Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Topics - luis web

Pages: [1] 2
1
hello, good year, to everyone on the forum.
I ask for help to those who know ..

I have a problem "Monitoring via Monit" -> nginx
error -> Process - nginx Not monitored.
do restart all, stay the same, with error.
I do relaod all, stay the same, with error.

                      ################  my email ################


monit alert -- Connection failed nginx
Caixa de entrada

monit@servi.jonyhost.eu
05:38 (há 8 horas)
para mim

Connection failed Service nginx

        Date:        Sat, 09 Jan 2021 06:38:09
        Action:      restart
        Host:        hostname server
        Description: failed protocol test [HTTP] at [localhost]:80 [TCP/IP] -- Connection refused

Your faithful employee,    Monit





                         ############ [root@hostname ~ ] Server VPS Centos 7 ##############


[root@hostname ~]# systemctl status nginx

● nginx.service - nginx - high performance web server
   Loaded: loaded (/usr/lib/systemd/system/nginx.service; enabled; vendor preset: disabled)
   Active: active (running) since Sat 2021-01-09 06:53:12 CET; 7h ago
     Docs: http://nginx.org/en/docs/
  Process: 24278 ExecStop=/bin/sh -c /bin/kill -s TERM $(/bin/cat /var/run/nginx.pid) (code=exited, status=0/SUCCESS)
  Process: 24284 ExecStart=/usr/sbin/nginx -c /etc/nginx/nginx.conf (code=exited, status=0/SUCCESS)
 Main PID: 24285 (nginx)
   CGroup: /system.slice/nginx.service
           ├─24285 nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx....
           ├─24286 nginx: worker process
           ├─24287 nginx: worker process
           ├─24288 nginx: worker process
           ├─24289 nginx: worker process
           └─24290 nginx: cache manager process

Jan 09 06:53:12 hostname systemd[1]: Starting nginx - high performa....
Jan 09 06:53:12 hostname systemd[1]: Started nginx - high performan....
Hint: Some lines were ellipsized, use -l to show in full.



                                   ################# Monitoring via Monit / Server VPS Centos 7#################



Process - cwp-phpfpm   OK   Monitored   active            Monitor 
Process - cwpsrv           OK           Monitored   active    Monitor 
Process - dovecot           OK           Monitored   active    Monitor 
Process - httpd                   OK           Monitored   active    Monitor
Process - mysql                   OK       Monitored   active    Monitor 
Process - nginx   Not monitored   Not monitored   active    Monitor <<<<<<<<<<<<< ERROR
Process - opendkim           OK           Monitored   active    Monitor 
Process - php-fpm56           OK           Monitored   active    Monitor 
Process - postfix           OK           Monitored   active    Monitor 
Process - pure-ftpd           OK           Monitored   active    Monitor 
Process - sshd                   OK            Monitored   active    Monitor 
Program - postfix-queue   OK           Monitored   active    Monitor 
System - hostname           OK           Monitored   active    Monitor


                                ############# Services Status, home CwPanel CWPpro #################

Apache Webserver      Active      
Nginx Reverse Proxy      Active <<<<<--------------- good      
FTP Server              Active      
MySQL Database Server   Active      
BIND DNS Server      Active      
SSH Server              Active      
Crontab                      Active   



thanks to anyone who can help my problem..

2
Thank you all for your help

my vps error updates [New Version Available] | [linx 7 Ram 4GB] [CWPpro version: 0.9.8.976]


does not let you make updates on the server.

unstable server

Server Load: 1.97  0.77  0.29

three sites wordpress is not normal Load server

putty.exe
----------
error my | ** (pkttyagent:20123): WARNING **: 08:00:58.176: Unable to register authentication agent: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Cannot determine user of subject
Error registering authentication agent: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Cannot determine user of subject
(polkit-error-quark, 0)

Log apache
-----------
[Thu May 21 07:48:35.558540 2020] [mpm_event:notice] [pid 12814:tid 140667557066624] AH00489: Apache/2.4.39 (Unix) OpenSSL/1.0.2k-fips configured -- resuming normal operations
[Thu May 21 07:48:35.558616 2020] [core:notice] [pid 12814:tid 140667557066624] AH00094: Command line: '/usr/local/apache/bin/httpd'


/var/log/nginx/error.log
----------------------
ssl" directive instead in /etc/nginx/conf.d/vhosts/traftube.dominio.com.ssl.conf:9
2020/05/21 07:48:37 [warn] 12945#12945: the "ssl" directive is deprecated, use the "listen ... ssl" directive instead in /etc/nginx/conf.d/vhosts/traftube.dominio.com.ssl.conf:74
2020/05/21 07:48:37 [warn] 12945#12945: the "ssl" directive is deprecated, use the "listen ... ssl" directive instead in /etc/nginx/conf.d/vhosts/traftube.dominio.com.ssl.conf:111
2020/05/21 07:48:37 [warn] 12945#12945: the "ssl" directive is deprecated, use the "listen ... ssl" directive instead in /etc/nginx/conf.d/vhosts/traftube.dominio.com.ssl.conf:148
2020/05/21 07:48:37 [warn] 12945#12945: the "ssl" directive is deprecated, use the "listen ... ssl" directive instead in /etc/nginx/conf.d/vhosts/tubim.dominio.com.ssl.conf:9
2020/05/21 07:48:37 [warn] 12945#12945: the "ssl" directive is deprecated, use the "listen ... ssl" directive instead in /etc/nginx/conf.d/vhosts/tubim.dominio.com.ssl.conf:74
2020/05/21 07:48:37 [warn] 12945#12945: the "ssl" directive is deprecated, use the "listen ... ssl" directive instead in /etc/nginx/conf.d/vhosts/tubim.dominio.com.ssl.conf:111
2020/05/21 07:48:37 [warn] 12945#12945: the "ssl" directive is deprecated, use the "listen ... ssl" directive instead in /etc/nginx/conf.d/vhosts/tubim.dominio.com.ssl.conf:148


Top 5 Process CWPpro  | 2 seconds normal 2 seconds so always unstable | server have three sites wordpress
------------------------
  PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
31779 username  20   0  333148  67760  10536 R  93.8  1.7   0:00.56 php-cgi
31790 username  20   0  210252  31240   9536 R  87.5  0.8   0:00.16 php-cgi
13017 mysql        20   0  811820 172380  12032 S   6.2  4.4   0:54.96 mysqld
18191 root          20   0  221864  11756   4608 S   6.2  0.3   0:10.00 php-fpm
1 root                 20   0  191036   4056   2612 S   0.0  0.1   0:02.24 systemd

  PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
 9177 username  20   0  218516  38416   9836 S  33.3  1.0   0:00.27 php-cgi
 9176 username  20   0  218516  38420   9836 S  16.7  1.0   0:00.25 php-cgi
    9 root            20   0       0         0      0 S   5.6  0.0   0:09.81 rcu_sched
 8568 mysql     20   0  810620 129116  11332 S   5.6  3.3   0:01.51 mysqld
 9193 root         20   0   58304   2044   1464 R   5.6  0.1   0:00.01 top


  PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
 9842 username  20   0  218516  38424   9836 S  12.5  1.0   0:00.22 php-cgi
  272     root      20   0       0      0      0 S   6.2  0.0   0:01.56 jbd2/sda2-8
 9841 username  20   0  218516  38492   9908 S   6.2  1.0   0:00.22 php-cgi
    1 root      20   0  191036   4088   2624 S   0.0  0.1   0:02.91 systemd
    2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 kthreadd


Thank you all for your help

3
Mod_Security / I have + 100 error line ModSecurity
« on: May 05, 2020, 11:20:06 PM »

Once again I ask for help please ..

I have + 100 error line ModSecurity
I can't solve my problem
With the rules ..

Thanks to everyone in the forum


4
everything was fine .. I get updates on the server and it became a cause of problems and 27 sites destroyed ..

Does anyone have any idea of this problem ..

thanks for helping .. Without solving the problem I will abandon CWP.

I am tired of so much problem with CWP.



5
Thanks to everyone in the forum for helping

Linux 7 | CWPpro version: 0.9.8.967
Nginx works well Apparently But it has a "Monitoring via Monit" error "Services list"





What should I do to resolve the error ?. already restarted but back to the error! :-\

thank you

6
Addons / Error with eXtplorer Addons - Open Page White
« on: April 28, 2020, 08:06:26 AM »
I ask for help please
I appreciate that you explain clearly. It is not a small experiment, CWP. I especially want to thank "rcschaff", who helped a lot in my problems.

Error with eXtplorer Open Page White.
Below, the images visible in the sequence of clicks. Open Page White.

I clicked on the icon eXtplorer Addons


open this White window



here is files Home/myuser....  There is no visible eXtplorer folder


\(ツ)/The application does not work and does not open the eXtplorer |  ¯\_(ツ)_/¯  What do I do now with this error? \(ツ)/

Thank you guys from the forum.

7
CentOS 7 Problems / configure server vps centos7 for RTMP protocol
« on: April 26, 2020, 06:34:36 PM »
Thanks to everyone in the forum for helping

How to configure server vps centos7 for RTMP protocol?

I already installed FFMPEG.

It is for Webcam transmission on the website Live stream format.

I've been watching this RTMP tutorial.
it's viable?
https://medium.com/vicuesoft-techblog/how-to-install-tune-nginx-with-rtmp-module-and-start-streaming-through-ffmpeg-with-quicksync-on-eff02fac3eeb

I await help ... thank you all.   ;) thankssssss

8
CentOS 7 Problems / OWASP CRS/PROTOCOL VIOLATION/IP HOST
« on: April 06, 2020, 09:14:31 PM »
Thanks to all forum volunteers

add a Rule Id920350 add my server mod Security

But the server still has strange behavior
check the apache logs

[Mon Apr 06 21:57:14.586497 2020] [:error] [pid 19905:tid 140019146647296] [client 169.197.108.38:33480] [client 169.197.108.38] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "793"] [id "920350"] [rev "2"] [msg "Host header is a numeric IP address"] [data "on here IP my server"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "on here IP my server"] [uri "/"] [unique_id "XouJmgnUnhjrjhrgigvuTG4YQAAAEw"]





And I say again as I already said in several posts here in the Forum, and I did not solve the problem .. I turn off the mod Security and apache does not connect in any way.


Thanks to all forum volunteers

9
Apache / HELP ME not start apache HELP ;-(
« on: March 15, 2020, 05:49:16 PM »
PLEASE, HELP ME

CentOs 7

CWPpro version: 0.9.8.951

ERRO START

Job for httpd.service failed because the control process exited with error code. See "systemctl status httpd.service" and "journalctl -xe" for details.

                        ===================//===============

don't start apache

● httpd.service - Web server Apache
   Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vendor preset: disabled)
   Active: failed (Result: exit-code) since Sun 2020-03-15 18:53:28 CET; 11s ago
  Process: 7259 ExecStop=/usr/local/apache/bin/apachectl graceful-stop (code=exited, status=1/FAILURE)
  Process: 6507 ExecReload=/usr/local/apache/bin/apachectl graceful (code=exited, status=0/SUCCESS)
  Process: 18569 ExecStart=/usr/local/apache/bin/apachectl start (code=exited, status=1/FAILURE)
 Main PID: 6635 (code=exited, status=0/SUCCESS)

Mar 15 18:53:27 server.domain.site systemd[1]: Starting Web server Apache...
Mar 15 18:53:28 server.domain.site apachectl[18569]: AH00526: Syntax error on line 1 of /usr/local/apache/conf/userdata/luisjota/client.domain.site/modsec.conf:
Mar 15 18:53:28 server.domain.site apachectl[18569]: Invalid command 'SecRuleRemoveById', perhaps misspelled or defined by a module not included in the server configuration
Mar 15 18:53:28 server.domain.site systemd[1]: httpd.service: control process exited, code=exited status=1
Mar 15 18:53:28 server.domain.site systemd[1]: Failed to start Web server Apache.
Mar 15 18:53:28 server.domain.site systemd[1]: Unit httpd.service entered failed state.
Mar 15 18:53:28 server.domain.site systemd[1]: httpd.service failed.



=====log start====            ======================//===========================



