This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
91
SSL / Re: Can I add Auto SSL on subdomain that is pointing to different IP?
« on: July 18, 2018, 10:23:37 AM »
Thanks bro.
What about my server ssl?
I get the same error ( "DNS of your domain doesn't point to this server or you have htaccess restrictions.")
When I want to install SSL on srv.mydomain.com
What about my server ssl?
I get the same error ( "DNS of your domain doesn't point to this server or you have htaccess restrictions.")
When I want to install SSL on srv.mydomain.com
92
CentOS-WebPanel Bugs / We can not use @#$%^&*()! signs in the password of CWP?
« on: July 18, 2018, 09:50:34 AM »
Hello
We can not use @#$%^&*()! signs in the password of CWP?
When I use them them password doesn't work.
Thanks
We can not use @#$%^&*()! signs in the password of CWP?
When I use them them password doesn't work.
Thanks
93
SSL / Can I add Auto SSL on subdomain that is pointing to different IP?
« on: July 18, 2018, 09:28:03 AM »
Hello
I have a subdoman that is pointing to different IP (on a differebt cpanel download host) and all of my pictures and sound files are on it. I can not publish auto SSL for it?
When I try it sayas: "DNS of your domain doesn't point to this server or you have htaccess restrictions."
How can I solve this problem?
Thanks
I have a subdoman that is pointing to different IP (on a differebt cpanel download host) and all of my pictures and sound files are on it. I can not publish auto SSL for it?
When I try it sayas: "DNS of your domain doesn't point to this server or you have htaccess restrictions."
How can I solve this problem?
Thanks

94
How to / Re: Protection against Slowloris?
« on: July 17, 2018, 04:15:25 PM »
But it does not use any more cpu or ram.
My ram is 4 now but it uses less than 2.
I had such a problem with CPU 4 and Ram 8 too. I can set to more cpus for a while. OK
On Cloadflare it shows there are a lot of attaks too. is it normal?
I really thank you
My ram is 4 now but it uses less than 2.
I had such a problem with CPU 4 and Ram 8 too. I can set to more cpus for a while. OK
On Cloadflare it shows there are a lot of attaks too. is it normal?
I really thank you
95
How to / Re: Protection against Slowloris?
« on: July 17, 2018, 04:11:51 PM »
I now recieved this too
lfd on srv.salamzaban.ir: High 5 minute load average alert - 18.09
Time: Tue Jul 17 20:23:36 2018 +0430
1 Min Load Avg: 9.23
5 Min Load Avg: 18.09
15 Min Load Avg: 14.37
Running/Total Processes: 10/5839
http://send.bullten.net/download/46cb26199025968f1f35105782168827.html
I receieve such a thing exactly each hour.
lfd on srv.salamzaban.ir: High 5 minute load average alert - 18.09
Time: Tue Jul 17 20:23:36 2018 +0430
1 Min Load Avg: 9.23
5 Min Load Avg: 18.09
15 Min Load Avg: 14.37
Running/Total Processes: 10/5839
http://send.bullten.net/download/46cb26199025968f1f35105782168827.html
I receieve such a thing exactly each hour.
96
How to / Re: Protection against Slowloris?
« on: July 17, 2018, 01:49:39 PM »*
Code: [Select]
netstat -ntu | grep :80 | grep -v LISTEN | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -rn | grep -v 127.0.0.1 | wc -l
20I usually use
Code: [Select]
netstat -nt | grep :80 | wc -l
it is usually more than 10 at least but most of the time goes to 100 too. Some days it was a small number less than 1 or 0.
Code: [Select]
itop
*itop as it seems has errorhttp://send.bullten.net/download/f56a8ff569338a992ffc5f02d73c4472.html
Code: [Select]
iostat
http://send.bullten.net/filesgroup/7359a5f7b19f49c8009170c7d6de6e64.html
With the above code I tested the
Code: [Select]
[code]netstat -ntu | grep :80 | grep -v LISTEN | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -rn | grep -v 127.0.0.1 | wc -l
another time it shows 0
Another time iostat with 58. 77. 78,
http://send.bullten.net/download/3c6abb3789471247c1d3304d74267e2a.html
http://send.bullten.net/download/90c2c4a0761096db897ab5499316eee0.html
Code: [Select]
tail -f /usr/local/apache/logs/error_log
http://send.bullten.net/download/64ab037352350fcd13f5314003bf6ba5.htmlCode: [Select]
tail -f /var/log/dmesg
[root@srv ~]# tail -f /var/log/dmesg
tail: cannot open '/var/log/dmesg' for reading: No such file or directory
tail: no files remaining
Code: [Select]
tail -f /var/log/messages
[root@srv ~]# tail -f /var/log/messages
[root@srv ~]# tail -f /var/log/messages
Jul 17 18:16:07 srv systemd: Started Generic clamav scanner daemon.
