G2. Dr.Web Security Control Center Configuration File

The webmin.conf Dr.Web Security Control Center configuration file is in XML format and located in the etc subfolder of Server root folder.

Description of Dr.Web Security Control Center configuration file parameters:

<version value="">

Current version of Dr.Web Server.

•<server-name value=""/>

The name of Dr.Web Server.

Parameter is specified in the following format:

<Server IP address or DNS name>[:<port>]

If the Server address is not specified, computer name returned by the operating system or the Server network address: DNS name, if available, otherwise—IP address are used.

If the port number is not specified, the port from a request is used (e.g., for requests to the Server from the Control Center or via the Web API). Particularly, for the requests from the Control Center it is the port specified in the address line for connection of the Control Center to the Server.

•<document-root value=""/>

Path to web pages root folder. Default is value="webmin".

•<ds-modules value=""/>

Path to modules folder. Default is value="ds-modules".

•<threads value=""/>

Number of parallel requests processed by the web server. This parameter affects server performance. It is not recommended to change this parameter without need.

•<io-threads value=""/>

Number of threads serving data transmitted in network. This parameter affects Server performance. It is not recommended to change this parameter without need.

•<compression value="" max-size="" min-size=""/>

Traffic compression settings for data transmission over a communication channel with the web server via HTTP/HTTPS.

Attributes description:

•<keep-alive timeout="" send-rate="" receive-rate=""/>

Keep HTTP session active. Allows to establish permanent connection for requests via the HTTP v. 1.1.

Attributes description:

•<buffers-size send="" receive=""/>

Configuration of buffers sizes for sending and receiving data.

Attributes description:

•<max-request-length value=""/>

Maximum allowed size of HTTP request in KB.

•<reverse-resolve enabled="no"/>

Replace IP address with DNS names of computers in the Server log file. Allowed values of enabled: yes or no.

•<script-errors-to-browser enabled="no"/>

Show script errors in browser (error 500). This parameter is used by technical support and developers. It is not recommended to change this parameter without need.

•<trace-scripts enabled=""/>

Enable scripts tracing. This parameter is used by technical support and developers. It is not recommended to change this parameter without need. Allowed values of enabled: yes or no.

•<profile-scripts enabled="no" stack="no"/>

Profiling configuration. Performance is measuring—execution time of functions and scripts of the web server. This parameter is used by technical support and developers. It is not recommended to change this parameter without need.

Attributes description:

•<abort-scripts enabled=""/>

Allow aborting of scripts execution if the connection was aborted by client. This parameter is used by technical support and developers. It is not recommended to change this parameter without need. Allowed values of enabled: yes or no.

•<search-localized-index enabled=""/>

Use localized versions of pages. If the flag is set, server searches for localized version of specified page according to the language priority which is set in the Accept-Language field of client header. Allowed values of enabled: yes or no.

•<default-lang value=""/>

Language of documents returned by the web server in the absence of the Accept-Language header in the HTTP request. The value attribute is the ISO language code. Default is ru.

•<ssl certificate="" private-key="" keep-alive=""/>

SSL certificate settings.

Attributes description:

•<listen>

Configure parameters to listen for network connections.

The <listen /> element contains the following child elements:

▫<insecure />

The list of interfaces to listen for accepting connections via the HTTP protocol for unsecured connections. Default port is 9080.

The <insecure /> element contains one or several <endpoint address=""/> child elements to specify allowed addresses in the IPv4 or IPv6 format. In the address attribute, network addresses are specified in the following format: <Protocol>://<IP address>.

▫<secure />

The list of interfaces to listen for accepting connections via the HTTPS protocol for secured connections. Default port is 9081.

The <secure /> element contains one or several <endpoint address=""/> child elements to specify allowed addresses in the IPv4 or IPv6 format. In the address attribute, network addresses are specified in the following format: <Protocol>://<IP address>.

•<access>

Access control lists. Allow to configure limitations on network addresses to listen for accepting incoming HTTP and HTTPS requests by the web server.

The <access /> element contains the following child elements, which configuring limitations for corresponding connection types:

▫<secure priority="">

The list of interfaces to listen for accepting secured connections via the HTTPS protocol. Default port is 9081.

Attributes description:

The <secure /> element contains one or several following child elements: <allow address=""/> and <deny address=""/>.

Elements description:

▫<insecure priority="">

The list of interfaces to listen for accepting unsecured connections via the HTTP protocol. Default port is 9080.

Attributes description:

The <insecure /> element contains one or several following child elements: <allow address=""/> and <deny address=""/>.

Elements description: