Messages

841

Information / Re: disk r/w io speed

« on: January 15, 2023, 04:42:48 AM »

Which country? You can get a used 2012 Mac mini (space for 2x SATA SSD) with 16GB RAM and have it co-located here in the US for $50/mo at MacStadium or CyberLynk (MacMiniVault). You don't have to run macOS as the host OS -- you can run VMware ESXi or a Linux with KVM if you want to run VM(s). Or bare metal CentOS even!

842

Information / Re: error ? daily backup

« on: January 15, 2023, 04:33:46 AM »

Have you looked for large files that could be deleted/truncated?

Code: [Select]

find / -type f -size +500MYou could delete older backups in /backup if you are confident you don't need them

Code: [Select]

[root@srv]# ls -al /backup
total 16
drw-------.  6 root root   61 Jan 11  2022 .
dr-xr-xr-x. 21 root root 4096 Jan 14 16:49 ..
drwxr-xr-x. 37 root root 4096 Feb 19  2022 daily
drwxr-xr-x. 37 root root 4096 Mar  1  2022 monthly
drwxr-xr-x. 37 root root 4096 Feb 20  2022 weeklyIn this case, maybe clean out /backup/monthly?

843

Mod_Security / Re: Error 403 Forbidden (You don't have permission to access / on this server)

« on: January 15, 2023, 12:51:58 AM »

Change to Comodo WAF

Agreed, OWASP is too aggressive of a default.
But this tutorial has relevant info and suggested changes if you do decide to use OWASP rules.

844

Mod_Security / Re: Custom modsec rules

« on: January 14, 2023, 11:59:47 PM »

Have you considered blocking at the CSF/LFD firewall level instead of mod_security?

Otherwise, the answer to your question is here. File for custom directives is:

Code: [Select]

nano /usr/local/apache/modsecurity-cwaf/custom_user.conf

845

E-Mail / Re: Roundcube update not working due to php version of cwpsrv

« on: January 14, 2023, 11:57:35 PM »

The CWP team should get to this, but their timeline is always opaque. Meanwhile, I myself am not too worried about it as a break-in vector, as my config is generally hardened, as is Postfix so I shouldn't become a UCE relay. Not being an open relay and rate-limiting your outbound mail flow will really make you NOT a juicy target for spammers.

846

PHP Selector / Re: I cannot run php versions above Php 7.2 on my Centos Web Panel Server.

« on: January 14, 2023, 11:45:54 PM »

When installing a new version of php-fpm, the sockets config is not automatically created for you; you must do it manually. So after building it and will create an error of the .sock file missing. So you have to copy over your older users directory. For example, after enabling php 7.4, I had to create:
/opt/alt/php-fpm74/usr/etc/php-fpm.d/users
this way:

Code: [Select]

sudo cp -r /opt/alt/php-fpm72/usr/etc/php-fpm.d/users /opt/alt/php-fpm74/usr/etc/php-fpm.d/usersand then edit the new conf files to reflect the new version:

Code: [Select]

sudo perl -pi.back -e 's/php-fpm72/php-fpm74/g;' /opt/alt/php-fpm74/usr/etc/php-fpm.d/users/*.confThen restart the php-fpm process:

Code: [Select]

sudo service php-fpm74 restart

847

PHP Selector / Re: PECL extensions using PHP-FPM?

« on: January 14, 2023, 11:33:24 PM »

In the CLI, you have to call the specific version of php-fpm you want, instead of just blindly calling php in the terminal. For example, call php 8.1 with no memory limit (as I often have to do with composer):

Code: [Select]

/opt/alt/php-fpm81/usr/bin/php -d memory_limit=-1
And for things that need to run as a specific user, instead of root:

Code: [Select]

sudo -u USERNAME /opt/alt/php-fpm81/usr/bin/php -d memory_limit=-1

848

Other / Re: Problem with users SSH access

« on: January 09, 2023, 11:33:09 PM »

Are you using AllowUsers and/or AllowGroups in /etc/ssh/sshd_config?

849

Other / Re: Create new disk (home2) because /home is full

« on: January 09, 2023, 09:21:07 PM »

You would probably need to create home2 on the other disk, then possibly symlinks in /home pointing to it would work, or else you could put fstab mounts into /home (after clearing it out first -- as with the guides). But I think you'll find that /home generally isn't the culprit for disk consumption. A better consideration would be to put /var/vmail on another disk and mount it at /var/vmail in the filesystem. For instance, I have one packrat customer that has 75GB of mails in /var/vmail. Sum total of /var/vmail on that server is over 200GB of my 300GB disk allotment!

Or did you put /home on a separate partition?

850

Other / Re: CWPpro Terminal - How to disable it - causing excess memory usage

« on: January 09, 2023, 11:41:14 AM »

Agreed; haven't found it worth the bother nor the bloat and slow responsiveness. Always a better remote term available on any system I use (Mac, Linux, Windows PuTTY, etc.)

851

Other / Re: Create new disk (home2) because /home is full

« on: January 09, 2023, 11:01:43 AM »

There are many guides out there...

852

Other / Re: CWP Forum

« on: January 09, 2023, 10:59:32 AM »

Agreed, please update the forum to the latest version of the forum (2.1.3 -- released Mon, 21 Nov 2022). The currently running version is woefully out of date and subject to many bugs and security issues!

853

Varnish / Re: Wordpress robust default.vcl ? do you have any?

« on: January 08, 2023, 09:03:01 PM »

Thanks much! I have WordPress sites running under nginx but have had thoughts of integrating Varnish into the flow to milk a little more performance out of the site, esp. since it is more static in nature. I'll give your .vcl a test drive and see how it goes. I'll report back if I have any issues.

854

Varnish / Re: Drupal VCL tpl file for Varnish

« on: January 08, 2023, 08:59:06 PM »

Thanks much! I have a Drupal 9 site running under nginx but have had thoughts of integrating Varnish into the flow to milk a little more performance out of the site, esp. since it is more static in nature. I'll give your .vcl a test drive and see how it goes. I'll report back if I have any issues.

855

Problems on other RedHat linux servers / Re: Port 2030 does not open

« on: January 08, 2023, 07:52:45 PM »

And best practice is to run everything under HTTPS -- so you can skip 2030 and go for 2031 instead. I prefer that, as well as 2096 for webmail, instead of HTTP on 2095. (I prefer not to follow cPanel's port conventions, though -- I don't like using 2087 for the admin panel.)