Jul 17 18:16:07 srv systemd: Starting Generic clamav scanner daemon...
Jul 17 18:16:26 srv clamd: ERROR: LOCAL: Socket file /var/run/clamd.amavisd/clamd.sock is in use by another process.
Jul 17 18:16:26 srv systemd: clamd-scan.service: main process exited, code=exited, status=1/FAILURE
Jul 17 18:16:26 srv systemd: Unit clamd-scan.service entered failed state.
Jul 17 18:16:26 srv systemd: clamd-scan.service failed.
Jul 17 18:16:26 srv systemd: clamd-scan.service holdoff time over, scheduling restart.
Jul 17 18:16:26 srv systemd: Failed to reset devices.list on /system.slice/clamd-scan.service: Operation not permitted
Jul 17 18:16:26 srv systemd: Started Generic clamav scanner daemon.
Jul 17 18:16:26 srv systemd: Starting Generic clamav scanner daemon...
Jul 17 18:16:45 srv clamd: ERROR: LOCAL: Socket file /var/run/clamd.amavisd/clamd.sock is in use by another process.
Jul 17 18:16:46 srv systemd: clamd-scan.service: main process exited, code=exited, status=1/FAILURE
Jul 17 18:16:46 srv systemd: Unit clamd-scan.service entered failed state.
Jul 17 18:16:46 srv systemd: clamd-scan.service failed.
Jul 17 18:16:46 srv systemd: clamd-scan.service holdoff time over, scheduling restart.
Jul 17 18:16:46 srv systemd: Failed to reset devices.list on /system.slice/clamd-scan.service: Operation not permitted
Jul 17 18:16:46 srv systemd: Started Generic clamav scanner daemon.
Jul 17 18:16:46 srv systemd: Starting Generic clamav scanner daemon...
Jul 17 18:17:01 srv systemd: Started Session c1147 of user root.
Jul 17 18:17:01 srv systemd: Starting Session c1147 of user root.
Jul 17 18:17:05 srv clamd: ERROR: LOCAL: Socket file /var/run/clamd.amavisd/clamd.sock is in use by another process.
Jul 17 18:17:05 srv systemd: clamd-scan.service: main process exited, code=exited, status=1/FAILURE
Jul 17 18:17:05 srv systemd: Unit clamd-scan.service entered failed state.
Jul 17 18:17:05 srv systemd: clamd-scan.service failed.
Jul 17 18:17:05 srv systemd: clamd-scan.service holdoff time over, scheduling restart.
Jul 17 18:17:05 srv systemd: Failed to reset devices.list on /system.slice/clamd-scan.service: Operation not permitted
Jul 17 18:17:05 srv systemd: Started Generic clamav scanner daemon.
Jul 17 18:17:05 srv systemd: Starting Generic clamav scanner daemon...
Jul 17 18:17:24 srv clamd: ERROR: LOCAL: Socket file /var/run/clamd.amavisd/clamd.sock is in use by another process.
Jul 17 18:17:24 srv systemd: clamd-scan.service: main process exited, code=exited, status=1/FAILURE
Jul 17 18:17:24 srv systemd: Unit clamd-scan.service entered failed state.
Jul 17 18:17:24 srv systemd: clamd-scan.service failed.
Jul 17 18:17:24 srv systemd: clamd-scan.service holdoff time over, scheduling restart.
Jul 17 18:17:24 srv systemd: Failed to reset devices.list on /system.slice/clamd-scan.service: Operation not permitted
Jul 17 18:17:24 srv systemd: Started Generic clamav scanner daemon.
