ISPConfig 3 Priority Support

How affected is a typical ISPConfig 3 installation by the recent Dirty Frag/Fragnesia derivatives?

invalid@example.com (curiousadmin) — Sat, 16 May 2026 10:39:22 +0000

Hi,

I was wondering how badly affected is ISPConfig 3 by the recent Dirty Frag/Fragnesia derivatives.
The vulnerabilities came out of nowhere (no fix before disclosure) and Ubuntu update servers were down for some time during that critical moment.

0) Let's assume the typical "Perfect server", that is regularly updated and is running Ubuntu 24.04 with: Apache, PHP, MariaDB, PureFTPD, BIND, Postfix, Dovecot and ISPConfig 3 and we can also assume no "other" SSH users with...

How affected is a typical ISPConfig 3 installation by the recent Dirty Frag/Fragnesia derivatives?

ISPconfig white screen

invalid@example.com (conductive) — Fri, 15 May 2026 22:53:33 +0000

Debian 12.13, NGINX
PHP 8.2.31
Attempted systemctl edit php8.2-fpm per previous post without luck.
https://forum.howtoforge.com/thread...ids-temp-folder-becomes-read-only-syst.95140/

systemctl edit php8.2-fpm
[Service]
ReadWritePaths=/usr/local/ispconfig/interface/temp

Perhaps I did somethint wrong or??

ispconfig gets a white screen.

invalid@example.com (pvanthony) — Thu, 14 May 2026 17:45:32 +0000

Debian 11 with kernel 5.10.0-42-amd64
PHP 7.4.33
ISPConfig 3.3.1p1
Did an apt-get upgrade. Also upgraded the kernel to 5.10.0-42-amd64.
After upgrade and reboot, cannot get acess to ispconfig.
Getting a white screen.
Got the following error.

Code:

Uncaught InvalidArgumentException: Please make sure the folder '/usr/local/ispconfig/interface/lib/classes/IDS/../../../temp' is writable in /usr/local/ispconfig/interface/lib/classes/IDS/Monitor.php:159

Tried changing the permission of temp...

ispconfig gets a white screen.

new debian 13 autoinstaller and --use-certbot? dont see Letsencrypt cert?

invalid@example.com (craig baker) — Fri, 08 May 2026 00:52:12 +0000

I wiped a server, installed deb13 and did autoinstaller. I added --use-certbot in case I want to migrate from some older server. but now the cert for ns12.cdbsystems.com is NOT issued by letsencrypt - in fact:
snip
Subject Name
Country DE State/Province None Locality None Organization None Organizational Unit IT Common Name ns12.cdbsystems.com
Issuer Name
Country DE State/Province None Locality None Organization None Organizational Unit IT Common...

new debian 13 autoinstaller and --use-certbot? dont see Letsencrypt cert?

upgrade

invalid@example.com (tr909192) — Wed, 06 May 2026 09:48:30 +0000

hello
we have a master/slave setup running 3.3.0p3 version. the whole stack is on debian 12. is it ok to upgrade all the ispconfig stack with debian 12 and upgrade the os to debian 13 more in the future?
for the upgrade is it ok to use the shell script or there is a smarter way? start with slaves and do the master as last?

thanks
Max

Problem creating an aliasdomain with Letsencrypt certificate

invalid@example.com (kaostc) — Sun, 03 May 2026 10:31:31 +0000

I tried to add an aliasdomain for enklave.fr, pointing to an existing domain enklave.es, with letscript certificate, this configuration:
View attachment 9554

I got these errors:

Code:

03.05.2026-09:47 - WARNING - Could not verify domain enklave.fr, so excluding it from let's encrypt request.
03.05.2026-09:47 - WARNING - Could not verify domain www.enklave.fr, so excluding it from let's encrypt request.

The whole output from server.sh:

Code:

03.05.2026-09:47 - DEBUG...

Problem creating an aliasdomain with Letsencrypt certificate

Rspamd mind of its own

invalid@example.com (remkoh) — Thu, 30 Apr 2026 07:08:18 +0000

Rspamd seems to have a complete mind of its own.
The maildomain has NO spamfilter setting set and mailboxes inherit the maildomain setting.
Regardless several emails are being send to the spamfolder. And seemingly completely random to make matters worse.

How do I stop spamfiltering when it is not supposed to filter, thus without killing rspamd all together?

Roundcube - Server 500 error when trying to open HTML emails.

invalid@example.com (AlexSr) — Mon, 27 Apr 2026 19:26:07 +0000

Hello,
Apparently, Roundcube updated to a version not compatible with PHP 7.2.4.
I got a report today, that Roundcube was hanging when clicking on listed emails.
After I click on any email to open it, a Server 500 error shows.
After investigation, I isolated that the issue is only with HTML-based emails. Raw text are no issue, and also emails are being served correctly via IMAP.
I did some research and the error appears to be connected to Roundcube requiring now a more recent version of PHP...

Roundcube - Server 500 error when trying to open HTML emails.

PHP 8.4 installation via ISPConfig 3.3.1p1 geht schief

invalid@example.com (hotmifi) — Sun, 26 Apr 2026 11:43:21 +0000

Mein ISPConfig bietet mir auf "System - Additional PHP Versions" an, 8.4 nachzuinstallieren, meldet es dann auch als installiert, aber es ist nicht geschehen. Muss ich dafür das sury-Repo manuell nachinstallieren und falls ja, wie genau, dass ISPConfig damit zurechtkommt, denn mit einem nichtexistierenden Repo kommt ISPConfig in diesem Fall seltsamerweise zurecht?

