Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
76
Updates / Re: Roundcube vulnerability
« on: June 21, 2025, 06:29:00 AM »A new security vulnerability was found in Roundcube:
https://nvd.nist.gov/vuln/detail/CVE-2025-49113
The effected versions:
all versions before 1.5.10
all 1.6.x versions before 1.6.11
The most recent versions of Roundcube include the patch:
https://roundcube.net/news/2025/06/01/security-updates-1.6.11-and-1.5.10
CWP uses Roundcube 1.4.x therefore it is highly recommended to update Roundcube
Instructions how to update Roundcube to 1.5.11:Code: [Select]cd /usr/local/cwpsrv/var/services
cp -R roundcube roundcube_backup
wget https://github.com/roundcube/roundcubemail/releases/download/1.5.11/roundcubemail-1.5.11-complete.tar.gz
tar -xvzf roundcubemail-1.5.11-complete.tar.gz
cd roundcubemail-1.5.11
bin/installto.sh /usr/local/cwpsrv/var/services/roundcube
cd ..
chown -R cwpsvc:cwpsvc roundcube
rm -rf roundcubemail-1.5.11*
Please note you do it on your own risk.
Got server error in roundcube after following the instructions. Maybe some step is missing.
77
Updates / Re: Roundcube vulnerability
« on: June 21, 2025, 06:27:45 AM »Yes, saw that a couple of weeks ago. Other updating directions are here, just update the version number from 1.5.8 to 1.5.11 (LTS version):
https://www.alphagnu.com/topic/33-update-cwp-roundcube-mail-version-158-%E2%80%93-control-web-panel/#comment-35
Worked perfectly on AL 8.10 installation
Used the "Centos 8 stream/EL8" instructions
78
E-Mail / Re: SpamHause x SpamAssassin
« on: June 18, 2025, 07:30:43 AM »Not really any steps apart from integrated it in your / etc / postfix / main.cf:Code: [Select]smtpd_recipient_restrictions =
#check_policy_service inet:127.0.0.1:10031,
permit_sasl_authenticated,
permit_mynetworks,
check_client_access hash:/etc/postfix/sender_whitelist,
check_client_access hash:/etc/postfix/sender_blacklist,
check_client_access hash:/etc/postfix/rbl_override,
reject_unauth_destination,
reject_non_fqdn_sender,
reject_non_fqdn_recipient,
reject_unknown_recipient_domain,
reject_rbl_client YOURDQAPIKEYHERE.zen.dq.spamhaus.net=127.0.0.[2..11],
reject_rbl_client cn.country.spameatingmonkey.net,
reject_rbl_client kp.country.spameatingmonkey.net,
reject_rbl_client ng.country.spameatingmonkey.net,
reject_rbl_client ru.country.spameatingmonkey.net,
reject_rbl_client tr.country.spameatingmonkey.net
Thank you. Done
79
E-Mail / Re: SpamHause x SpamAssassin
« on: June 17, 2025, 07:28:46 AM »SpamAssassin is a locally-run spam filter that processes, scores, and can act (tag, move to another mailbox, delete) on incoming mail.
Spamhaus is a remote, cloud run RBL (real-time blacklist) that you can integrate in your mail delivery chain (SMTP server). Spamhaus requires a free API key to use it, so you must sign up for an account from them.
I use both in my servers since each serves an important part of the anti-UCE battle. (On another dedicated mail server, I employ ASSP -- Anti-Spam SMTP Proxy and it blocks 75% of incoming non-local mail; highly effective!)
Can you share the exact steps wrt cwp for implementing Spamhaus. I have signed up.
80
CentOS-WebPanel GUI / Re: Notification - Available updates - SECURITY ISSUE
« on: June 16, 2025, 12:38:41 PM »Do you clear alerts?
https://yourserver.com:2031/cwp_SESSIONID/admin/index.php?module=notifications_list
Didnt
Will do. Hope it will be automated sometyime
81
CentOS-WebPanel GUI / Notification - Available updates - SECURITY ISSUE
« on: June 16, 2025, 05:32:45 AM »
Popup notification which alerts about new updates has some issues
1. Even after updates are completed, the popup keeps coming back when logging as admin again
2. No of updates shown in popup quite often dont match with actual updates
Not critical but wastes admin time many a times
1. Even after updates are completed, the popup keeps coming back when logging as admin again
2. No of updates shown in popup quite often dont match with actual updates
Not critical but wastes admin time many a times
82
E-Mail / Re: incoming email not getting delivered
« on: June 14, 2025, 11:08:26 AM »
Rebuilding the mail server resolved the issue.
I removed the SSL for that domain and re installed. Not sure if it helped the cause
I removed the SSL for that domain and re installed. Not sure if it helped the cause
83
E-Mail / incoming email not getting delivered
« on: June 14, 2025, 07:04:51 AM »
Trying to send email from abc@outlook.com to me@mydomain.com (my VPS email)
Email not visible in my inbox / junk / SPAM
Can someone help resolve this?
Quote
Jun 14 15:56:18 server postfix/smtpd[322142]: connect from mail-koreacentralazolkn19013081.outbound.protection.outlook.com[52.103.74.81]
Jun 14 15:56:19 server postfix/smtpd[322142]: TLS SNI mydomain.com from mail-koreacentralazolkn19013081.outbound.protection.outlook.com[52.103.74.81] not matched, using default chain
Jun 14 15:56:19 server postfix/smtpd[322142]: Anonymous TLS connection established from mail-koreacentralazolkn19013081.outbound.protection.outlook.com[52.103.74.81]: TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature RSA-PSS (2048 bits) server-digest SHA256
Jun 14 15:56:20 server postfix/cleanup[322873]: 146A32A014E: discard: header ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;? s=arcselector10001;? h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCou from mail-koreacentralazolkn19013081.outbound.protection.outlook.com[52.103.74.81]; from=<abc@outlook.com> to=<me@mydomain.com> proto=ESMTP helo=<SEYPR02CU001.outbound.protection.outlook.com>
Jun 14 15:56:20 server postfix/smtpd[322142]: disconnect from mail-koreacentralazolkn19013081.outbound.protection.outlook.com[52.103.74.81] ehlo=2 starttls=1 mail=1 rcpt=1/2 bdat=1 quit=1 commands=7/8
Email not visible in my inbox / junk / SPAM
Can someone help resolve this?
84
E-Mail / Re: Extending CWP with nextCloud
« on: June 09, 2025, 06:55:54 AM »I've always found VPS memory lacking and storage too pricey.
Agree
85
E-Mail / Extending CWP with nextCloud
« on: June 07, 2025, 06:23:31 AM »
NextCloud is a good open source fully free cloud platform
An integration of CWP with NextCloud would be a great addition
My taughts
Have next cloud at https://hostname/cloud or https://domain.tld/cloud or something similar
Admin set a default NextCloud Space. Give option to set this at package level
Each email created in CWP will have an account in nextcloud instance
An integration of CWP with NextCloud would be a great addition
My taughts
Have next cloud at https://hostname/cloud or https://domain.tld/cloud or something similar
Admin set a default NextCloud Space. Give option to set this at package level
Each email created in CWP will have an account in nextcloud instance
86
E-Mail / Re: Stop forwarding SPAM emails
« on: June 06, 2025, 05:59:30 AM »I see some hints at https://talk.plesk.com/threads/do-not-forward-spam-emails-to-external-mailbox.370124/
Using postfix-pcre to block outgoing emails with SPAM in subject line
Have implemented the same.
If it works, I will update it here.
Looks like I am able to resolve this issue.
Issue: Many of the users had setup email forwards to their gmail / yahoo accounts. When they receive SPAM emails, it was also getting forwarded to these gmail / yahoo accounts. Due to this, external email providers used to temporarily block / rate limit my IP.
Solution:
Step 1: Made sure that SPAMAssassin is working. https://forum.centos-webpanel.com/e-mail/how-to-install-spamassassin-updated/msg51428/#msg51428 and other threads
Step 2: Added outgoing email filter to block emails with subject SPAM https://talk.plesk.com/threads/do-not-forward-spam-emails-to-external-mailbox.370124/
This is working very well now.
87
Migration from other control panels / Re: Cpanel to CWP migration Connection not reached
« on: June 05, 2025, 07:25:30 AM »On the CSF firewall on both servers, open ports 22 and 2304
In sshd_config: PermitRootLogin yes
Temporarily disable the CSF firewall on both servers if needed.
Thanks a ton
Adding
PermitRootLogin yes
in
/etc/ssh/ssh_config
did the trick.
88
Migration from other control panels / Re: Cpanel to CWP migration Connection not reached
« on: June 04, 2025, 07:10:19 AM »
I have AL 8.10 in both servers. Getting error "Connection not reached"
What should be done?
What should be done?
89
E-Mail / Re: How to configure Spamassassin [updated]
« on: June 03, 2025, 10:26:22 AM »
We have SpamAssassin 3.4.6 (2021-04-09) in CWP
SpamAssassin 4.0.1 is the current version.
Any idea if it will be included in CWP or Can we manually update it? 4.0.0 was released way back in 2022-12-17
How important is the update? I am asking this as i received many emails with obvious SPAM content with very low scores
SpamAssassin 4.0.1 is the current version.
Any idea if it will be included in CWP or Can we manually update it? 4.0.0 was released way back in 2022-12-17
How important is the update? I am asking this as i received many emails with obvious SPAM content with very low scores
Quote
X-Spam-Status: No, score=1.3 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED,
DKIM_VALID,HTML_FONT_LOW_CONTRAST,HTML_IMAGE_RATIO_06,HTML_MESSAGE,
MIME_HTML_ONLY,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_MSPIKE_H4,
RCVD_IN_MSPIKE_WL,RCVD_IN_VALIDITY_RPBL_BLOCKED,
RCVD_IN_VALIDITY_SAFE_BLOCKED,SPF_HELO_NONE,URIBL_BLOCKED autolearn=no
autolearn_force=no version=3.4.6
Quote
Subject: Start selling fast with TikTok creators
From: TikTok Shop <seller@shop.tiktok.com>
Content : ****Find and select your best collaborators with real performance at online <b>
Affiliate Center</b></div></div></div></div></div></div></div></td></tr>
</tbody></table></div>
90
E-Mail / Re: How to configure Spamassassin [updated]
« on: June 03, 2025, 10:19:39 AM »Mine is owned by nobody:nobody with 755 permissions
Guess this helped me to make it work