Jul 17 18:17:24 srv systemd: Starting Generic clamav scanner daemon...
Jul 17 18:17:41 srv systemd: Started Session 304387 of user root.
Jul 17 18:17:41 srv systemd-logind: New session 304387 of user root.
Jul 17 18:17:41 srv systemd: Starting Session 304387 of user root.
Jul 17 18:17:48 srv clamd: ERROR: LOCAL: Socket file /var/run/clamd.amavisd/clamd.sock is in use by another process.
Jul 17 18:17:48 srv systemd: clamd-scan.service: main process exited, code=exited, status=1/FAILURE
Jul 17 18:17:48 srv systemd: Unit clamd-scan.service entered failed state.
Jul 17 18:17:48 srv systemd: clamd-scan.service failed.
Jul 17 18:17:49 srv systemd: clamd-scan.service holdoff time over, scheduling restart.
Jul 17 18:17:49 srv systemd: Failed to reset devices.list on /system.slice/clamd-scan.service: Operation not permitted
Jul 17 18:17:49 srv systemd: Started Generic clamav scanner daemon.
Jul 17 18:17:49 srv systemd: Starting Generic clamav scanner daemon...
Jul 17 18:18:01 srv systemd: Started Session c1148 of user root.
Jul 17 18:18:01 srv systemd: Starting Session c1148 of user root.
Jul 17 18:18:11 srv clamd: ERROR: LOCAL: Socket file /var/run/clamd.amavisd/clamd.sock is in use by another process.
Jul 17 18:18:11 srv systemd: clamd-scan.service: main process exited, code=exited, status=1/FAILURE
Jul 17 18:18:11 srv systemd: Unit clamd-scan.service entered failed state.
Jul 17 18:18:11 srv systemd: clamd-scan.service failed.
Jul 17 18:18:11 srv systemd: clamd-scan.service holdoff time over, scheduling restart.
Jul 17 18:18:11 srv systemd: Failed to reset devices.list on /system.slice/clamd-scan.service: Operation not permitted
Jul 17 18:18:11 srv systemd: Started Generic clamav scanner daemon.
Jul 17 18:18:11 srv systemd: Starting Generic clamav scanner daemon...
Code: [Select]
cat /proc/cpuinfo | grep processor | wc -l
1
NO this code
Code: [Select]
netstat -ntu | grep :80 | grep -v LISTEN | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -rn | grep -v 127.0.0.1 | wc -l
is 16Thanks
97
How to / Re: Protection against Slowloris?
« on: July 17, 2018, 08:27:23 AM »
I am on OVH.
I have two do,ains on it . One of them is not active the other one has 10 subdomains with different Mysqls.
When I use the command I get some connections (14 in this picture) that do not hve any IP in front of it.
http://send.bullten.net/download/3585152de42b1a182a3587cd63c9fe19.html
This is htop result:
http://send.bullten.net/delete/15bb3ffac2e61a00153c9b198debee24.html
Top of CWP
http://send.bullten.net/download/57fb1e7625250d9e1fc08dfdf2d55714.html
If I change the port of my Varnish to 80 can be useful? How can I do that?
Do I send other logs?
I am really thankful and sorry to disturbed you.
I have two do,ains on it . One of them is not active the other one has 10 subdomains with different Mysqls.
When I use the command I get some connections (14 in this picture) that do not hve any IP in front of it.
http://send.bullten.net/download/3585152de42b1a182a3587cd63c9fe19.html
This is htop result:
http://send.bullten.net/delete/15bb3ffac2e61a00153c9b198debee24.html
Top of CWP
http://send.bullten.net/download/57fb1e7625250d9e1fc08dfdf2d55714.html
If I change the port of my Varnish to 80 can be useful? How can I do that?
Do I send other logs?
I am really thankful and sorry to disturbed you.
98
How to / Re: Protection against Slowloris?
« on: July 17, 2018, 12:02:47 AM »Not it says:
"AH00558: httpd: Could not reliably determine the server's fully qualified domain name, using srv.mysite.com. Set the 'ServerName' directive globally to suppress this message
[root@srv mod_antiloris-0.4]# ^C"
I am under DDOs with Varnish and got database error and load average between 6 to 48 every one hour.
