Files

5 Preface 5 Viewing Statistics, Logs, and Usage Reports 183 Backing Up and Restoring Data 184 Getting Help with the Panel 187

6 6 Preface Preface In this section: Typographical Conventions... 6 Feedback... 7 Typographical Conventions Before you start using this guide, it is important to understand the documentation conventions used in it. The following kinds of formatting in the text identify special information. Formatting convention Type of Information Example Special Bold Italics Monospace Items you must select, such as menu options, command buttons, or items in a list. Titles of chapters, sections, and subsections. Used to emphasize the importance of a point, to introduce a term or to designate a command line placeholder, which is to be replaced with a real name or value. The names of commands, files, and directories. Go to the System tab. Read the Basic Administration chapter. The system supports the so called wildcard character search. The license file is located in the ses directory.

7 Preface 7 Formatting convention Type of Information Example Preformatted On-screen computer # ls al /files output in your commandline sessions; source code total in XML, C++, or other programming languages. Preformatted Bold CAPITALS KEY+KEY What you type, contrasted with on-screen computer output. Names of keys on the keyboard. Key combinations for which the user must press and hold down one key and then press another. # cd /root/rpms/php SHIFT, CTRL, ALT CTRL+P, ALT+F4 Feedback If you have found an error in this guide, or if you have suggestions or ideas on how to improve this guide, please send your feedback using the online form at Please include in your report the guide's title, chapter and section titles, and the fragment of text in which you have found an error.

8 C H A P T E R 1 About This Guide This guide is intended for server administrators who are going to deploy and manage Parallels Small Business Panel. Parallels Small Business Panel (hereinafter referred to as the Panel) is an information system that enables organizations to establish online presence with e-commerce support, and set up a company server and intranet (internal website) with integrated collaboration tools. All tasks that you might want to perform in your information system are covered in the corresponding sections of this guide. The sections are placed in the order in which you are advised to perform these tasks, and section titles reflect task objectives. Therefore, we encourage you to use the table of contents in this guide to locate the required information. The following checklist outlines essential tasks that you might need to perform: Configure the server-wide settings after installation of the software. If you were provided with access to the Panel as a part of your hosting package, then it is likely that these configuration steps have already been completed by your hosting service provider. Obtain and install a license key for your copy of the software. Set system date and time. Set up DNS service to ensure that your websites and will operate correctly. Set up mail service and protection from spam and viruses. Set up your company website. (on page 89) Register a domain name with a domain name registration authority. Set up your company website. Install applications that will add the required functions to the site. Create user accounts in the information system. (on page 135) Create or modify user roles which are used for setting up user accounts and providing access to applications. Add user accounts to allow users to access collaboration tools, , and view contact information of other users. Create addresses for users, set up mail forwarding and auto-reply services. (on page 138) Set up file sharing to allow users within the company to access shared documents, presentations, and other information. (on page 161) Back up and restore data related to your information system. (on page 184) View site visitor statistics. (on page 183)

9 C H A P T E R 2 About Parallels Small Business Panel Parallels Small Business Panel (hereinafter referred to as the Panel) is a software designed to address the following needs of small to medium sized businesses: Online presence. You can set up a company website for sharing information with business partners and customers, or selling goods and services online. Company addresses. You can set up accounts for the employees with protection from spam and viruses, and use mailing lists. Intranet for employees. You can set up an Intranet (an internal website inside a company's network) for company s employees with password-protected access to collaboration tools and business applications: accounting, inventory, customer relationship management (CRM) solutions, databases, and more. Cost-effective IT infrastructure. You can reduce the cost of hardware and software licenses and maintenance efforts: simplified deployment and administration of the Panel and business applications on a single server does not require experienced IT staff. In this chapter: Hardware and Software Requirements... 10

10 10 About Parallels Small Business Panel Hardware and Software Requirements To be able to install and use Parallels Small Business Panel, you need a computer that satisfies the following minimum hardware requirements: Dual core CPU: Intel Core 2 Duo or AMD Athlon X2. RAM: 512 megabytes. Free disk space on a hard disk drive: 10 gigabytes for applications and data, and 1 gigabyte for virtual memory (referred to as paging file, or a swap file/partition). The Panel can run on the following operating systems: CentOS 5.x RedHat Enterprise Linux 5 Fedora 8 Fedora 11 opensuse 10.3 opensuse 11.1 Debian GNU/Linux 4.0 Debian GNU/Linux 5.0 Ubuntu 8.04 LTS Windows 2003 Server SP2 Web Edition Windows 2003 Server SP2 Standard Edition Windows 2003 Server SP2 Enterprise Edition Windows 2003 Server SP2 Data Center Edition Windows 2008 Server SP1 Enterprise Edition Windows 2008 Server SP1 Standard Edition Windows 2008 Server SP1 Datacenter Edition Additionally, the following requirements must be met when installing on Microsoft Windows operating systems: An IP address should be assigned to the network card in the operating system before installing the Panel for Windows. Internet Information Services (IIS) must be installed on your system with WWW and FTP support. If you want to use SSI, ASP and FrontPage services, also select the respective components during the installation of IIS. Your server must not act as a Windows Domain Controller (neither primary nor backup). If this requirement is not fulfilled, a system crash may occur during the creation of domains with certain names.

11 C H A P T E R 3 Operating Inside Parallels Containers The Panel might be inaccessible when installed in a Parallels Container for which Offline Management is switched on. To enable access to the Panel through Web browsers, you need to switch off the Offline Management parameter for the target Container. For more information, refer to Parallels Small Business Panel: Installation Guide. Also note that when the Panel is operating inside Parallels Containers, the following operations in the Panel are not available: Adding to and removing IP addresses from the server's network cards. Changing host name. Setting system date and time.

12 C H A P T E R 4 Becoming Familiar with the Panel This chapter will help you become familiar with organization of your Panel's user interface. You will learn where to find links for performing essential administrative tasks. It also provides instructions for: Logging in to the Panel. Selecting your language. Uploading a custom banner to the top area of the Panel. Changing your password for access to the Panel. Changing your address and other contact information. Setting up mail forwarding and auto-reply services for your address. To log in to the Panel: 1. Open your Web browser and type the Internet address of your hosting server. For example: or 2. If your browser alerts that the website's identity could not be verified, or that the website uses an SSL certificate issued by an unknown certification authority, and you are sure that you typed the right Internet address, do not worry: It means that the default self-signed SSL certificate is used by the Panel to secure the communication channel between the Panel and its users. Click through this SSL warning. 3. Type your username and password and click Log in. The default administrator's username is "admin" and password is "setup". If you are logging in for the first time, you might be prompted to specify your address, choose a new password and agree to the terms of End User License Agreement. When you are logged in to the Panel, in the top navigation area, you see the following tabs with icons and links: Home. Provides access to the most frequently performed operations. The most part of administrative tasks can be performed using the shortcuts on this screen: Manage user roles and user accounts. (on page 135) Register a domain name for a new website; add a website (on page 90); fill it with content using the integrated Site Editor functionality (on page 96). View website visitor statistics (on page 183). Set up addresses (on page 138) and mailing lists. (on page 159) Upload files to the server and share them with other employees or customers. (on page 161)

13 Becoming Familiar with the Panel 13 Select and install applications on websites. (on page 103) My Services. Provides customizable shortcuts to the applications installed on the server (on page 103), webmail, file management, and contact information of users. Users. Provides access to functionality for creating, modifying, deleting user accounts and user roles (on page 135). Mail. Provides access to functionality for creating, modifying, deleting addresses (on page 138) and mailing lists (on page 159). Websites & Domains. Provides access to functionality for registering domain names (on page 90), creating (on page 90), modifying (on page 96), deleting websites (on page 134), setting up hosting features (on page 89), databases (on page 107), subdomains (on page 117), domain aliases (on page 115), viewing website visitor statistics (on page 183), and managing files published at the websites (on page 101). Applications & Scripts. Provides access to functionality for installing, configuring, and removing Web applications (on page 103) that add useful features to your site, such as blog, photo gallery, online store, and other business applications. Files. Provides access to functionality for managing directories and files stored on the server (on page 161). Settings. Provides access to functionality for Panel branding and configuring the settings that affect all services running on the server (on page 17). Note: The number and location of these icons and links in your panel depend on the number of available services, installed applications, and functions provided in accordance with your software license. For this reason, some of the functions and items described in this guide might not be available to you. If you want to use the functions that are currently missing in your Panel, then upgrade your software license, install the necessary software packages, or contact your hosting service provider for assistance. Above the tabs, the following icons are located: My profile. Specify your contact information, address, and set a new password for accessing the Panel (on page 15). Here you can also set up mail forwarding and auto-reply (on page 15) for your address. Log out. Close your session when finished working with the Panel. Help. View the context-sensitive Administrator's Guide. Getting Started. This opens Quick Start Guide that will guide you through your first steps in the system: brand the Panel, set up a website, create user accounts, and install applications on a site. In this chapter: Customizing the Panel...14 Changing Your Password and Contact Information...15

14 14 Becoming Familiar with the Panel Customizing the Panel To select the interface language for your Panel, and set a custom logo image that will appear in the top banner area of the Panel: 1. Go to the Settings tab > Branding and System. 2. Select the required language in the Interface language menu. The selected language will be set for all users. The users cannot set a specific language for their Panels. Note: The Panel comes with the following languages: English, German, French, Spanish, Italian, Russian, Japanese, Chinese Traditional, Chinese Simplified, and Dutch. 3. Select the Use custom logo check box, and click Browse to select an image file from your local computer. An image that is 140 pixels in width and 30 pixels in height should fit fine. The image file will be uploaded and placed in the top banner area of the panel. 4. Type the website address that should open when users click your logo image. 5. Click OK. Note: On the server settings screen, you can also switch on or switch off automatic updates (on page 81) of the Panel, and set other server-wide settings, like host name (on page 27) and system date and time (on page 24). If your Parallels is running inside Parallels Containers, the input boxes for changing host name and system date and time are not available. To restore the default Panel logo: 1. Go to the Settings tab > Branding and System. 2. Clear the Use custom logo check box, and click OK.

15 Becoming Familiar with the Panel 15 Changing Your Password and Contact Information If you need to set a new administrative password for accessing the Panel, specify a new address, or other contact information for your account, do the following: 1. Click the My profile icon at the top of the screen. 2. Specify the address or new password in the corresponding fields. 3. To add your phone numbers or username (or identification number) in instant messaging services, click the Contact Details tab, and specify the information that you want to show to other users. Your address and your contact information is shown to other users logged in to the information system. The system will also send notices about important system events to your address. 4. Click OK. In your account settings, you can also set up: Forwarding of all mail coming to your administrative address hosted in the system to an external address. Automatic reply to all coming to your mailbox hosted in the system. This can be used for sending an automatic message acknowledging reception of mail, or an "out of office" or "on vacation" notice. If you want to set up forwarding of all that comes to your mailbox: 1. Click the My profile icon at the top of the screen. 2. Click the Mail Forwarding tab. 3. Select the Activate forwarding check box. 4. Type an address to which copies of all incoming messages will be forwarded. Note that when mail forwarding is switched on, the original messages that come to your mailbox hosted in the system are not deleted. For this reason, be sure to clean up your both mailboxes from time to time. 5. Click OK. If you want to set up an automatic reply for your mailbox hosted on the server: 1. Click the My profile icon at the top of the screen.

16 16 Becoming Familiar with the Panel 2. Click the Mail Auto-Reply tab. 3. Select the Activate auto-reply check box. 4. Type the message subject and message text. 5. Click OK.

17 C H A P T E R 5 Setting Up and Managing the Server Before you start creating websites and addresses, you should do the following: Obtain and install a proper license key for your installation of Parallels Small Business Panel, if this has not been done by your hosting service provider. Configure the corresponding services and settings: Add any additional IP addresses that were allocated to you by your hosting or Internet service provider. At least one IP address should be already assigned to the server where the Panel is running; however, if you are going to host more than one website secured with SSL, you will need to obtain additional IP addresses from your provider and add them using the Panel. Configure DNS (Domain Name System) template that automates setup of DNS zones for your websites. Properly configured DNS service is required for functioning of your websites. You should configure the server-wide DNS settings only if you are installing the Panel on your own server, or if your service provider advised to do so. Set up firewall that protects the server from attacks and enhances the server's security. Set up mail service that serves addresses and mailing lists for the hosted websites. Enable protection from spam and viruses. In addition to the instructions on setting up these essential services and settings, this chapter provides the information on the following optional features and administrative tasks that you might need to perform: (On Linux-based servers). Set up the system monitoring function that ensures your server is clean from malicious software, all system services are running, and there is enough free disk space on the server. (On Linux-based servers). Set up Samba file sharing add-on to allow users of Windows workstations to access shared files and folders on the server. (On Linux-based servers). Set up VPN service to allow authorized users to securely connect to your company's network from remote locations. Restart the server. Update the Panel and its components. Schedule tasks. If you need to run scripts on your server at specific time, use the task scheduler functionality on your server to make the system automatically run the scripts for you.

18 18 Setting Up and Managing the Server In this chapter: Obtaining and Installing a License Key Securing Connections to the Panel with SSL Setting System Date and Time Adding and Removing IP Addresses Configuring DNS Service Configuring the Panel to Run Behind Router with NAT Configuring the Panel to Run Behind a Firewall Setting Up Mail Services Setting Up Database Servers Managing System Services Enabling Windows Users to Access Files and Printers on Your Linux-based Server Connecting to Your Company's Network over VPN (Linux Hosting) Configuring ASP.NET (Windows Hosting) Restarting the Server Updating the Panel Scheduling Tasks Extending Panel's Capabilities with Add-on Modules... 87

19 Setting Up and Managing the Server 19 Obtaining and Installing a License Key The Panel comes with a trial license key, which is already installed in the Panel. This license key provides limited functionality and is active only for a short period of time. Therefore, you should obtain a proper license key from Parallels and install it into the Panel. To upgrade the trial license key: 1. Go to the Settings tab > License Keys, and click the link Go to Parallels Store to upgrade Panel license key. 2. The Parallels online store will open in a separate browser window. In this window, locate Parallels Small Business Panel and click Buy Now. 3. Select the items and features you want to include into your Panel license. Click Add to my basket. In the next steps, indicate the currency, number of license keys, provide contact details, billing address, payment method, and submit the form. The new key will be sent to the specified address. 4. Save the new key to the hard drive of your local machine. 5. Return to the Panel (to the Settings tab > License Keys), and click Upload upgraded Panel license key. 6. Enter the path to the key file that you saved on your local machine or click Browse to locate it. 7. Select the check box Confirm replacing the current license key with the uploaded one to confirm that you really want to replace the current license key. If this check box is not selected, the new license key will not be installed. 8. If your new license key allows serving fewer user accounts than already created in the Panel, the Panel will stop working. However, to prevent the Panel from checking the resource limits, select the check box Do not check license limits in the uploaded license key. This might be helpful if you want to temporarily install a license key that covers less resources and then upgrade it through the Panel. Note that even if you select this option and upload a license key that provides less resources than already used, you will only be able to use the license key management functions in the Panel. 9. Click OK to install the new key to the Panel. To be able to create more user accounts in your Panel, you can either upgrade your license key, as described earlier, or buy User Packs at Application Marketplace.

20 20 Setting Up and Managing the Server To add more user accounts to your current license: 1. Go to the Settings tab > License Keys, and click the link Go to Application Marketplace to buy user packs. Alternately, you can click the Users tab, and then click the link Buy additional User Pack. Note: If the links Go to Application Marketplace to buy user packs and Buy additional user pack are not shown in your Panel, then you should contact your hosting service provider to upgrade your license key. 2. The Application Marketplace online store will open in a separate browser window. In this window, select the user pack for a required number of user accounts. The number of user accounts provided in the user pack will be added to your license. 3. After you confirm your purchase, an activation code will be sent to your address. When you receive the activation code, save it into a text file: you will need to enter this code in the Panel. 4. Return to the Panel (to the Settings tab > License Keys). 5. Click Enter activation code to activate user packs. 6. Type or paste the activation code and click OK. To add useful functions to your Panel, you can purchase and install Panel add-ons: 1. Go to the Settings tab > License Keys, and click the link Go to Parallels Store to buy Panel add-ons. 2. The Parallels online store will open in a separate browser window. In this window, locate Parallels Small Business Panel and click the link Buy Now. 3. Click the corresponding link Add options. 4. Select the items and features you want to include into your Panel license. Click Add to my basket. 5. In the next steps, indicate the currency, number of license keys, specify contact details, billing address, and payment method, and submit the form. The new key file or an activation code will be sent to the specified address. 6. Save the new key or a key activation code to the hard drive on your local machine. 7. Return to the Panel (to the Settings tab > License Keys). 8. If you received a license activation code, click Enter activation code to activate add-ons. Paste the activation code into the input field and click OK. The add-on key will be automatically installed to the Panel.

21 Setting Up and Managing the Server If you received a license key file, click Upload additional license key to activate add-ons. 10. Enter the path to the key file that you saved on your local machine or click Browse to locate it. 11. Select the check box Confirm replacing current license key with the uploaded one to confirm that you really want to replace the current license key. If this check box is not selected, the new license key will not be installed. 12. Click OK to upload the new key to the Panel. 13. To install an additional key for an add-on or application, locate it in the lower part of the screen, and click Install. The key will be installed. If you purchased additional license keys from Parallels, but did not receive them, you can try to download them from the Parallels licensing server and install them to the Panel: Go to the Settings tab > License Keys, and click Retrieve Keys. The license keys that you purchased will be downloaded and installed to the Panel. To update an additional license key that is about to expire: Go to the Settings tab > License Keys. Locate the key you need and click Renew. To install the previously used license key: Go to the Settings tab > License Keys. Locate the key you need and click Revert. To permanently remove an additional license key from the server: Go to the Settings tab > License Keys. Locate the key you need, select a corresponding check box and click Remove. Securing Connections to the Panel with SSL For security reasons, you can access your Panel only through a secure connection provided by Secure Sockets Layer-enabled hypertext transfer protocol. All data you exchange with the server are encrypted, thus preventing interception of sensitive information. An SSL certificate used in the data encryption process is automatically generated and installed on the server during installation of Parallels Small Business Panel. This is the so-called self-signed certificate: it is not signed by a recognized certification authority (CA), therefore, upon attempt to connect to the Panel, you and users within your organization will see warning messages in Web browsers.

22 22 Setting Up and Managing the Server The use of self-signed SSL certificates is not recommended on production servers because it does not guarantee protection against the man-in-the-middle attacks. We recommend that you purchase an SSL certificate from a reputable certification authority, and install it to the Panel. You can either: Use the facilities for purchasing SSL certificates from Comodo, GeoTrust, Inc. or GoDaddy provided by your control panel. OR Create a certificate signing request (CSR) from the control panel and submit it to the certification authority of your choice, which will create an SSL certificate for you. To purchase an SSL certificate from Comodo, GeoTrust, Inc. or GoDaddy through MyPleskCom online store and secure your Panel: 1. Go to the Settings tab > SSL Certificates. A list of SSL certificates that you have in your repository will be displayed. 2. Click Add SSL Certificate, and specify the following properties: Certificate name. This will help you identify this certificate in the repository. Encryption level. Choose the encryption level of your SSL certificate. We recommend that you choose a value more than 1024 bit. Specify your location and organization name. The values you enter should not exceed the length of 64 symbols. Specify the host name for which you want to purchase an SSL certificate. For example: your-domain.com. This host name should be registered with a domain name registration authority, and should resolve to your hosting server's IP address. Enter your address. 3. Make sure that all the provided information is correct and accurate, as it will be used to generate your private key. 4. Click Buy SSL Certificate. Your private key and certificate signing request will be generated. Do not delete them. MyPlesk.com login page will open in a new browser window. 5. Register or log in to an existing MyPlesk.com account and you will be taken step by step through the certificate purchase procedure. 6. Choose the type of certificate that you wish to purchase. 7. Click Proceed to Buy and order the certificate. In the Approver drop-down box, select the correct Approver . The approver is an address that can confirm that certificate for specific domain name was requested by an authorized person. This is the address listed in the domain owner or domain administrator's contact information in the WHOIS database.

23 Setting Up and Managing the Server Once your certificate request is processed, you will be sent a confirmation . After you respond to the and confirm the purchase, the certificate will be sent to your When you receive your SSL certificate, save it on your local machine. 10. Return to the SSL certificates repository (Settings tab > SSL Certificates). 11. Upload the SSL certificate: Click Browse in the middle of the screen and navigate to the location of the saved certificate. Select it, and then click Send File. 12. Select the check box corresponding to the certificate you just added, and click Secure control panel. To secure your control panel with an SSL certificate from other certificate authorities: 1. Go to the Settings tab > SSL Certificates. A list of SSL certificates that you have in your repository will be displayed. 2. Click Add SSL Certificate. 3. Specify the certificate properties: Certificate name. This will help you identify this certificate in the repository. Encryption level. Choose the encryption level of your SSL certificate. We recommend that you choose a value more than 1024 bit. Specify your location and organization name. The values you enter should not exceed the length of 64 symbols. Specify the host name for which you wish to purchase an SSL certificate. For example: your-domain.com Enter your address. 4. Make sure that all the provided information is correct and accurate, as it will be used to generate your private key. 5. Click Request. Your private key and certificate signing request will be generated and stored in the repository. 6. In the list of certificates, click the name of the certificate you need. A page showing the certificate properties opens. 7. Locate the CSR section on the page, and copy the text that starts with the line -----BEGIN CERTIFICATE REQUEST----- and ends with the line -----END CERTIFICATE REQUEST----- to the clipboard. 8. Visit the website of the certification authority from which you want to purchase an SSL certificate, and start a certificate ordering procedure. When you are prompted to specify CSR text, paste the data from the clipboard into the online form and click Continue. The certification authority will create an SSL certificate in accordance with the information you supplied.

24 24 Setting Up and Managing the Server 9. When you receive your SSL certificate, save it on your local machine or network. 10. Return to the SSL certificates repository (Settings tab > SSL Certificates). 11. Upload the SSL certificate: Click Browse in the middle of the page and navigate to the location of the saved certificate. Select it, and then click Send File. 12. Select the check box corresponding to the certificate you just added, and click Secure control panel. For information about obtaining SSL certificates for securing access to websites, refer to the section Obtaining and Installing an SSL Certificate (on page 111). Setting System Date and Time You can set date and time on the server through the Panel if it is not running in Parallels Containers. If you need to adjust the date and time set on your server, do the following: 1. Go to the Settings tab > Branding and System. 2. Select the Change date and time check box, and specify the date and time as desired, and select your time zone. You will need to restart your Panel server for the time zone change to take effect. 3. To synchronize your server time with that of a server running the Network Time Protocol, select the Synchronize with time server (domain name or IP address) check box, and specify a valid IP address or a domain name. For a list of available NTP servers, visit ope=text 4. Click OK. Note: Enabling the Synchronize with time server (domain name or IP address) function will override any time and date you manually enter in the System Date and Time fields. It is also important to be sure the domain name or IP address you enter for synchronization is a valid NTP server. If not, this function will not work and your server will continue running with its current time settings.

25 Setting Up and Managing the Server 25 Adding and Removing IP Addresses After installation, the Panel reads all allocated IP addresses from the network configuration files and can then use these IP addresses for hosting websites. When you obtain a new IP address that you would like to use on the server (for example, to set up an online store with SSL protection), you should add the address through the Panel because the Panel might not recognize manual modifications you make to the network configuration files. Note that the instructions provided in this section are applicable only for Parallels Small Business Panel installations on standalone hosting servers. If you use the Panel installed inside Parallels Containers, then you should refer to the Parallels Containers documentation for instructions on assigning IP addresses. To view the IP addresses you have at your disposal: 1. Go to the Settings tab > IP Addresses (in the Advanced Settings group). Your IP addresses are listed and the following supplementary information is given: In the S (Status) column, the icon is shown if your IP address is properly configured on the network interface. If your IP address was removed from the network interface, the icon is shown. The IP address, Subnet mask and Interface columns show which IP addresses are on which network interfaces. The Hosting column shows a number of websites hosted on an IP address. To view the domain names of these websites, click the respective number in the Hosting column. 2. To update the list of IP addresses and their status, click Reread IP Addresses. You might need to do so if the IP address was added directly in the server's operating system, or from Parallels Containers. To add a new IP address to the server: 1. Go to the Settings tab > IP Addresses (in the Advanced Settings group), and click Add IP Address. 2. Select the network interface for the new IP from the Interface drop-down box. All network cards installed on your server are shown in this drop-down box. 3. Enter the IP address and subnet mask in the corresponding box (e.g., /16). 4. In the IP address distributed as field, leave the Exclusive option selected.

26 26 Setting Up and Managing the Server 5. From the drop-down box, select the SSL certificate for the new IP address. If you are going to host an online store, then you need to assign a valid SSL certificate to the IP address. You will select this IP address while setting up the new e-commerce website. You can select the following certificates: Default certificate - the certificate that comes with the Parallels Small Business Panel distribution package. However, this certificate is not recognized by Web browsers as it is not signed by a Certificate Authority (a warning message appears). The default certificate is used to provide access to the control panel via the HTTPS protocol ( Other certificates - the certificates (self-signed or signed by a Certificate Authority) that you added to the repository of SSL certificates. For information about adding certificates, see the section Obtaining and Installing an SSL Certificate (on page 111). 6. Click OK. To remove an IP address from the server: 1. Go to the Settings tab > IP Addresses (in the Advanced Settings group). 2. Select the respective check box and click Remove. 3. Confirm removal and click OK. If you host several websites on a single IP address, you can choose which of them will be shown to the users who refer to your Web server by its IP address. To specify what website will open when users enter an IP address in Web browser: 1. Go to the Settings tab > IP Addresses (in the Advanced Settings group). 2. Click number in the Domains column next to the required IP address. 3. Select the site you need and click Set as Default.

27 Setting Up and Managing the Server 27 Configuring DNS Service Every website published on the Internet has its own unique Internet address. This address, also called Internet domain name, is what people type in their Web browsers when they want to visit a particular site. A domain name is a combination of words separated by dots, for example, example.com. The right-most part of the domain name is called top-level domain (TLD). In our example, the top-level domain is "com", which indicates that the website belongs to a commercial organization. Next to the top-level domain "com" is a secondlevel domain, which is "example" in our example. For more information about top-level domains, refer to There are also third-level domains, which are often called subdomains, for example, kb.example.com. Subdomains are often used for organizing quick access to areas of a site that are dedicated to organization's divisions, or contain information related to a particular topic of interest. Domain names are rented from domain name registration authorities (called registrars) for a specific period of time, and at the end of this period the registration term needs to be prolonged (renewed), otherwise, the domain name will become available for registration by anyone else. Registrars are organizations that publish technical information about the name and location of your site to the Domain Name System (DNS). Domain Name System is the mechanism that allows websites to have meaningful names, and thus to be found easily on the Internet. Domain Name System also enables routing. Here is a brief overview of how it all works: 1. You register a domain name with a domain name registration authority (a registrar): You can register a domain name through your Panel, through your hosting company's website, or you can contact a registrar of your choice. The information required for registration typically includes the contact information of persons responsible for administration of a website and IP addresses of name servers. Name servers are computers that run DNS server software and keep the files that describe settings related to the domain name, FTP, Web, and services. These files are called DNS zone files, and entries in these files are called resource records. DNS server software can run on the same server where websites are hosted, or it can run on a separate computer connected to the Internet, possibly at the registrar's or your Internet service provider's location. Note: Your Panel comes with a DNS server software, which is switched on by default. This means that the computer where Parallels Small Business Panel is installed can also act as a name server for the websites that you host. If you decide to use the DNS service built into your Panel, then, during domain name registration, specify your server's IP address as the name server 1 and name server 2.

28 28 Setting Up and Managing the Server If your Panel server is located inside your company's local area network, which is protected by a router with network address translation (NAT), and you want your websites to be accessible to the Internet users, you should first configure the network address translation as described in Configuring the Panel to Run Behind a Router with NAT (on page 34). After that, in the domain management panel at the registrar's site, specify the public IP address assigned to your NAT device as the IP address or addresses of name servers. 2. You set up a website in your Panel: Specify the domain name that you registered, and select the Web hosting features that should be supported or switched on. If you did not switch off the DNS service running on your Panel server, a zone file is automatically generated for your new site in accordance with the server-wide DNS zone template and registered in the name server's database, and name server is instructed to act as a primary (master) DNS server for the zone. Now you can start filling the site with content, and in two days, when the information about the site is spread in the DNS, the site will be accessible to Internet users. 3. A user wants to visit your site and types your site's address (the domain name) in a Web browser. To be able to connect to the Web server and show the Web pages of the requested site, the browser needs to know the Web server's IP address (a unique four-part number assigned to the server). As DNS keeps records about what domain names (or host names) are associated with what IP addresses, the browser's built-in resolver function starts querying various DNS servers for information: it locates the closest DNS server in the user's network, and asks for the information about the requested website. The DNS server first looks inside its cache (a collection of information gathered within past few days), and if it finds the required information, it then returns the IP address to the user's browser. If the DNS server does not have the required information in its cache, then (if recursive DNS queries are allowed) it starts querying other DNS servers on the Internet, and when the required IP address is found out, it returns the IP address to the user's browser. If the DNS server does not allow recursive queries, then it simply forwards the request to another DNS server, which finds out the IP address and returns it to the user's browser. Eventually, the browser connects to the Web server, retrieves and shows the website's main page. Now, let's take a closer look at the DNS zone file which describes the location and settings of website's services. For illustration purposes, we have set up in the Panel a website with domain name example.com. We did not switch off the server-wide DNS service in the Panel because we want this server to act as a name server for all sites that we host. In accordance with predefined resource record templates, the zone file was created and saved on the server's file system. Let's open this file and see what we have there. Contents of the zone file Description of resource records

29 Setting Up and Managing the Server 29 $TTL IN SOA ns.example.com. administrator.example.com. ( Serial ; ; Refresh 3600 ; Retry ; Expire ) ; Minimum example.com. IN NS ns.example.com. ns.example.com. IN A example.com. IN A webmail.example.com. IN A mail.example.com. IN A ftp.example.com. example.com. example.com. IN CNAME IN CNAME example.com. IN MX 10 mail.example.com. TTL (Time to Live). This is the amount of time in seconds that other DNS servers should store the information about this site in a cache. The Panel sets the default value of one day. SOA (Start of Authority). This marks the beginning of the zone; ns.example.com is the domain name of the name server which is the primary source of data for this zone; administrator.example.com is the address of the person responsible for the zone. In the address, symbol is replaced by a period. Serial number. When the changes to the zone are made, the serial number is increased. Refresh. This is how often the secondary name servers check with the primary name server to see if any changes have been made to the domain's zone file. The Panel sets the default value of three hours. Retry. This is the time a secondary name server waits before retrying a failed zone transfer. This time is typically less than the refresh interval. The Panel sets the default value of one hour. Expire. This is the time before a secondary server stops responding to queries, after a lapsed refresh interval where the zone was not refreshed or updated. The Panel sets the default value of one week. Minimum. This is the time a secondary server should cache a negative response. The Panel sets the default value of three hours. NS record. It states that ns.example.com is the name server for example.com. A records. They specify IP addresses that correspond to the domain names. CNAME records. They specify that, for example, is an alias of example.com. MX record. It specifies that mail.example.com is the mail server for example.com. 10 means the highest priority of this mail server.

30 30 Setting Up and Managing the Server If you need to modify any of these settings, you should use the corresponding icons in the Panel: To set custom values that will affect DNS zones created for all newly hosted websites, modify the server-wide DNS template at the Settings tab > DNS Zone Template (in the Advanced Settings group). Note that modifying the server-wide DNS zone template does not affect the already existing sites. To set custom values for an individual website, modify its DNS zone at the Websites & Domains tab > DNS. If your provider or another organization is running DNS service for your sites, you can switch off the domain name service on this machine, or set the service to operate as a secondary name server for individual domains. Note: Contact your hosting provider to learn more, and do not modify anything if you do not know what you are doing. To view the default records in the server-wide DNS template: Go to the Settings tab > DNS Zone Template (in the Advanced Settings group). All resource record templates will be displayed. The <ip> and <domain> templates are automatically replaced in the generated zone with real IP addresses and domain names. To add a new resource record to the server-wide DNS template: 1. Go to the Settings tab > DNS Zone Template (in the Advanced Settings group), and click Add DNS Record. 2. Select the resource record type and specify the record properties as desired. Note that you can use <ip> and <domain> templates that will be replaced in the generated zone with real IP addresses and domain names. You can use a wildcard symbol (*) to specify any part of the domain name, and you can specify the exact values you need. 3. Click OK. To remove a resource record from the server-wide DNS template: 1. Go to the Settings tab > DNS Zone Template (in the Advanced Settings group). 2. Select a check box corresponding to the record template you wish to remove, and click Remove. 3. Confirm removal and click OK. The Panel updates automatically the zone name, host name, administrator s address, and serial number, and writes the default values for the rest of Start of Authority record parameters to the zone files it maintains. If you are not satisfied with the default values, you can change them through the Panel.

31 Setting Up and Managing the Server 31 To change the Start of Authority (SOA) record settings in the server-wide DNS template: 1. Go to the Settings tab > DNS Zone Template (in the Advanced Settings group), and click SOA Records Template. 2. Specify the desired values: TTL. This is the amount of time that other DNS servers should store the record in a cache. The Panel sets the default value of one day. Refresh. This is how often the secondary name servers check with the primary name server to see if any changes have been made to the domain's zone file. The Panel sets the default value of three hours. Retry. This is the time a secondary server waits before retrying a failed zone transfer. This time is typically less than the refresh interval. The Panel sets the default value of one hour. Expire. This is the time before a secondary server stops responding to queries, after a lapsed refresh interval where the zone was not refreshed or updated. The Panel sets the default value of one week. Minimum. This is the time a secondary server should cache a negative response. The Panel sets the default value of three hours. 3. Click OK. The new SOA record parameters will be set for the newly created domains. Usage of serial number format recommended by IETF and RIPE is mandatory for many domains registered in some high-level DNS zones, mostly European ones. If your domain is registered in one of these zones and your registrar refuses your SOA serial number, using serial number format recommended by IETF and RIPE should resolve this issue. The Panel-managed servers use UNIX timestamp syntax for configuring DNS zones. UNIX timestamp is the number of seconds since January 1, 1970 (Unix Epoch). The 32-bit timestamp will overflow by July 8, RIPE recommends using YYYYMMDDNN format, where YYYY is year (four digits), MM is month (two digits), DD is day of month (two digits) and NN is version per day (two digits). The YYYYMMDDNN format won't overflow until the year To change the Start of Authority (SOA) serial number format to YYYYMMDDNN for the server-wide DNS template: 1. Go to the Settings tab > DNS Zone Template (in the Advanced Settings group), and click SOA Records Template. 2. Select the Use serial number format recommended by IETF and RIPE check box. Note: See the sample of SOA serial number generated with the selected format. If the resulting number is less, than the current zone number, the modification may cause temporary malfunction of DNS for this domain. Zone updates may be invisible to Internet users for some time.

32 32 Setting Up and Managing the Server 3. Click OK. To restore the default Start of Authority (SOA) serial number format (UNIX timestamp) for the server-wide DNS template: 1. Go to the Settings tab > DNS Zone Template (in the Advanced Settings group). 2. Click SOA Records Template. 3. Clear the Use serial number format recommended by IETF and RIPE check box. Note: See the sample of SOA serial number generated with the selected format. If the resulting number is less, than the current zone number, the modification may cause temporary malfunction of DNS for this domain. Zone updates may be invisible to Internet users for some time. 4. Click OK. By default, transfer of DNS zones is allowed only for name servers designated by NS records contained within each zone. If your domain name registrar requires that you allow transfer for all zones you serve: 1. Go to the Settings tab > DNS Zone Template (in the Advanced Settings group). 2. Click Transfer Restrictions Template. A screen will show all hosts to which DNS zone transfers for all zones are allowed. 3. Specify the registrar's IP or network address and click Add Network. If you are using third-party DNS servers, and are not running your own DNS server, you should switch off your panel's DNS server: 1. Go to the Settings tab > DNS Zone Template (in the Advanced Settings group). 2. Click Switch Off. 3. Contact your hosting provider and ask to host DNS zones for your sites. You will need to tell the following information to the provider: IP address of your server, host names that are used, such as webmail.yourdomain.com, mail.your-domain.com, ftp.your-domain.com. If another computer is acting as a primary DNS server, you can make your Panel server act as a secondary name server for individual sites: 1. Go to the Websites & Domains tab > domain name > DNS. 2. Click Switch DNS Service Mode. 3. Click Add Record. 4. Specify the IP address of the primary (master) name server and click OK. 5. Repeat steps from 1 to 4 for each website that needs to have a secondary name server on your server.

33 Setting Up and Managing the Server On the primary name server, allow zone transfers so as to enable your secondary server to receive the information from the primary. If the primary name server is managed by the Panel, then you can allow zone transfers at the Settings tab > DNS Zone Template (in the Advanced Settings group) > Transfer Restrictions Template. To restore the original configuration of server-wide DNS template: 1. Go to the Settings tab > DNS Zone Template (in the Advanced Settings group). 2. Click Restore Defaults. You can specify whether your DNS server should provide recursive service for queries. With recursive service allowed, your DNS server, when queried, performs all the lookup procedures required to find the destination IP address for the requestor. When recursive service is not allowed, your DNS server performs minimal number of queries only to find a server that knows where the requested resource resides and to redirect the requestor to that server. Therefore, recursive service consumes more server resources and makes your server susceptible to denial-of-service attacks, especially when the server is set to serve recursive queries from clients outside your network. After you install the Panel, the built-in DNS server defaults to serving recursive queries only from your own server and from other servers located in your network. This is the optimal setting. If you want to change the settings for recursive domain name service: 1. Go to the Settings tab > DNS Zone Template (in the Advanced Settings group) > DNS Recursion. 2. Select the option you need: To allow recursive queries from all hosts, select Allow for all requests. To allow recursive queries from your own server and hosts from your network, select Allow for local requests only. To allow recursive queries only from your own server, select Deny. 3. Click OK. If you need to assign a new host name to your server: 1. Go to the Settings tab > Branding and System. 2. In the Full host name field, type the new host name. 3. Click OK.

34 34 Setting Up and Managing the Server Configuring the Panel to Run Behind Router with NAT Every time you set up a new website in the Panel, the domain name used by your website is associated with the IP address of your Panel-managed server in the DNS zone of this domain. If you are running the Panel behind a routing device with NAT (network address translation), this IP address will be an internal network address like As the x.x IP addresses are reserved by the Internet Assigned Numbers Authority (IANA) for use by private networks, this website will not be accessible to the Internet users. To work around this, you have to associate this domain name with the public IP address of the routing device in the DNS zone of this domain. If you are using the Panel as a part of hosting package sold to you by your hosting provider (as opposed to having your own server), then in most cases, your hosting provider has already configured the routing device and the DNS zone template used for creation of your websites. If so, you can proceed directly to Making Your Website Accessible When the Panel Is Running Behind Router with NAT (on page 95) for instructions on how to make your websites accessible to the Internet users. To check if proper modifications of the DNS zone template were made by your hosting provider: 1. Go to the Settings tab > DNS Zone Template (in the Advanced Settings group). 2. Locate all resource records of A type. By default these records look like this: <domain>. A <ip> mail.<domain>. A <ip> ns.<domain>. A <ip> webmail.<domain>. A <ip> If you see real IP address instead of <ip> there, it means that your hosting provider has modified the DNS zone template used for creation of your websites. Write down this IP address and go to Making Your Website Accessible When the Panel Is Running Behind Router with NAT (on page 95) for further instructions on how to make your websites accessible to the Internet users. However, if you see the records as they are displayed in the example above (with <ip> instead of real IP address), it means that either the Panel provided to you as a part of your hosting package is not running behind a router with NAT, or you have to modify the DNS zone template manually. To modify the DNS zone template used for creation of your websites: 1. Go to the Settings tab > DNS Zone Template (in the Advanced Settings group). 2. Locate all resource records of A type. These records look like the following: <domain>. A <ip>

35 Setting Up and Managing the Server 35 mail.<domain>. A <ip> ns.<domain>. A <ip> webmail.<domain>. A <ip> 3. Edit all of these A type records: a. Click the corresponding links in the Host column. b. In the Enter IP address input box, delete the <ip> templates, and type the public IP address allocated to you by your hosting provider. If you have forgotten the public IP address allocated to you, contact your hosting provider for assistance. 4. Click OK. If you are running your own Parallels Small Business Panel server behind a router with NAT, you need to manually configure the routing device and modify the DNS zone template used for creation of your websites. If you are running your own server with the Panel behind a router with NAT: 1. Configure your routing device so as to ensure the proper address translation. Refer to the documentation of your routing device for detailed instructions. 2. Log in to the Panel and go to the Settings tab > DNS Zone Template (in the Advanced Settings group). 3. Locate all resource records of A type. These records look like the following: <domain>. A <ip> mail.<domain>. A <ip> ns.<domain>. A <ip> webmail.<domain>. A <ip> 4. Edit all of these A type records: a. Click the corresponding links in the Host column. b. In the Enter IP address input box, delete the <ip> templates, and type the public IP address of the routing device. c. Click OK. d. Go to Making Your Website Accessible When the Panel Is Running Behind Router with NAT (on page 95) for further instructions on how to make your websites accessible to the Internet users.

36 36 Setting Up and Managing the Server Configuring the Panel to Run Behind a Firewall This section provides information about the ports and protocols that must be opened in the firewall settings, so as to allow access to the Panel and its services. To make sure that the Panel and its services are accessible, open the following ports in the firewall settings. Service name Ports used by service Administrative interface of the Panel TCP 8443, 8880 Samba (file sharing on Windows networks) VPN service UDP 1194 UDP 137, UDP 138, TCP 139, TCP 445 Web server TCP 80, TCP 443 FTP server TCP 21 SSH (secure shell) server TCP 22 SMTP (mail sending) server TCP 25, TCP 465 POP3 (mail retrieval) server TCP 110, TCP 995 IMAP (mail retrieval) server TCP 143, TCP 993 Mail password change service TCP 106 MySQL server TCP 3306 MS SQL server TCP 1433 PostgreSQL server TCP 5432 Licensing Server connections TCP 5224 Domain name server UDP 53, TCP 53 In this section: Using the Software Firewall Built into Your Panel (Windows Hosting) Using the Software Firewall Built into Your Panel (Linux Hosting)... 41

37 Setting Up and Managing the Server 37 Using the Software Firewall Built into Your Panel (Windows Hosting) Parallels Small Business Panel comes with a firewall, which you can use to protect your server from incoming network connections that could be used to compromise the server. The firewall comes with a set of predefined rules that allow connections to the services required for the proper functioning of a hosting server, such as Web, mail, and FTP. By default, the firewall is switched off. Read this section to learn how to: Switch on the firewall View the currently allowed inbound connections Allow and block inbound connections Allow and block ICMP communications Restore the default configuration of the firewall Switch off the firewall In this section: Switching the Firewall On Viewing the Currently Allowed Inbound Connections Allowing and Blocking Inbound Connections Allowing and Blocking ICMP Communications Restoring the Default Configuration of the Firewall Closing Down All Connections to the Server Using the Panic Mode Switching the Firewall Off Switching the Firewall On To switch on the firewall: 1. Go to the Settings tab > Firewall. 2. Under Tools, click Switch On. 3. To switch on the firewall for a specific network interface, if you have a number of network interfaces, in the list of interfaces, click the interface name you need. The list of applied filtering policies (rules) opens. The S (status) column shows the icon if the firewall blocks the packets that match the rule, and the icon if the firewall allows the packets that match the rule to pass through. Note: Configuring firewall for specific network interfaces is only available under Microsoft Windows Server 2003.

38 38 Setting Up and Managing the Server Viewing the Currently Allowed Inbound Connections By default, all inbound connections that are not explicitly allowed are blocked. To view the currently applied firewall rules for inbound connections: 1. Go to the Settings tab > Firewall. 2. Click the network interface you need. All currently defined rules are listed. The S (status) column shows the icon if the firewall blocks the packets that match the rule, and the icon if the firewall allows the packets that match the rule to pass through. Note: Configuring firewall for specific network interfaces is only available under Microsoft Windows Server If you are using Microsoft Windows Server 2008, go to the Firewall Rules tab. 3. Do any of the following: To view or change the properties of a rule, click the respective rule s name. To save any changes you have made to the rule, click OK. To return to the previous screen without saving any changes, click Cancel or click Up Level. To allow connections to a service, click Add Firewall Rule, specify the rule name for future reference, specify the port and the protocol for which incoming connections must be allowed. Leave the Switch on rule check box selected, if you wish to apply the rule immediately. Click OK. To allow connections to a service that you previously made inaccessible, click the respective icon in the S column. To temporarily block connections to a service, click the respective icon in the S column. To permanently block connections to a service, select the check box corresponding to the rule that allows connections to the respective service, and click Remove. Removing a rule blocks the connections that were specified in that rule.

39 Setting Up and Managing the Server 39 Allowing and Blocking Inbound Connections By default, all inbound connections that are not explicitly allowed are blocked. To allow inbound connections to a service: 1. Go to the Settings tab > Firewall. 2. Click the network interface you need. Note: Configuring firewall for specific network interfaces is only available under Microsoft Windows Server If you are using Microsoft Windows Server 2008, go to the Firewall Rules tab. 3. Click Add Firewall Rule, and specify the following properties: The rule name for future reference The port or port range and the protocol for which inbound connections must be allowed 4. Leave the Switch on rule check box selected, if you wish to apply the rule immediately. 5. Click OK. To block the previously allowed inbound connections to a service: 1. Go to the Settings tab > Firewall. 2. Click the network interface you need. Note: Configuring firewall for specific network interfaces is only available under Microsoft Windows Server If you are using Microsoft Windows Server 2008, go to the Firewall Rules tab. 3. Select the check box corresponding to the rule that allows connections to the respective service, and click Remove. Removing a rule blocks the connections that were specified in that rule.

40 40 Setting Up and Managing the Server Allowing and Blocking ICMP Communications ICMP communications are used for network troubleshooting purposes. By default, all ICMP communications are allowed. For the detailed description of ICMP messages, please refer to: If you need to block or to allow ICMP communications, follow these steps: 1. Go to the Settings tab > Firewall > ICMP Protocol. The predefined rules for ICMP communications are listed. The S (status) column shows the icon if the firewall blocks the packets that match the rule, and the icon if the firewall allows the packets that match the rule to pass through. 2. Do any of the following: To allow ICMP requests of a specific type, click the respective icon in the S column. To block ICMP requests of a specific type, click the respective icon in the S column. To block all ICMP requests, click Panic Mode. To restore the default settings for ICMP requests, click Default. Restoring the Default Configuration of the Firewall To restore the initial configuration: 1. Go to the Settings tab > Firewall. 2. Click the network interface you need. Note: Configuring firewall for specific network interfaces is only available under Microsoft Windows Server If you are using Microsoft Windows Server 2008, go to the Firewall Rules tab. 3. Under Tools, click Restore Defaults.

41 Setting Up and Managing the Server 41 Closing Down All Connections to the Server Using the Panic Mode If your server is compromised and websites are defaced, you may want to make the server unavailable over the Internet and keep it down until all vulnerabilities are patched and websites are restored from backup files. To close all connections to the server: 1. Go to the Settings tab > Firewall. 2. Click Panic Mode. Note: Configuring firewall for specific network interfaces is only available under Microsoft Windows Server If you are using Microsoft Windows Server 2008, go to the Firewall Rules tab. Switching the Firewall Off To switch off the firewall: 1. Go to the Settings tab > Firewall. 2. Under Tools, click Switch Off. Using the Software Firewall Built into Your Panel (Linux Hosting) With a firewall built into your Panel, you can do the following: View and change the predefined rules that control connections to the following system services: Administrative control panel; Web server; FTP server; SSH server; SMTP server; POP3 server; IMAP server; mail password change service; MySQL server; PostgreSQL server; Samba file sharing server for Windows clients; VPN; domain name server; ICMP echo requests. By default, these rules allow all incoming connections to these services. View and change the predefined system policies that define what to do with all incoming, outgoing and transit communications that do not match the explicitly defined rules. Add, change, and remove custom rules. For example, you may want to add a rule that will allow access to FTP accounts on the server in passive mode. The following table lists the system services to which you can restrict access using the firewall's predefined rules. Service name Ports used by service Administrative interface of the Panel TCP 8443 WWW server TCP 80, TCP 443

42 42 Setting Up and Managing the Server FTP server TCP 21 SSH (secure shell) server TCP 22 SMTP (mail sending) server TCP 25, TCP 465 POP3 (mail retrieval) server TCP 110, TCP 995 IMAP (mail retrieval) server TCP 143, TCP 993 Mail password change service TCP 106 MySQL server TCP 3306 PostgreSQL server TCP 5432 Samba (file sharing on Windows networks) VPN service UDP 1194 Domain name server UDP 53, TCP 53 UDP 137, UDP 138, TCP 139, TCP 445 In this section: Managing Access to System Services Managing System Policies Managing Custom Rules Managing Access to System Services For each system service, you can choose whether to allow or deny all incoming communications, or allow only communications coming from specific IP/network addresses. To allow or restrict access to a service on your server: 1. Go to the Settings tab > Firewall > Edit Firewall Configuration. 2. Click the service name. 3. Do any of the following: To allow all incoming connections, select the Allow option and click OK. To deny all incoming connections, select the Deny option and click OK. To deny access to a service from specific IP/network addresses, select the Allow from selected sources, deny from others option, specify the IP address or network address from which access to the selected service is allowed, and click Add. After you specify the required addresses, click OK. 4. To apply all changes to the firewall configuration, click Activate, and then click Activate again.

43 Setting Up and Managing the Server 43 Managing System Policies System policies define what to do with all incoming, outgoing and transit communications that do not match the explicitly defined rules. The system policies are usually displayed at the bottom of the list of rules. To allow or deny communications of specific type: 1. Go to the Settings tab > Firewall > Edit Firewall Configuration. 2. Click the icon to the left of the policy name you want to change. If the policy currently allows all connections, clicking this icon will prohibit all connections and vice versa. 3. To apply the changes, click Activate, and then click Activate again.

44 44 Setting Up and Managing the Server Managing Custom Rules This section describes how to add, modify, remove custom rules, and change the order in which the rules are applied. This section also covers the steps required for enabling passive mode for FTP connections. To add a custom rule: 1. Go to the Settings tab > Firewall > Edit Firewall Configuration. 2. Click Add Custom Rule. 3. Enter the name of the new rule in the Name of the rule field. 4. Select one of the following communication directions: Incoming for the communications inbound to the server, Outgoing for communications outbound from this server, or Forwarding for communications transiting through your server in any direction. For incoming communications you can specify the destination ports on your server, the protocol used for this communication, and the IP address the communications come from. For outgoing communications you can specify the destination ports, destination IP address, and the protocol used for the communication. For transit communications going through the server, you can specify the destination ports and source / destination IP addresses. 5. To specify the port number, type it into the Add port input box, and click Add. To remove a port number from an existing rule, select it from the list and click Remove. If the list of ports is empty, this rule will be applied to all TCP and UDP ports. 6. To specify the IP address or network address, type it into the Add IP address or network input box, and click Add. To remove an IP address or network from the list, select it in the list and click Remove. If the list of IP addresses is empty, this rule will be valid for all IP addresses. 7. Specify the action that will be applied to the communications that match the defined criteria: allow or deny. 8. Click OK to submit the rule. 9. After you have defined the required rules, click Activate to apply them to your system. A confirmation screen will open, in which you can preview the shell script generated to apply your rules (this might be of interest only to advanced users). Click Activate to apply the new configuration. When the new configuration is being applied, the firewall checks if your Web browser can connect to the Panel. If there are any connection problems, the firewall will automatically revert to the previous active configuration in 60 seconds. Thus, if you misconfigure your firewall in such a way that access to your Panel is prohibited even for you, this wrong configuration will be automatically discarded and you will be able to access your server in any case.

45 Setting Up and Managing the Server 45 Note: Unless your configuration is activated, you have a chance to discard all the rules you configured. To do this, click the Revert to Active Configuration button. To edit a custom rule: 1. Go to the Settings tab > Firewall > Edit Firewall Configuration. 2. Click the rule name in the list of existing rules. Make necessary changes (the options are the same as when creating a new rule). To remove a custom rule: 1. Go to the Settings tab > Firewall > Edit Firewall Configuration. 2. Select the check box corresponding to the rule you want to remove and click Remove Selected. To change the order in which your custom rules are applied: 1. Go to the Settings tab > Firewall > Edit Firewall Configuration. 2. Click the icons Up or Down in the Order column. This will move the rule relatively to other rules covering the same direction (incoming communications, outgoing communications, or data forwarding). To enable passive mode for FTP connections on your server: 1. Log in as "root" to the server shell over SSH. 2. Edit your ProFTPD configuration file. a. Issue the command vi /etc/proftpd.conf b. Add the following lines anywhere within the <Global> section: PassivePorts c. Save the file 3. Log in to the Panel as "admin", go to the Settings tab > Firewall, and click Edit Firewall Configuration. 4. Click Add Custom Rule. 5. Specify the following: Rule name Direction: select Incoming. Action: select Allow. Ports: in the Add port input box, enter the value Leave the TCP option selected, and click Add. 6. Click OK.

46 46 Setting Up and Managing the Server 7. Click Activate, and then click Activate again.

47 Setting Up and Managing the Server 47 Setting Up Mail Services The Panel works in cooperation with mail server software, which provides services for mailboxes and mailing lists. After installation the mail server is configured automatically and is ready to serve, however, we recommend that you review the default settings to make sure that they satisfy your needs. By default, the Postfix mail server is installed on the Panel for Linux platforms, and MailEnable mail server, on the Panel for Windows platforms. You can install another mail server software, if it is supported by your Panel, and then set up the Panel for using it. To use another mail server software with your Panel (currently supported only on Windows hosting): 1. Check the list of supported mail servers in the Parallels Small Business Panel: Installation Guide. See if the mail server software you want to use is supported. 2. Install the software according to instructions provided in the Parallels Small Business Panel: Installation Guide, or use the instructions provided by the mail server manufacturer. 3. Log in to the Panel and go to the Settings tab > Mail Server Selection (in the Advanced Settings group). The mail server you have installed should now be displayed in the list of available mail servers. 4. Select the mail server you need and click OK. The Panel will start using the new mail server without any need for server restart. Note that you can always select another mail server at any time later. To view or configure the mail service settings: 1. Go to the Settings tab > Mail. 2. Configure the following settings: Size of an message that is allowed to be sent or received by the server. The default maximum message size is set to 10 megabytes. All messages that exceed the specified size will be rejected. Server policy to be applied when messages to nonexistent users come: When somebody sends an message to an address that does not exist under any of your sites, the mail server accepts mail, processes it, and when it finds out that there is no such a recipient under a site, it returns the mail back to sender with a notice. You can choose any of the following: Change the default notice text if you do not like it (available only for Linux hosting): leave the Bounce with the following message option selected and type another message into the input box.

48 48 Setting Up and Managing the Server Forward undelivered mail to another address (select the Forward to address option and specify the address you need). Forward to external mail server (available only for Windows hosting). With this setting, all mail addressed to nonexistent users will be forwarded to the specified external mail server. Reject mail without accepting it (select the Discard option). Check messages for viruses. Select this check box to switch on scanning by Dr. Web antivirus for all messages that are sent or received by the mail server. When an containing a virus or other potentially dangerous code comes to the server, antivirus removes the dangerous code and sends the appropriate notices to the sender and to the recipient of the message. Select webmail. In this menu, select the webmail program that should be used on the server. Webmail allows users to access their mailboxes and work with messages using a Web browser. A shortcut to webmail window will be placed into users' panels (on the My Services tab). Switch on SpamAssassin spam filtering. Select this check box to switch on a powerful spam filter, which performs a number of different tests on contents and subject line of each message. Spam filter marks all messages considered as spam with X- Spam-Flag: Yes and X-Spam-Status: Yes headers, and places them to the Spam folder. This is the default setting. You can choose any of the following options for dealing with messages recognized as spam: Add a text string to the message subject. Delete the messages. Move the messages to the Spam folder. This option is selected by default. Placing suspicious messages to the Spam folder allows the user decide what to do with them, and it also allows to train the SpamAssassin spam filter's knowledge base. Once per day, SpamAssassin analyzes all messages contained in the Spam folder and adds the information about these messages to its database of junk mail characteristics. After one month, all messages are automatically removed from the Spam folder. Note: If SpamAssassin spam filtering is switched on and the option to move messages to the Spam folder is selected, your users can train their spam filters on their own. Using webmail or mail client programs installed on their computers, they should move messages considered as spam from the Inbox folder to the Spam folder. Switch on greylisting spam protection (available only for Linux hosting). Select this check box to switch on protection from spam, which works as follows: For every message that comes to the server, sender's and receiver's addresses are recorded in a database. When a message comes for the first time, its sender and receiver addresses are not listed in the database yet, and the server temporarily rejects the message with an SMTP error code. If the mail is legitimate and the sending server is properly configured, it will try sending again and the message will be accepted. If the message is sent by a spammer, then mail sending will not be retried: spammers usually send mail in bulk to thousands of recipients and do not bother with resending.

49 Setting Up and Managing the Server 49 Switch on DomainKeys spam protection. Select this check box to switch on a spam protection system based on sender authentication. When an claims to originate from a certain domain, DomainKeys provides a mechanism by which the recipient system can credibly determine that the did in fact originate from a person or system authorized to send for that domain. If the sender verification fails, the recipient system discards such messages. Switch on SPF spam protection (available only for Linux hosting). Select this check box to switch on a spam protection system based on sender authentication. It is designed to reduce the amount of spam sent from forged addresses. With SPF, an Internet domain owner can specify the addresses of machines that are authorized to send e- mail for users of his or her domain. Receivers that implement SPF then treat as suspect any that claims to come from that domain but fails to come from locations that domain authorizes. If you choose to switch on this spam protection system, then also specify how to deal with To accept all incoming messages regardless of SPF check results, select the Only create Received SPF-headers, never block option from the SPF checking mode menu. This option is recommended. To accept all incoming messages regardless of SPF check results, even if SPF check failed due to DNS lookup problems, select the option Use temporary error notices when you have DNS lookup problems from the SPF checking mode menu. To reject messages from senders who are not authorized to use the domain in question, select the option Reject mail if SPF resolves to "fail" from the SPF checking mode menu. To reject the messages that are most likely from senders who are not authorized to use the domain in question, select the option Reject mail if SPF resolves to "softfail" from the SPF checking mode menu. To reject the messages from senders who cannot be identified by SPF system as authorized or not authorized because the domain has no SPF records published, select the option Reject mail if SPF resolves to "neutral" from the SPF checking mode menu. To reject the messages that do not pass SPF check for any reason (for example, when sender's domain does not implement SPF and SPF checking returns the "unknown" status), select the option Reject mail if SPF does not resolve to "pass" from the SPF checking mode menu. To specify additional rules that are applied by the spam filter before the SPF check is actually done by the mail server, type the rules you need in the SPF local rules box. We recommend that you add a rule for checking messages against the open database of trusted senders, for example, 'include:spf.trusted-forwarder.org'. For more information on SPF rules, visit To specify the rules that are applied to domains that do not publish SPF records, type the rules into the SPF guess rules box. For example: v=spf1 +a/24 +mx/24 +ptr?all To specify an arbitrary error notice that is returned to the SMTP sender when a message is rejected, type it into the SPF explanation text box. If no value is specified, the default text will be used as a notification.

50 50 Setting Up and Managing the Server Switch on spam protection based on DNS blackhole lists. Select this check box to switch on spam protection based on DNS queries made by your mail server to a database, which contains known and documented sources of spam, as well as an extensive listing of dynamic IP addresses. Any positive response from this database should result in your mail server returning a '550' error, or rejection of the requested connection. To configure your mail server for working with DNS BL databases, visit choose a DNS BL server you want to use, and specify it in the DNS zones for DNSBL service input box. After you save the settings, messages from known spammers should be rejected with an error code 550 (connection refused). 3. Click OK. Setting Up Database Servers You can host application databases either on a single server or on a number of different servers. Having the databases on a remote server can be useful in multi-server installations, where centralized database hosting can be preferable for administration, backup, and resource utilization. However, if you have a single server managed by Parallels Small Business Panel, you are advised to keep all databases on it. To use remote database servers with your hosting server, you need to: 1. Set up a remote database server: a. Install MySQL, PostgreSQL, or Microsoft SQL software. b. Set up database administrator's account. c. Enable network access to the database server. 2. Configure the Panel for working with your remote database server, as described in the following section. In this section: Setting Up Remote Database Hosting Managing Database Servers... 52

51 Setting Up and Managing the Server 51 Setting Up Remote Database Hosting After you have set up the required remote database server, you need to register this database server in the Panel. To register a database server with the Panel: 1. Log in to the Panel. 2. Go to the Settings tab > Database Servers, and click Add Database Server. 3. Specify the properties of the database server: Select the database server type in the Database server type menu. Specify the host name or IP address of the database server. Specify the port number the database server is listening on. This option is available only for MySQL. By default, MySQL servers listen on port You can leave the Port number box blank, if your MySQL database server is listening on the default port. Note: Do not enter the value for MySQL server port equal to 8306, because it is used by the Panel for communication with its internal database. To make this database server default for hosting databases, select the Use this server as default for MySQL check box. If you have a MS SQL database server, select the check box Use this server as default for MS SQL. Specify the database server administrator's username and password. 4. Click OK. If you want to back up databases hosted on a remote MS SQL database server you set up earlier, you need to configure the backup settings for that MS SQL database server. To configure backup settings for a remote MS SQL database server: 1. Go to the Settings tab > Database Servers, and click the required remote MS SQL database server name. 2. Specify the temporary directory for the remote MS SQL database server in the Temporary network directory field. This directory can be located anywhere in your network and it is required for backing up and restoring MS SQL databases. This directory must be accessible over the network by both the Panel-managed server and the MS SQL server: both the Panel and the user account that is running the remote MS SQL database server must have read/write access to this directory. 3. Specify username and password required for accessing the temporary network directory. 4. Click OK.

52 52 Setting Up and Managing the Server Managing Database Servers To manage a database server: 1. Go to the Settings tab > Database Servers. 2. Click the icon corresponding to the database server you need. A Web interface of a database management tool will open in a separate browser window. To change the database server administrator's password: 1. Go to the Settings tab > Database Servers. 2. Click the host name of a database server. 3. Click Change Password. 4. Type the new password and click OK. To unregister a database server from the Panel: 1. Go to the Settings tab > Database Servers. 2. Select the check box to the right of the database server s host name. 3. Click Remove. 4. Confirm the operation and click OK. To unregister a database server that has databases or is assigned as default for hosting databases from the Panel's applications and users: 1. Delete databases from the database server: a. Go to the Settings tab > Database Servers. b. Click the host name of a database server that you wish to unregister from the Panel. c. Select the check box in the upper left corner of the list to select all databases. d. Click Remove. e. Confirm removal and click OK. 2. Assign another database server as the default one: a. Go to the Settings tab > Database Servers. b. Click the host name of a database server that you wish to make default. This should be the same database server type (MySQL or MS SQL) as the one you are going to delete.

53 Setting Up and Managing the Server 53 c. Click Preferences and select the Use this server as default for MySQL check box. If you have a MS SQL database server, select the Use this server as default for MS SQL check box. d. Click OK. 3. Return to the list of database servers (Settings tab > Database Servers). 4. Select a check box corresponding to the database server that you no longer need. 5. Click Remove. 6. Confirm the operation and click OK. Important: You cannot remove Web applications databases this way. To remove them, you should first remove the corresponding Web applications from the websites that use them. For instructions on managing databases, refer to the section Deploying Databases (on page 107).

54 54 Setting Up and Managing the Server Managing System Services You can monitor, start, stop, restart and disable various services, and also change their startup type from the Panel (on Windows-based servers). If you use a Linux-based server, then you can use additional system monitoring tools that automatically restart non-responsive services and scan your server's file system for malicious programs and scripts. This functionality is described in the section Using the System Monitoring Tool (Linux Hosting) (on page 56). To see the status of a system service: 1. Go to the Settings tab > Services Management (in the Advanced Settings group). 2. Click Show All to show all services from the service groups. To hide all services, click Hide All. The current state of a service or a group of services is marked by an icon: means that the service or all services in a group are running, means that the service or all services in a group are stopped, means that several services in a group are running and some are stopped, means that the service is not installed or its management capabilities are not supported by the license key. In the Startup Type field you can see whether the service is started automatically or should be started manually. To start a service: 1. Go to the Settings tab > Services Management (in the Advanced Settings group). 2. Click the icon corresponding to the service you wish to start. To restart a service: 1. Go to the Settings tab > Services Management (in the Advanced Settings group). 2. Click the icon corresponding to the service you wish to restart. To stop a service: 1. Go to the Settings tab > Services Management (in the Advanced Settings group). 2. Click the icon corresponding to the service you wish to stop. To set service startup type (on Windows-based servers): 1. Go to the Settings tab > Services Management (in the Advanced Settings group).

55 Setting Up and Managing the Server Select the check box corresponding to the required service in the list. 3. Select the required startup type: Click Manual to start selected services manually upon the Panel startup. Click Auto to start selected services automatically upon the Panel startup. To disable a service: 1. Go to the Settings tab > Services Management (in the Advanced Settings group). 2. Select the check box corresponding to the required service in the list. 3. Click Disable. To make changes to a group of services: 1. Go to the Settings tab > Services Management (in the Advanced Settings group). 2. Select the check boxes corresponding to the required services in the list. 3. Click the button corresponding to the action you want to perform on the selected services: Click Start to start selected services. Click Stop to stop selected services. Click Restart to restart selected services. Click Disable to disable selected services. Click Manual to start selected services manually upon the Panel startup. Click Auto to start selected services automatically upon the Panel startup. In this section: Using the System Monitoring Tool (Linux Hosting)... 56

56 56 Setting Up and Managing the Server Using the System Monitoring Tool (Linux Hosting) The system monitoring function ensures that your server is clean from malicious software, all services are up and running and there is enough free disk space on the server. The following services can be monitored: The Panel's internal Web server engine. Web server providing WWW service to websites. SMTP server. IMAP/POP3 server (Courier-IMAP). DNS server (BIND). MySQL. PostgreSQL. SpamAssassin. Dr.Web antivirus. You can set it to start, stop, restart the services it monitors, and take actions depending on the stability of a service over some time period. It can run other utilities and notify you when disk space usage has reached the limits you defined. For the purpose of monitoring services and disk space usage it uses the monit utility. For information on the monit utility, visit the monit developers' website at The system monitoring tool can scan the server file system for rootkits, backdoors, exploits, trojan horses and other malicious software on demand or on schedule. It can notify you by e- mail of scanning results and show reports through the Panel. It updates its security knowledge base through the Internet before each scan. For the purpose of scanning the server for malware, it uses the Rootkit Hunter utility. For information on Rootkit Hunter, visit the Rootkit Hunter developer's website at In this section: Setting Up and Starting System Monitoring Viewing Status of System Services Viewing Status of Hard Disk Drives and Connected Storage Devices Viewing CPU and RAM Usage Statistics Viewing Server Scanning Reports... 67

57 Setting Up and Managing the Server 57 Setting Up and Starting System Monitoring To start monitoring of your system, you should configure the settings common for all services, and then switch on each specific type of service you need. To configure settings common for all services: 1. Go to the Settings tab > System Monitoring (in the Advanced Settings group). A list of Panel-managed services will be displayed. 2. Click the Preferences tab. 3. Specify the following settings: Interface language. Select the language in which system monitor should show and send notices and alerts. By default, the language set for your Panel administrator's account is selected. Automatically refresh pages. Leave this option selected, if you want the information presented on the screens to be automatically updated on each poll. Monitor all services started by administrator. Leave this option selected if you want to monitor all the Panel services that you start. If you install a new system service later on, the module will automatically start looking after it. Clear this check box, if you are going to shut down some of the services and you do not want them to be switched on automatically or receive any alert messages. Polling interval. Specify the interval between service status queries in seconds. Store resource usage statistics. Leave this option selected if you wish the system to keep reports on CPU and RAM usage for the amount of time you specify. Repeat security scanning. Specify how often the server should be scanned for malicious programs. Send reports. Specify how often the monitoring tool should send you reports on CPU and RAM load, monitored services, disk space usage and security scanning results. Send to. Specify the address where alerts and reports should be sent. By default, the Panel administrator s address is used. Send from. address on behalf of which the reports and alerts should be sent. By default, this address is watchdog@your-host-name. SMTP server for sending alerts. Specify local or remote SMTP servers that should be used for sending alert messages. You can specify several host names or IP addresses separated by commas. Leave the localhost entry to use your server's SMTP service. If your Panel-managed server is not running SMTP service, specify another remote mail server, otherwise, no alerts will be sent. 4. Click Apply to submit the settings. You have specified the general settings, and now you can further customize and run the services you need: monitoring of system services and monitoring of disk space usage require fine tuning before you can start them, however, regular security scanning requires no additional setup and therefore will start immediately after you have specified the general settings. By default, security scanning is started at 2 a.m. local time at the beginning of the specified time period.

58 58 Setting Up and Managing the Server In this section: Monitoring System Services Monitoring Disk Space Usage Starting Security Scanning... 64

59 Setting Up and Managing the Server 59 Monitoring System Services To specify what services should be monitored and to start monitoring: 1. Go to the Settings tab > System Monitoring (in the Advanced Settings group). All services controlled by the Panel will be listed on the Services tab. An icon in the S (status) column shows whether a service is currently monitored and it indicates the status of a service returned by the last poll: - the service is not currently monitored. - you started monitoring but the service has not yet been polled for its status. - the service is monitored and is reported to be running. - the service is monitored and is reported to be down. - the service is no longer monitored because it was unstable. An icon in the M (Monitoring) column shows whether you switched on monitoring of a service and it also indicates whether the service was installed on the server and properly configured: - the service is not installed or configured. - you did not switch on service monitoring. - you switched on service monitoring. 2. Specify the services that should be monitored and specify monitoring preferences: a. Click a service name. b. Select the Monitor the service check box to switch on monitoring for the service. c. Select the Save service statistics check box if you want the system to keep the information on CPU and RAM resources used by the service, and present it in graphical reports (Settings tab > System Monitoring > Statistics tab). d. Select the Stop monitoring the service if it frequently restarts option, if you want the system to stop monitoring the service if it fails the specified number of times, and specify the failure ratio. Otherwise, the system will bother you with alert messages each time it attempts to restart a non-responsive service. The default value of five failed attempts should be enough.

60 60 Setting Up and Managing the Server e. Specify the time during which the system will be waiting for response from the polled service in the Connection timeout box. The monitoring utility polls the service and then is waiting for a response during the specified amount of time. If it receives no response, it restarts the service. If you host a great number of websites and accounts on your machine, you are recommended to set the Connection timeout for Qmail mail server to 120 seconds, and Apache Web server to 15 seconds, otherwise the monitoring utility will consider the busy services to be malfunctioning and will restart them. f. Review the commands that Watchdog uses to start and stop the service. It is recommended that you leave the prefilled values unchanged. You can write custom scripts that, for example, will clean up log files or send SMS messages to your cell phone before actually starting the service, and specify the commands to run your scripts in the input box To start the service, run the command. g. If you are using the default commands for running the services, leave the predefined value of 60 seconds in the Service startup time box. If you are running custom scripts, and they take more than 60 seconds to execute, specify the required time in the Service startup time box. When a script is executed but does not complete its work within the specified time frame, Watchdog terminates execution of that script. h. Click OK to submit the settings. i. Repeat this procedure to configure monitoring for all services you need. If you are satisfied with the default monitoring settings we have predefined for each service, you can set Watchdog to monitor the required services by simply clicking the respective icons in the list of services. 3. Once you have specified all services that should be monitored, click the Enable icon in the Tools group. Now the services will be monitored in accordance with the settings you specified. If you decided to use the default settings, the following actions will be taken: All services will be automatically restarted in case of failure. The system will stop monitoring all services that fail 5 times out of 5 polls. Alert messages will be sent to the address specified in the Panel administrator s account on any event. To stop monitoring a specific service: 1. Go to the Settings tab > System Monitoring (in the Advanced Settings group). 2. Click an icon corresponding to the service you want to stop monitoring. To stop monitoring all services: 1. Go to the Settings tab > System Monitoring (in the Advanced Settings group). 2. Click the Disable icon in the Tools group.

61 Setting Up and Managing the Server 61 Important: Performing this action affects the whole monitoring service, meaning that not only all system services, but all disk partitions will no longer be monitored.

62 62 Setting Up and Managing the Server Monitoring Disk Space Usage To configure and start monitoring of disk space usage: 1. Go to the Settings tab > System Monitoring (in the Advanced Settings group) > the Disks tab. All connected (mounted) devices will be listed. An icon in the S (status) column shows whether a hard disk partition or storage device is currently monitored by the system and it indicates the current disk space usage rate: - the disk drive or partition is not currently monitored. - you started monitoring but the disk or partition has not yet been checked. - the disk drive or partition is monitored and the system reports that disk space usage has not reached the threshold you defined. - the disk drive or partition is monitored and the system reports that disk space usage has reached the threshold you defined and soon there will be no free space left on that disk or partition. An icon in the M (monitoring) column shows whether you set the system to monitor disk space usage on a storage device or disk partition: - you did not switch on monitoring of the disk or partition. - you switched on monitoring of the disk or partition. The Device and Mount point columns show information on storage device and the partition mount point. The Mount point column shows hyphen (-) if a partition is no longer connected to the file system: when the partition is reconnected to the system, the system will resume monitoring it. The Disk space usage threshold column shows the amount of disk space that can be used without drawing your attention. You can specify the amount of disk space either in percentage from total amount or in measurement units: gigabytes, megabytes or kilobytes. When the specified amount is reached, the system will notify you and run the command you defined. A hyphen (-) in this column shows that the partition or device is not monitored. The Files number threshold column shows the amount of files or directories that can be stored on the file system without drawing your attention. The number of files or directories is limited not only by disk space, but also by the file system capacity. You can specify either the exact number of files and directories (if you know it) or a percent from the total amount. The system will notify you when the specified amount is reached. A hyphen (-) in this column shows that the partition or device is not monitored. The Command column shows the command that the system will run when the disk space threshold is reached. 2. Specify the hard drive partitions that should be monitored and specify monitoring preferences: a. Click a partition or device name.

63 Setting Up and Managing the Server 63 b. Specify the amount of disk space that can be used without drawing your attention. When this threshold is reached, the system will send you an alert and run the command you specified. We would recommend leaving the 80 % value selected. c. Specify the number of files and directories that can be created on the server without drawing your attention. When this threshold is reached, the system will send you an alert. We would recommend leaving the 80 % value selected. You can specify the exact number of files, if you know the total capacity of your file system: to find it out, log in as root to the server and run the command dumpe2fs <device name> from shell. d. Specify the command that the system will run when the specified disk space threshold is reached. This can be a command to run a disk space cleaning utility like tmpwatch on RedHat Linux systems. e. Click OK. f. Repeat the procedure to configure monitoring for all required partitions. 3. Once you have specified all partitions that should be monitored, click the Enable icon in the Tools group. To stop monitoring a specific partition: 1. Go to the Settings tab > System Monitoring (in the Advanced Settings group) > the Disks tab. 2. Click an icon corresponding to the partition you want to stop monitoring. To stop monitoring all partitions: 1. Go to the Settings tab > System Monitoring (in the Advanced Settings group) > the Disks tab. 2. Click the Disable icon in the Tools group. Important: Performing this action affects the whole monitoring service, meaning that not only all disk partitions, but all system services will no longer be monitored.

64 64 Setting Up and Managing the Server Starting Security Scanning To set up and start regular security scanning: 1. Go to the Settings tab > System Monitoring (in the Advanced Settings group) > the Preferences tab. 2. Specify how often the system should scan the server for malicious code in the Repeat security scanning menu. 3. Click Apply. Security scanning will start immediately and will repeat in accordance with the settings you defined. By default, security scanning is started at 2 a.m. local time. To run on demand scanning: 1. Go to the Settings tab > System Monitoring (in the Advanced Settings group) > the Security tab. 2. Click the Start icon in the Tools group. The scanning utility will update its knowledge base and start scanning. Upon completion, a detailed report will be presented on the screen. To switch off regular security scanning: 1. Go to the Settings tab > System Monitoring (in the Advanced Settings group) > the Preferences tab. 2. Select the disabled value from the Repeat security scanning menu. 3. Click Apply.

65 Setting Up and Managing the Server 65 Viewing Status of System Services To view the status of system services: Go to the Settings tab > Services Management (in the Advanced Settings group). A list of system services will show. From that screen you can manage services and view their status. or Go to the Settings tab > System Monitoring (in the Advanced Settings group). A list of system services will show. From that screen you can view the status of services and manage monitoring preferences. The following information is displayed: An icon in the S (Status) column shows whether a service is currently monitored and it indicates the status of a service returned by the last poll: - the service is not currently monitored. - you started monitoring but the service has not yet been polled for its status. - the service is monitored and the system reports that the service is running. - the service is monitored and the system reports that the service is down. - the service is no longer monitored because it was unstable. An icon in the M (Monitoring) column shows whether you set the system to monitor the service and it also indicates whether the service was installed on the server and properly configured: - the service is not installed or configured. - you did not switch on monitoring of the service. - you switched on monitoring of the service.

66 66 Setting Up and Managing the Server Viewing Status of Hard Disk Drives and Connected Storage Devices To view the status of hard disk drives and other connected storage devices: 1. Go to the Settings tab > System Monitoring (in the Advanced Settings group) > the Disks tab. 2. View all connected (mounted) devices listed. Note: The monitoring utility might not detect properly some mounted devices. An icon in the S (Status) column shows whether a hard disk partition or storage device is currently monitored and it indicates the current disk space usage rate: - the disk drive or partition is not currently monitored. - you started monitoring but the disk or partition has not yet been checked. - the disk drive or partition is monitored and the system reports that disk space usage has not reached the threshold you defined. - the disk drive or partition is monitored and the system reports that disk space usage has reached the threshold you defined and soon there will be no free space left on that disk or partition. An icon in the M (monitoring) column shows whether you set the system to monitor disk space usage on a storage device or disk partition: - you did not switch on monitoring of the disk or partition. - you switched on monitoring of the disk or partition. The Device and Mount point columns show information on storage device and the partition mount point. The Mount point column shows hyphen (-) if a partition is no longer connected to the file system: when the partition is reconnected to the system, the monitoring utility will resume monitoring it. The Disk space usage threshold column shows the amount of disk space that can be used without drawing your attention. You can specify the amount of disk space either in percentage from total amount or in measurement units: gigabytes, megabytes or kilobytes. When the specified amount is reached, the system will notify you and run the command you defined. A hyphen (-) in this column shows that the partition or device is not monitored. The Files number threshold column shows the amount of files or directories that can be stored on the file system without drawing your attention. The number of files or directories is limited not only by disk space, but also by the file system capacity. You can specify either the exact number of files and directories (if you know it) or a percent from the total amount. The system will notify you when the specified amount is reached. A hyphen (-) in this column shows that the partition or device is not monitored. The Command column shows the command that will be run when the disk space threshold is reached.

67 Setting Up and Managing the Server 67 Viewing CPU and RAM Usage Statistics To view the statistics on CPU and RAM usage by system services: 1. Go to the Settings tab > System Monitoring (in the Advanced Settings group) > the Statistics tab. 2. In the Statistics presentation preferences group, select the period and system services for which you would like to view statistics. 3. Click Apply. CPU and RAM usage diagrams will be presented on the screen. The CPU Usage diagram will show the total load for all CPUs your server may have. Viewing Server Scanning Reports To view the report for the last system scan: 1. Go to the Settings tab > System Monitoring (in the Advanced Settings group) > the Security tab. 2. View the detailed report will be presented on the screen. If you want to run a new scan, click the Start icon in the Tools group. Enabling Windows Users to Access Files and Printers on Your Linux-based Server To allow the users of Microsoft Windows-based computers within your organization to access files and printers shared on a Linux-based server with help of Samba file sharing protocol, you can use the File Server add-on for your Panel. It is shipped with Parallels Small Business Panel for Linux. After you install this add-on, a new icon appears in your Panel: Settings tab > File Server (in the Advanced Settings group). In this section: Setting Up File Server Managing Shares Managing Users Managing Broadcast Interfaces Limiting Access to File Server from Other Computers or Networks... 73

68 68 Setting Up and Managing the Server Setting Up File Server To configure the file server's settings: 1. Go to the Settings tab > Samba File Server > Status > Preferences. The page that opens displays the preferences of your file server. 2. To change the workgroup for your server on the Microsoft network, click in the Workgroup field and enter the name of a workgroup. If needed, edit the description in the Description field containing an optional description of your file server. 3. You can also configure the following security parameters for your Samba server: Authentication mode. Select one of the following security modes: Share - in this security mode, the user authenticates themselves separately for each share. The user sends a password along with each tree connection (share mount). Passwords are meant to be associated with each share, independent of the user. User - this security mode is based on verifying the username and password. The server can either accept or reject the username and password combination. At this stage the server has no idea what share the client will eventually try to connect to, so it bases the accept/reject decision only on the username and password and the name of the client machine. Server - in Server Security Mode, the Samba server receives the username and password from the client and sends a session setup request to the machine designated as the password server. If the password server is in user-level security and accepts the password, Samba accepts the client's connection. The client sends all passwords in encrypted form. This security mode requires the use of a password server (see Authentication server). Domain - in Domain Security Mode, the Samba server has a domain security trust account (a machine account) and causes all authentication requests to be passed through to the domain controllers. In other words, domain security has basically the same concept as server security mode, with the exception that the Samba server becomes a member of a Windows NT domain. This means that the Samba server can participate in things such as trust relationships. ADS - in this mode, the authentication procedure is performed through an Active Directory domain. Samba in this security mode can accept Kerberos tickets. Authentication server. If you set the security mode to either Server, Domain, or ADS, you will need to specify the password server (or the authentication server). For user and share modes, the password server is not required. In this field, enter the NetBIOS name of the Panel-managed server used as a password server, on which the Samba server will check the entered passwords. You can list multiple NetBIOS names separated with a space. This allows Samba to attempt a session setup request to each machine in the list in order until a server is contacted. This means that the next machine on the list is contacted only if the previous machine was unavailable.

69 Setting Up and Managing the Server 69 You must use only the NetBIOS name of the password server (not the IP address), and Samba must have a way of resolving the name to an IP address in order to attempt the connection. To create a local account for all users that access the Samba server and disable the password field, set this field to the asterisk character (*). Encrypt password. Select Yes if you want to store passwords used to authenticate users in encrypted form or No if password encryption is not required. Guest account. In this drop-down box, select the system user whose rights will be granted to users logged on under the guest account. If you have no guest account on your server, select the no guest account option. If you need a guest account for anonymous users, it is advised that you select the nobody option. For details on the Samba security configuration options, please refer to the relevant Samba documentation. To switch on the file server: 1. Go to the Settings tab > Samba File Server > Status. 2. Click the Enable button. To view the current status of your file server: 1. Go to the Settings tab > Samba File Server > Status. 2. In the Current statistics section, view whether your file server is started or stopped. The statistics on the current connections to shared directories is provided in the table with the following columns: Share, name of the shared resource. Host, name of the remote host currently connected to the shared directory. User, user name who is currently connected to the shared directory. 3. To update the information presented on the screen, click the Refresh button. To switch off the file server: 1. Go to the Settings tab > Samba File Server > Status. 2. Click the Disable button.

70 70 Setting Up and Managing the Server Managing Shares To view the list of existing shared resources: 1. Go to the Settings tab > Samba File Server > Shares. 2. View the following information about each share: Name, displays the name of the shared resource. Real path, shows the path to the shared resource. Description, contains the description of the shared directory as specified during its creation. W, write permissions show whether users can add new files to this directory. The icon means that write permissions are set for this directory. The icon means that the directory is read-only. To add a new shared resource: 1. Go to the Settings tab > Samba File Server > Shares > Add New Share. 2. In the Preferences group, enter the name of the shared directory, full path to the directory you want to share and its description. If you want to give write permissions on this directory to network users, select the Writable check box. 3. To select the users that will have access to the shared directory: Select the Any user option if you want to grant access to the shared directory to all network users. Select the Selected only option to grant access to the shared directory only to specified users. Select the users that will have access to this directory from the Available users list by using the Add and Remove buttons. If access is allowed for some users, they should specify their login and password to access this folder. Note: If you want to add other users to the Available users list, you must first add them using the Add New User button on the Users tab. See Managing Users (on page 71) on how to add new users. 4. Click OK. To edit the properties of a share: 1. Go to the Settings tab > Samba File Server > Shares. 2. Click the name of the shared directory you want to edit. 3. Change the necessary parameters. 4. Click OK.

71 Setting Up and Managing the Server 71 To remove a shared resource: 1. Go to the Settings tab > Samba File Server > Shares. 2. Select a check box corresponding to the shared resource that you want to remove. 3. Click Remove. 4. Confirm removal and click OK. The resource will no longer be shared, and the files contained within the directory will not be removed. Managing Users To view users that can have access to the shares: 1. Go to the Settings tab > Samba File Server > Users. 2. View users listed in a table with the following columns: Name, displays the user's login. System user, shows the system user account this File Server user belongs to. To add a new user to the list of authorized users: 1. Go to the Settings tab > Samba File Server > Users > Add New User. 2. Specify the following parameters: System user - select the corresponding system user from the drop-down box the new user will belong to. Name - user name (login) that will be used to access a share. Password - password used to access a share. Password confirmation - confirm the password. All these fields are mandatory. Note: You can add only one File Server user for each Unix system user. To edit user information and credentials for access to shared resources: 1. Go to the Settings tab > Samba File Server > Users. 2. Click the user name you want to edit. 3. Change the settings as needed. 4. Click OK.

72 72 Setting Up and Managing the Server To remove a user from the list of authorized users: 1. Go to the Settings tab > Samba File Server > Users. 2. Select a check box corresponding to the user name you want to remove. 3. Confirm removal and click OK. Managing Broadcast Interfaces By default, broadcast mode is disabled for all network interfaces mainly for security reasons. Broadcast mode enables sending data packets to the broadcast address. However, you can manually prevent your File Server from sending broadcast packets to specified network interfaces. To view the list of network interfaces: 1. Go to the Settings tab > Samba File Server > Interfaces. 2. View the information presented in the table with the following columns: S - an icon indicating the status of the network interface. The icon shows that the broadcast mode for the interface is enabled, the icon shows that the broadcast mode is disabled for this interface, and the icon means that broadcast mode for this interface was enabled but now the interface is physically unavailable (was removed or corrupted). Interface name - the name of the interface, for example, eth0, eth1, etc. IP Addresses - all IP addresses and subnet addresses that work on this interface. To enable broadcast mode for an interface: 1. Go to the Settings tab > Samba File Server > Interfaces. 2. Click the icon in the Status column of the table listing interfaces. The selected interface will be set to work in broadcast mode. To disable broadcast mode for an interface: 1. Go to the Settings tab > Samba File Server > Interfaces. 2. Click the or icons in the Status column of the table. Broadcast mode will be switched off for the selected interface.

73 Setting Up and Managing the Server 73 Limiting Access to File Server from Other Computers or Networks If you want to enhance the security of your file server, you can regulate what hosts or networks will have access to your shared resources. Connections from other hosts will be refused by your file server. To view all hosts and networks that have access to your file server: 1. Go to the Settings tab > Samba File Server > Access. 2. View the the table. If the list is empty, all hosts can access your file server. This is the default option. To allow access to your server only from a specific range of hosts: 1. Go to the Settings tab > Samba File Server > Access > Add New Host/Network. 2. Enter the IP address of the host you want to allow access (for example, ) or the range of hosts (for example, network address/subnet mask written as / ). 3. Click OK. This will only allow the specified hosts to successfully connect to the shared resources on your file server. All connections from other hosts will be refused by the file server. To edit the list of hosts that have access to your server: 1. Go to the Settings tab > Samba File Server > Access. 2. Click the address of the host in the list of allowed hosts. 3. Edit the host IP address or subnet mask (for multiple hosts) in the Network/Host address field. 4. Click OK. To remove an address from the list: 1. Go to the Settings tab > Samba File Server > Access. 2. Select the check box corresponding to the host address you want to remove and click Remove. 3. Confirm removal and click OK.

74 74 Setting Up and Managing the Server Connecting to Your Company's Network over VPN (Linux Hosting) Virtual Private Network (VPN) is a popular means to establish secure connections over the Internet between two geographically distributed offices, or between a user working from home and a company's network. To be able to connect through VPN, you need to install the appropriate software on the server and on the client's computer. The software is shipped with the Panel. After you install the VPN add-on, a new icon appears in your Panel: Settings tab > Virtual Private Network (in the Advanced Settings group). In this section: Setting Up a VPN Connection Managing Keys Using Client Packages Starting and Stopping a VPN Connection... 78

75 Setting Up and Managing the Server 75 Setting Up a VPN Connection To set up a VPN connection: 1. Go to the Settings tab > Virtual Private Networking (in the Advanced Settings group). When you access this screen for the first time, you are prompted to specify VPN connection settings. 2. On the Preferences page that opens, specify the following settings: Remote Address, enter the host name or the IP address of the host you want to communicate to. Leave this field blank if you wish the other party to be able to connect to your server from different addresses or if the remote IP address is not known in advance. Note, however, that one server cannot be involved in simultaneous communication with two or more remote hosts. Remote UDP port, specify the port on the remote host to which UDP packets from this server will be sent. The default port is Note that though VPN uses only UDP for the encrypted traffic flow, all IP protocols, including TCP, are supported over the virtual private network. You can leave this field blank if you have not specified the remote address above. Local UDP port, your server will listen for incoming VPN traffic on this local UDP port. The default port is You can leave this field blank if you do not want to allocate a specific port, but in that case you must specify the remote address and port fields above to allow the local host to be the initiating party. Local peer address and Remote peer address, two hosts connected by a VPN channel need to have a pair of virtual network interfaces to route the traffic through. You need to assign two IP addresses to them, one for each side of the VPN circuit. These IP addresses should be chosen from some private address spaces and it is important that they should not overlap with any of the IP addresses present within the local networks on either side of the tunnel. These two addresses must differ only in the two least significant bits. You can pick.1 and.2 for the last octets, for example. Note that the default values are only an illustration! Always check the real configuration of your network so that you do not run into IP collision problems. 3. Click OK. 4. Now switch on the VPN service by clicking the Enable button.

76 76 Setting Up and Managing the Server Managing Keys To establish a VPN connection between your Panel-managed server and a remote host, both sides must have the same cryptographic key. This key is required for authentication and encryption of your traffic, ensuring that your communications cannot be eavesdropped or interfered by a third party. Do not forget to share the same key between both communicating parties each time you generate or upload a new key. A cryptographic key is generated automatically and saved to a special directory during installation of the add-on. However, you might want to replace the initial key with the new one. To generate a new VPN key: 1. Go to the Settings tab > Virtual Private Networking (in the Advanced Settings group). 2. Click Generate Key. The new key will automatically replace the existing key. Note: After the new key is generated, your old key will become invalid. In order to continue communication, you must share the new key with the other communicating party. To save the generated key to your local machine: 1. Go to the Settings tab > Virtual Private Networking (in the Advanced Settings group) > Download Key. 2. Save the key to a specified location on your disk. You can then transmit this key file to another host on removable media or through another secure way. To upload a cryptographic key that you received from another machine: 1. Go to the Settings tab > Virtual Private Networking (in the Advanced Settings group) > Upload Key. 2. Specify the location of the key file and click OK. This way of key management is especially useful if you are establishing a VPN connection between two Panel-managed servers. If the remote host does not run the Panel, it is more convenient to use client packages.

77 Setting Up and Managing the Server 77 Using Client Packages To simplify the task of connecting a host that does not run Linux-based Parallels Small Business Panel to your Panel-managed server, the Panel supplies preconfigured client packages containing configuration files and the cryptographic key for the other party. The contents of the archives are specifically tailored to the VPN connection settings you have specified earlier. If the remote computer is running a Microsoft Windows operating system, click For a Windows Client to download and save the client package on your local machine. The client package is a zip archive that contains the following files and folders: Install TAP device.bat - installs the TAP driver on your computer. Uninstall TAP device.bat - uninstalls the TAP driver from your computer. Connect to VPN.bat - establishes a VPN connection. System folder - contains the cryptographic key and VPN connection settings. To install and uninstall the TAP drivers, you must have Windows administrator rights on your computer. To install the TAP driver, run the install TAP device.bat file. After the driver is installed, you can establish a VPN connection to the Panel-enabled server by running the connect to VPN.bat file. The OpenVPN software itself is contained within the client package and does not require any installation or removal procedures. If the remote computer is running a Linux or Unix operating system, click For a Unix client to download and save the client package on your local machine. The package contains the openvpn.conf file with your current VPN connection settings and the vpn-key file that is a cryptographic key for your VPN connection. If you are using this package, OpenVPN (version 2.0) must be already installed on the client machine. For smooth operation, we advise that you use OpenVPN 2.0 beta 11 as the VPN add-on was tested on this beta version. If the VPN connection settings on the Panel-managed server change or a new key is generated or uploaded to the server, the client packages must be downloaded again because they include your current key and VPN connection settings.

78 78 Setting Up and Managing the Server Starting and Stopping a VPN Connection To enable a VPN connection from the Panel: 1. Go to the Settings tab > Virtual Private Networking (in the Advanced Settings group). 2. Click Enable. To disable a VPN connection from the Panel: 1. Go to the Settings tab > Virtual Private Networking (in the Advanced Settings group). 2. Click Disable. If you want to disable a VPN connection on a Windows client, close the Connect to VPN dialog box that appeared when you established your connection. When the Windows user logs out, the VPN connection shuts down as well. Configuring ASP.NET (Windows Hosting) ASP.NET is a flexible set of tools and Web development technologies that allows you to employ a number of applications based on ASP.NET framework. Parallels Small Business Panel supports 2.0.x version of the.net framework and allows configuring most of its settings. Most ASP.NET configuration settings that commonly need to be customized in order for ASP.NET applications to function in a desirable way can be edited through the Panel. Note: If you do not develop your own Web applications written in ASP.NET, it is highly unlikely that you will need to change the default server-wide ASP.NET settings. To configure the server-wide ASP.NET settings: 1. Go to the Settings tab > ASP.NET Settings in the Advanced Settings section. 2. Set up the strings that determine database connection data for ASP.NET applications which use databases. When you open the ASP.NET configuration page for the first time, sample connection parameters with common constructions are displayed. You can then delete them and specify your own strings. To add a string, enter the required data into the Name and Connection Parameters input fields and click next to them. To remove a string, click next to it. 3. Set up custom error messages that will be returned by ASP.NET applications in the Custom Error Settings field:

79 Setting Up and Managing the Server 79 To set the custom error messages mode, select an appropriate option from the Custom error mode menu: On - custom error messages are enabled. Off - custom error messages are disabled and detailed errors are to be shown. RemoteOnly - custom error messages are displayed only to remote clients, and ASP.NET errors are shown to the local host. To add a new custom error message (which will be applied unless the Off mode was selected), enter the values in the Status Code and Redirect URL fields, and click. Status Code defines the HTTP status code resulting in redirection to the error page. Redirect URL defines the web address of the error page presenting information about the error to the client. Due to possible conflicts, you cannot add a new custom error message with an error code that already exists, but you can redefine the URL for the existing code. To remove a custom error message from the list, click next to it. 4. Configure compilation settings in the Compilation and Debugging field: To determine the programming language to be used as default in dynamic compilation files, choose an entry from Page default language list. To enable compiling retail binaries, leave the Enable debugging check box empty. To enable compiling debug binaries, select the Enable debugging check box. In this case, the source code fragments containing error will be shown in a diagnostic page message. Note: When running applications in debug mode, a memory and/or performance overhead occurs. It is recommended to use debugging when testing an application and to disable it before deploying the application into production scenario. 5. Configure encoding settings for ASP.NET applications in the Globalization Settings section: To set an adopted encoding of all incoming requests, enter an encoding value into the Request encoding field (default is utf-8). To set an adopted encoding of all responses, enter an encoding value into the Response encoding field (default is utf-8). To set an encoding which must be used by default for parsing of.aspx,.asmx, and.asax files, enter an encoding value into the File encoding field (default is Windows- 1252). To set a culture which must be used by default for processing incoming web requests, select an appropriate item from the Culture list. To set a culture which must be used by default when processing searches for a locale-dependent resource, select an appropriate item from the UI Culture list. 6. Set a code access security trust level for ASP.NET applications in the Code Access Security field. CAS trust level is a security zone to which applications execution is assigned, defining what server resources the applications will have access to.

80 80 Setting Up and Managing the Server Important. When an assembly is assigned a trust level that is too low, it does not function correctly. Refer to Microsoft Developer Network website for additional information. 7. Set client session parameters in the Session Settings field: To set up the default authentication mode for applications, select an appropriate item from the Authentication mode list. Windows authentication mode should be selected if any form of IIS authentication is used. To set up time that a session can idle before it is abandoned, enter appropriate number minutes into the Session timeout field. 8. Сlick OK to apply all changes. Restarting the Server To restart the server: 1. Go to the Settings tab and click Restart Server (in the Advanced Settings group). 2. Confirm the restart.

81 Setting Up and Managing the Server 81 Updating the Panel The Panel checks for updates every night. If updates are available, the Panel automatically downloads and installs them. This is the default setting: At the Settings tab > Branding and System, the Automatically download and install updates check box is selected. If a new version of the Panel is available, the Upgrade now link is shown at the top of the screen on the Home tab. If you do not want the Panel to automatically download and install updates, go to the Settings tab > Branding and System, and clear the Automatically download and install updates check box. After that, if updates are available, an alert will be shown at the top of the screen on the Home tab, and the following links will be presented: View detailed information about the update. Click this if you want to view the information about the update before installing it. Update now or Upgrade now. The Update now link is shown if updates are available for your product version. In case an upgrade to a newer version is available, then the Upgrade now link is shown. Click the link corresponding to the operation you want to perform. If you choose to install updates, then all required software updates and packages will be installed. If upgrading to a new version, you will be prompted to select the product versions and components that you want to install. In case of failure, the panel will show a link to a log file that contains all the information required for troubleshooting. If you experience problems with updating or upgrading your software, contact the Parallels support department, and send them this log file. Update later. Click this link if you do not want to install any updates at the moment. The alert text and the links will no longer be shown in the Panel; they will appear again the next time a new update is available. In addition to using these links, you can update or upgrade the Panel using the following steps: 1. In your Panel, click the Settings tab, and then click Updates. A new browser window or tab will open. 2. Click Install or Upgrade Product. 3. Select a check box corresponding to the update that you want to install and click Continue. 4. When updating is finished, click OK.

82 82 Setting Up and Managing the Server Scheduling Tasks If you need to run scripts on your server at specific time, use the task scheduler facility on your server to make the system automatically run the scripts for you. In this section: Scheduling Tasks (Linux Hosting) Scheduling Tasks (Windows Hosting)... 85

83 Setting Up and Managing the Server 83 Scheduling Tasks (Linux Hosting) If you need to run scripts on your server at specific time, use the task scheduling facility on your server to make the system automatically run the scripts for you. During installation of Parallels Small Business Panel, the following tasks are automatically created: autoreport.php delivers daily, weekly and monthly reports on clients and domains (three separate tasks) backupmng initiates scheduled backing up of domains once every 30 minutes statistics generates statistics on the limits imposed on domains, such as traffic, disk usage, and so on mysqldump.sh - creates a backup copy of three MySQL databases: psadump, MySQL, and Horde databases As all these tasks are related to domain statistics, databases and reports, it is strongly recommended that you neither change nor remove these tasks. To schedule a task: 1. Go to the Settings tab > Scheduled Tasks (in the Advanced Settings group). 2. Select the "root" system user account on whose behalf the task will be executed. 3. Click Add New Task. 4. Leave the Switched on check box selected. 5. Specify when to run your command: Minute - enter the value from 0 to 59 Hour - enter the value from 0 to 23 Day of the month - enter the value from 1 to 31 Month - enter the value from 1 to 12, or select the month from a drop-down box Day of the week - enter the value from 0 to 6 (0 for Sunday), or select the day of the week from a menu. You can schedule the time using the UNIX crontab entry format. In this format, you can: Enter several values separated by commas. Two numbers separated by a hyphen mean an inclusive range. For example, to run a task on the 4th, 5th, 6th, and 20th of a month, type 4-6,20. Insert an asterisk to specify all values allowed for this field. For example, to run a task daily, type * in the Day of the month text box. To schedule the task to run every Nth period, enter the combination */N, where N is a value for this field (minute, hour, day, month). For example, */15 in the Minute field schedules the task to start every 15 minutes.

84 84 Setting Up and Managing the Server You can type the contracted names of months and days of the week, which are the first three letters: Aug, Jul, Mon, Sat, etc. However, the contracted names cannot be separated with commas or used together with numbers. 6. Specify which command to run. Type it into the Command input box. For example, if you want to run the backup creation task at the specified time and have the backup file sent to your , you need to specify the following command in the Command input box: /usr/local/psa/admin/sbin/backupmng 7. Click OK. To temporarily suspend execution of a scheduled task: 1. Go to the Settings tab > Scheduled Tasks (in the Advanced Settings group). 2. Select the "root" system user account on whose behalf the task is executed. 3. Locate the task that you want to suspend and click the command name. 4. Clear the Switched on check box and click OK. To resume execution of a scheduled task: 1. Go to the Settings tab > Scheduled Tasks (in the Advanced Settings group). 2. Select the "root" system user account on whose behalf the task is executed. 3. Locate the task whose execution you want to resume and click the command name. 4. Select the Switched on check box and click OK. To cancel a task: 1. Go to the Settings tab > Scheduled Tasks (in the Advanced Settings group). 2. Select the "root" system user account on whose behalf the task is executed. 3. Select a check box to the left of the task that you want to cancel. 4. Click Remove. 5. Confirm removal and click OK.

85 Setting Up and Managing the Server 85 Scheduling Tasks (Windows Hosting) If you need to run scripts on your server at specific time, use the task scheduler facility on your server to make the system automatically run the scripts for you. During installation of Parallels Small Business Panel, the following tasks are automatically created: Update Dr.Web Antivirus database updates Dr.Web virus database. Statistics calculation - generates statistics on resource usage, such as traffic and disk space. As all these tasks are related to Web site statistics, databases and reports, it is strongly recommended that you neither change nor remove these tasks. To schedule a task: 1. Go to the Settings tab > Scheduled Tasks (in the Advanced Settings group). 2. Select the "Server Administrator" system user account on whose behalf the task will be executed. 3. Click Add New Task. 4. Leave the Switched on check box selected if you want your scheduled task to be active immediately after the creation. 5. Type a name for your task in the Description field. 6. In Scheduler notification, specify whether the scheduler should notify you when it runs this task. The following options are available: Switched off - do not notify you. Send to the default - send the notification to your default address. Send to the I specify - send the notification to the specified in the corresponding field. After selecting this option, you need to input the required in the field on the right. Click Set to save scheduler notifications settings. 7. Specify which command to run. Type it into the Path to executable file input box. If you need to run the command with certain options, type them in the Arguments field. For example, if you want to run the statistics calculation task to count disc space and see more detailed information for the example.com and example.net domains, you need to specify the following path in the Path to executable file input box: C:\Program Files\Parallels\Parallels Panel\admin\bin\statistics.exe and the following options in the Arguments field: --disk-usage --process-domains=example.com, example.net verbose

86 86 Setting Up and Managing the Server If you want to run your own php script using the task scheduler, you need to specify the following path in the Path to executable file input box: C:\Program Files (x86)\parallels\parallels Panel\Additional\PleskPHP5\php.exe and specify the script location in the Arguments field: C:\Inetpub\vhosts\mydomain.tld\httpdocs\myscript.php 8. Select the appropriate priority in the Task priority field. Task priority can be set to Low, Normal or High. 9. Specify when to run your command by selecting the appropriate check boxes in the Hours, Days of month, Months or Days of week fields. 10. Click OK to schedule the task or click Run Now to schedule the task and immediately run it. To temporarily suspend execution of a scheduled task: 1. Go to the Settings tab > Scheduled Tasks (in the Advanced Settings group). 2. Select the "Server Administrator" system user account. 3. Choose a task that you wish to suspend and click the command name. 4. Clear the Switched on check box. 5. Click OK. To resume execution of scheduled task: 1. Go to the Settings tab > Scheduled Tasks (in the Advanced Settings group). 2. Select the "Server Administrator" system user account. 3. Choose a task whose execution you wish to resume and click on the command name. 4. Select the Switched on check box. 5. Click OK. To cancel a task: 1. Go to the Settings tab > Scheduled Tasks (in the Advanced Settings group). 2. Select the "Server Administrator" system user account. 3. Select a check box to the left of the task that you want to cancel. 4. Click Remove. 5. Confirm removal and click OK.

87 Setting Up and Managing the Server 87 Extending Panel's Capabilities with Add-on Modules You can extend the functionality of your Panel without upgrading it. This can be done by installing additional functional components, available as add-on modules developed by Parallels or third parties. The modules can be easily installed, removed, and configured directly from the Panel. To install an add-on module: 1. Go to the Settings tab > Add-ons (in the Advanced Settings group) > Manage Addons. 2. Click Add Module. 3. Click Browse to locate the required add-on module package file on your local computer or network, select it and click OK. Before you begin to use the add-on module, you should configure it. Configuration steps vary depending on each module. To configure an add-on module: 1. Go to the Settings tab > Add-ons (in the Advanced Settings group) > Manage Addons. 2. In the list of installed modules, click the module s name presented as link. Some modules might require you to install a license key in order to be able to use them. You can check out the terms of usage on the module manufacturer s Web site, or look them up in the Panel (Settings tab > Add-ons (in the Advanced Settings group) > Manage Add-ons): for each module installed there is a corresponding list entry accompanied by an icon, which shows whether license key is required. There are three types of icon that indicate the following: - the module does not require a license key. - the module requires a license key, and the key is installed. - the module requires a license key, but the key is not installed. If a module is provided by Parallels and it requires an additional license key, you can obtain it from Parallels as described in the section Obtaining and Installing a License Key (on page 19). In other cases, you should obtain the information on installation of license keys for modules from the module manufacturer.

88 88 Setting Up and Managing the Server To remove an add-on module: 1. Go to the Settings tab > Add-ons (in the Advanced Settings group) > Manage Addons. 2. Select a check box corresponding to the module you want to remove, and click Remove. 3. Confirm the removal and click OK.

89 C H A P T E R 6 Establishing Online Presence This chapter describes how to set up a company website available on the Internet, install applications, and secure the site with an SSL certificate. In this chapter: Setting Up a Website Previewing a Site Installing Applications Deploying Databases Turning Your Website Into an E-commerce Portal Setting Up Alternative Domain Names for a Site Organizing Site Structure with Subdomains Setting File and Directory Access Permissions (Linux Hosting) Setting File and Directory Access Permissions (Windows Hosting) Changing DNS Settings for Domains Customizing Web Server Error Messages Suspending and Unsuspending Websites Removing Websites

90 90 Establishing Online Presence Setting Up a Website Before setting up a website in the Panel, you need to decide on an Internet address (domain name) for the site, check if it is not taken yet, and then register the domain name with a domain name registrar. Registrars are organizations responsible for publishing information about new domain names to the Domain Name System (DNS). Domain Name System is a distributed database underlying the Internet: it enables Internet users to visit websites by typing human readable and easy-to-remember Internet addresses in their Web browsers. For more information about DNS, refer to the section Configuring DNS Service (on page 27). You can register a domain name for a site using links in the Panel, or you can contact a registrar of your choice. Note: If you deployed Parallels Small Business Panel inside a company's local area network, and you want to set up an intranet portal (an internal local website) available only to users within your local network, then you do not need to register a domain name with a registrar. Just use a domain name like intranet.local. To set up a website: 1. Click the Websites & Domains tab. 2. Click Create Website. 3. Type a domain name that you previously registered with a domain name registration company. If you have not registered a domain name yet, you can use MyPlesk.com portal to do it: click Register Domain Name and follow the onscreen instructions. If you are setting up an intranet site, then specify intranet.local as the domain name. 4. Specify the username and password that will be used for accessing the Web space over FTP. 5. Click OK. The site has been set up in accordance with the predefined default hosting settings. Now you can do the following: Use the integrated Site Editor tool to create a site. Connect to the Web space over FTP and upload the files that compose your site. Install a content management solution and use it to create a site. Review and change hosting settings of your site.

91 Establishing Online Presence 91 In this section: Reviewing and Updating Web Hosting Settings...92 Making Your Website Accessible When the Panel Is Running Behind Router with NAT...95 Creating Site Content with Site Editor...96 Publishing a Site Through FTP...96 Publishing Sites Through the Panel's File Manager...101

92 92 Establishing Online Presence Reviewing and Updating Web Hosting Settings If you want to review the hosting settings or select the hosting features and scripting languages that should be supported on your site: 1. Click the Websites & Domains tab. 2. If you have more than one website hosted on the server, select the website you need: click the icon next to the website name, and in a pop-up menu that opens, select the website. 3. Click Web Hosting Settings in the Advanced Operations group and review or modify the hosting settings for the selected website. 4. SSL support. Secure Sockets Layer encryption is generally used for protecting transfer of sensitive data during online transactions on e- commerce websites that run on dedicated IP addresses. SSL certificates that participate in the encryption process are usually applied to a single domain name on a single IP address, therefore, each site that needs SSL protection must be hosted on a dedicated IP address. An exception to this is subdomains, which you can protect with a wildcard certificate. Installing an SSL certificate on a Web server that hosts several websites with different domain names on a single IP address (shared or name-based hosting) is technically possible, however, it is not recommended: the encryption will be provided, but users will get warning messages on attempt to connect to the secure site. To allow SSL encryption for websites, select the SSL support check box. 5. Use a single directory for housing SSL and non-ssl content (available only for Linux hosting). By default, when users publish their sites through their FTP accounts, they need to upload the Web content that should be accessible via secure connections to the httpsdocs directory, and all other content, to the httpdocs directory. For the convenience of publishing all content through a single location httpdocs directory, select the Use a single directory for housing SSL and non-ssl content check box. 6. FTP Login and FTP password (on Linux hosting) or FTP/Microsoft FrontPage Login and FTP/Microsoft FrontPage password (on Windows hosting). Specify the user name and password that will be used for publishing the site to the server through FTP or Microsoft FrontPage. Retype the password into the Confirm Password box.

93 Establishing Online Presence Hard disk quota. Specify the amount of disk space in megabytes allocated to the Web space for this site. This is the so-called hard quota that will not allow writing more files to the Web space when the limit is reached. At attempt to write files, users will get the "Out of disk space" error. If you see the "Hard disk quota is not supported" notice to the right of the Hard disk quota field, and would like to use the hard quotas, you need to enable them on the server's file system. 8. Access to server shell over SSH (available only for Linux hosting) or Access to server over Remote Desktop (available only for Windows hosting). This allows the site administrator to securely upload Web content to the server through a Secure Socket Shell or a Remote Desktop connection. However, allowing access to the server also poses a potential threat to the server security, so we recommend that you set this option to Forbidden. 9. Microsoft FrontPage support. Microsoft FrontPage is a popular website authoring tool. To enable users to publish and modify sites through Microsoft FrontPage, select the options Microsoft FrontPage support, Microsoft FrontPage over SSL support, and Remote FrontPage authoring allowed. 10. Services. Specify which of the following programming and scripting languages should be supported by the Web server: Active Server Pages (ASP), Server Side Includes (SSI), PHP hypertext preprocessor (PHP), Common Gateway Interface (CGI), Fast Common Gateway Interface (FastCGI), Perl and Python. By default, PHP is configured to operate with safe mode turned off. To learn more about PHP safe mode, refer to Note: When you install on a site an application from the Application Catalog, support for the required scripting or programming languages is automatically switched on. 11. Web statistics. To allow the site administrator to view the information on the number of people visited the site and the pages of the site they viewed, select the statistics program from the Web statistics menu, and select the accessible via password protected directory /plesk-stat/webstat check box. This will enable the statistics software of your choice, which will generate reports and place them into the password protected directory. The site administrator will then be able to access Web statistics at the URL: using his or her FTP account login and password. Note: When you switch from one statistics program to another, all reports created by the previously used statistics program are deleted and new reports are created in accordance with the information read from log files kept on the server. This means that if you configured the system (at Websites & Domains > domain name > Log Manager > Log Rotation) so as to keep log files only for the last month, then Web statistics will be available only for the last month.

94 94 Establishing Online Presence 12. Custom error documents. When visitors coming to a site request pages that the Web server cannot find, the Web server generates and displays a standard HTML page with an error message. If you wish to create your own error pages and use them on the Web server, select the Custom error documents check box. 13. Additional write/modify permissions (available only for Windows hosting). This option is required if Web applications on the site will be using a file-based database (like Jet) located in the root of httpdocs or httpsdocs folders. Please note that selecting this option will seriously compromise the website security. 14. Use dedicated pool (available only for Windows hosting). All applications installed on your websites are working in the IIS application pool. By default all your websites use a single shared application pool. It is possible to provide each website with a dedicated application pool. Dedicated application pools can be useful in the following situations: You are running a resource-intensive application on one of your websites, and you do not want this application to affect the functioning of applications running on your other websites. You are running an unstable application on one of your websites, and you do not want this application to stop the functioning of applications running on your other websites. You are running a mission-critical application on one of your websites, and you want to isolate it from applications running on your other websites in order to maintain stable performance. 15. Click OK.

95 Establishing Online Presence 95 Making Your Website Accessible When the Panel Is Running Behind Router with NAT If your Panel-managed server is running behind a routing device with NAT, you need to configure the routing device and the Panel itself so that your websites are accessible to the Internet users. When your routing device is configured and your DNS zone template is modified as described in Configuring the Panel to Run Behind Router with NAT (on page 34), you need to modify DNS zones of your websites as the last step of making them accessible. To make your websites accessible to the Internet users if the Panel is running behind a router with NAT: 1. Go to the Websites & Domains tab > website name > DNS. 2. Click Restore Defaults. 3. Select the Confirm the restoration of the DNS zone check box, and click OK. The zone configuration will be recreated and your website will be accessible to the Internet users in 48 hours or less, depending on DNS propagation speed. Repeat the process above for all your websites, to make them accessible.

96 96 Establishing Online Presence Creating Site Content with Site Editor Site Editor is a powerful, flexible and easy-to-use tool that allows you to create your company website from scratch. You can establish your online presence quickly and efficiently with help of user-friendly Site Editor wizard. Site Editor comes with a lot of different site templates (additional templates are installed as a separate component of the Panel), providing you with a variety of visual themes and tools to make your website nice-looking, functional and unique. To open Site Editor for a website: 1. Log in to the Panel. 2. Click the Websites & Domains tab. 3. If you have more than one website hosted on the server, select the website you need: click the icon next to the website name, and in a pop-up menu that opens, select the website. 4. Click Site Editor to open Site Editor in a new browser tab or window, depending on your browser settings. For further instructions on creating your website using Site Editor, refer to Parallels Small Business Panel: Site Editor User's Guide. It is available by clicking Help while in Site Editor interface. Publishing a Site Through FTP If the files that compose your site were created by a Web designer, then you need to upload them to the server over FTP with the help of an FTP client program. FTP stands for file transfer protocol. It is commonly used for transferring files over the Internet. You can download an FTP client from the Internet, or use an FTP client program provided with your operating system. On Microsoft Windows operating systems, there is a program called Windows Explorer, which you can use for transferring files. When you connect to an FTP account, you are taken to the top-level directory that contains all files and folders related to your site: bin, conf, pd, statistics, vault_scripts, web_users. These directories are managed by the Panel, therefore, you should not attempt to delete them or modify their contents.

97 Establishing Online Presence 97 anon_ftp. This directory is used for anonymous FTP service (when anybody is allowed to download and upload files to the server over FTP without needing to authenticate with a username and password), when it is supported by a site. It contains three subdirectories: conf, incoming, and pub. The conf directory is used by FTP service, so, you should not delete it, or place any files to it. The incoming directory keeps all files uploaded by users, and the pub directory is where you place files that you want to share. cgi-bin. This is the directory where you place CGI scripts for your site, if you use any. error_docs. This is the directory where the default Web server error pages are stored. You can modify the contents of this directory as described in the section Customizing Web Server Error Messages (on page 131). httpdocs, httpsdocs. You should place all files that compose your site to httpdocs directory. If there are any files that need to be accessible over a secure SSL protocol, then you can place them to the httpsdocs directory. If you specified in the website hosting settings (Websites & Domains tab > domain name > Web Hosting Settings (in the Advanced Operations group)) that you want to use a single directory for uploading SSL and non-ssl content, then you should place all files of your site only to the httpdocs directory. Note: The index.html file located inside the httpdocs directory is considered by Web server as the main page of your site. This page is shown by default to visitors of your website. So, when you upload a new website to the server, be sure to replace the default index.html file with your own index.html file. private. This is a special directory where you can keep any files you want. These files will not be accessible to Internet users. subdomains. When subdomains are created for a site, this directory keeps files and subdirectories related to these subdomains and their content. To transfer files to the server using Windows Explorer: 1. Open Windows Explorer: right-click the Start button and select the Explore menu item. 2. In the Windows Explorer's address bar, type ftp://your-domain.com, where your-domain.com should be replaced with your site's Internet address. 3. In the Log On As dialog window that opens, type the username and password. 4. Click Log On. 5. Drag the files and directories that should be accessible through HTTP protocol to the httpdocs directory, and files/directories that should be transferred securely over SSL protocol to the httpsdocs directory. 6. Place your CGI scripts into the cgi-bin directory. 7. Close your FTP session by closing Windows Explorer.

98 98 Establishing Online Presence Now you can preview your site in a browser: in your Panel, click the Websites & Domains tab, and then click Web Site Preview (in the Advanced Operations group). The site will become available to other visitors in two days, after the information about it has spread across the Domain Name System. In this section: Using Additional FTP Accounts (Windows Hosting)... 99

99 Establishing Online Presence 99 Using Additional FTP Accounts (Windows Hosting) If there are several users working on the same website, then you might want to create additional FTP accounts for these users. To create a new additional FTP account: 1. Click the Websites & Domains tab. 2. If you have more than one website hosted on the server, select the website you need: click the icon next to the website name, and in a pop-up menu that opens, select the website. 3. In the Advanced Operations group, click FTP Access. 4. On the Additional FTP Accounts tab, click Add New FTP Account. 5. Specify the FTP account name in the appropriate field. 6. Specify the Home directory by clicking and select the required directory. Alternatively, you can specify a path in the input field. An FTP home directory is a directory that opens when a user connects to the server over FTP. To an FTP user, this directory appears as the top level directory. 7. Type the password into the New password and Confirm password boxes. 8. By default, the Hard disk quota is set to Unlimited. To limit the amount of disk space that is allocated to this FTP account user, clear the Unlimited check box and type the amount of disk space in megabytes into the Hard disk quota box. 9. If the FTP account users should be able to view the content of the home directory and download files from it, select the Read permission check box. 10. If the FTP account users should be able to create, view, rename and delete directories in the home directory, select the Write permission check box. If you do not grant any permissions, the connection to the FTP account will be made, but the contents of the home directory will not be shown. 11. Click OK. A new FTP account will be added. To change the properties of an additional FTP account: 1. Go to the Websites & Domains tab > domain name > FTP Access. 2. On the Additional FTP Accounts tab click the required FTP account name in the list. 3. Specify the changes as required and click OK.

100 100 Establishing Online Presence To remove an additional FTP account: 1. Go to the Websites & Domains tab > domain name > FTP Access. 2. On the Additional FTP Accounts tab, select the check box corresponding to the FTP account name you want to remove and click Remove. 3. Confirm removal and click OK. The FTP account will be removed.