Mar 15 18:52:48 server.domain.site kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3e:bc:73:28:99:3a:4d:23:91:08:00 SRC=174.166.174.117 DST=207.180.203.17 LEN=40 TOS=0x00 PREC=0x00 TTL=68 ID=56707 DF PROTO=TCP SPT=23922 DPT=3306 WINDOW=29200 RES=0x00 SYN URGP=0
Mar 15 18:52:50 server.domain.site kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3e:bc:73:28:99:3a:4d:23:91:08:00 SRC=116.5.21.17 DST=207.180.203.17 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=3364 PROTO=TCP SPT=31290 DPT=1433 WINDOW=1024 RES=0x00 SYN URGP=0
Mar 15 18:52:55 server.domain.site kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3e:bc:73:28:99:3a:4d:30:af:08:00 SRC=207.180.195.165 DST=207.180.203.17 LEN=52 TOS=0x00 PREC=0x00 TTL=126 ID=26540 DF PROTO=TCP SPT=58114 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0
Mar 15 18:53:01 server.domain.site kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3e:bc:73:28:99:3a:4d:23:91:08:00 SRC=37.135.146.213 DST=207.180.203.17 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=21564 DF PROTO=TCP SPT=59040 DPT=3306 WINDOW=29200 RES=0x00 SYN URGP=0
Mar 15 18:53:04 server.domain.site kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3e:bc:73:28:99:3a:4d:30:af:08:00 SRC=92.118.37.55 DST=207.180.203.17 LEN=40 TOS=0x00 PREC=0x00 TTL=253 ID=10820 PROTO=TCP SPT=42099 DPT=38951 WINDOW=1024 RES=0x00 SYN URGP=0
Mar 15 18:53:07 server.domain.site kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3e:bc:73:28:99:3a:4d:30:af:08:00 SRC=207.180.195.165 DST=207.180.203.17 LEN=52 TOS=0x00 PREC=0x00 TTL=126 ID=11392 DF PROTO=TCP SPT=63236 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0
Mar 15 18:53:27 server.domain.site systemd[1]: Starting Web server Apache...
-- Subject: Unit httpd.service has begun start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit httpd.service has begun starting up.
Mar 15 18:53:28 server.domain.site apachectl[18569]: AH00526: Syntax error on line 1 of /usr/local/apache/conf/userdata/luis/client.jonyhost.site/modsec.conf:
Mar 15 18:53:28 server.domain.site apachectl[18569]: Invalid command 'SecRuleRemoveById', perhaps misspelled or defined by a module not included in the server configuration
Mar 15 18:53:28 server.domain.site systemd[1]: httpd.service: control process exited, code=exited status=1
Mar 15 18:53:28 server.domain.site systemd[1]: Failed to start Web server Apache.
-- Subject: Unit httpd.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit httpd.service has failed.
--
-- The result is failed.
Mar 15 18:53:28 server.domain.site systemd[1]: Unit httpd.service entered failed state.
Mar 15 18:53:28 server.domain.site systemd[1]: httpd.service failed.
Mar 15 18:53:38 server.domain.site kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3e:bc:73:28:99:3a:4d:30:af:08:00 SRC=45.136.110.227 DST=207.180.203.17 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=2507 PROTO=TCP SPT=57564 DPT=12844 WINDOW=1024 RES=0x00 SYN URGP=0
Mar 15 18:53:52 server.domain.site kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3e:bc:73:28:99:3a:4d:30:af:08:00 SRC=45.134.179.240 DST=207.180.203.17 LEN=40 TOS=0x00 PREC=0x00 TTL=252 ID=2681 PROTO=TCP SPT=43768 DPT=4400 WINDOW=1024 RES=0x00 SYN URGP=0
Mar 15 18:53:55 server.domain.site postfix/smtpd[17349]: timeout after AUTH from unknown[92.118.38.42]
Mar 15 18:53:55 server.domain.site postfix/smtpd[17349]: disconnect from unknown[92.118.38.42] ehlo=1 auth=0/1 rset=1 commands=2/3
Mar 15 18:54:05 server.domain.site kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3e:bc:73:28:99:3a:4d:30:af:08:00 SRC=92.118.37.55 DST=207.180.203.17 LEN=40 TOS=0x00 PREC=0x00 TTL=253 ID=34190 PROTO=TCP SPT=42099 DPT=25100 WINDOW=1024 RES=0x00 SYN URGP=0
Mar 15 18:54:08 server.domain.site kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3e:bc:73:28:99:3a:4d:30:af:08:00 SRC=92.118.37.55 DST=207.180.203.17 LEN=40 TOS=0x00 PREC=0x00 TTL=253 ID=42817 PROTO=TCP SPT=42099 DPT=10479 WINDOW=1024 RES=0x00 SYN URGP=0
Mar 15 18:54:16 server.domain.site kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3e:bc:73:28:99:3a:4d:23:91:08:00 SRC=37.127.48.85 DST=207.180.203.17 LEN=40 TOS=0x08 PREC=0x20 TTL=57 ID=50597 DF PROTO=TCP SPT=34034 DPT=3306 WINDOW=29200 RES=0x00 SYN URGP=0
Mar 15 18:55:01 server.domain.site systemd[1]: Started Session 3635 of user root.
-- Subject: Unit session-3635.scope has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit session-3635.scope has finished starting up.
--
-- The start-up result is done.
Mar 15 18:55:01 server.domain.site systemd[1]: Started Session 3637 of user root.
-- Subject: Unit session-3637.scope has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit session-3637.scope has finished starting up.
--
-- The start-up result is done.
Mar 15 18:55:01 server.domain.site systemd[1]: Started Session 3636 of user root.
-- Subject: Unit session-3636.scope has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit session-3636.scope has finished starting up.
--
-- The start-up result is done.
Mar 15 18:55:01 server.domain.site CROND[19200]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Mar 15 18:55:01 server.domain.site CROND[19202]: (root) CMD (/usr/bin/php -q /home/luis/public_html/client.domain.eu/crons/pop.php/>/dev/null 2>&1)
Mar 15 18:55:01 server.domain.site CROND[19201]: (root) CMD (/usr/bin/php -q /home/luis/public_html/client.domain.eu/crons/cron.php)
Mar 15 18:55:12 server.domain.site kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3e:bc:73:28:99:3a:4d:23:91:08:00 SRC=154.146.186.131 DST=207.180.203.17 LEN=40 TOS=0x00 PREC=0x00 TTL=55 ID=34563 DF PROTO=TCP SPT=7740 DPT=3306 WINDOW=29200 RES=0x00 SYN URGP=0
Mar 15 18:55:15 server.domain.site kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3e:bc:73:28:99:3a:4d:23:91:08:00 SRC=185.36.81.42 DST=207.180.203.17 LEN=40 TOS=0x08 PREC=0x20 TTL=246 ID=54321 PROTO=TCP SPT=51716 DPT=8088 WINDOW=65535 RES=0x00 SYN URGP=0
MAC=00:50:56:3e:bc:73:28:99:3a:4d:30:af:08:00 SRC=92.118.37.55 DST=207.180.203.17 LEN=40 TOS=0x00 PREC=0x00 TTL=253 ID=47546 PROTO=TCP SPT=42099 DPT=51458 WINDOW=1024 RES=0x00 SYN URGP=0
MAC=00:50:56:3e:bc:73:28:99:3a:4d:23:91:08:00 SRC=162.213.254.115 DST=207.180.203.17 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54489 PROTO=TCP SPT=56013 DPT=3323 WINDOW=1024 RES=0x00 SYN URGP=0
Mar 15 18:57:38 server.domain.site pure-ftpd[19772]: (?@127.0.0.1) [INFO] New connection from 127.0.0.1
Mar 15 18:57:38 server.domain.site pure-ftpd[19772]: (?@127.0.0.1) [INFO] Logout.
Mar 15 18:57:38 server.domain.site postfix/smtpd[19775]: connect from localhost[127.0.0.1]
Mar 15 18:57:38 server.domain.site postfix/smtpd[19775]: disconnect from localhost[127.0.0.1] ehlo=1 quit=1 commands=2
Mar 15 18:57:38 server.domain.site named[8420]: client @0x7fa1e003bfa0 127.0.0.1#35718 (.): query (cache) './NS/IN' denied
Mar 15 18:57:38 server.domain.site named[8420]: client @0x7fa1d8001960 127.0.0.1#52736 (.): query (cache) './NS/IN' denied
Mar 15 18:57:41 server.domain.site kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3e:bc:73:28:99:3a:4d:23:91:08:00 SRC=37.161.35.167 DST=207.180.203.17 LEN=40 TOS=0x08 PREC=0x20 TTL=76 ID=2058 DF PROTO=TCP SPT=4941 DPT=3306 WINDOW=29200 RES=0x00 SYN URGP=0
Mar 15 18:57:43 server.domain.site kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3e:bc:73:28:99:3a:4d:23:91:08:00 SRC=38.65.250.6 DST=207.180.203.17 LEN=40 TOS=0x08 PREC=0x40 TTL=246 ID=27244 PROTO=TCP SPT=56381 DPT=1433 WINDOW=1024 RES=0x00 SYN URGP=0
Mar 15 18:57:44 server.domain.site kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3e:bc:73:28:99:3a:4d:23:91:08:00 SRC=185.153.198.249 DST=207.180.203.17 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=45609 PROTO=TCP SPT=44462 DPT=8080 WINDOW=1024 RES=0x00 SYN URGP=0
Mar 15 18:57:52 server.domain.site kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3e:bc:73:28:99:3a:4d:23:91:08:00 SRC=185.176.27.178 DST=207.180.203.17 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=42207 PROTO=TCP SPT=42832 DPT=5570 WINDOW=1024 RES=0x00 SYN URGP=0
MAC=00:50:56:3e:bc:73:28:99:3a:4d:30:af:08:00 SRC=92.118.37.53 DST=207.180.203.17 LEN=40 TOS=0x00 PREC=0x00 TTL=253 ID=31073 PROTO=TCP SPT=42105 DPT=24526 WINDOW=1024 RES=0x00 SYN URGP=0
Mar 15 19:00:01 server.domain.site kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3e:bc:73:28:99:3a:4d:23:91:08:00 SRC=174.213.242.29 DST=207.180.203.17 LEN=40 TOS=0x00 PREC=0x00 TTL=80 ID=11110 DF PROTO=TCP SPT=16923 DPT=3306 WINDOW=29200 RES=0x00 SYN URGP=0
Mar 15 19:00:01 server.domain.site systemd[1]: Started Session 3640 of user root.
-- Subject: Unit session-3640.scope has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit session-3640.scope has finished starting up.
--
-- The start-up result is done.
Mar 15 19:00:01 server.domain.site systemd[1]: Started Session 3639 of user root.
-- Subject: Unit session-3639.scope has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit session-3639.scope has finished starting up.
--
-- The start-up result is done.
Mar 15 19:00:01 server.domain.site systemd[1]: Started Session 3638 of user root.
-- Subject: Unit session-3638.scope has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit session-3638.scope has finished starting up.
--
-- The start-up result is done.
Mar 15 19:00:01 server.domain.site systemd[1]: Started Session 3641 of user root.
-- Subject: Unit session-3641.scope has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit session-3641.scope has finished starting up.
--
-- The start-up result is done.
Mar 15 19:00:01 server.domain.site CROND[20217]: (root) CMD (/usr/local/bin/svcMonitor-systemd)
Mar 15 19:00:01 server.domain.site systemd[1]: Started Session 3642 of user root.
-- Subject: Unit session-3642.scope has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit session-3642.scope has finished starting up.
--
-- The start-up result is done.
Mar 15 19:00:01 server.domain.site systemd[1]: Started Session 3643 of user root.
-- Subject: Unit session-3643.scope has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit session-3643.scope has finished starting up.
--
-- The start-up result is done.
Mar 15 19:00:01 server.domain.site systemd[1]: Started Session 3644 of user root.
-- Subject: Unit session-3644.scope has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit session-3644.scope has finished starting up.
--
-- The start-up result is done.
Mar 15 19:00:01 server.domain.site CROND[20222]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar 15 19:00:01 server.domain.site CROND[20221]: (root) CMD (/usr/local/bin/svcMonitor)
Mar 15 19:00:01 server.domain.site CROND[20223]: (root) CMD (/usr/bin/php -q /home/luis/public_html/client.domain.eu/crons/cron.php)
Mar 15 19:00:01 server.domain.site CROND[20226]: (root) CMD (/usr/bin/php -q /home/luis/public_html/client.domain.eu/crons/pop.php/>/dev/null 2>&1)
Mar 15 19:00:01 server.domain.site CROND[20224]: (root) CMD (/usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1)
Mar 15 19:00:01 server.domain.site CROND[20225]: (root) CMD (root /usr/local/bin/svcMonitor/>/dev/null 2>&1)
Mar 15 19:00:08 server.domain.site kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3e:bc:73:28:99:3a:4d:30:af:08:00 SRC=207.180.195.165 DST=207.180.203.17 LEN=52 TOS=0x00 PREC=0x00 TTL=126 ID=12627 DF PROTO=TCP SPT=14922 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0
MAC=00:50:56:3e:bc:73:28:99:3a:4d:23:91:08:00 SRC=185.176.27.178 DST=207.180.203.17 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=46242 PROTO=TCP SPT=42832 DPT=5146 WINDOW=1024 RES=0x00 SYN URGP=0
Mar 15 19:00:50 server.domain.site kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3e:bc:73:28:99:3a:4d:30:af:08:00 SRC=45.136.110.227 DST=207.180.203.17 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=28023 PROTO=TCP SPT=57564 DPT=11157 WINDOW=1024 RES=0x00 SYN URGP=0
Mar 15 19:00:50 server.domain.site kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3e:bc:73:28:99:3a:4d:30:af:08:00 SRC=31.184.215.50 DST=207.180.203.17 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=47696 PROTO=TCP SPT=42113 DPT=22068 WINDOW=1024 RES=0x00 SYN URGP=0
Mar 15 19:00:52 server.domain.site kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3e:bc:73:28:99:3a:4d:30:af:08:00 SRC=91.206.15.191 DST=207.180.203.17 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=57086 PROTO=TCP SPT=52777 DPT=58284 WINDOW=1024 RES=0x00 SYN URGP=0
Mar 15 19:01:01 server.domain.site systemd[1]: Started Session 3645 of user root.
-- Subject: Unit session-3645.scope has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit session-3645.scope has finished starting up.
--
-- The start-up result is done.
Mar 15 19:01:01 server.domain.site CROND[20521]: (root) CMD (run-parts /etc/cron.hourly)
Mar 15 19:01:01 server.domain.site run-parts(/etc/cron.hourly)[20524]: starting 0anacron
Mar 15 19:01:01 server.domain.site run-parts(/etc/cron.hourly)[20530]: finished 0anacron
Mar 15 19:01:04 server.domain.site kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3e:bc:73:28:99:3a:4d:30:af:08:00 SRC=91.206.15.191 DST=207.180.203.17 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=11185 PROTO=TCP SPT=52777 DPT=52858 WINDOW=1024 RES=0x00 SYN URGP=0
Mar 15 19:01:10 server.domain.site kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3e:bc:73:28:99:3a:4d:23:91:08:00 SRC=194.26.29.110 DST=207.180.203.17 LEN=40 TOS=0x08 PREC=0x20 TTL=246 ID=9263 PROTO=TCP SPT=43390 DPT=59999 WINDOW=1024 RES=0x00 SYN URGP=0
Mar 15 19:01:14 server.domain.site kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3e:bc:73:28:99:3a:4d:23:91:08:00 SRC=154.191.91.224 DST=207.180.203.17 LEN=40 TOS=0x08 PREC=0x20 TTL=70 ID=18072 DF PROTO=TCP SPT=52865 DPT=3306 WINDOW=29200 RES=0x00 SYN URGP=0
Mar 15 19:01:31 server.domain.site kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3e:bc:73:28:99:3a:4d:30:af:08:00 SRC=45.136.110.227 DST=207.180.203.17 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=1807 PROTO=TCP SPT=57564 DPT=11172 WINDOW=1024 RES=0x00 SYN URGP=0
Mar 15 19:01:52 server.domain.site kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3e:bc:73:28:99:3a:4d:30:af:08:00 SRC=92.118.37.53 DST=207.180.203.17 LEN=40 TOS=0x00 PREC=0x00 TTL=253 ID=7953 PROTO=TCP SPT=42105 DPT=16262 WINDOW=1024 RES=0x00 SYN URGP=0
×




===log apache========        =========================//===========================




certificate does NOT include an ID which matches the server name
[Sun Mar 15 17:43:03.694485 2020] [ssl:warn] [pid 6635:tid 140110386665344] AH01909: cpanel.chatpt.eu:443:0 server certificate does NOT include an ID which matches the server name
certificate does NOT include an ID which matches the server name
[Sun Mar 15 17:43:03.697022 2020] [ssl:warn] [pid 6635:tid 140110386665344] AH01909: cpanel.afymarketing.domain.eu:443:0 server certificate does NOT include an ID which matches the server name

[Sun Mar 15 17:43:03.697626 2020] [ssl:warn] [pid 6635:tid 140110386665344] AH01909: mail.afymarketing.domain.eu:443:0 server certificate does NOT include an ID which matches the server name
[Sun Mar 15 17:43:03.698234 2020] [ssl:warn] [pid 6635:tid 140110386665344] AH01909: webmail.afymarketing.domain.eu:443:0 server certificate does NOT include an ID which matches the server name
[Sun Mar 15 17:43:03.699452 2020] [ssl:warn] [pid 6635:tid 140110386665344] AH01906: server.domain.site:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)

[Sun Mar 15 17:43:03.703149 2020] [mpm_event:notice] [pid 6635:tid 140110386665344] AH00489: Apache/2.4.39 (Unix) OpenSSL/1.0.2k-fips configured -- resuming normal operations
[Sun Mar 15 17:43:03.703231 2020] [core:notice] [pid 6635:tid 140110386665344] AH00094: Command line: '/usr/local/apache/bin/httpd'
[Sun Mar 15 17:43:52.547973 2020] [mpm_event:notice] [pid 6635:tid 140110386665344] AH00491: caught SIGTERM, shutting down




thanks for helping

10
Attention Serious Failure DataBase Account..
I swapped my WHMCS 7.9.1 from one Account Dominio.site to Another Account Dominio.eu. I was surprised to realize that WHMCS has always been working with a database from the first domain, I forgot to change.

Finding out a while later when deleting databases on the first domain ... strange, never gave a domain error on whmcs 7.9.1.

11
CentOS 7 Problems / I turned off Mod security and turned off Apache.
« on: March 09, 2020, 10:44:23 PM »
I turned off Mod security and off Apache.
and does not start
Why did you have this behavior?



I thank everyone who helps me in the answer.

12
E-Mail / I get spam email 2000 thousand in 24H
« on: March 06, 2020, 01:34:33 AM »
I ask for help Forum Please..

I am receiving 2000 thousand in 24 Hour.

I can't turn off Cron Job


HEADER FROM EMAIL

Cron Job my whmcs ->   /usr/bin/php -q /home/jony/public_html/client.domain.com/crons/pop.php



TEXT EMAIL

POP Import Log
Date: 06/03/2020 00:55:02
---


->>DETAILS EMAIL

Return-Path: <root@server.domain.com>
Delivered-To: suporte@domain.eu
Received: by server.domain.com (Postfix)
    id 735AF2032E1; Fri, 6 Mar 2020 02:15:02 +0100 (CET)
Delivered-To: root@server.domain.com
Received: by server.domain.com (Postfix, from userid 0)
    id 3D9D02000FA; Fri, 6 Mar 2020 02:15:02 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
    d=server.domain.com; s=default; t=1583457302;
    bh=ExUanVhdZVdwy3f3m5XEPi7IE6r6qb7qxo/LKrVLglU=;
    h=From:To:Subject:Date;
    b=PgBBlnCctjIp4k+PN61tpDn8zqytWdcXQSlI2rMamMQ75FeKxWRCWF9mB4C/Cdspn
    PCtTXfQVWQ5TN4+I4nPAG090oSR2SXKQyYO9ZmvgBnWLHuR5ZrKkXNUo6Ig46NZnN+
    D0hNfebvuo8DQXw6pyJHm1Ql5qi6wGCybwBB3UK8=
From: "(Cron Daemon)" <root@server.domain.com>
To: root@server.domain.com
Subject: Cron <root@server> /usr/bin/php -q /home/jony/public_html/client.domain.com/crons/pop.php
Content-Type: text/plain; charset=UTF-8
Auto-Submitted: auto-generated
Precedence: bulk
X-Cron-Env: <XDG_SESSION_ID=7903>
X-Cron-Env: <XDG_RUNTIME_DIR=/run/user/0>
X-Cron-Env: <LANG=en_US.UTF-8>
X-Cron-Env: <SHELL=/bin/sh>
X-Cron-Env: <HOME=/root>
X-Cron-Env: <PATH=/usr/bin:/bin>
X-Cron-Env: <LOGNAME=root>
X-Cron-Env: <USER=root>
Message-Id: <20200306011502.3D9D02024FA@server.domain.com>
Date: Fri, 6 Mar 2020 02:15:02 +0100 (CET)



Thank you all on the forum




13
CentOS 7 Problems / installed "Nuell" Menu certificates SSL?
« on: February 26, 2020, 05:48:27 PM »
Menu certificates SSL installed "Null".

This is for what?
Why did you appear here? I ask. have any logic?


14
CentOS 7 Problems / Error Cron job created 80GB backup
« on: February 23, 2020, 12:02:39 PM »
Thanks to anyone who can help me ..

Help, Cron job created 80GB backup ..
I ask, How to delete backups? Backups Are Main Domain Account Server VPS

15
E-Mail / emails, Error 550 5.1.1.
« on: February 14, 2020, 10:32:13 AM »
Thank you all
I hope you understand what is written below.

And thanks for helping me I've been having problems with the server for 35 days.

With These Problems But Still, I find the best CWP Panel Host free ..
I have CWPpro ;-) I advise all this panel ..



I installed CWP on CentOs7 .. I put email on the System sistema@domiani.com. I changed Hostname to Server, When Receiving emails, Error 550 5.1.1. Create new email and it works well .. I went to see the error log, Name hostname is the old one, I ask it has nothing to do with the error?


log erro email

Feb 14 10:45:01 vmi-old postfix/qmgr[1004008]: CB000000: from=<>, size=20000, nrcpt=1 (queue active)
Feb 14 10:45:01 vmi-old postfix/qmgr[10000]: BAE00000: removed
Feb 14 10:45:01 vmi-old postfix/cleanup[10000]: D1000000: message-id=<2000000000.C0000000000@serviot.jonyhost.site>
Feb 14 10:45:01 vmi-old postfix/local[10000]: CB0000000: to=<root@newserver.domain.com>, relay=local, delay=0.03, delays=0.02/0/0/0.01, dsn=2.0.0, status=sent (forwarded as D14FE10A09E0)
Feb 14 10:45:01 vmi-old postfix/qmgr[10000]: CB0000000: removed
Feb 14 10:45:01 vmi-old postfix/qmgr[10000]: D10000000: from=<>, size=2897, nrcpt=1 (queue active)
Feb 14 10:45:01 vmi-old postfix/pipe[10000]: D10000000: to=<sistema@domiani.com>, orig_to=<root@newhostname.domain.com>, relay=dovecot, delay=0.03, delays=0.01/0/0/0.02, dsn=5.1.1, status=bounced (user unknown)
Feb 14 10:45:01 vmi-old postfix/qmgr[14198]: D100000000: removed
Feb 14 10:45:52 vmi-old postfix/smtpd[10000]: connect from localhost[127.0.0.1]
Feb 14 10:45:52 vmi-old postfix/smtpd[10000]: disconnect from localhost[127.0.0.1]
Feb 14 10:46:50 vmi-old clamd[14031]: SelfCheck: Database status OK.
Feb 14 10:47:07 vmi-old postfix/anvil[10000]: statistics: max connection rate 1/60s for (smtp:000.000.000.000) at Feb 14 10:41:39
Feb 14 10:47:07 vmi-old postfix/anvil[15641]: statistics: max connection count 1 for (smtp:000.000.000.000) at Feb 14 10:41:39
Feb 14 10:47:07 vmi-old postfix/anvil[15641]: statistics: max cache size 2 at Feb 14 10:41:57



With These Problems But Still, I find the best CWP Panel Host free ..
I have CWPpro ;-) I advise all this panel ..
CWP There is no bug. I have little knowledge of Linux and CentOs ... This is the biggest bug ;-)

Thank you all

Pages: [1] 2