Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
1831
E-Mail / Re: There is a CWP server vulnerability. Please help me.
« on: January 21, 2023, 08:42:38 PM »
Well, yes there was a vulnerability. But if you have updated to 0.9.8.1148 or newer (we are 2 updates past the vulnerable version), you should be safe. But it sounds as if your Postfix installation is not sufficiently hardened, and perhaps CSF/LDF is not doing all it can do for you. Also, consider installing Mod_Security with the Comodo ruleset.
1832
Information / Re: disk r/w io speed
« on: January 15, 2023, 04:42:48 AM »
Which country? You can get a used 2012 Mac mini (space for 2x SATA SSD) with 16GB RAM and have it co-located here in the US for $50/mo at MacStadium or CyberLynk (MacMiniVault). You don't have to run macOS as the host OS -- you can run VMware ESXi or a Linux with KVM if you want to run VM(s). Or bare metal CentOS even!
1833
Information / Re: error ? daily backup
« on: January 15, 2023, 04:33:46 AM »
Have you looked for large files that could be deleted/truncated?
Code: [Select]
find / -type f -size +500MYou could delete older backups in /backup if you are confident you don't need themCode: [Select]
[root@srv]# ls -al /backup
total 16
drw-------. 6 root root 61 Jan 11 2022 .
dr-xr-xr-x. 21 root root 4096 Jan 14 16:49 ..
drwxr-xr-x. 37 root root 4096 Feb 19 2022 daily
drwxr-xr-x. 37 root root 4096 Mar 1 2022 monthly
drwxr-xr-x. 37 root root 4096 Feb 20 2022 weeklyIn this case, maybe clean out /backup/monthly?
1834
Mod_Security / Re: Error 403 Forbidden (You don't have permission to access / on this server)
« on: January 15, 2023, 12:51:58 AM »Change to Comodo WAFAgreed, OWASP is too aggressive of a default.
But this tutorial has relevant info and suggested changes if you do decide to use OWASP rules.
1836
E-Mail / Re: Roundcube update not working due to php version of cwpsrv
« on: January 14, 2023, 11:57:35 PM »
The CWP team should get to this, but their timeline is always opaque. Meanwhile, I myself am not too worried about it as a break-in vector, as my config is generally hardened, as is Postfix so I shouldn't become a UCE relay. Not being an open relay and rate-limiting your outbound mail flow will really make you NOT a juicy target for spammers.
1837
PHP Selector / Re: I cannot run php versions above Php 7.2 on my Centos Web Panel Server.
« on: January 14, 2023, 11:45:54 PM »
When installing a new version of php-fpm, the sockets config is not automatically created for you; you must do it manually. So after building it and will create an error of the .sock file missing. So you have to copy over your older users directory. For example, after enabling php 7.4, I had to create:
/opt/alt/php-fpm74/usr/etc/php-fpm.d/users
this way:
/opt/alt/php-fpm74/usr/etc/php-fpm.d/users
this way:
Code: [Select]
sudo cp -r /opt/alt/php-fpm72/usr/etc/php-fpm.d/users /opt/alt/php-fpm74/usr/etc/php-fpm.d/usersand then edit the new conf files to reflect the new version:Code: [Select]
sudo perl -pi.back -e 's/php-fpm72/php-fpm74/g;' /opt/alt/php-fpm74/usr/etc/php-fpm.d/users/*.confThen restart the php-fpm process:Code: [Select]
sudo service php-fpm74 restart
1838
PHP Selector / Re: PECL extensions using PHP-FPM?
« on: January 14, 2023, 11:33:24 PM »
In the CLI, you have to call the specific version of php-fpm you want, instead of just blindly calling php in the terminal. For example, call php 8.1 with no memory limit (as I often have to do with composer):
And for things that need to run as a specific user, instead of root:
Code: [Select]
/opt/alt/php-fpm81/usr/bin/php -d memory_limit=-1And for things that need to run as a specific user, instead of root:
Code: [Select]
sudo -u USERNAME /opt/alt/php-fpm81/usr/bin/php -d memory_limit=-1
1839
Other / Re: Problem with users SSH access
« on: January 09, 2023, 11:33:09 PM »
Are you using AllowUsers and/or AllowGroups in /etc/ssh/sshd_config?
1840
Other / Re: Create new disk (home2) because /home is full
« on: January 09, 2023, 09:21:07 PM »
You would probably need to create home2 on the other disk, then possibly symlinks in /home pointing to it would work, or else you could put fstab mounts into /home (after clearing it out first -- as with the guides). But I think you'll find that /home generally isn't the culprit for disk consumption. A better consideration would be to put /var/vmail on another disk and mount it at /var/vmail in the filesystem. For instance, I have one packrat customer that has 75GB of mails in /var/vmail. Sum total of /var/vmail on that server is over 200GB of my 300GB disk allotment!
Or did you put /home on a separate partition?
Or did you put /home on a separate partition?
1841
Other / Re: CWPpro Terminal - How to disable it - causing excess memory usage
« on: January 09, 2023, 11:41:14 AM »
Agreed; haven't found it worth the bother nor the bloat and slow responsiveness. Always a better remote term available on any system I use (Mac, Linux, Windows PuTTY, etc.)
1842
Other / Re: Create new disk (home2) because /home is full
« on: January 09, 2023, 11:01:43 AM »
There are many guides out there...
1843
Other / Re: CWP Forum
« on: January 09, 2023, 10:59:32 AM »
Agreed, please update the forum to the latest version of the forum (2.1.3 -- released Mon, 21 Nov 2022). The currently running version is woefully out of date and subject to many bugs and security issues!
1844
Varnish / Re: Wordpress robust default.vcl ? do you have any?
« on: January 08, 2023, 09:03:01 PM »
Thanks much! I have WordPress sites running under nginx but have had thoughts of integrating Varnish into the flow to milk a little more performance out of the site, esp. since it is more static in nature. I'll give your .vcl a test drive and see how it goes. I'll report back if I have any issues.
1845
Varnish / Re: Drupal VCL tpl file for Varnish
« on: January 08, 2023, 08:59:06 PM »
Thanks much! I have a Drupal 9 site running under nginx but have had thoughts of integrating Varnish into the flow to milk a little more performance out of the site, esp. since it is more static in nature. I'll give your .vcl a test drive and see how it goes. I'll report back if I have any issues.
