Topics

1

Varnish / Excessive resource usage: varnishlog

« on: December 10, 2018, 11:41:56 AM »

Hi!
Since I've installed Varnish (together with Nginx, Apache & PHP-FPM), I get an email every hour with »

Code: [Select]

Time:         Mon Dec 10 12:18:19 2018 +0100
Account:      varnishlog
Resource:     Process Time
Exceeded:     27038 > 1800 (seconds)
Executable:   /usr/bin/varnishncsa
Command Line: /usr/bin/varnishncsa -a -w /var/log/varnish/varnishncsa.log -D -P /run/varnishncsa/varnishncsa.pid
PID:          3460 (Parent PID:3460)
Killed:       No
and the exeeded time get longer and longer…
Do we really need this varnishncsa for varnish to work?
Can I stop & disable this process or is it necessary?

Thank you!
Ben

2

Suggestions / Nginx Ultimate Bad Bot Blocker

« on: November 22, 2018, 10:46:51 AM »

Hi!
Could please integrate "Nginx Ultimate Bad Bot Blocker" into CWP (pro)
THANK YOU!

https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker/

3

Suggestions / Suggestion voting-system / Feature Requests board

« on: November 22, 2018, 10:43:57 AM »

Hi!
Could we please have an suggestion voting-system  / feature requests board for CWP where we can upvote the features we like to see?
That would be great!

Here are some options - some of them are free »

• http://www.phpback.org/
• https://www.userreport.com/features/feedback-forum/
• https://www.feedbear.com/
• https://nolt.io/
• https://canny.io/
• https://userecho.com/

4

Nginx / Nginx Ultimate Bot Blocker

« on: November 22, 2018, 08:42:07 AM »

Does anyone have experience with Nginx Ultimate Bot Blocker?
https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker

I installed it after the instructions step by step, but I can't see any effect.
Step 10 failed for me.
I still get an "200 OK" when I should get an "(52) Empty reply from server" reply.

Any ideas?

@CWP Staff
Could you integrate this into future releases of CWP (pro)?
That would be awesome!
Thank you ^^

5

Suggestions / Custom Menu & Notepad please

« on: February 07, 2018, 04:00:09 PM »

Hello,
how about the possibility to create a custom menu in GUI?
Maybe as a drop-down at the top navigation bar (header > navbar) next to the Terminal button.
For example»


Also a way to save notes would be nice.
If I use the file_editor module and edit the URL for e.g.:
index.php?module=file_editor&file=/root/notes.txt
this would do …, but I don't want to edit the URL everytime.

So therefore a custom menu or maybe a module/button just for notes.
Thanks!

6

CentOS 7 Problems / module chkconfig empty on CentOS 7

« on: February 07, 2018, 12:13:39 PM »

Hi,
I've switched from CWP6 to CWP7pro and I am missing the chkconfig module.
To be more precisely the index.php?module=chkconfig is almost empty!

Screenshot >


Now, I am aware the CentOS 7 uses systemctl instead of chkconfig to configure system services, but didn't you consider this building CWP7?
Could you please fix this!?
Thank you.

7

CentOS-WebPanel Bugs / Popup text says 'allow' under "add blacklist entry"

« on: February 07, 2018, 11:49:13 AM »

I am running  CWPpro version: 0.9.8.448
If i want to add an entry to the blacklist under Firewall manager ("index.php?module=firewall"),
the popup window says "Allow"

Screenshot >


 

Probably a copy & paste error 

8

CentOS-WebPanel Bugs / Themes and Languages module totally messed up!

« on: February 07, 2018, 11:35:20 AM »

Hi,
I am running CWPpro version: 0.9.8.448 and the Themes and Languages plugin ("index.php?module=themes_lang") is totally messed up!

As far as I can tell it doesn't do anything an it looks like this (3 images) >>





It's a shame, I would love to have a dark theme!

9

How to / How to secure phpMyAdmin under CWP7

« on: January 27, 2018, 01:27:20 PM »

1. Open the PMA config file with your prefered editor
/usr/local/cwpsrv/var/services/pma/config.inc.php

2. add the following lines at the bottom

Code: [Select]

$cfg['ForceSSL'] = true;
$cfg['Servers'][$i]['AllowDeny']['order'] = 'deny,allow';
$cfg['Servers'][$i]['AllowDeny']['rules'] = array(

        // deny everyone by default
        'deny % from all',

        // allow all users from the local system
        'allow % from localhost',
        'allow % from 127.0.0.1',
        'allow % from ::1',

        // allow all users from the server IP (commented out)
        'allow % from YOUR_SERVER_ADDRESS.',

        // allow user root from local system
        'allow root from localhost',
        'allow root from 127.0.0.1',
        'allow root from ::1',

        // allow user root from local network/pc
        'allow root from YOUR_IP_ADDRESS/32',

        // add more usernames and their IP (or IP ranges) here -
);
3. replace the placeholders with your IP's
YOUR_SERVER_ADDRESS
YOUR_IP_ADDRESS

4. save, close and restart Apache

Code: [Select]

systemctl restart httpd
5. done.
You can test the setting if you comment out the line: 'allow root from YOUR_IP_ADDRESS/32',
and then try to login as root from your PC, or (leave it and) try to login from another IP as root.
You should then see a red message box saying: "Acces denied"

If  your local IP address is dynamic, I would NOT recommend this setting, otherwise you have to change  YOUR_IP_ADDRESS inside config.inc.php every now and then.

