Fine tuning cPanel & WHM

Last updated: May 19, 2011

Fine tuning cPanel & WHM

The following is based on a fairly generic cPanel environment and is only for reference. Understanding what is being enabled or disabled is avdised before making a decision.


Once logged into WebHost Manager (WHM) through https://youripaddress:2087/ as the root user (username: root);  You may then relate to the following actions from the left-hand column.

Server Configuration -> Update Preferences

  • cPanel/WHM Updates: STABLE Builds (Automatic)
  • cPanel Package Updates: Automatic
  • Operating System Package Updates: Automatic
  • SpamAssasin Rules Updates: Automatic

When your prefered update settings have been chosen and saved you may then execute /scripts/upcp --force from the command line to run the update.

Upon completion return to your browser and refresh then proceed.

Server Configuration -> Tweak Settings

Refer to [?] for a detailed description of each setting.

  • Mail - Initial default/catch-all forwarder destination: FAIL
  • Mail - Track email origin via X-Source email headers: ON
  • Mail - Max hourly emails: 250
  • Mail - Prevent “nobody” from sending mail: ON
  • Mail - Enable RoundCube webmail: OFF
  • Stats Programs - Enable Awstats stats: ON


Security Center -> Apache mod_userdir Tweak

  • Enable mod_userdir Protection


Security Center -> Password Strength Configuration

  • Default Required Password Strength: 65


Security Center -> PHP open_basedir Tweak

  • Enable php open_basedir Protection.


Service Configuration -> Apache Configuration -> Global Configuration

  • TraceEnable: OFF
  • ServerSignature: OFF
  • ServerTokens: ProductOnly
  • FileETag: NONE

Save and rebuild the apache configuration for changes to take affect.

Service Configuration -> Exim Configuration Editor

  • RBL: zen.spamhaus.org and bl.spamcop.net: ON


Service Configuration -> FTP Server Configuration

  • Allow Anonymous Logins: NO
  • Allow Anonymous Uploads: NO
  • Allow Logins w/Root Password: NO


Service Configuration -> Service Manager

  • Services may be enabled or disabled accordingly depending on your requirements.


System Health -> Background Process Killer

  • Enable: bitchx, bnc, eggdrop, generic-sniffers, ircd, psyBNC

Tags: cpanel, whm, configure