101 Establishing Online Presence 101 Publishing Sites Through the Panel's File Manager To upload files through the Panel's File Manager: 1. Log in to the Panel. 2. Click the Websites & Domains tab. 3. If you have more than one website hosted on the server, select the website you need: click the icon next to the website name, and in a pop-up menu that opens, select the website. 4. Click File Manager. 5. Create and upload files and directories. Place the files and directories that should be accessible via HTTP protocol to the httpdocs directory, and files/directories that should be transferred securely over SSL protocol to the httpsdocs directory. Place your CGI scripts into the cgi-bin directory. To create a new directory within your current location, click the Add New Directory button. To create new files in the required directory, click Add New File, in the File creation section specify the file name, select the Use html template check box, if you want file manager to insert some basic html tags to the new file, and click OK. A page will open allowing you to enter the content or html-formatted source of a new file. After you are done, click OK. To upload a file from the local machine, click Add New File, specify the path to its location in the File source box (or use the Browse button to locate the file), and click OK. When you upload Web content through File Manager or FTP, your Panel automatically sets the appropriate access permissions for files and directories. On Linux-based servers, the permissions are represented as three sets of symbols, for example, 'rwx rwx r--'. The first set tells what the owner of the file or directory can do with it; the second tells what the user group, the file or directory belongs to, can do with the file or directory; the third set indicates what other users (the rest of the world, i.e. Internet users visiting a site) can do with the file or directory. R means the permission to read the file or directory, W means the permission to write to the file or directory, and X means the permission to execute the file or look inside the directory. To modify permissions for a file or directory, in the Permissions column, click the respective hyperlink representing the set of permissions. Modify the permissions as desired and click OK. To edit the source code of a file, click. To edit the Web page in the built-in visual editor (available only to users of Microsoft Internet Explorer), click. When editing an HTML file, the Panel opens internal WYSIWYG editor by default. If you want to edit the source code of the HTML file, click HTML. To return back to WYSIWYG mode, click Design.

102 102 Establishing Online Presence To view the file, click. To rename a file or directory, click. Type in a new name and click OK. To copy or move a file or directory to another location, select the required file or directory using the appropriate check box, and click Copy/Move. Specify the destination for the file or directory to be copied or renamed to, then click Copy to copy, or Move to move it. To update the file or directory creation date, click Change Timestamp. The time stamp will be updated with the current local time. To remove a file or directory, select the corresponding check box, and click Remove. Confirm removal and click OK.

103 Establishing Online Presence 103 Previewing a Site Once you published a site on the server, you may want to make sure that it works properly in the actual hosting environment. You can preview the site through your favorite Web browser, even if the information on the domain name has not yet propagated in the Domain Name System (DNS). Note that Adobe Flash, CGI scripts, and some other scripts and features added through Site Editor will not work properly during preview. Also, site preview does not work for websites and Web pages that include absolute paths to other files (like <a href=" To preview a site: 1. Click the Websites & Domains tab. 2. If you have more than one website hosted on the server, select the website you need: click the icon next to the website name, and in a pop-up menu that opens, select the website. 3. Click Website Preview (in the Advanced Operations group). If you want to be able to access your site by its Internet address before the information about it has spread in the Domain Name System, do the following: 1. In your local computer's operating system, locate the hosts file, and open it with a text editor. On Windows XP, Windows Vista, and Windows 7, this file is located at \WINDOWS\system32\drivers\etc\hosts. On Linux, this file is located at /etc/hosts. On Mac OS X, this file is located at /private/etc/hosts. 2. In the end of the hosts file, on a new line, type the IP address associated with your site, press Space bar to insert one white space, and then type the domain name associated with the site. For example: example.com 3. Save the file. Now, you can open your Web browser, type your domain name, and press Enter. Your site should open in the browser. Installing Applications Instead of manually creating files, writing the code, and developing design for your website, you can install Web applications that will accomplish most of these tasks for you. You can download and install these applications using the following links in your Panel:

104 104 Establishing Online Presence Application Marketplace (located under the Applications & Scripts tab). This provides links for purchasing the best applications in their class from Parallels partners. These applications include programs for installation on servers and desktop computers, like Keepit data backup, Pinnacle Cart e-commerce, and others. Application Catalog (located under the Applications & Scripts tab). This provides links for downloading paid and free applications, such as, for example, WordPress, Drupal, Mambo, Joomla, Avactis, and phpbb. You can also obtain third-party applications packaged in accordance with the APS standard, and upload them to the server for further installation. APS packaging standard was developed specifically to achieve the following: Help software vendors to reach wider audiences and create new sales or distribution channels. Help service providers and users to enjoy easy and quick installation of applications. For more information about the APS standard, refer to To install an application: 1. Click the Applications & Scripts tab. 2. Do any of the following: To install one of the applications available for purchasing, in the left frame, click Application Marketplace. Locate the entry corresponding to the application you want to purchase. Click Buy now. The Marketplace will open in a new browser window or tab. Select the licensing options, specify your contact and billing information, and confirm the purchase. Your software activation code will be sent to your address. When you receive it, save it in a text file on your computer: You will need to enter this activation code during or after installation of the application. Return to the Panel and click the Install button. Note: If there is no Install button, but only the Download button, then it means that this application is not packaged in the APS format or is not intended for installation on the server. Click Download to download the application package to your computer, and follow installation instructions provided by the application manufacturer. To install one of the applications from the Applications catalog, in the left frame, click Applications Catalog. In the right frame, use the links to browse within the application categories and groups, or use the search function to find the application you want to install. Click the corresponding Install button. To install an application from a local disk, in the left frame, click Install from local disk. Browse for the application package in the ZIP format, select it, and then click Install. 3. If prompted, read the license agreement for the application. If you accept the terms of the license agreement, select the I accept the terms of the license agreement check box, and click Next >. 4. Specify the following installation settings:

105 Establishing Online Presence 105 Software license activation code. This information is required only for the paid applications. If you purchased a license key at Application Marketplace, and you were provided with the activation code, specify the activation code. If you obtained a license key from the application manufacturer, then select the Vendor license key option, and upload the license key to the server. Path to installation directory. Select the website where you want to install the application, and type the desired directory name, if you want to install it into a specific directory. Other settings that may be required by the application. To review or set these settings, click the Show All Settings link. 5. In the Administrative access group, select a user account, who will be assigned administrative rights to the application, or select the option Use administrative credentials not connected to any particular user, and type the application administrator's username and password. If you select an already existing user account, then the user will be able to log in to the application management interface by clicking an icon that will appear in the user's Panel (on the My Services tab), or by visiting the Internet address shown on this screen. If you set a custom username and password, then the user will be able to log in to the application management interface only by visiting the Internet address shown on this screen. 6. Click Install. The application will be installed and access for the application administrator will be granted. 7. If you want to set a custom application name and description that will show below the icon in the user's Panel, select an image for the icon, or remove the shortcut to the application from the user's Panel: click Customize shortcut, and make the necessary changes. Selecting the Hide shortcut check box removes the shortcut from the user's Panel. Note: The changes made under the Administrative access group will affect how the shortcut to the application will appear in the Panel of the user who was appointed as application administrator. The changes made under the Public access group will affect how the shortcut to the application will appear in Panels of all other users who were granted access to the application. 8. Click OK. 9. To allow access to the application to other users registered in the system, modify the role that is assigned to their accounts, or create a new user role and then assign it to the users: a. Click the Users tab in the top navigation area. b. Click the User Roles tab. c. Click Create User Role to create a new user role, or select an existing role from the list by clicking the role name.

106 106 Establishing Online Presence d. Under the Access to applications group, locate the application you need, and select the corresponding Granted option. e. Click OK. Now all users who are assigned this role will be able to access this application by clicking the corresponding shortcuts in their Panels, and specifying their user account names and passwords. f. If you decided to create a new role and assign it to the existing users who need access to the application, go to Users > User Accounts, click the user's name you need, select the newly created role in the User role menu, and click OK. To upload a new license key (or activation code) for a paid application: 1. Click the Applications & Scripts tab. 2. In the left frame, click Manage Installed Applications. 3. Click the application name. 4. Click the License Key icon. 5. If you purchased a license key at Application Marketplace, and you were provided with the activation code, specify the activation code. 6. If you obtained a license key from the application manufacturer, then select the Vendor license key option, and upload the license key to the server. 7. Click OK. To update or upgrade an application: 1. Click the Applications & Scripts tab. 2. In the left frame, click Manage Installed Applications. 3. Click Check for updates. If there are available updates, an Update available link will appear under the application name. 4. Click the Update available link, and review the changes or features available in the new version. 5. If you still want to update or upgrade to the new version, click Update Now. To review or change the application settings and application package properties: 1. Click the Applications & Scripts tab. 2. In the left frame, click Manage Installed Applications. 3. Click the application name.

107 Establishing Online Presence Do any of the following: To review or change the application settings, click the Settings icon. To view the information about the application package, click the About icon. To remove an application with all related data: 1. Click the Applications & Scripts tab. 2. In the left frame, click Manage Installed Applications. 3. Locate the application that you want to remove, and click the corresponding Uninstall link. 4. To confirm removal, click Delete. If you develop custom applications, publish them in the Application Catalog, and then install them on the server managed by Parallels Small Business Panel, you might need to refresh the server's applications cache to be able to see the latest changes you made to the application. After you install on the server an application from the Application Catalog, the application files are unpacked and stored for future use in a temporary directory on the server, the server's applications cache. If you make changes to the application code without increasing the application version number, and then upload the application to the Application Catalog, then, before installing again the application on the server, you need to go to the Settings tab and click the Clear Application Cache icon (in the Advanced Settings group). Deploying Databases If your website incorporates custom data processing applications or is designed to generate Web pages dynamically, you will likely need a database for storing and retrieving data. You can either create a new database for your site or import the data from your previously backed up MySQL, PostgreSQL, or Microsoft SQL database. Note that when you install an application from the Applications Catalog, all required databases and database user accounts are created automatically. To create a new database on a hosting account: 1. Click the Websites & Domains tab. 2. If you have more than one website hosted on the server, select the website you need: click the icon next to the website name, and in a pop-up menu that opens, select the website. 3. Click Databases. 4. Click Add New Database. 5. Enter a name for the database.

108 108 Establishing Online Presence We recommend that you choose a name that starts with a Latin alphabet symbol and comprises only alphanumeric and underscore symbols (up to 64 symbols). 6. Select the database type that you are going to use: MySQL, PostgreSQL or Microsoft SQL Server. Click OK. 7. To set up database administrator s credentials, click Add New Database User. 8. Type a user name and a password that will be used for accessing the contents of the database. 9. Click OK. To import an existing database: 1. Go to the Websites & Domains tab > domain name > Databases, and click Add New Database. 2. Enter a name for the database. We recommend that you choose a name that starts with a Latin alphabet symbol and comprises only alphanumeric and underscore symbols (up to 64 symbols). 3. Select the database type that you are going to use: MySQL, PostgreSQL, or Microsoft SQL Server. Click OK. 4. To set up database administrator s credentials, click Add New Database User. 5. Type a user name and a password that will be used for accessing the contents of the database. Click OK. 6. Click the DB WebAdmin icon in the Tools group. An interface to phpmyadmin, phppgadmin, or ASPEnterpriseManager database management tool will open in a separate browser window. The database management tools allow to operate database user accounts and execute SQL queries through the Web browser. If you have a MySQL database: a. Click Query window in the left frame, click the Import files tab, b. Select the text file that contains the data and click Go. c. Click the Insert data from a text file link. If you have a MS SQL database: a. Click the name of your database in the left frame b. Click Query (the magnifying glass button) c. Copy the text of your script into the text area and click Run Query. To manage your databases and their contents, use your favorite MySQL, PostgreSQL, or Microsoft SQL Server client or the Web based database management tool accessible from the Panel (the Websites & Domains tab > domain name > Databases > database name > DB WebAdmin).

109 Establishing Online Presence 109 If you collaborate with other people on managing a website and wish to give them access to the database, you should create separate user accounts for them. To create a database user account: 1. Go to the Websites & Domains tab > domain name > Databases > database name, and click Add New Database User. 2. Type a user name and a password that will be used for accessing the contents of the database. Click OK. To change a password for a database user: 1. Go to the Websites & Domains tab > domain name > Databases > database name > database user name. 2. Type a new password and click OK. To specify which user account credentials should be used by default for managing a database through the Webadmin tool: 1. Go to the Websites & Domains tab > domain name > Databases > database name. 2. Select a check box corresponding to the user account you need. 3. Click Default for DB WebAdmin. To remove a database user account: 1. Go to the Websites & Domains tab > domain name > Databases > database name. 2. Select a check box corresponding to the user account that you want to remove. 3. Click Remove, then confirm removing and click OK. To remove a database with its contents: 1. Go to the Websites & Domains tab > domain name > Databases. 2. Select a check box corresponding to the database that you want to remove. If the required check box appears grayed out, this means that this database is used by a Web application and you can remove it only by removing the respective application. 3. Click Remove. 4. Confirm removal and click OK.

110 110 Establishing Online Presence Turning Your Website Into an E- commerce Portal To turn your website into an e-commerce portal, you need to do the following: Make sure that IP address assigned to your site is not used by other websites hosted on the server (not assigned to them). To implement industry standard communication protection based on Secure Sockets Layer (SSL) technology, a dedicated IP address must be assigned to the website. Obtain and install an SSL certificate. Install Web applications that will add the e-commerce portal functions to the site. These applications may include shopping cart, order processing, supply chain management, and customer relationship management software. In this section: Obtaining and Installing an SSL Certificate Installing an E-commerce Application...114

111 Establishing Online Presence 111 Obtaining and Installing an SSL Certificate For every e-commerce website hosted on the server, you should purchase and install an authentic digital SSL certificate. SSL certificates are used for establishing secure communication channels on the Internet and for verifying website identity: When users visit your secure online store, they are notified that your website is really what it claims to be and that all sensitive data, such as credit card numbers, will be transferred over a secure channel. It is technically possible to use one SSL certificate for all your websites, but it is not recommended because while the encryption will be provided, visitors will get warning messages on attempt to connect to the secured site. You can select the default SSL certificate used by your websites by going to Settings > SSL Certificates, selecting the required certificate in the list and clicking Make Default for Websites. You can purchase an SSL certificate from a certification authority, such as Comodo, GeoTrust, Inc., or GoDaddy. To purchase an SSL certificate through MyPleskCom online store and secure a site: 1. Click the Settings tab. 2. Click SSL Certificates. A list of SSL certificates that you have in your repository will be displayed. 3. Click Add SSL Certificate. 4. Specify the certificate properties: Certificate name. This will help you identify this certificate in the repository. Encryption level. Choose the encryption level of your SSL certificate. We recommend that you choose a value more than 1024 bit. Specify your location and organization name. The values you enter should not exceed the length of 64 symbols. Specify the domain name for which you wish to purchase an SSL certificate. This should be a fully qualified domain name. Example: your-domain.com. Specify the website administrator's address. 5. Make sure that all the provided information is correct and accurate, as it will be used to generate your private key. 6. Click Buy SSL Certificate. Your private key and certificate signing request will be generated do not delete them. MyPlesk.com login page will open in a new browser window. 7. Register or log in to an existing MyPlesk.com account and you will be taken step by step through the certificate purchase procedure. 8. Choose the type of certificate that you wish to purchase.

112 112 Establishing Online Presence 9. Click Proceed to Buy and order the certificate. In the Approver dropdown box, please select the correct Approver . The approver is an address that can confirm that certificate for specific domain name was requested by an authorized person. 10. Once your certificate request is processed, you will be sent a confirmation . After you confirm, the SSL certificate will be sent to your When you receive your SSL certificate, save it on your local machine or network. 12. Return to the SSL Certificates repository (Settings tab > SSL Certificates). 13. Click Browse in the middle of the page and navigate to the location of the saved certificate. Select it, and then click Send File. This will upload and install the certificate against the corresponding private key. 14. Click the Settings tab, and then click IP Addresses (in the Advanced Settings group). 15. Click the IP address number which is allocated to the website that you want to secure with an SSL certificate. 16. From the SSL certificate menu, select the SSL certificate that you want to assign. 17. Click OK. To secure a site with an SSL certificate from other certificate authorities: 1. Click the Settings tab. 2. Click SSL Certificates. A list of SSL certificates that you have in your repository will be displayed. 3. Click Add SSL Certificate. 4. Specify the certificate properties: Certificate name. This will help you identify this certificate in the repository. Encryption level. Choose the encryption level of your SSL certificate. We recommend that you choose a value more than 1024 bit. Specify your location and organization name. The values you enter should not exceed the length of 64 symbols. Specify the domain name for which you wish to purchase an SSL certificate. This should be a fully qualified domain name. Example: your-domain.com. Specify the domain administrator's address. 5. Make sure that all the provided information is correct and accurate, as it will be used to generate your private key. 6. Click Request. Your private key and certificate signing request will be generated and stored in the repository.

113 Establishing Online Presence In the list of certificates, click the name of the certificate you need. A page showing the certificate properties opens. 8. Locate the CSR section on the page, and copy the text that starts with the line -----BEGIN CERTIFICATE REQUEST----- and ends with the line -----END CERTIFICATE REQUEST----- to the clipboard. 9. Visit the website of the certification authority from which you want to purchase an SSL certificate, and follow the links on their site to start a certificate ordering procedure. When you are prompted to specify CSR text, paste the data from the clipboard into the online form and click Continue. The certification authority will create an SSL certificate in accordance with the information you supplied. 10. When you receive your SSL certificate, save it on your local machine or network. 11. Return to the SSL Certificates repository (the Settings tab > SSL Certificates). 12. Click Browse in the middle of the page and navigate to the location of the saved certificate. Select it, and then click Send File. This will upload and install the certificate against the corresponding private key. 13. Click the Settings tab, and then click IP Addresses (in the Advanced Settings group). 14. Click the IP address number which is allocated to the website that you want to secure with an SSL certificate. 15. From the SSL certificate menu, select the SSL certificate that you want to assign. 16. Click OK.

114 114 Establishing Online Presence Installing an E-commerce Application You can install on a site one or several Web applications that will add the required services to the site. Let's install an online store application, such as, for example, Pinnacle Cart. To install Pinnacle Cart: 1. Click the Applications & Scripts tab. 2. In the left frame, click Application Marketplace. 3. Locate the entry corresponding to Pinnacle Cart and click Buy now. The Marketplace will open in a new browser window or tab. 4. Select the licensing options, specify your contact and billing information, and confirm the purchase. Your software activation code will be sent to your address. 5. When you receive the activation code, save it in a text file on your computer. You will need to enter this activation code during or after installation of the application. 6. Return to the Panel and click the Install button corresponding to Pinnacle Cart. Note: If there is no Install button, but only the Download button, then it means that this application is not yet available in the APS format. In such a case, click Download to save the application package to your computer, then return to the Panel (Applications & Scripts tab > Install from local disk). Browse for the application package in the ZIP format, select it, and then click Install. 7. Read the license agreement for the application. If you accept the terms of the license agreement, select the I accept the terms of the license agreement check box, and click Next. 8. Click the Show All Settings link and specify the following installation settings: Software license activation code. Path to installation directory. Select the website where you want to install the application, and type the desired directory name, if you want to install it into a specific directory. Application title or site name. This will be shown to site visitors in the title bar of their Web browsers. Administrator's username and password for access to the application. Select an existing user account to assign administrative rights to the application, or select the option Use administrative credentials not connected to any particular user, and type the application administrator's username and password.

115 Establishing Online Presence 115 If you select an already existing user account, then the user will be able to log in to the application management interface by clicking an icon that will appear in the user's Panel (on the My Services tab), or by visiting the Internet address shown on this screen. If you set a custom username and password, then the user will be able to log in to the application management interface only by visiting the Internet address shown on this screen. Database administrator's username and password. 9. Click Install. After installation is finished, you will be prompted to customize shortcuts to the application. 10. If you want to set a custom application name and description that will show below the icon in the user's Panel, select an image for the icon, or remove the shortcut to the application from the user's Panel: click Customize shortcut, and make the necessary changes. Selecting the Hide shortcut check box removes the shortcut from the user's Panel. Note: The changes made under the Administrative access group will affect how the shortcut to the application will appear in the Panel of the user who was appointed as application administrator. The changes made under the Public access group will affect how the shortcut to the application will appear in Panels of all other users who were granted access to the application. 11. Click OK. Now, you can send the link to the Pinnacle Cart administrative panel and administrator's username and password to the person who will administer the online store. Or, you can just notify that user about the new shortcuts to Pinnacle Cart available in the user's Panel, on the My Services tab. Setting Up Alternative Domain Names for a Site You can register several domain names with a registrar and then point them all to your website. Doing so can help you ensure that visitors who type your website's Internet address with errors will get to your site. For example, your website's domain name is example.com. Knowing that people occasionally swap adjacent letters when typing (like in exmaple.com, or exampel.com), or confuse top level domains (they may type example.net or example.org instead of example.com), you may want to register several variants of the site's primary domain name. Additional domain names are called domain aliases.

116 116 Establishing Online Presence To add a domain alias for a site: 1. Click the Websites & Domains tab. 2. If you have more than one website hosted on the server, select the website you need: click the icon next to the website name, and in a pop-up menu that opens, select the website. 3. Click Domain Aliases. 4. Click Add Domain Alias. 5. Type the desired domain alias name, for example alias.com. Domain aliases can comprise letters, digits and hyphens. Each part of the domain alias between dots should not be longer than 63 symbols. 6. Select the Synchronize DNS zone with the primary domain check box. The domain alias will use the same DNS zone resource records as in primary domain. With this setting, any subsequent changes in resource records of the primary domain's zone will be applied to the DNS zone of this domain alias. 7. Select the Mail check box. All sent to the addresses under the domain alias will be redirected to the addresses under your original domain name. Example: You have an address mail@yourdomain.com. You have set up an alias for your domain name, for example, alias.com. If you want to receive mail to your mailbox mail@yourdomain.com when it is sent to mail@alias.com, select the Mail check box. 8. Select the Web check box. Otherwise, the Web server will not serve the Web content to users coming to your site by typing the domain alias in their browsers. 9. If you use hosting services based on a Linux platform, and you have Java applications installed on your site that you want to make accessible through the domain alias, select the Java Web applications check box. 10. Click OK. To change the properties of an alias: 1. Go to the Websites & Domains tab > domain name > Domain Aliases. 2. Click the alias name you need. 3. Click Preferences. 4. Change the settings as required and click OK.

117 Establishing Online Presence 117 To modify resource records in the DNS zone of a domain alias: 1. Go to the Websites & Domains tab > domain name > Domain Aliases. 2. Click the alias name you need. 3. Click DNS. 4. Add, edit or remove the resource records as required: To add a resource record to the zone, click Add New Record. Specify the required values and click OK to write the values to the zone. To modify a resource record, under the Host column, click a hyperlink corresponding to the record you need. To remove a record, select a check box corresponding to the record you want to remove and click Remove. Note: For detailed information about the properties of DNS resource records, refer to the section Changing DNS Settings for Domains (on page 127). To remove an alias from a domain: 1. Go to the Websites & Domains tab > domain name > Domain Aliases. 2. Select a check box corresponding to the domain alias that you want to remove. 3. Click Remove. Confirm removal and click OK. Organizing Site Structure with Subdomains Subdomains are additional domain names that enable you to: Organize logically the structure of your site. Host additional websites or parts of a website on the same server without the need to pay for registration of additional domain names. An example of using subdomains: You have a website your-product.com dedicated to promoting and selling your product. For publishing information related to customer service and online order tracking, you can organize the subdomain "orders" so that your users will be able to access this information directly by visiting the domain name "orders.your-product.com". In this section: Setting Up Subdomains (Linux Hosting) Setting Up Subdomains (Windows Hosting)

118 118 Establishing Online Presence Setting Up Subdomains (Linux Hosting) To set up a subdomain: 1. Click the Websites & Domains tab. 2. If you have more than one website hosted on the server, select the website you need: click the icon next to the website name, and in a pop-up menu that opens, select the website. 3. Click Subdomains. 4. Click Create Subdomain. 5. Type the subdomain name as desired. This can be, for example, a topic of a site, organization department, or any other combination of letters, numbers and hyphens (up to 63 characters in length). The subdomain name must begin with an alphabet character. Subdomain names are case insensitive. 6. If this subdomain will require secure transactions, select the SSL support check box. Then, the SSL certificate installed under the parent domain will be used for encrypting transactions. By default, when you publish the site, you need to upload the Web content that should be accessible via secure connections to the httpsdocs directory, and the content that should be accessible via plain HTTP, to the httpdocs directory. For your convenience, you can choose to publish all content through a single location httpdocs directory, to do this, select the option Use a single directory for housing SSL and non-ssl content. 7. If this subdomain will hold a part of the website that is managed by the administrator of the main site, then leave the Use the FTP user account of the main domain option selected. If this subdomain will hold a separate website that will belong to or will be managed by another person, select the Create a separate FTP user account for this subdomain option, and specify the login name and password that will be used for accessing the Web space through FTP and publishing website content. 8. Specify the programming languages in which the website is developed. Otherwise, the website may not function properly. For example, if the website is written mainly in ASP and uses some applications written in PHP, select the ASP support and PHP support check boxes. 9. If you wish to limit the amount of disk space that can be occupied by Web content under this subdomain, type the desired value in megabytes into the Hard disk quota box. When the specified limit is exceeded, you will not be able to add files to the Web space, and editing existing files may corrupt them.

119 Establishing Online Presence To complete the setup, click Finish. It may take up to 48 hours for the information on new subdomain to spread in the Domain Name System and become available to the Internet users. To publish Web content to the subdomain s Web space, follow the instruction presented in the section Publishing a Site Through FTP (on page 96). To remove a subdomain with its Web content: 1. Go to the Websites & Domains tab > domain name > Subdomains. 2. Select a check box corresponding to the subdomain name that you want to remove, and click Remove. 3. Click Yes to confirm removal. The subdomain configuration and its Web content will be removed from the server.

120 120 Establishing Online Presence Setting Up Subdomains (Windows Hosting) To set up a subdomain: 1. Click the Websites & Domains tab. 2. If you have more than one website hosted on the server, select the website you need: click the icon next to the website name, and in a pop-up menu that opens, select the website. 3. Click Subdomains. 4. Click Create Subdomain. 5. Select the required Hosting type: Select Physical hosting to create a virtual host for the domain. Select Subdomain on subfolder to create a virtual subdomain. Subdomain on subfolder will use physical structure of the domain. The creation of a separate FTP user account will be not possible: the FTP user account of the domain will be used. 6. Click Next >>. 7. Type the subdomain name as required. This can be, for example, a topic of a site, organization department name, or any other combination of letters, numbers and hyphens (up to 63 characters in length). To add the WWW prefix, select the appropriate check box. The subdomain name must begin with an alphabet character. Subdomain names are case insensitive. 8. If you are creating subdomain on subfolder, specify the physical location for the subdomain files in the Site home directory field: Clear the Create physical directory for subdomain check box and specify the existing directory to the right of httpdocs field. You can click to browse for the required directory, select it and click OK. Leave the Create physical directory for subdomain check box selected to create a corresponding physical directory with the same name as the subdomain. 9. If you are creating subdomain with physical hosting, specify the FTP user account for it: If this subdomain will hold a part of your own website that you manage on your own, leave the Use the FTP user account of the main domain option selected. If this subdomain will hold a separate website that will belong to or will be managed by another person, select the Create a separate user account for this subdomain option, and specify the login name and password that will be used for accessing the Web space through FTP and publishing website content. Specify the hard disk quota in the appropriate field in megabytes or leave the Unlimited check box selected. When the specified limit is exceeded, you will not be able to add files to the Web space, and editing existing files may corrupt them.

121 Establishing Online Presence If you want to enable Microsoft FrontPage support, select the appropriate check box. Enable or disable Remote Microsoft FrontPage authoring by selecting the appropriate option. 11. Specify the supported programming languages in the Services group. Use Select All or Clear All to select or clear all of the available languages. If the ASP.NET support is disabled on the domain for which you are creating subdomain, it is also unavailable on Subdomain on subfolder. In case the ASP.NET support is enabled on the domain, the ASP.NET is available for subdomain created on a subfolder. 12. To allow you to view the information on the number of people visited the site and the pages of the site they viewed, select a module in Web statistics drop-down menu and select the accessible via password protected directory /plesk-stat/webstat check box, if required. This will install the selected statistical software module, which will generate reports and place them into the password protected directory. The subdomain administrator will then be able to access Web statistics at the URL: using their FTP account login and password. Note: If subdomain administrator changes the FTP credentials, Web statistics access credentials do not change. The original login and password specified upon the subdomain creation should always be used for accessing password-protected Web statistics directory. 13. Select the Additional write/modify permissions option if this subdomain's Web applications will use a file-based database (like Jet) located in the root of httpdocs or httpsdocs folders. Please note that selecting this option will seriously compromise the website security. 14. To complete the setup, click Finish. It may take up to 48 hours for the information on new subdomain to spread in the Domain Name System and become available to the Internet users. To remove a subdomain with its Web content: 1. Go to the Websites & Domains tab > domain name > Subdomains. 2. Select a check box corresponding to the subdomain name that you want to remove, and click Remove. 3. Click Yes to confirm removal. The subdomain configuration and its Web content will be removed from the server.

122 122 Establishing Online Presence Setting File and Directory Access Permissions (Linux Hosting) When you upload files and directories to the server, the Panel automatically applies the appropriate access permissions to ensure the server's security. If some scripts on your sites do not work properly, this might be due to the incorrectly defined access permissions. You can review the access permissions and correct them as required. To review or change the permissions set for files and directories: 1. Go to the Websites & Domains tab > domain name > File Manager. The permissions are represented as three sets of symbols, for example, 'rwx rwx r-- '. The first set tells what the owner of the file or directory can do with it; the second tells what the user group to which the file or directory belongs, can do with the file or directory; the third set indicates what other users (the rest of the world, that is, Internet users visiting a site) can do with the file or directory. R means the permission to read (view) the file or directory, W means the permission to write (modify) to the file or directory, and X means the permission to execute the file or look inside the directory. 2. To modify permissions for a file or directory, in the Permissions column, click the respective hyperlink representing the set of permissions. 3. Modify the permissions as desired and click OK.

123 Establishing Online Presence 123 Setting File and Directory Access Permissions (Windows Hosting) When you upload files and directories to the server, the Panel automatically applies the appropriate access permissions to ensure the server's security. If some scripts on your sites do not work properly, this might be due to the incorrectly defined access permissions. You can review the access permissions and correct them as required. The Panel allows setting up file and folder access permissions, including defining special permissions and permissions inheritance, similarly to the way it is presented in Windows interface. Note: For security reasons, permissions for Administrators, SYSTEM and Parallels Panel Domain Administrator cannot be changed or removed. In this section: Setting and Changing Access Permissions for Groups and Users Removing Access Permissions from Groups and Users Setting Up Access Permissions Inheritance for Files and Folders Setting, Changing and Removing Special Access Permissions

124 124 Establishing Online Presence Setting and Changing Access Permissions for Groups and Users To set or change access permissions for a group or user: 1. Go to the Websites & Domains tab > domain name > File Manager. 2. Click an icon corresponding to the required file or folder. To change or remove permissions from a group or user, click the required name in the Group or user names list. To set permissions for a group or user, which is not in the Group or user names list, select the required user/group name from the drop-down box located above the list and click : the user/group appears in the list. Select it. 3. To allow or deny permissions to a selected group/user, select the Allow or Deny check boxes corresponding to permissions listed under Permissions for [user/group name]. Note: If check boxes in Allow and/or Deny columns are shaded, it means that the corresponding permissions are inherited from a parent folder. To deny the permission, which are inherited from a parent object as allowed, select the required check boxes under Deny. This will override inherited permissions for this file/folder. To allow the permission, which are inherited from a parent object as denied, clear the Allow inheritable permissions from the parent to propagate to this object and all child objects. Include these with entries explicitly defined here check box: this removes the inherited permissions. Then select the required check boxes under Allow and Deny. 4. Click OK.

125 Establishing Online Presence 125 Removing Access Permissions from Groups and Users To remove access permissions from a group or user: 1. Go to the Websites & Domains tab > domain name > File Manager. 2. Click an icon corresponding to the required file or folder. 3. Select the required name in the Group or user names list and click next to it. Note: The icons appear unavailable for entries with permissions inherited from a parent object. 4. Select the required entry. 5. Clear the Allow inheritable permissions from the parent to propagate to this object and all child objects. Include these with entries explicitly defined here check box. 6. Select the entry again and click. 7. Click OK. Setting Up Access Permissions Inheritance for Files and Folders To set up access permissions inheritance for files and folders: 1. Go to the Websites & Domains tab > domain name > File Manager. 2. Click an icon corresponding to the required file or folder. 3. To make the file/folder inherit permissions from a parent folder (if it does not), select the Allow inheritable permissions from the parent to propagate to this object and all child objects. Include these with entries explicitly defined here check box. 4. To make the files and folders, which are contained in this folder, inherit the folder permissions defined here, select the Replace permission entries on all child objects with entries shown here that apply to child objects check box. 5. Click OK.

126 126 Establishing Online Presence Setting, Changing and Removing Special Access Permissions You can also set, change and remove special permissions including advanced management of folder permissions inheritance. In Advanced permissions management mode, several permission entries can be associated with a single group or user, each containing different set of permissions. Also, the list of permissions in Advanced mode is more detailed and gives more opportunities for fine-tuning file/folder permissions. It contains permissions that cannot be seen in Microsoft Windows interface, but present combinations of native Microsoft Windows permissions. They are Read Control, Write Control, and Execute Control. To set, change or remove file/folder special permissions: 1. Go to the Websites & Domains tab > domain name > File Manager. 2. Click an icon corresponding to the required file or folder. 3. Click Advanced. To create a permission entry for a group or user, select the required name from the Group or user names list and click. To set or change file/folder permissions for a group or user, select the required name from the Group or user names list, select the required Allow and Deny check boxes corresponding to permissions listed under Permissions for [group/user name]. To remove a permission entry for a group or user, select the required name from the Group or user names list and click. To make child objects of a folder inherit its permissions defined under Permissions for [group/user name], select the Replace permission entries on all child objects with entries shown here that apply to child objects check box, and select check boxes in the Apply to list which correspond to objects you want to inherit the permissions. 4. Click OK.

127 Establishing Online Presence 127 Changing DNS Settings for Domains For each new domain name, the Panel automatically creates DNS zone in accordance with the configuration preset you define. The domain names should work fine with the automatic configuration, however if you need to perform custom modifications in the domain name zone, you can do that through your Panel. For introductory information about Domain Name System, DNS zones and resource records, refer to the section Configuring DNS Service (on page 27). To view the resource records in a DNS zone of a domain: Go to the Websites & Domains tab > domain name > DNS. A screen will show all resource records for a given domain. To add a new resource record to the zone: 1. Go to the Websites & Domains tab > domain name > DNS. 2. Click Add Record. 3. Select a resource record type, and specify the appropriate data: For an NS record, which specifies the domain name of a name server that is responsible for a DNS zone of a domain, you need to specify the domain name (or a subdomain), and then the corresponding name server's domain name. If you are defining an NS record for your main domain, then you should leave the domain name field empty. If you are defining a name server for a subdomain, then type the subdomain into the domain name field. After that, type the appropriate name server's domain name into the name server field. For example: ns1.mynameserver.com. For an A record, which associates IP addresses with domain names, you need to specify the domain name and IP address. If you are simply defining an A record for your main domain, then you should leave the domain name field empty. If you are defining an A record for a name server, then type ns1 or ns2 into the domain name field. Then specify the appropriate IP address with which to associate the domain name. For a CNAME record, which specifies which subdomains (or domain aliases that look like subdomains, for example, www) should be associated in the Domain Name System with the main domain address, you need to type the subdomain name or www alias, and then, the main domain name. For an MX record, which specifies the host name of the preferred mail server for the given domain, you need to specify the mail domain (or subdomain), the domain name of the mail exchange server responsible for receiving , and the server's priority. For the main domain, you would simply leave the available field blank. Then type the domain name of your mail server. If you are running a remote mail server named 'mail.myhostname.com', then simply type 'mail.myhostname.com' into the Mail exchange server field. After that, specify its priority: 0 is the highest and 50 is the lowest.

128 128 Establishing Online Presence For a PTR record, which is required for reverse DNS lookup (an IP address is translated to domain name), you need to enter the IP address/mask, and then type the appropriate domain name for this IP address to be translated to. For a TXT record, which is used for specifying arbitrary human-readable text, you can type an arbitrary text string, or an SPF record. For an SRV record, which is used for specifying location of services other than mail, you will need to enter the service name, protocol name, port number, and target host. Service and protocol names should start with the underscore symbol. You can also specify the priority of the target host, and relative weight (for records with the same priority) in the appropriate fields. 4. Click OK, and then click Update. To modify the properties of a resource record: 1. Go to the Websites & Domains tab > domain name > DNS. 2. Click the hyperlink in the Host column corresponding to the resource record you want to modify. 3. Modify the record as required, click OK, and then click Update. In addition to the resource records described above, there is also a Start of Authority record. This record indicates that this DNS name server is responsible for the domain's DNS zone. It also contains settings that affect propagation of information about the DNS zone in the Domain Name System. To modify the entries in the Start of Authority (SOA) record for a domain: 1. Go to the Websites & Domains tab > domain name > DNS. 2. Click SOA Record. 3. Specify the desired values: TTL. This is the amount of time that other DNS servers should store the record in a cache. The Panel sets the default value of one day. Refresh. This is how often the secondary name servers check with the primary name server to see if any changes have been made to the domain's zone file. The Panel sets the default value of three hours. Retry. This is the time a secondary server waits before retrying a failed zone transfer. This time is typically less than the refresh interval. The Panel sets the default value of one hour. Expire. This is the time before a secondary server stops responding to queries, after a lapsed refresh interval where the zone was not refreshed or updated. The Panel sets the default value of one week. Minimum. This is the time a secondary server should cache a negative response. The Panel sets the default value of three hours. 4. Click OK, and then click Update.

129 Establishing Online Presence 129 Usage of serial number format recommended by IETF and RIPE is mandatory for many domains registered in some high-level DNS zones, mostly European ones. If your domain is registered in one of these zones and your registrar refuses your SOA serial number, using serial number format recommended by IETF and RIPE should resolve this issue. The Panel-managed servers use UNIX timestamp syntax for configuring DNS zones. UNIX timestamp is the number of seconds since January 1, 1970 (Unix Epoch). The 32-bit timestamp will overflow by July 8, RIPE recommends using YYYYMMDDNN format, where YYYY is year (four digits), MM is month (two digits), DD is day of month (two digits) and NN is version per day (two digits). The YYYYMMDDNN format will not overflow until the year To change the Start of Authority (SOA) serial number format to YYYYMMDDNN for a domain: 1. Go to the Websites & Domains tab > domain name > DNS. 2. Click SOA Record. 3. Select the Use serial number format recommended by IETF and RIPE check box. Note: See the sample of SOA serial number generated with the selected format. If the resulting number is less than the current zone number, the modification may cause temporary malfunction of DNS for this domain. Zone updates may be invisible to Internet users for some time. 4. Click OK, and then click Update. To remove a resource record from the zone: 1. Go to the Websites & Domains tab > domain name > DNS. 2. Select a check box corresponding to the record you want to remove. 3. Click Remove. 4. Confirm removal, click OK, and then click Update. To restore the original zone configuration in accordance with the default DNS template settings used on the server: 1. Go to the Websites & Domains tab > domain name > DNS. 2. Click Restore Defaults. 3. In the IP address drop-down box, select the IP address to be used for restoring the zone. 4. Specify whether a www alias is required for the domain. 5. Select the Confirm the restoration of the DNS zone check box, and click OK. The zone configuration will be recreated.

130 130 Establishing Online Presence To restore the default Start of Authority (SOA) serial number format (UNIX timestamp) for a domain: 1. Go to the Websites & Domains tab > domain name > DNS. 2. Click SOA Record. 3. Clear the Use serial number format recommended by IETF and RIPE check box. Note: See the sample of SOA serial number generated with the selected format. If the resulting number is less, than the current zone number, the modification may cause temporary malfunction of DNS for this domain. Zone updates may be invisible to Internet users for some time. 4. Click OK.

131 Establishing Online Presence 131 Customizing Web Server Error Messages When visitors coming to your site request pages that the Web server cannot find or display for some reason, the Web server generates and displays a standard HTML page with an error message. The standard error messages may inform of problems, but they do not usually say how to resolve them or how to get the lost visitor on his way, and they also look dull. You may want to create your own error pages and use them for your websites. The following error pages are customized most often: 400 Bad File Request. Usually means the syntax used in the URL is incorrect (for example, uppercase letter should be lowercase letter; wrong punctuation marks). 401 Unauthorized. Server is looking for some encryption key from the client and is not getting it. Also, wrong password may have been entered. 403 Forbidden/Access denied. Similar to 401; a special permission is needed to access the site - a password and/or username if it is a registration issue. 404 Not Found. Server cannot find the requested file. File has either been moved or deleted, or the wrong URL or document name was entered. This is the most common error. 500 Internal Server Error. Could not retrieve the HTML document because of server configuration problems. To configure the Web server on a Linux-based system to show your custom error pages: 1. Switch on support for custom error documents through the Panel: Go to the Websites & Domains tab > domain name > Web Hosting Settings. Select the Custom error documents check box and click OK. 2. Connect over FTP to the hosting server, and go to the error_docs directory. 3. Edit or replace the respective files. Be sure to preserve the correct file names: 400 Bad File Request - bad_request.html 401 Unauthorized - unauthorized.html 403 Forbidden/Access denied - forbidden.html 404 Not Found - not_found.html 500 Internal Server Error - internal_server_error.html

132 132 Establishing Online Presence To configure the Web server on a Windows-based system to show your custom error pages: 1. Switch on support for custom error documents through the Panel: Go to the Websites & Domains tab > domain name > Web Hosting Settings. Select the Custom error documents check box and click OK. 2. Click Web Directories, and then click the Error Documents tab. 3. Click the required error document in the list. To use the default document provided by the Web server for this error page, select Default in the Type menu. To use a custom HTML document already located in the error_docs directory on a domain, select File in the Type menu and specify the file name in the Location field. To use a custom HTML document located in directory other than error_docs on a domain, select URL in the Type menu and enter the path to your document in the Location field. The path should be relative to the virtual host root (that is, <vhosts>\<domain>\httpdocs). For example, you have created a file forbidden_403_1.html and saved it in the my_errors directory located in the httpdocs. To use this file as an error document, the following path should be entered in the Location filed: /my_errors/forbidden_403_1.html. Note: You can use either FTP client or File Manager to upload your custom error document to the server. By default, all error documents are stored in the /vhosts/your-domain.com/error_docs/ directory (located in C:\InetPub by default).

133 Establishing Online Presence 133 Suspending and Unsuspending Websites To suspend a website: 1. Click the Websites & Domains tab. 2. If you have more than one web site hosted on the server, select the website you need: Click the icon next to the website's domain name, and in a pop-up menu that opens, select the website. 3. Click Suspend Website (in the Advanced Operations group). The website will become inaccessible to the Internet users, and addresses under this site will no longer accept . To unsuspend a website: 1. Go to the Websites & Domains tab > domain name. 2. Click Unsuspend Website (in the Advanced Operations group).

134 134 Establishing Online Presence Removing Websites To remove a domain (website) with its Web content: 1. Click the Websites & Domains tab. 2. If you have more than one website hosted on the server, select the website you need: click the icon next to the website name, and in a pop-up menu that opens, select the website. 3. Click Remove Website (in the Advanced Operations group). 4. To confirm removal, click Yes. To remove a subdomain with its Web content: 1. Go to the Websites & Domains tab > domain name > Subdomains. 2. Select the check box corresponding to the subdomain you want to remove. 3. Click Remove, confirm removal and click OK.

135 C H A P T E R 7 Managing User Accounts An information system based on Parallels Small Business Panel can serve as an Intranet portal for company's employees: 1. You set up an internal website for users within your organization (as described in the section Setting Up a Website). 2. Install collaboration, project management, knowledge base, and other tools (as described in the section Installing Applications). 3. Set up user roles that you will assign to users in order to authorize them to access applications and services on the intranet. User roles correspond to the work-related activities performed by employees. When you create a new user account, you are prompted to select the required user role. There are three predefined user roles called Administrator, Manager, and Employee. You can review and modify the Manager and Employee roles to suit your needs, or you can create your own custom roles. 4. Create user accounts and assign roles to them. 5. Create addresses for users. After all these steps are completed, users will be able to log in to their accounts in the Panel and use shortcuts in their Panels to access their mailboxes and work with applications. To create a user role: 1. Go to the Users tab > User Roles tab > Create User Role. 2. Specify the following: User role name. Use a descriptive name that corresponds to a job title. Privileges. Grant the required permissions for operations to the user: Manage user accounts. Add, modify, and remove user accounts. Manage user roles. Add, modify, and remove user roles. Manage websites and domains. Set up, modify, remove DNS domains and subdomains, host websites and change Web hosting settings. Manage server settings. Set up statistics calculation preferences, change host name and system time. Install and manage applications. View and install applications from the Application Catalog, local disk, or Application Marketplace. Manage services. Create, modify, delete accounts and mailing lists.

136 136 Managing User Accounts Manage files. Manage files and folders located on the server. Update personal information. Access to applications. Select the applications that the user should be able to access and use. All Web applications installed on the server are listed in this area. For more information about installing applications and providing access to users, refer to the section Installing Applications (on page 103). 3. Click OK. To modify user role properties: 1. Go to the Users tab > User Roles tab. 2. Click the role name you want to change. 3. Change the role properties as required and click OK. To remove a user role: 1. Go to the Users tab > User Roles tab. 2. Select a check box corresponding to the role you want to remove and click Remove. Note that it is impossible to remove the Administrator role and other roles that are assigned to one or more users. 3. Click Yes to confirm the removal. To create a user account: 1. Go to the Users tab > Create User Account. 2. Specify the following: Contact name. address. To create a new address for the user, select the option Create address on this server, type the desired left part of the address which goes before sign, and select the domain name under which the address should be created. To associate with this user account an external address (not served by mail server of your information system), select the option Use an external e- mail address, and specify an existing external address. User role. Username and password for access to the intranet and other services. 3. Leave the User is active check box selected. Otherwise, the user will not be able to access and use applications within your information system. 4. Click OK.

137 Managing User Accounts Now, if you want to add contact information for the user, click the user's name in the list, and then click the Contact Details tab, and specify the user's contact information. 6. Click OK. Now you can notify the user about creation of his or her account and ability to access the information system. Provide the user with the address to open in his or her browser, the username and the password that you specified in the account properties. To change user account properties: 1. Click the Users tab. 2. Click the user's name you need. 3. Make the required changes and click OK. To deactivate or activate a user account: 1. Click the Users tab. 2. Click the user's name you need. 3. Do any of the following: To deactivate a user account, clear the User is active check box. The user will no longer be able to log in to the Panel and access applications. To activate a user account, select the User is active check box. 4. Click OK. To remove a user account: 1. Click the Users tab. 2. Select a check box corresponding to the user account you want to remove, and click Remove. Note that it is impossible to remove the administrator's account. 3. Click Yes to confirm the removal.

