A Couple Questions

I recently followed this guide to set up a CentOS server with ISPCOnfig3.

One things I noticed is that secure traffic isn't redirected to port *443 which means if I try to access a secure page with http:// instead of https:// I either get a blank page or with the ISPConfig 3 control panel get some html informing me I am trying to access a secure page and to try typing https:// instead.

Another thing since I've followed the tutorial to the end I am wondering what's left to do to secure/harden the server?

 

Do you use rewrite rules that redirect http traffic to https?

 

No, not currently but I was wondering how to do this on the server level so it applies to all websites and domains hosted on the system.

 

What's the name of the file I need to edit? Is it apache_apps.vhost.master or apache_ispconfig.conf.master?

 

Just to be a bit clearer I would like to set this on a server level so when any website/domain hosted on the server tries to access a secure page using http:// instead of https:// (such as the ISPConfig panel) they are auto redirected to https:// and can login to the panel. I don't want to redirect normal http traffic accessing non-secure pages.

I am a bit confused how to do this and was wondering if someone can post instructions on how to accomplish this? I don't have much experience with setting up and configuring a webserver from scratch.

 

For some reason mail isn't working. I set up a forum and created a new user but the welcome/verification email never arrives.

 

Any errors in your mail log?

 

Don't think there's any errors but this is what's in /var/log/maillog

Edit: Do I need PHP-Sendmail? The forum script's mail settings gives an option of either PHP-Mail or SMTP.

Edit: Alright, I did find the proper mail log.

Another question, what should /etc/hosts and /etc/resolv.conf contain? I am a bit confused with those so any help would be appreciated.

My current /etc/hosts:

This is what I currently have in /etc/resolv.conf:

 

Another problem I am experiencing is with Mybb (bulletin board), whenever I try to upload attachments I get a 500 internal server error.

 

There seems to be a problem with your network connection.

Did you check your website's error log?

 

Well I did find out I have to use authentication since Verizon is my isp, I have a residential account with a dynamic ip and they block port 25. Still can't get mail to work but at least it's a step in the right direction. Now I get the following in the mail log: