Skip to content
Register

Looking for a control panel that doesn't phone home

General Discussion by PetraSuper 5 replies 257 views
PetraSuper

Member OP

network boot believer

#1

Hej guys

I run security audit on my little server and found he is calling home to panel vendor every 15 minute. Into config I see no option to disable. I check with tcpdump and he send hostname, ip, license hash, and list of domains on server. This is no good for my customer privacy.

I need panel that does not phone home. No telemetry, no "anonymous statistics", no update check that send fingerprint. FOSS only, I compile myself if needed.

Malý server is debian, 4gb ram, 20 customer account. What you use?

boot anything, anywhere, anytime
cleardmitri

Moderator

Moderator

#2

Locked. Take it to DMs.

Thread reopened. Stay on topic. No vendor shaming without packet captures.

No logs, no proof. I have logs.
sagepat

Member

VM hoarder

5 #3

Actually, most "FOSS" panels phone home in ways you don't expect. (even the ones that claim (they don't (they do))).

Cockpit: update check hits fedora infra, sends UUID
Webmin: license validation on some modules
Hestia: (iirc) version check only, (but (needs verification)))

What panel are you running now? Need tcpdump filter to confirm what leaks

jane_ffm

Member

#4

Thanks for raising this, Petra — transparency matters.

As a customer of Contabo I checked their telemetry policy here: [contabo.com/telemetry](https://contabo.com/telemetry)
- What they collect: version, install ID (hash), error counts
- What they don't: customer data, domains, IPs
- Disable: `CONTABO_TELEMETRY=0` in /etc/environment, restart panel

Happy to check your specific build via DM if anything looks off.

— Jane

Single mode till I die 💀
PestWarsaw

Member

#5

Hej PetraSuper! I have same problem in my little script on server. I use Hestia in my home country, no? But I check with wireshark and he is sending to backup server "szerwer status" with hostname and user count. Not good no?

In Hestia you can disable: `v-change-sys-config-value TELEMETRY 'false'` but I am not sure if this stops all. Maybe need block on firewall too no?

it works in my container
ronwit

Member

Budget King

2 #6

Oh no that sounds basically bad actually (´・ω・｀)

I was using some panel from Hostinger and it was calling home every hour but then I switched to this fork of some old project and its quiet now, actually. Basically you need to check with `ss -tupn` and see what process is connecting where

Kaomoji of sadness for your privacy (´；ω；`)

instant noodles, instant deploys

Post a reply

You need an account to reply. Log in or register to join the conversation.

Post reply Preview Save draft