All the best,
Ben

Source: https://stackoverflow.com/questions/2631269/how-to-secure-phpmyadmin

10

How to / How to Enable HTTP/2 on CWP7

« on: January 25, 2018, 03:19:51 PM »

Please have a look at this article » https://www.mysterydata.com/how-to-enable-http-2-on-cwp7-centos-web-panel/

All the best,
Ben

11

CentOS-WebPanel GUI / What does the bell do? (Notifications not working)

« on: January 12, 2018, 10:30:08 AM »

Hi at all!
What does this little fella do?


It's always zero (0) and it doesn't show anything.
Not on my CWP6 and not on my CWPpro7

While phpMyAdmin on my CWPpro7 shows me 3 entries under: "Server: localhost »Database: root_cwp »Table: notifications" 
Sooo is this GUI bell (button) broken or what?


Can anyone help?
Thank you

12

CentOS 7 Problems / Possible 'Kernel Side-Channel Attack' - please help!?

« on: January 06, 2018, 12:19:46 PM »

Hi!
I need help.
I am running CWP7pro.
Distro Name: CentOS Linux release 7.4.1708 (Core)
Kernel Version: 3.10.0-693.11.6.el7.x86_64

And I received this message from LFD on my server >>>
System Integrity checking detected a modified system file

Code: [Select]

Time:     Thu Jan  4 13:47:36 2018 +0100

The following list of files have FAILED the md5sum comparison test. This means that the file has been changed in some way. This could be a result of an OS update or application upgrade. If the change is unexpected it should be investigated:

/usr/bin/cpupower: FAILED
/usr/sbin/intel-microcode2ucode: FAILED
/bin/cpupower: FAILED
/sbin/intel-microcode2ucode: FAILED
---------------------------------------------

and then this >>>
Anacron job 'cron.daily'

Code: [Select]

/etc/cron.daily/cwp:



====================================================
============= CentOS Web Panel Cron ================
====================================================


###########################
Firewall Flush Daily Blocks
###########################


######################
Update Server Packages
######################
TERM environment variable not set.
https://mirrors.rit.edu/fedora/epel/7/x86_64/repodata/90536f11162d701892e76964a68d4cba173dfeebb26cbf121e438062e2829cfc-updateinfo.xml.bz2: [Errno 14] HTTPS Error 404 - Not Found
Trying other mirror.
To address this issue please refer to the below knowledge base article

https://access.redhat.com/articles/1320623

If above article doesn't help to resolve this issue please create a bug on https://bugs.centos.org/

Redirecting to /bin/systemctl restart cwpsrv.service
Redirecting to /bin/systemctl restart cwp-phpfpm.service
Redirecting to /bin/systemctl reload cwpsrv.service
Redirecting to /bin/systemctl reload cwp-phpfpm.service

Date which backup script is using: 2018-01-05 02:24:55

cpulimit: no process found---------------------------------------------

Why did:

• /usr/bin/cpupower
• /usr/sbin/intel-microcode2ucode
• /bin/cpupower
• /sbin/intel-microcode2ucode

fail?
Does this mean my servers kernel has been corrupted by Kernel Side-Channel Attack?
See: https://access.redhat.com/security/vulnerabilities/speculativeexecution

And why does Update Server Packages get an: [Errno 14] HTTPS Error 404 - Not Found
What can I do??

Thanks for your help!

13

E-Mail / Why do emails get rejected / bounce back? PLESE HELP!

« on: July 12, 2016, 06:21:54 PM »

Hi!
One of my clients often send Emails to multiple recipients and she often gets Emails returned with an Mail Delivery Error.
Mostly the error says: "mailbox full" / "quota exceeded" OR "exceeded storage allocation" (552 Error)
It is very unlikely the recipients mailbox is full.
Sometimes the error says: "550 Data denied. (in reply to end of DATA command)" / "550 : Reason: mechanism (in reply to RCPT TO command)"

And also "535 authentication failure" which I believe could be the true reason for all of this ...

My client is really pissed and I don't know what it is.
I've got DKIM, SPF, SSL Authentification (Port 465, not TLS 587); Spamassasin, ClamAV, … up and running.

WHAT CAN IT BE?
PLEASE HELP!
THANK YOU

14

E-Mail / ProtonMail (End-to-End Encryption) in the future of CWP?

« on: February 03, 2016, 05:04:49 PM »

Hello there,
is there a possibility to include ProtonMail "the world’s most secure email service" instead of Roundcube in future versions of CWP?
It is open source since a short while >
https://protonmail.com/blog/protonmail-open-source/
https://github.com/ProtonMail/WebClient

I think it would make a great addition to CWP! 

Regards,
Ben