Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
Pages: [1]
1
SSL / How to Prevent a Subdomain from Auto Installing SSL
« on: April 06, 2021, 07:48:14 PM »
Hi guys, I need some guidance here:
I have a subdomain which is redirected externally to another site with its own SSL certificate.
I deleted the auto-SSL by Let's Encrypt, in CentOS, but after few hours the subdomain keeps getting the Let's Encrypt SSL certificate auto installed.
This situation is causing "Not-secure-site" issues, because the external site's certificate is issued to a different URL than my subdomain https://prnt.sc/115yinb
What can I do to use my subdomain in the URL bar, but pointing to the external (secured) site?
I have a subdomain which is redirected externally to another site with its own SSL certificate.
I deleted the auto-SSL by Let's Encrypt, in CentOS, but after few hours the subdomain keeps getting the Let's Encrypt SSL certificate auto installed.
This situation is causing "Not-secure-site" issues, because the external site's certificate is issued to a different URL than my subdomain https://prnt.sc/115yinb
What can I do to use my subdomain in the URL bar, but pointing to the external (secured) site?
2
DNS / BIND DNS Server Fail when Adding google._domainkey
« on: January 18, 2021, 07:16:35 AM »
Could somebody advise?
We're trying to add google._domainkey TXT record, as instructed by Google where we have our Mail server, and the record is added fine through the DNS file editor, but when restarting BIND DNS, we receive this warning: https://prnt.sc/x3t9cx
The only domain key allowed is the default._domainkey; removing the default._domainkey and just leaving google._domainkey, leaving both don't work either.
This is what the journalctl -xe shows:
Jan 17 23:01:22 host.domain.tld systemd[1]: Starting Berkeley Internet Name Domain (DNS)...
-- Subject: Unit named.service has begun start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit named.service has begun starting up.
Jan 17 23:01:22 host.domain.tld bash[22531]: zone localhost.localdomain/IN: loaded serial 0
Jan 17 23:01:22 host.domain.tld bash[22531]: zone localhost/IN: loaded serial 0
Jan 17 23:01:22 host.domain.tld bash[22531]: zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN: loaded serial 0
Jan 17 23:01:22 host.domain.tld bash[22531]: zone 1.0.0.127.in-addr.arpa/IN: loaded serial 0
Jan 17 23:01:22 host.domain.tld bash[22531]: zone 0.in-addr.arpa/IN: loaded serial 0
Jan 17 23:01:22 host.domain.tld bash[22531]: zone domain.tld/IN: loaded serial 2021010424
Jan 17 23:01:22 host.domain.tld bash[22531]: zone ns1.domain.tld/IN: loaded serial 2020122901
Jan 17 23:01:22 host.domain.tld bash[22531]: zone ns2.domain.tld/IN: loaded serial 2020122900
Jan 17 23:01:22 host.domain.tld bash[22531]: zone host.domain.tld/IN: loaded serial 2020122996
Jan 17 23:01:22 host.domain.tld bash[22531]: dns_rdata_fromtext: /var/named/DOMAIN.WITH.ISSUE.db:23: syntax error
Jan 17 23:01:22 host.domain.tld bash[22531]: zone DOMAIN.WITH.ISSUE/IN: loading from master file /var/named/DOMAIN.WITH.ISSUE.db failed: syntax error
Jan 17 23:01:22 host.domain.tld bash[22531]: zone DOMAIN.WITH.ISSUE/IN: not loaded due to errors.
Jan 17 23:01:22 host.domain.tld bash[22531]: _default/DOMAIN.WITH.ISSUE/IN: syntax error
Jan 17 23:01:22 host.domain.tld systemd[1]: named.service: control process exited, code=exited status=1
Jan 17 23:01:22 host.domain.tld systemd[1]: Failed to start Berkeley Internet Name Domain (DNS).
-- Subject: Unit named.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit named.service has failed.
--
-- The result is failed.
Jan 17 23:01:22 host.domain.tld systemd[1]: Unit named.service entered failed state.
Jan 17 23:01:22 host.domain.tld systemd[1]: named.service failed.
Jan 17 23:01:25 host.domain.tld dhclient[828]: DHCPREQUEST on eth0 to 172.31.0.1 port 67 (xid=0xd444f49)
Jan 17 23:01:25 host.domain.tld kernel: Firewall: *UDP_OUT Blocked* IN= OUT=eth0 SRC=172.31.13.28 DST=172.31.0.1 LEN=328 TOS=0x00 PREC=0x00 TTL=64 ID=39110 DF PROTO=UDP SPT=68 DPT=67 LEN=308 UID=0 GID=0
Jan 17 23:01:25 host.domain.tld dhclient[828]: send_packet: Operation not permitted
Jan 17 23:01:25 host.domain.tld dhclient[828]: dhclient.c:2717: Failed to send 300 byte long packet over fallback interface.
Jan 17 23:01:41 host.domain.tld dhclient[828]: DHCPREQUEST on eth0 to 172.31.0.1 port 67 (xid=0xd444f49)
Jan 17 23:01:41 host.domain.tld dhclient[828]: send_packet: Operation not permitted
Jan 17 23:01:41 host.domain.tld dhclient[828]: dhclient.c:2717: Failed to send 300 byte long packet over fallback interface.
Jan 17 23:01:41 host.domain.tld kernel: Firewall: *UDP_OUT Blocked* IN= OUT=eth0 SRC=172.31.13.28 DST=172.31.0.1 LEN=328 TOS=0x00 PREC=0x00 TTL=64 ID=49734 DF PROTO=UDP SPT=68 DPT=67 LEN=308 UID=0 GID=0
Jan 17 23:02:00 host.domain.tld dhclient[828]: DHCPREQUEST on eth0 to 172.31.0.1 port 67 (xid=0xd444f49)
Jan 17 23:02:00 host.domain.tld dhclient[828]: send_packet: Operation not permitted
Jan 17 23:02:00 host.domain.tld dhclient[828]: dhclient.c:2717: Failed to send 300 byte long packet over fallback interface.
Jan 17 23:02:00 host.domain.tld kernel: Firewall: *UDP_OUT Blocked* IN= OUT=eth0 SRC=172.31.13.28 DST=172.31.0.1 LEN=328 TOS=0x00 PREC=0x00 TTL=64 ID=59062 DF PROTO=UDP SPT=68 DPT=67 LEN=308 UID=0 GID=0
Jan 17 23:02:01 host.domain.tld systemd[1]: Created slice User Slice of securev.
-- Subject: Unit user-1001.slice has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit user-1001.slice has finished starting up.
--
-- The start-up result is done.
Appreciate your prompt response.
We're trying to add google._domainkey TXT record, as instructed by Google where we have our Mail server, and the record is added fine through the DNS file editor, but when restarting BIND DNS, we receive this warning: https://prnt.sc/x3t9cx
The only domain key allowed is the default._domainkey; removing the default._domainkey and just leaving google._domainkey, leaving both don't work either.
This is what the journalctl -xe shows:
Jan 17 23:01:22 host.domain.tld systemd[1]: Starting Berkeley Internet Name Domain (DNS)...
-- Subject: Unit named.service has begun start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit named.service has begun starting up.
Jan 17 23:01:22 host.domain.tld bash[22531]: zone localhost.localdomain/IN: loaded serial 0
Jan 17 23:01:22 host.domain.tld bash[22531]: zone localhost/IN: loaded serial 0
Jan 17 23:01:22 host.domain.tld bash[22531]: zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN: loaded serial 0
Jan 17 23:01:22 host.domain.tld bash[22531]: zone 1.0.0.127.in-addr.arpa/IN: loaded serial 0
Jan 17 23:01:22 host.domain.tld bash[22531]: zone 0.in-addr.arpa/IN: loaded serial 0
Jan 17 23:01:22 host.domain.tld bash[22531]: zone domain.tld/IN: loaded serial 2021010424
Jan 17 23:01:22 host.domain.tld bash[22531]: zone ns1.domain.tld/IN: loaded serial 2020122901
Jan 17 23:01:22 host.domain.tld bash[22531]: zone ns2.domain.tld/IN: loaded serial 2020122900
Jan 17 23:01:22 host.domain.tld bash[22531]: zone host.domain.tld/IN: loaded serial 2020122996
Jan 17 23:01:22 host.domain.tld bash[22531]: dns_rdata_fromtext: /var/named/DOMAIN.WITH.ISSUE.db:23: syntax error
Jan 17 23:01:22 host.domain.tld bash[22531]: zone DOMAIN.WITH.ISSUE/IN: loading from master file /var/named/DOMAIN.WITH.ISSUE.db failed: syntax error
Jan 17 23:01:22 host.domain.tld bash[22531]: zone DOMAIN.WITH.ISSUE/IN: not loaded due to errors.
Jan 17 23:01:22 host.domain.tld bash[22531]: _default/DOMAIN.WITH.ISSUE/IN: syntax error
Jan 17 23:01:22 host.domain.tld systemd[1]: named.service: control process exited, code=exited status=1
Jan 17 23:01:22 host.domain.tld systemd[1]: Failed to start Berkeley Internet Name Domain (DNS).
-- Subject: Unit named.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit named.service has failed.
--
-- The result is failed.
Jan 17 23:01:22 host.domain.tld systemd[1]: Unit named.service entered failed state.
Jan 17 23:01:22 host.domain.tld systemd[1]: named.service failed.
Jan 17 23:01:25 host.domain.tld dhclient[828]: DHCPREQUEST on eth0 to 172.31.0.1 port 67 (xid=0xd444f49)
Jan 17 23:01:25 host.domain.tld kernel: Firewall: *UDP_OUT Blocked* IN= OUT=eth0 SRC=172.31.13.28 DST=172.31.0.1 LEN=328 TOS=0x00 PREC=0x00 TTL=64 ID=39110 DF PROTO=UDP SPT=68 DPT=67 LEN=308 UID=0 GID=0
Jan 17 23:01:25 host.domain.tld dhclient[828]: send_packet: Operation not permitted
Jan 17 23:01:25 host.domain.tld dhclient[828]: dhclient.c:2717: Failed to send 300 byte long packet over fallback interface.
Jan 17 23:01:41 host.domain.tld dhclient[828]: DHCPREQUEST on eth0 to 172.31.0.1 port 67 (xid=0xd444f49)
Jan 17 23:01:41 host.domain.tld dhclient[828]: send_packet: Operation not permitted
Jan 17 23:01:41 host.domain.tld dhclient[828]: dhclient.c:2717: Failed to send 300 byte long packet over fallback interface.
Jan 17 23:01:41 host.domain.tld kernel: Firewall: *UDP_OUT Blocked* IN= OUT=eth0 SRC=172.31.13.28 DST=172.31.0.1 LEN=328 TOS=0x00 PREC=0x00 TTL=64 ID=49734 DF PROTO=UDP SPT=68 DPT=67 LEN=308 UID=0 GID=0
Jan 17 23:02:00 host.domain.tld dhclient[828]: DHCPREQUEST on eth0 to 172.31.0.1 port 67 (xid=0xd444f49)
Jan 17 23:02:00 host.domain.tld dhclient[828]: send_packet: Operation not permitted
Jan 17 23:02:00 host.domain.tld dhclient[828]: dhclient.c:2717: Failed to send 300 byte long packet over fallback interface.
Jan 17 23:02:00 host.domain.tld kernel: Firewall: *UDP_OUT Blocked* IN= OUT=eth0 SRC=172.31.13.28 DST=172.31.0.1 LEN=328 TOS=0x00 PREC=0x00 TTL=64 ID=59062 DF PROTO=UDP SPT=68 DPT=67 LEN=308 UID=0 GID=0
Jan 17 23:02:01 host.domain.tld systemd[1]: Created slice User Slice of securev.
-- Subject: Unit user-1001.slice has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit user-1001.slice has finished starting up.
--
-- The start-up result is done.
Appreciate your prompt response.
3
CSF Firewall / CSF Firewall not Allowing Incoming PING
« on: January 18, 2021, 06:51:40 AM »
Although the settings in /etc/csf/csf.conf are as recommended to allow incoming PING, is not working as it should be.
# Allow incoming PING. Disabling PING will likely break external uptime
# monitoring
ICMP_IN = "1"
Results:
https://prnt.sc/x3rnn3
Any idea what else should be enable?
# Allow incoming PING. Disabling PING will likely break external uptime
# monitoring
ICMP_IN = "1"
Results:
https://prnt.sc/x3rnn3
Any idea what else should be enable?
4
Other / Warning Database connection errorSQLSTATE[HY000] [1045] Access denied for user
« on: January 06, 2021, 12:04:27 AM »
Hi there,
Does anybody has experience installing WiseCP, the billing plugin, in CentOS 7?
I followed instructions on https://docs.wisecp.com/en/kb/installation, but after entering the database information in wisecp installation startup, I got this warning:
Warning
Database connection errorSQLSTATE[HY000] [1045] Access denied for user 'database-user'@'localhost' (using password: YES)
I already have the latest CWP7pro.admin version.
I'd appreciate any advice as CWP will not help with 3rd-party installations, if not paying the Enterprise support; unless they accept a one-time support for this
Does anybody has experience installing WiseCP, the billing plugin, in CentOS 7?
I followed instructions on https://docs.wisecp.com/en/kb/installation, but after entering the database information in wisecp installation startup, I got this warning:
Warning
Database connection errorSQLSTATE[HY000] [1045] Access denied for user 'database-user'@'localhost' (using password: YES)
I already have the latest CWP7pro.admin version.
I'd appreciate any advice as CWP will not help with 3rd-party installations, if not paying the Enterprise support; unless they accept a one-time support for this
5
Backup / External Backup for User Accounts, to Google Drive
« on: January 01, 2021, 12:33:20 AM »
Is it possible for developers, in new CWP version, to include External Backup/Restore to/from Google Drive, for User Accounts? I'm not referring to "official procedure" to Backup to Google Drive, which it's meant for Admin User (hosting account).
This would be similar feature used by cPanel's Backup, which comes with Installatron; allowing User Accounts to have external backups managed by themselves.
BTW, XCloner from Softaculous, is an alternative but has not been updated in 2 years and will fail with PHP versions above than 7.0.0
This would be similar feature used by cPanel's Backup, which comes with Installatron; allowing User Accounts to have external backups managed by themselves.
BTW, XCloner from Softaculous, is an alternative but has not been updated in 2 years and will fail with PHP versions above than 7.0.0
Pages: [1]
