Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
31
iptables / Re: ssh brute force attacks to random ports/users
« on: March 30, 2022, 06:36:14 PM »
can i block all ports but www mail ssl ssh (and other must remain open) ports from iptales ?
Thank you
I was about to ask if you had a firewall and then I read this part. Why have you not done this already? The standard practice for server protection is to block all ports except those you want to be open.
What OS is this?
32
CentOS 7 Problems / Re: Disk Space Upgrade
« on: March 29, 2022, 08:04:10 PM »
The slow method.
Temporarily close huge sites on your server. Download the file content of these huge sites through FTP (CuteFTP client offers segmented downloads if you got very huge files). Delete those files from the server.
Now you have space.
Do what you needed to do with partitioning, then reupload the files.
Temporarily close huge sites on your server. Download the file content of these huge sites through FTP (CuteFTP client offers segmented downloads if you got very huge files). Delete those files from the server.
Now you have space.
Do what you needed to do with partitioning, then reupload the files.
33
Installation / Re: What distro to go for..
« on: March 29, 2022, 06:06:34 PM »
I'm not sure about the fear for centos 8 stream with delayed cwp repos. I'm running it.
Did I make a mistake?
Did I make a mistake?
34
MySQL / Re: Problem Danger: MySQL - BAD CONFIGURATION DETECTED
« on: March 28, 2022, 08:20:13 AM »
the latest error logs indicates php-mysql problems. have you considered reinstalling php-fpm?
35
MySQL / Re: How to change owner and permission for sql. database?
« on: March 25, 2022, 10:03:44 PM »
To change ownership:
I recommend backing up the SQL through phpmyadmin and then import it. I feel like this would minimize database corruption.
but if you insist on copying it like you did, then you need to use this extra command option with the copy command to copy the ownership and permissions with it:
Code: [Select]
chown user:user filenameTo change permission [x being a number]Code: [Select]
chmod xxx filenameI don't know which permission you want. So I can't give you the number. You could also google it.I recommend backing up the SQL through phpmyadmin and then import it. I feel like this would minimize database corruption.
but if you insist on copying it like you did, then you need to use this extra command option with the copy command to copy the ownership and permissions with it:
Code: [Select]
cp -p
36
E-Mail / Re: Problems with SSL/TLS email configuration
« on: March 25, 2022, 09:39:41 PM »
Nice to see you find your way to the answer. I exactly had the same problem.
Port 995 and 465 is an old standard (SSL) and Outlook is still forcing it. The new standard (TLS) where every other clients works with is port 587 and 143.
I had 995 and 465 disabled on my server for months without problems using Outlook, but at some point, Outlook decided that it would only work with those SSL ports instead of TLS ports.
But this problem is only there with Android Outlook.
PC outlook should work with 587 and 143, but there is a bug with the new internal "add email account" dialog (probably the same as the Android Outlook problem). So, using the "Mail (Microsoft Outlook)" dialog which is available through Windows Control panel will bring out the old/classic version "add email account" dialog.
By the way. It is NOT recommended to use POP3, because when an email message is downloaded to your Outlook, it will delete the copy that's available on your email server, leaving your mail there with no backup available in case your Outlook client corrupts your mail database on your pc/phone (which happens more than you think on PC Outlook)
Port 995 and 465 is an old standard (SSL) and Outlook is still forcing it. The new standard (TLS) where every other clients works with is port 587 and 143.
I had 995 and 465 disabled on my server for months without problems using Outlook, but at some point, Outlook decided that it would only work with those SSL ports instead of TLS ports.
But this problem is only there with Android Outlook.
PC outlook should work with 587 and 143, but there is a bug with the new internal "add email account" dialog (probably the same as the Android Outlook problem). So, using the "Mail (Microsoft Outlook)" dialog which is available through Windows Control panel will bring out the old/classic version "add email account" dialog.
By the way. It is NOT recommended to use POP3, because when an email message is downloaded to your Outlook, it will delete the copy that's available on your email server, leaving your mail there with no backup available in case your Outlook client corrupts your mail database on your pc/phone (which happens more than you think on PC Outlook)
37
E-Mail / Re: Roundcube profile image too big
« on: March 25, 2022, 07:48:34 PM »
First confirm this issue is present on other browsers.
If confirmed:
Edit this: if this is the Elastic theme you are using
Search for
Check if this is added to it:
If confirmed:
Edit this: if this is the Elastic theme you are using
Code: [Select]
/usr/local/cwpsrv/var/services/roundcube/skins/elastic/styles/styles.cssSearch for
Code: [Select]
img.contactphotoCheck if this is added to it:
Code: [Select]
width:4rem;height:4rem;
38
E-Mail / Re: Problems with SSL/TLS email configuration
« on: March 25, 2022, 07:35:13 PM »
Show us your main.cf and master.cf file content. Hide the IP.
And tell us which ports are you using for SSL in outlook. And also tell us if this is Android Outlook or PC Outlook?
If PC, tell us which "Add email account" dialog did you use, the one inside Outlook or the one through Windows Control panel?
I know a great deal about how painful it is to setup a IMAP/SMTP account on Outlook. It's just that Microsoft is using outdated connection standards for IMAP/SMTP but isn't telling us about it in any documentation.
And tell us which ports are you using for SSL in outlook. And also tell us if this is Android Outlook or PC Outlook?
If PC, tell us which "Add email account" dialog did you use, the one inside Outlook or the one through Windows Control panel?
I know a great deal about how painful it is to setup a IMAP/SMTP account on Outlook. It's just that Microsoft is using outdated connection standards for IMAP/SMTP but isn't telling us about it in any documentation.
39
SSL / Re: SSL install when domain is not pointed to the server.
« on: March 25, 2022, 07:30:25 PM »
Point it temporarily, create the SSL, then remove the pointer?
But you will have to do it every 90 days-ish
Or, point it temporarily, create a self-signed SSL, then remove the pointer.
you will have to do this every year-ish
But you will have to do it every 90 days-ish
Or, point it temporarily, create a self-signed SSL, then remove the pointer.
you will have to do this every year-ish
40
Information / Re: Your cwp forum site has an ssl error
« on: March 24, 2022, 11:21:49 PM »
I've sent them a direct message. Lets see if they respond
41
CentOS 7 Problems / Re: PureFTP TLS problem
« on: March 22, 2022, 11:12:38 PM »Finally got it working..
The problem was that I needed to add the passive port in my firewall
30000:50000
as I'm using AWS I needed to add them to my sec-Group..
now everything works perfectly!
I Want to thank @rcschaff for all his help! he really knows his stuff and was right on spot!
THANKS!
Cheers!
ah, so AWS had its own firewall on top.
42
CentOS 7 Problems / Re: About blacklist UCEPROTECT
« on: March 22, 2022, 09:18:50 AM »
I had this problem with level 3. It was a big mess trying to solve it. Short version, you can't fix it yourself.
The most important information for you is: DO NOT PAY FOR WHITELISTING.
This is how they stay alive. This is a shady business that operates with extortionist style blacklists. Just google "uceprotect extortion"
My story is that I knew who could try to fix it; The owner of the IP. No, not the one that gave me the IP, but the owner themselves. They value their IP addresses very much. So if someone abuses it they will try to solve it. In my case, one IP of 7000 IPs has sent spam. So UCEPROTECT blacklisted the entire ASN (aka ISP)
Contact your IP provider, whoever gave you the IP, and they will find the right channels to report this on. My hosting provider's owner took this seriously and escalated the matter until it was solved.
If your IP provider doesnt help you or take you seriously, find another hosting provider that has IPs that doesnt start with the same two sets of IP. I.e. if your current IP is 123.245.123.123. Find a provider that doesnt give you the same first two parts: 123.245.x.x
The most important information for you is: DO NOT PAY FOR WHITELISTING.
This is how they stay alive. This is a shady business that operates with extortionist style blacklists. Just google "uceprotect extortion"
My story is that I knew who could try to fix it; The owner of the IP. No, not the one that gave me the IP, but the owner themselves. They value their IP addresses very much. So if someone abuses it they will try to solve it. In my case, one IP of 7000 IPs has sent spam. So UCEPROTECT blacklisted the entire ASN (aka ISP)
Contact your IP provider, whoever gave you the IP, and they will find the right channels to report this on. My hosting provider's owner took this seriously and escalated the matter until it was solved.
If your IP provider doesnt help you or take you seriously, find another hosting provider that has IPs that doesnt start with the same two sets of IP. I.e. if your current IP is 123.245.123.123. Find a provider that doesnt give you the same first two parts: 123.245.x.x
43
Dovecot / Re: [Correction Proposal] dovecot SSL: Incomplete certificate chain
« on: March 20, 2022, 12:32:01 AM »I'm having the same problem here, has anyone found a solution?
Not really the same problem because the original poster already posted the solution that worked for everybody that replied.
44
CentOS 7 Problems / Re: PureFTP TLS problem
« on: March 18, 2022, 07:37:32 PM »
i'm tellling you. I don't think this is an SSL issue.
Also, if you're using FileZilla as the client, what did you set the "Transfer mode" to?
Also, please enable detailed logs in Filezilla and post the result here again with that enabled
Code: [Select]
grep 'PassivePortRange' /etc/pure-ftpd/pure-ftpd.confPost results hereAlso, if you're using FileZilla as the client, what did you set the "Transfer mode" to?
Also, please enable detailed logs in Filezilla and post the result here again with that enabled
45
CentOS 7 Problems / Re: Suhosin uninstal help?
« on: March 17, 2022, 08:00:06 PM »The module is not already loaded, I think it gave an error. I completely deleted the files. This is the path I followed while installing. gave some errors like zend_hashCode: [Select]cd /usr/local/src
wget https://download.suhosin.org/suhosin-0.9.38.tar.gz
tar zxvf suhosin-0.9.38.tar.gz
cd suhosin-0.9.38
phpize
./configure
make
make install
echo extension=suhosin.so >> /usr/local/php/php.ini
Well.. if you plan to reinstall it at some point into one of the php-fpm versions then you should do it this way:
Example with php-fpm 5.6
Code: [Select]
cd /usr/local/src
wget https://download.suhosin.org/suhosin-0.9.38.tar.gz
tar -xvf suhosin-0.9.38.tar.gz
cd suhosin-0.9.38
/opt/alt/php-fpm56/usr/bin/phpize
./configure --with-php-config=/opt/alt/php-fpm56/usr/bin/php-config
make && make install
touch /opt/alt/php-fpm56/usr/php/php.d/suhosin.ini
echo 'extension=suhosin.so' >> /opt/alt/php-fpm56/usr/php/php.d/suhosin.ini
Notice that the phpize and configure commands are specific