138 C H A P T E R 8 Setting Up Addresses You can set up and use the following types of services: Personal addresses like firstname.lastname@domain.com, which are associated with user accounts. Public addresses intended for general inquiries, like info@domain.com or feedback@domain.com, which are not directly associated with any user accounts. You set up such an address and then provide the account username and password to the responsible persons. Mailing lists: addresses to which a number of users are subscribed. Mailing lists are useful for distributing news, promotions, or setting up group discussions. aliases: additional addresses that are associated with a user's primary (or main) address. aliases can be used as temporary disposable addresses that can be published on the Internet. When spam starts coming to an address that was set up as an alias, you can remove that alias and create another one. forwarding: for each account, you can set up forwarding service that will send copies of all incoming messages to another address. Automatic response: for each account, you can switch on automatic response service, which will send a predefined message in reply to any incoming message. This is useful for sending "out of office" or "on vacation" notices when you are away. To set up a personal account for a user: 1. To set up an address for a new user, whose account has not yet been created in the system: a. Click the Users tab. b. Click Create User Account. c. Specify the user's name, the desired address (use the option Create address on this server), and a password. d. Select a user role that corresponds to the user's job position, for example employee. For more information about user accounts and user roles, refer to the chapter Managing User Accounts (on page 135). e. Leave the User is active check box selected. Otherwise, the user will not be able to use any services available on the intranet, including . f. Click OK. 2. To set up an address for an existing user account:

139 Setting Up Addresses 139 a. Click the Mail tab. b. On the Addresses tab, click Create Address. c. Type the left part of the address before sign, and select the domain name under which the address will be created. d. In the Assigned to menu, select the user's name. The user's password that you specified during creation of the user's account will be used for access to the mail account; therefore, you do not need to specify a password on this screen. If you are creating an address for the server administrator, then select admin from the menu. e. Click OK. To set up a public address which is not associated with any user account: 1. Click the Mail tab. 2. On the Addresses tab, click Create Address. 3. Type the left part of the address before sign, and select the domain name under which the address will be created. 4. In the Assigned to menu, select the Nobody value. 5. Specify a password consisting of five or more Latin characters. 6. Click OK. Now you can notify the responsible person about creation of this address and provide the user with the username and password. To remove an address: 1. Click the Mail tab. 2. Select a check box corresponding to the address you want to remove and click Remove. 3. Confirm removal and click OK. To add or remove additional addresses ( aliases) for a user: 1. Go to the Mail tab > address > Aliases tab. 2. Do any of the following: To add an address, click Add alias, type it into the aliases box, and click OK. To remove an address, click the Remove link to the right of the address you want to remove.

140 140 Setting Up Addresses To set up forwarding for an address: 1. Go to the Mail tab > address > Forwarding tab. 2. Do any of the following: To switch on mail forwarding, select the Activate forwarding check box, type an e- mail address to which will be forwarded, and click OK. To switch off mail forwarding, clear the Activate forwarding check box, and click OK. To set up automatic reply for an address: 1. Go to the Mail tab > address > Auto-Reply tab. 2. Do any of the following: To switch on automatic reply, select the Activate auto-reply check box, type the message subject and text, and click OK. To switch off automatic reply, clear the Activate auto-reply check box, and click OK. In this chapter: Accessing Mailboxes Setting Up Mailing Lists

141 Setting Up Addresses 141 Accessing Mailboxes There are two ways to access a mailbox for sending and receiving messages: Set up and use an client program on a user's computer. Use a Web browser to connect to the webmail interface. Webmail interface is provided by Horde IMP Webmail software, which is installed by default. You can either use the default Horde IMP Webmail, or install Atmail Webmail Lite software. To access webmail, do any of the following: In a Web browser, visit the URL webmail.example.com, where example.com is the Internet address of your website. When prompted, specify your full address as the username (for example, mail@example.com), and specify the password that you use for logging in to the Panel. When logged in to the Panel, click the Mail tab, and in the list of addresses, click an icon corresponding to the address you need. Note: If Atmail webmail is used on the server, be sure to notify your users that they need to switch off banner removal software (such as Anti-banner feature in Kaspersky Internet Security) and pop-up windows blocking software that may be running on their computers. Otherwise, they might be unable to use Atmail webmail. In this section: Setting Up Microsoft Office Outlook Setting Up Microsoft Outlook Express Setting Up Mozilla Thunderbird Setting Up Apple Mail

142 142 Setting Up Addresses Setting Up Microsoft Office Outlook 2007 To set up Microsoft Office Outlook 2007: 1. Open Microsoft Office Outlook. 2. Go to Tools > Account Settings. 3. On the tab, click New. 4. Leave the option Microsoft Exchange, POP3, IMAP, or HTTP selected. Click Next.

143 Setting Up Addresses Select the check box Manually configure server settings or additional server types. Click Next. 6. Select the Internet option and click Next.

144 144 Setting Up Addresses 7. Specify the following: Your name. Your address. Account type. If you want to keep copies of messages on the server, select the IMAP option. If you do not want to keep any messages on the server, select the POP3 option. Selecting IMAP will also allow you to train the SpamAssassin spam filter on messages you receive, if SpamAssassin is enabled on the server. Incoming mail server. Type your domain name. For example, example.com. Outgoing mail server. Type your domain name. For example, example.com. Username for logging in to the mailbox. Specify your full address. Password for logging in to the mailbox. Most likely, this password coincides with the password you use for logging in to the Panel. 8. Click Next. 9. Click Finish.

145 Setting Up Addresses 145 Setting Up Microsoft Outlook Express The instructions provided in this section were verified against Microsoft Outlook Express 6. They might not work with earlier or later versions of Microsoft Outlook Express. To set up Microsoft Outlook Express: 1. Open Microsoft Outlook Express. 2. Go to Tools > Accounts. 3. Click the Add button and select the Mail item. 4. Enter your name as you want it to appear in any messages you send, and click Next.

146 146 Setting Up Addresses 5. Type your address, and click Next.

147 Setting Up Addresses Specify the following settings: Protocol of your incoming mail server. If you want to keep copies of messages on the server, select the IMAP option. If you do not want to keep any messages on the server, select the POP3 option. Selecting IMAP will also allow you to train the SpamAssassin spam filter on e- mail messages you receive, if SpamAssassin is enabled on the server. Incoming mail server. Specify your website's Internet address. Outgoing mail server. Specify your website's Internet address.

148 148 Setting Up Addresses 7. Click Next. 8. Specify the following: Your account name. Type your address in the Account name box. Your password. Most likely, this password coincides with the password you use for logging in to the Panel. Remember password check box. Leave it selected if you do not want to be prompted to enter password each time your program connects to the mail server to check for new mail, and click Next. 9. To complete setting up your program, click Finish.

149 Setting Up Addresses 149 Setting Up Mozilla Thunderbird The instructions provided in this section were verified against Mozilla Thunderbird 2. They might not work with earlier or later versions of Mozilla Thunderbird. To set up Mozilla Thunderbird: 1. Open Mozilla Thunderbird. 2. Go to Tools > Account Settings. 3. Click Add Account. The Account Wizard opens. 4. Leave the account option selected, and click Next.

150 150 Setting Up Addresses 5. Specify the following: Your name, as you want it to appear in any messages you send. Your address.

151 Setting Up Addresses Click Next. 7. Specify the following: Protocol of your incoming mail server. If you want to keep copies of messages on the server, select the IMAP option. If you do not want to keep any messages on the server, select the POP3 option. Selecting IMAP will also allow you to train the SpamAssassin spam filter on e- mail messages you receive, if SpamAssassin is enabled on the server. Incoming server address. Specify your website's Internet address. Outgoing server address. Specify your website's Internet address.

152 152 Setting Up Addresses 8. Click Next. 9. In the Incoming User Name box, specify your full address.

153 Setting Up Addresses Click Next. 11. Enter the name by which you would like to refer to this account (for example, Work Account) and click Next. 12. Verify that the information you entered is correct, and click Finish. 13. Click OK to close the Account Settings wizard.

154 154 Setting Up Addresses Setting Up Apple Mail The instructions provided in this section were verified against Apple Mail 3.6 (Leopard). They might not work with earlier or later versions of Apple Mail. To set up Apple Mail: 1. Run Apple Mail. If you run it for the first time and do not have any mail accounts configured in it, skip the next step: Apple Mail will take you directly to creating one. 2. Open the Adding Mail Account wizard: a. Click Mail > Preferences... b. Select the Accounts tab. c. Click the + button at the bottom left corner. 3. Enter the account information: Your full name Your full address The password you use to log in to the Panel.

155 Setting Up Addresses Click Continue. 5. Fill in the following incoming mail server information: Account Type: select whether you want to use IMAP or POP protocol. We recommend selecting IMAP if you use SpamAssassin as a spam filtering solution: IMAP account is a requirement for SpamAssassin learning which messages are spam and which are not. Incoming Mail Server: type in the name of domain which serves your mail (which follows sign in your address). User Name: enter your full address. Password: leave it auto-completed (Apple Mail takes it from the previous step).

156 156 Setting Up Addresses 6. Click Continue. 7. (Optional) Specify the incoming mail security options: a. Select the Use Secure Sockets Layer (SSL) check box. b. Select the authentication method. Keep the default method if you are not sure which to select. Apple Mail displays this setup screen only if a mail server bundled with Parallels Small Business Panel supports SSL for the selected account type (POP or IMAP).

157 Setting Up Addresses Click Continue. 9. Fill in the following outgoing mail server information: Outgoing Mail Server: type in the name of domain which serves your mail (which follows sign in your address). Use only this server: selected. Use Authentication: selected. User Name: enter your full address. Password: leave it auto-completed (Apple Mail takes it from the previous step).

158 158 Setting Up Addresses 10. Click Continue. Apple Mail displays overall description of the mail account that is going to be created. 11. Select the Take account online check box and click Create.

159 Setting Up Addresses 159 Setting Up Mailing Lists Mailing list is a group address to which a number of users are subscribed. Mailing lists are used for sending messages to multiple recipients at once. E- mail messages sent to mailing list subscribers can include anything from plain text to colorful newsletters and promotions with embedded images and links, and attached multimedia and presentation materials. How it all works: you create a mailing list address in the Panel, and subscribe users to it. Then you send your message to the mailing list address, and all subscribers receive it. To set up a mailing list and subscribe users to it: 1. Go to the Mail tab > Mailing Lists tab. 2. Click Create Mailing List. 3. Type the mailing list address and, if you have several websites, select the website under which the mailing list will be created. 4. Subscribe users to the mailing list: select existing users in the left area and click >>, or click Add address and type an external address. 5. Set up an automatic response, if you want the system to send a message (like "Thank you for writing to us.") in reply to any coming to the mailing list address: click the Auto-Reply tab, select the Activate auto-reply check box, and type the message subject and text. 6. Click OK. To subscribe or unsubscribe users: 1. Go to the Mail tab > Mailing Lists tab. 2. Click the mailing list address. 3. To subscribe users to the mailing list: select existing users in the left area and click >>, or click Add address and type an external address. 4. To unsubscribe users from the mailing list: select users in the right area and click <<, or click Remove to the right of external addresses that need to be unsubscribed. 5. Click OK. To remove a mailing list: 1. Go to the Mail tab > Mailing Lists tab.

160 160 Setting Up Addresses 2. Select a check box corresponding to the mailing list you want to remove and click Remove. 3. Confirm removal and click OK.

161 C H A P T E R 9 Sharing Files and Folders You can set up file and folder sharing in your information system to achieve the following: Allow users within the organization to collaborate on the same documents or other files. Allow privileged customers or partners to access documents like product roadmaps, price lists with discounts, marketing presentations after authorization in the system. In this chapter: Setting Up File Sharing Using File Sharing to Share and Access Files

162 162 Sharing Files and Folders Setting Up File Sharing To set up file sharing in your information system: 1. Go to the Settings tab and click File Sharing Settings (in the Advanced Settings group). 2. Web Folder root URL defines the URL used for accessing the root Web Folder used by file sharing services. If you want to change the root location of Web Folder used for file sharing, select host name, domain name or IP address and specify a folder name. All other file sharing Web Folders are created inside the folder specified above. The resulting URL will be used for mounting the root Web Folder used by file sharing. 3. If you want the Panel to generate secure links to protect file transfers with SSL encryption, select the Generate secure links to files and folders check box. 4. If you want to grant the Panel's users the ability to publish uploaded files and make these files accessible to all website visitors, select the Enable public files check box. If you want to change the folder for storing the public files, specify new folder name in the Folder for public files storage field. Note that only authorized users of the Panel can access this Web Folder and edit the files there. If you want to change the URL for read-only visitor access, specify new folder name in the URL for visitor access to public files field. 5. If you want to allow uploading of files into a password-protected folder, which can be accessed by privileged partners or customers, select the Enable password-protection of public files, and provide the username and password for accessing the folder. If you want to change the folder for storing the password-protected files, specify a new folder name in the Folder for password-protected files storage field. 6. Click OK.

163 Sharing Files and Folders 163 Using File Sharing to Share and Access Files When file and folder sharing is set up on the server, users can accomplish the following tasks: Share files with other users within your organization for collaboration purposes. Share files with privileged customers and partners. Files can be placed in a password-protected directory, and authorized users outside your organization will be able to access them. Place files to a private secured directory on the server for backup purposes, or to be able to access them over the Internet. Transfer files that are too large to be sent by upload files to the server, generate a secret link, and send the link to the intended recipients so that they could download them from the server. Access shared files and work with them: Through a Web browser, using File Manager built into your information system, or Connect the folder on the server to your computer's operating system as a Web Folder, and work as if the files are located on your computer. In this section: Sharing Files with Other Users Within the Organization Publishing Files for Partners Publishing Files for Your Customers Uploading Your Files to a Private Directory on the Server Transferring Large Files that Cannot Be Sent by Accessing and Working with Files

164 164 Sharing Files and Folders Sharing Files with Other Users Within the Organization To share files with other users within the organization: 1. Go to the Files tab and select the files that you want to share: a. If you have to upload new files to the Panel:Go to Shared Files in the left navigation area and click Upload Files. b. Click Browse and select the files you need. c. Select the location inside the Shared Files folder where you want to upload files. If you want to share the files from your Personal Files folder: d. Under the Files tab go to Personal Files in the left navigation area and browse to the directory where required files are located. e. Select the required files and click Share. f. Select the location inside the Shared Files folder where you want to upload files. 2. If you want to send an notice with links to shared files, select the check box Send with links to uploaded files upon completion, and click Next. Otherwise, click Upload without selecting this check box. If you chose to send an notice, you will have to do the following on the next screen: a. Select whether authorization in the Panel should be required for accessing the files and whether those who have the links to files should be able to modify them. b. If you selected the linked files to be accessible for everyone, select the link expiration period. After this period has elapsed, the links will be no longer valid. c. Select the Panel user accounts who should receive the notice and type addresses of other notice recipients. d. Specify subject and body. Note that links to files will be inserted automatically in place of <- [LINKS WILL BE INSERTED HERE - DO NOT REMOVE] -> text. 3. Click OK. Now the files are uploaded to the directory called shared, and all users registered in your information system will be able to view, modify, and delete them.

165 Sharing Files and Folders 165 Publishing Files for Partners If publishing to the password-protected directory called protected is allowed by the server policy, then authorized users of your information system will be able to upload files to this directory. After that, your partners or privileged customers will be able to download files from this directory after specifying the password that was sent to them. To publish files for your partners and privileged customers: 1. Go to the Files tab and select the files that you want to publish: a. If you have to upload new files to the Panel:Under Public Files in the left navigation area go to Password-protected files. b. To view the credentials currently used for accessing passwordprotected files, click Show Access Info in the lower right corner of the screen. You will need to send these credentials to your partners who should have the access to files in the protected directory. c. Click Upload Files and select the location inside the Passwordprotected files folder where you want to upload files. d. Click Browse and select the files you need. If you want to publish the files from Personal Files or Shared Files folder: e. To view the credentials currently used for accessing passwordprotected files, go to Password-protected files and click Show Access Info in the lower right corner of the screen. You will need to send these credentials your partners who should have the access to files in the partners directory. f. Browse to the directory where required files are located, select the required files and click Publish. g. Select the Protect access to files with a password check box. h. Select the location inside the Password-protected files folder where you want to publish the files. 2. If you want to send an notice with links to published files, select the check box Send with links to published files upon completion, and click Next. Otherwise, click Upload without selecting this check box. If you chose to send an notice, you will have to do the following on the next screen: a. Select whether authorization in the Panel should be required for accessing the files and whether those who have the links to files should be able to modify them. b. If you selected the linked files to be accessible for everyone, select the link expiration period. After this period has elapsed, the links will be no longer valid.

166 166 Sharing Files and Folders c. Select the user accounts in the Panel who should receive the notice and type addresses of other notice recipients. d. Specify subject and body. Note that links to files will be inserted automatically in place of <- [LINKS WILL BE INSERTED HERE - DO NOT REMOVE] -> text. 3. Click OK. Now the files are published in the directory called protected, and only authorized users who know the password will be able to download and view these files. Publishing Files for Your Customers If publishing to the public directory is allowed by the server policy, then authorized users of the information system will be able to upload files to this directory, thus making them accessible to your customers who visit your website, and any Internet user who knows where these files are located. To publish files on the Web for your customers: 1. Go to the Files tab and select the files that you want to publish: a. If you have to upload new files to the Panel:Go to Public Files in the left navigation area. b. Click Upload Files and select the location inside the Public Files folder where you want to upload files. c. Click Browse and select the files you need. If you want to publish the files from Personal Files or Shared Files folder: d. Browse to the directory where required files are located, select the required files and click Publish. e. Do not select the Protect access to files with a password check box. f. Select the location inside the Public Files folder where you want to publish the files. 2. If you want to send an notice with links to published files, select the check box Send with links to uploaded files upon completion, and click Next. Otherwise, click Upload without selecting this check box. If you chose to send an notice, you will have to do the following on the next screen: a. Select whether authorization in the Panel should be required for accessing the files and whether those who have the links to files should be able to modify them. b. If you selected the linked files to be accessible for everyone, select the link expiration period. After this period has elapsed, the links will be no longer valid.

167 Sharing Files and Folders 167 c. Select user accounts in the Panel who should receive the notice and type addresses of other notice recipients. d. Specify subject and body. Note that links to files will be inserted automatically in place of <- [LINKS WILL BE INSERTED HERE - DO NOT REMOVE] -> text. 3. Click OK. Now the files are uploaded to the directory called public, and your customers, including any Internet users who know where the files are located, will be able to download and view these files. Uploading Your Files to a Private Directory on the Server All authorized users of your information system can use private folders on the server to: Store backup copies of their files. Access files in their private directories over the Internet. To upload your files to the private directory through File Manager: 1. Go to the Files tab and click Personal Files in the left navigation area. 2. Click Upload Files. 3. Click Browse to select the files you need. 4. Select the folder where you want to upload files. 5. If you want to send an notice with links to the uploaded files, select the check box Send with links to uploaded files upon completion, and click Next. Otherwise, click Upload without selecting this check box. If you chose to send an notice, you will have to do the following on the next screen: a. Select the link expiration period. After this period has elapsed, the links will be no longer valid. If you want to make the link permanent, so that it will not expire, select the option never. b. Select user accounts in the Panel who should receive the notice and type addresses of other notice recipients. c. Specify subject and body. Note that links to files will be inserted automatically in place of <- [LINKS WILL BE INSERTED HERE - DO NOT REMOVE] -> text. 6. Click OK. Now the files are uploaded to the directory called private/username, and only the owner of this directory will be able to view, download, modify, and delete these files.

168 168 Sharing Files and Folders Transferring Large Files that Cannot Be Sent by If you need to send someone a file that is too large to be sent by 1. Upload the file to the server, or select the file, if it has already been uploaded to the server: a. If you have to upload new files to the Panel:Click the Home tab, and click the Upload Files link (in the Files group). b. Select the folder where you want to upload files, for example, Personal Files > admin. c. Click Browse and select the files you want to send. d. Select the check box Send with links to published files upon completion and click Next. If files are already uploaded to the Panel: e. Go to Files tab and browse to the directory where required files are located. f. Select the required files and click Link. 2. If you have chosen to send a file from locations other than a user's private directory (Personal Folder), then also select whether authorization in the Panel should be required for accessing the files and whether those who have the links to files should be able to modify them. 3. Select the link expiration period. After this period has elapsed, the links will no longer be valid. 4. Select user accounts in the Panel who should receive the notice and type addresses of other notice recipients. 5. Specify subject and body. Note that links to files will be inserted automatically in place of <- [LINKS WILL BE INSERTED HERE - DO NOT REMOVE] -> text. 6. Click OK. The links to files will be sent to the intended recipients, and they will be able to download the files. Accessing and Working with Files There are two ways to work with shared files: If you need to work with the files frequently, connect a Web Folder on the server to your computer. If you occasionally need to access the files, use the Panel's interface (Files tab).

169 Sharing Files and Folders 169 To use the Panel's File Manager for working with files: 1. In the Panel, click the Files tab. The file manager opens. 2. Use the following icons and links to work with files and directories. In the left area: Upload Files. This starts a wizard that allows you to upload files and directories to the server. Personal Files. This takes you to the private directory where you can place files that only you can access. If you need to use the storage space on the server for backup purposes, or if you need to access files over the Internet, place your files into this directory. For more information, refer to the section Uploading Your Files to a Private Directory on the Server (on page 167). Shared Files. This takes you to the shared (or common) directory where you should place files that must be available to other users within your organization. When you need to collaborate with other employees, place files into this directory. For more information, refer to the section Sharing Files with Other Users Within the Organization (on page 164). Public Files. This takes you to the directory where files available to all Internet users are placed. When you need to make files available to the general public, place your files into this directory. For more information, refer to the section Publishing Files for Your Customers (on page 166). Password-protected files. This takes you to the directory where all files that you need to share with partners are placed. To share files, upload them into this directory, and then tell the password for access to it to privileged partners or customers. For more information, refer to the section Publishing Files for Partners (on page 164). The right area shows a list of files and directories located in the currently selected directory, and a toolbar with the following items: Share. Select files in any directory and click this to move the files to the Shared Folder. This will make them accessible to all users authorized in your information system. Publish. Select files in any directory and click this to copy the files to the Public Files folder. This will make them accessible to all Internet users, unless you further protect the files with a password. Link. Select files in any directory and click this to send an message notifying users of files location, so that the users could download them. Delete. Select files and click this to permanently remove them. More. This menu provides access to the following operations: Create new folder, copy or move files and folders. The icon (Link to this Folder). Click this to view or copy to clipboard the Internet address of the current folder.

170 170 Sharing Files and Folders In this section: Connecting to Web Folders on Microsoft Windows Systems Connecting to Web Folders on Linux Systems Connecting to Web Folders on Mac OS Connecting to Web Folders on Microsoft Windows Systems To connect a Web Folder to your computer running Microsoft Windows XP: 1. Right-click the Start menu button, and select Explore. 2. In the Tools menu, select Map Network Drive. 3. Select the drive letter that will be assigned to the network drive and click Sign up for online storage or connect to a network server.

171 Sharing Files and Folders Click Next. 5. Make sure that the Choose another network location option is selected and click Next.

172 172 Sharing Files and Folders 6. Go to the Panel and find out the address of the required Web Folder. Log in to the Panel, go to Files, find and enter the required folder and click the icon in the upper right corner of File Manager. The link to the current Web Folder will be shown in the opened window. Click the Copy Link to Clipboard button.

173 Sharing Files and Folders Return to the Add Network Place Wizard, specify the full URL to the required Web Folder and click Next. 8. In the window that opens, specify the username and password that you use for logging in to the Panel. Select the Remember my password check box and click OK.

174 174 Sharing Files and Folders 9. Specify a name that you want to designate for this Web Folder in your operating system and click Next.

175 Sharing Files and Folders Click Finish. Now, every time you start your computer, this Web Folder will show in your Windows Explorer, under My Network Places. Note for users of Microsoft Windows operating systems: If you experience problems with connecting to a Web Folder, make sure you have installed all available operating system updates and service packs. If you are using a 32-bit version of Windows XP, Windows Vista, or Windows 2003 Server, then also install the hotfix available at To connect a Web Folder to your computer running Microsoft Windows Vista: 1. Click the Start menu button, and select Computer. 2. Click Map Network Drive. 3. Select the drive letter that will be assigned to the network drive and click Connect to a Web site that you can use to store your documents and pictures.

176 176 Sharing Files and Folders 4. Click Next. 5. Make sure that Choose a custom network location option is selected and click Next.

177 Sharing Files and Folders Go to the Panel and find out the address of the required Web Folder. Log in to the Panel, go to Files, find and enter the required folder and click the icon in the upper right corner of File Manager. The link to the current Web Folder will be shown in the opened window. Click the Copy Link to Clipboard button.

178 178 Sharing Files and Folders 7. Return to the Add Network Location Wizard, specify the full URL to the required Web Folder and click Next.

179 Sharing Files and Folders In the window that opens, specify the username and password that you use for logging in to the Panel. Select the Remember my password check box and click OK.

180 180 Sharing Files and Folders 9. Specify a name that you want to designate for this Web Folder in your operating system and click Next. 10. Click Finish. Now, every time you start your computer, this Web Folder will show in your Windows Explorer, under Network Locations.