About 48 hours I am using the Cloudflare too it is showing that they are stopping so many attacks (1,686 ones in about 48 hours) on my site, I did not get database error but get load average email with load average between 10 to 20 every one hour exactly.
I guess my Varnish is not in front of the webserver and have to change the ports.
I asked a dude he told me to install this module and send him some logs to help me.
I do not know what to do now.
Does the Varnish can mitigate the attacks without Cloudflare too if I config it? How I have to do that?
I have these attackes about 6 monthes and have changed 3 host provider too. One of the, asked me to leave them.
Mu Mysql process says this information too
Threads: 10 Questions: 163636 Slow queries: 0 Opens: 4546 Flush tables: 1 Open tables: 200 Queries per second avg: 30.400
I do not know is it a sign for slow loris or no.
Thanks
99
How to / Re: Protection against Slowloris?
« on: July 16, 2018, 11:03:58 PM »
Thanks
I did but as it seems the sape problem.
http://send.bullten.net/download/2ca5a36bf2cd6060838c55dfcf1de865.html
How can I solve it and after that how can I enable it in httpd.conf ?
I know I have to ass a line like: "# SlowlorisModule bla bla bla" but not know ecaxtly.
Thanks
I did but as it seems the sape problem.
http://send.bullten.net/download/2ca5a36bf2cd6060838c55dfcf1de865.html
How can I solve it and after that how can I enable it in httpd.conf ?
I know I have to ass a line like: "# SlowlorisModule bla bla bla" but not know ecaxtly.

Thanks
100
How to / Re: Protection against Slowloris?
« on: July 16, 2018, 10:44:30 PM »I get this error when I use apx:
http://send.bullten.net/download/1f0fae899c87f84a94d43acb28071d83.html
101
How to / Re: Protection against Slowloris?
« on: July 16, 2018, 10:31:49 PM »
It was a real nightmare without your help.
God bless you
It became a good class for beginners too
God bless you
It became a good class for beginners too

102
How to / Re: Protection against Slowloris?
« on: July 16, 2018, 09:58:36 PM »
Apache is on now but I get
Error 503 Backend fetch failed
Backend fetch failed
Guru Meditation:
XID: 32783
Varnish cache server
on my site yet.
Do I need to do sth more?
for example do I need to use "Rebuild Virtual Hosts" ?
Thanks
Error 503 Backend fetch failed
Backend fetch failed
Guru Meditation:
XID: 32783
Varnish cache server
on my site yet.
Do I need to do sth more?
for example do I need to use "Rebuild Virtual Hosts" ?
Thanks
103
How to / Re: Protection against Slowloris?
« on: July 16, 2018, 09:52:38 PM »
Wow
Thank you
You helped me to get rid of my mistake.
I did not have such a part that u sent me on this picture. Why I do not have it?
And when I have this error "-bash: apxs: command not found" what should I do?
Thanks
Thank you
You helped me to get rid of my mistake.
I did not have such a part that u sent me on this picture. Why I do not have it?
And when I have this error "-bash: apxs: command not found" what should I do?
Thanks
104
How to / Re: Protection against Slowloris?
« on: July 16, 2018, 09:39:00 PM »
I did not find your solution.
When I go to the root of the CWP panel I do not see any fix for it.
Just there is a red light in front of the Apache and when I restart it it shoews such a thing:
"Job for httpd.service failed because the control process exited with error code. See "systemctl status httpd.service" and "journalctl -xe" for details."
When I go to the root of the CWP panel I do not see any fix for it.
Just there is a red light in front of the Apache and when I restart it it shoews such a thing:
"Job for httpd.service failed because the control process exited with error code. See "systemctl status httpd.service" and "journalctl -xe" for details."
105
How to / Re: Protection against Slowloris?
« on: July 16, 2018, 09:26:20 PM »
You mean from here?
Job for httpd.service failed because the control process exited with error code. See "systemctl status httpd.service" and "journalctl -xe" for details.
I do not need to remove that (yum install httpd-devel) too?
I found this solution on other forum.
Job for httpd.service failed because the control process exited with error code. See "systemctl status httpd.service" and "journalctl -xe" for details.
I do not need to remove that (yum install httpd-devel) too?
I found this solution on other forum.