Odd issue - migtool does not complete, and ssh window closes!

invalid@example.com (craig baker) — Mon, 20 Apr 2026 16:44:31 +0000

I've been trying to do a migration from a rocky 9 server to a new build deb12 (with autoinstaller).
Dry run completes fine. no problem.
Migration live run happily gets going, and well into the proceedings it gets to where it is dumping the databases. All has gone well to this point.
Now one of the databases IS quite large.
at somepoint shorly after, the SSH window closes the connection, killing migtool. when I log back in, the migration log does not show any errors.

I thought maybe some...

Odd issue - migtool does not complete, and ssh window closes!

DNS-transfer issue when using api to change records

invalid@example.com (Gerd) — Fri, 17 Apr 2026 11:24:19 +0000

Hi ISPConfig friends!

Perhaps someone can help me with this:

I have 2 ISPConfig servers, one hosts DNS-Zones (lets call him dns1) and one hosts DNS-Slave-Zones (dns2).
Everything works fine as long as a use the ISPConfig webinterface to change records.
Example:

I create a TXT Record test.mydomain.de. = "test-record-state1" in a DNS-Zone on DNS1
-> The record gets transferred to DNS2 correctly
dig @dns1 -t TXT test.mydomain.de returns "test-record-state-1"
some minutes...

DNS-transfer issue when using api to change records

Trying to figure out an issue with CPU

invalid@example.com (jpcyrenne) — Mon, 13 Apr 2026 23:24:14 +0000

Good day,
Ref: ISPC_APP_VERSION', '3.2.11p2 on Ubuntu 20.04.6 LTS

I haven't changed anything on the server and suddenly my 8 core CPU are at 100%.
Just trying to figure out if it's an attack or a PHP-56 issue. It has been 2 days.
I restarted the server with no success.

I do have some acriviry in the access.log

But I have many cgi processes running in htop and here is a part of the error log:
[Sun Apr 12 20:07:50.793989 2026] [fcgid:warn] [pid 1777] (32)Broken pipe: [client...

Trying to figure out an issue with CPU

a sad old centos 8 system - how do i manually install php8.3 for use as alternate?

invalid@example.com (craig baker) — Mon, 13 Apr 2026 08:43:47 +0000

the centos 8 mirrors are all down of course. i'm curious was there not a way to manually install php8.3 say? from source?
the dnf installs dont work anymore

strange web behaviour just noticed - https loads correctly, http does not?

invalid@example.com (craig baker) — Sat, 11 Apr 2026 18:48:57 +0000

I have a sandbox url hocheapo.com and I hang websites off it. for example, hocheapo.com/child1 is a nice wordpress site.
suddenly - if i access via https:/hocheapo.com/child1 we are good.
but http://hocheapo.com/child1 gives Error 404.
I have the redirect HTTP -> HTTPS checked under the hocheapo website. this just started happening recently?

in the vhost for hocheapo.com I see:
RewriteEngine on
RewriteCond %{REQUEST_URI}...

strange web behaviour just noticed - https loads correctly, http does not?

Mirror failure

invalid@example.com (tlove) — Thu, 09 Apr 2026 04:14:22 +0000

Hello,
I have two ISPCONFIG servers (main ubuntu web/email server and a fallback mirror) on seperate VNs on a local univiDM network that have been working well.
ISPCONFIG on the web/email server was updated and the connection has been lost to the mirror server. There appears to be no key in operaiotn anymore.
I welcome advice on what to do.
Thank you
Terence

migrate ISPconfig to new Server

invalid@example.com (stst) — Wed, 08 Apr 2026 14:35:16 +0000

Hi,

I want to migrate my ISPconfig installation to a new server (from aws to hetzner). What is the best way to do that. Is there a how-to I can follow?

thanks, Stefan

Backup errors email notifications

invalid@example.com (kaostc) — Wed, 08 Apr 2026 11:45:35 +0000

I didn't get any email reporting backup errors, although:
- I have an admin email sent, and I get overquota emails, and certificate delivery errors emails.
- I have set the option to send warning or worse emails notification for any server.
Multiserver installation.
Report for master server:

Code:

##### SERVER #####
IP-address (as per hostname): ***.***.***.***
[WARN] could not determine server's ip address by ifconfig
[INFO] OS version is Debian GNU/Linux 12 (bookworm)
 
[INFO] uptime:...

Backup errors email notifications

Change multiple sites to new php version

invalid@example.com (kaostc) — Tue, 07 Apr 2026 15:57:05 +0000

I need to change all my sites to php8.4 (or almost all). Is there a way to batch perform this change?
Thanks!

Adding custom placeholders in DNS template

invalid@example.com (tr909192) — Wed, 01 Apr 2026 07:50:00 +0000

Dear all,
I have a multi-server ISPConfig setup (master-slave).
I would like to edit the default template so that the MX record is associated with the hostname of the slave server where the DNS zone is created.
I tried searching for other DNS placeholders, but the ones available seem to be only:
{DOMAIN}, {IP}, {IPV6}, {NS1}, {NS2}, {EMAIL}.

I would kindly like to ask if there are any other placeholders, such as {SLAVESERVER-1}, {SLAVESERVER-2}, ..., so that they can be used for assigning...

Adding custom placeholders in DNS template

Remove FTP from ispconfig

invalid@example.com (felan) — Mon, 23 Mar 2026 10:39:29 +0000

Good evening.
I have decided to completely remove FTP/FTPS from our servers, as it's too high a security risk these days and instead replacing it with SFTP users and jailkit, for the few that actually needs it.
But how would I go about removing the FTP options from the sidepanel in Sites in ispconfig? I mean I could just remove it in /usr/local/ispconfig/interface/web/sites/menu.php but I don't like that type of hack.
Any good advice here?