Messages

226

Other / Re: Nginx Varnish Apache php-fpm 403 Forbidden

« on: October 18, 2025, 09:46:35 PM »

I used to run Varnish on one dedicated server under cPanel. Those days are long gone. Now I just run that server under CWP with Nginx -- almost as performant and a lot more straight forward of a configuration and it doesn't interfere with the web application (Drupal). (Whereas Varnish introduced another caching layer complexity that would trouble the site too much and make troubleshooting more of a black art.. So no, I've never run the complex Nginx+Varnish+Apache chain under CWP!

227

CentOS 9 Problems / Re: monit with AL9

« on: October 18, 2025, 11:55:40 AM »

Do you find the functionality beneficial? I installed it originally but then disabled it (so now I don't get the CWP nag warning).

228

Installation / Re: install cwp panel rocky linux

« on: October 18, 2025, 11:54:18 AM »

AlmaLinux 8 is the best foundation for a new server. AL9 is beta quality, mostly ready for production (with just a few known bugs -- such as CWP Migration does not work). Rocky Linux is more of a "rocky" experience -- incompatibilities, missing libraries, etc.

229

CSF Firewall / Re: Firewall off in cwp panel

« on: October 16, 2025, 11:43:53 AM »

It checks your IP address as registered in their system -- so your server connects to their licensing server to confirm that it is activated as CWP Pro.
Running /scripts/update_cwp will trigger the check daily.

And for good measure, here's their wiki article about CSF/LFD configuration:
https://wiki.centos-webpanel.com/csflfd-firewall-configuration

230

CSF Firewall / Re: Firewall off in cwp panel

« on: October 15, 2025, 05:50:59 PM »

And you've rebooted? Sometimes it takes a full reboot to get itself sorted out!

231

Mod_Security / Re: OWASP Latest

« on: October 15, 2025, 05:23:27 PM »

Please update Mod Security to the latest version and OWASP to the latest ruleset using Starburst's guides. I have followed them and don't have the referenced /usr/local/apache/modsecurity-owasp-latest/rules/rules.dat file on any of my servers.

https://starburst.help/control-web-panel-cwp/modsecurity-running-with-control-web-panel/update-modsecurity-to-2-9-12-running-cwp-and-apache-on-almalinux-9/
https://starburst.help/control-web-panel-cwp/modsecurity-running-with-control-web-panel/update-owasp-crs-ruleset-running-cwp-and-apache-on-almalinux-9/

232

MySQL / Re: root myql password

« on: October 15, 2025, 01:13:35 PM »

You should remove your current MariaDB 10.6 and install 10.11 (LTS version). This will preserve your DB and get you to a current, supported version:
https://www.alphagnu.com/topic/23-upgrade-mariadb-1011-in-cwp-centos-7-centos-8-stream-almalinux-78-rockylinux-78/

233

MySQL / Re: root myql password

« on: October 15, 2025, 10:42:52 AM »

That script seems to be outdated and shouldn't be used. Please use this guide instead:
https://www.digitalocean.com/community/tutorials/how-to-reset-your-mysql-or-mariadb-root-password

234

CSF Firewall / Re: Firewall off in cwp panel

« on: October 14, 2025, 03:49:34 PM »

Try toggling it on/off/on in the web GUI -- sometimes it gets out of sync with the actual CSF reality (a bug).

235

Information / Re: htpasswd on CWP

« on: October 13, 2025, 01:29:02 AM »

The FYI for those interested is that cwpsrv runs under Nginx, not Apache -- so syntax for configuration changes needs to be appropriate for Nginx. And thus, .htaccess files are not read or considered.

Also, in order to preserve files through CWP updates, you need to set the immutable bit:

Code: [Select]

chattr +i /usr/local/cwpsrv/htdocs/.htpasswd

236

CentOS-WebPanel Bugs / Re: [CRITICAL] Multiple CWP Servers Infected – Arbitrary PHP Code Execution via Publ

« on: October 12, 2025, 12:54:47 PM »

Those .c files don't appear to be IoC related to the patched CWP vulnerability. Likely they are part of another PHP injection attack -- multiple competing gangs are attempting to compromise servers on any given day. So the recommendation is to harden your PHP install right away, then engage in clean up & full postmortem.

Better to batten down the hatches rather than bailing water out of the ship...

237

Installation / Re: Cannot login into the admin panel anymore

« on: October 12, 2025, 10:51:43 AM »

CWP is in beta for EL9 distributions, so there are still some bugs and this is definitely one of them. But CentOS Stream is definitely a beta quality OS, so a shaky foundation on which to build a server. A piece of friendly advice: consider using AlmaLinux 9 instead. It is definitely firmly in the EL tradition! Meanwhile, that is the advice offered by the CWP devs to resolve the issue:

We are working on resolving this issue, a quick fix is ​​to go to this file

Code: [Select]

nano /etc/login.defs


and comment out the following line

Code: [Select]

SHA_CRYPT_MAX_ROUNDS 5000


to

Code: [Select]

#SHA_CRYPT_MAX_ROUNDS 5000

After this you can change the user's password from the cwp administration panel and you will be able to login.

238

Installation / Re: Cannot login into the admin panel anymore

« on: October 11, 2025, 11:52:49 PM »

Sorry, that advice was if you had changed the MariaDB root password. You mean the system user root password! Are you on an EL9 distribution (AlmaLinux 9, Rocky Linux 9)?

If so open /etc/login.defs
Find:
SHA_CRYPT_MAX_ROUNDS 10000
Replace with:
#SHA_CRYPT_MAX_ROUNDS 10000

Reboot. Now re-set the root's password and it will login successfully.

239

PostgreSQL / Re: Error starting postgres

« on: October 11, 2025, 11:47:08 PM »

Did you install postgres via yum/dnf or via the CWP web admin panel? If via the panel, you would need to call it via the version number you installed. For example, with version 17:

Code: [Select]

systemctl unmask postgresql-17
systemctl start postgresql-17
systemctl enable postgresql-17(I do not run pgSQL on my servers, so I did a test installation via the CWP GUI to discover this little nuance.)

240

CentOS 8 Problems / Re: packages update error AlmaLinux 8

« on: October 10, 2025, 06:27:28 PM »

How did you install AlmaLinux? Starburst's guide for AlmaLinux 9 is almost the same for 8 -- substitute 8 for 9 where appropriate. Did you install the EPEL and ELrepo repositories? Do you have all the prerequisites (including perl modules)?

You can't have any services installed before installing CWP.

So if Apache is working 'out of the box', you are installing AlmaLinux 9.4 LAMP.
That won't work.

Reimage with the bare AlmaLinux 9.4 (DVD)

Setup your networking, hostname, timzone.

Then:

Code: [Select]

dnf install dnf-plugins-core

Code: [Select]

dnf install elrepo-release epel-release -y

Code: [Select]

/usr/bin/crb enable

Code: [Select]

dnf --refresh update

Code: [Select]

dnf install nano wget ipset ebtables iptables uuid uuid-devel libuuid-devel m4 pcre pcre-devel zlib-devel perl-DBD-MySQL perl-IPC-Cmd perl-Pod-Html perl-Sys-Hostname perl-libwww-perl.noarch perl-LWP-Protocol-https.noarch perl-GDGraph libtool s-nail htop sysstat python3-perf ImageMagick ImageMagick-devel -y

Code: [Select]

dnf --refresh update

Code: [Select]

dnf install clamav* clamd

Code: [Select]

dnf clean all

Code: [Select]

cd /usr/local/src

Code: [Select]

wget http://centos-webpanel.com/cwp-el9-latest

Code: [Select]

sh cwp-el9-latest

Code: [Select]

dnf install spamassassin amavis
To updated MariaDB follow:
https://www.alphagnu.com/topic/23-upgrade-mariadb-1011-in-cwp-centos-7-centos-8-stream-almalinux-78-rockylinux-78/

Reboot

Configure & Start CSF