Messages

91

CentOS 9 Problems / Re: EL9 recent update casusing boot issue

« on: March 28, 2026, 11:26:08 PM »

I would say 4GB is a more realistic minimum for a functioning server. More is better, but that is a workable minimum for a lower traffic server.

92

Information / Re: Modernizing CWP: Drop EOL, Support AL9, AL10 & Rocky

« on: March 26, 2026, 10:38:35 PM »

"Move along, nothing to see here folks..."
(Don't even want to advertise for them by mentioning their panel's name!)

93

MySQL / Re: Allow Remote Access to MariaDB Database

« on: March 26, 2026, 02:29:10 PM »

I think we're all saying the same thing, just coming from different angles. I wasn't correcting you or your practices (specific use case). I was just wanting to put out a "for the record" notice for the sake of other new users and those wanting to reference the forum. In a normal use case, with CWP and other web hosting environments MariaDB is limited to local socket connections for security purposes. You can open it up from there with full knowledge & intent, keeping security in the forefront of your mind.

94

MySQL / Re: Allow Remote Access to MariaDB Database

« on: March 24, 2026, 09:48:10 PM »

For the record, that is generally regarded as a poor security practice. Usually, you only want to allow localhost connections to your MariaDB database as remote access greatly increases your attack surface (and desirability as a target). Of course, you could securely tunnel in and connect that way, but better to keep it locally to a unix socket and forget remote TCP/IP connections to MariaDB.

95

Updates / Re: Roundcube vulnerability

« on: March 20, 2026, 12:25:59 PM »

Be advised that CWP runs under its own dedicated PHP 7.2 version so changing its internal services to run on a more modern PHP version (8.2) risks breaking it or introducing unexpected behavior. Plus, if you take CWP too far out of spec and customize it, their support team will decline to help you if you have issues.

There are workarounds to the intl issue that don't risk breaking CWP. Follow these instructions, but update the version number to 1.5.14:
https://www.alphagnu.com/topic/33-update-cwp-roundcube-mail-version-158-%E2%80%93-control-web-panel/

96

Information / Re: Modernizing CWP: Drop EOL, Support AL9, AL10 & Rocky

« on: March 20, 2026, 12:16:22 PM »

I think we've been saying this for a couple of years now
But glad you articulated it so clearly!

97

Updates / Re: Roundcube vulnerability

« on: March 06, 2026, 12:12:13 AM »

Excessive hyperbole. There's nothing wrong with LTS versions.

98

Updates / Re: [SECURITY ALERT] Unauthorized port / [SECURITY ALERT] Unknown/Untrusted file..

« on: March 05, 2026, 03:48:00 AM »

False positives. Just ignore. See Sandeep's confirmation here:
https://www.alphagnu.com/topic/621-getting-a-critical-alert-ghost-files-deleted-but-running-found-in-new-cwp-install/

99

CentOS 7 Problems / Re: Unable to Access CWP Panel : 500 Error

« on: February 25, 2026, 06:39:57 PM »

https://wiki.centos-webpanel.com/cwp-expired-error-500

Current version is 0.9.8.1222 so use that in the directions.

Code: [Select]

cd /usr/local/cwpsrv/htdocs
chattr -i -R /usr/local/cwpsrv/htdocs/admin
wget static.cdn-cwp.com/files/cwp/el7/cwp-el7-0.9.8.1222.zip
unzip -o -q cwp-el7-0.9.8.1222.zip
rm -f cwp-el7-0.9.8.1222.zip

cd /usr/local/cwpsrv/var/services/
wget static.cdn-cwp.com/files/cwp/el7/cwp-services.zip
unzip -o -q cwp-services.zip
rm -f cwp-services.zip

100

CSF Firewall / Re: Should we update CSF to V15??

« on: February 25, 2026, 02:37:35 PM »

You should follow the 15.08 guide if you are still on the CWP default (dead end) track. Then you can just issue

Code: [Select]

csf -uto update if it doesn't auto-update to 15.09.

101

CSF Firewall / Re: CSF Auto Update Re-Enabled v14.24 and v15.00

« on: February 25, 2026, 02:35:51 PM »

Starburst's guide is very straightforward, specific to CWP. Note that the current version is now 15.09:
https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/aetherinox-csf-firewall-update-to-v15-08/
https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/aetherinox-csf-firewall-update-to-v15-09/

102

Updates / Re: [SECURITY ALERT] Unauthorized port / [SECURITY ALERT] Unknown/Untrusted file..

« on: February 24, 2026, 02:00:34 PM »

No, it's a scary false positive. Ignore it and it will go away with the next CWP update when they update the script. Or edit the script (/scripts/cwp_security_audit) directly to remove the stanza that checks for ghost files.

Since I run CWP on an alternate port, that script also generates a warning about unauthorized ports -- but of course it's authorized and listed in
/usr/local/cwpsrv/conf/cwpsrv.conf and /etc/csf/csf.conf. So I had to add my alternate port to the list of allowed ports in that script.

103

CSF Firewall / Re: Should we update CSF to V15??

« on: February 24, 2026, 01:55:26 PM »

Just follow Starburst's guide to update to CSF 15.08 (Aetherinox's fork):
https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/aetherinox-csf-firewall-update-to-v15-08/

104

Other / Re: Goodbye CWP — I’m done for good

« on: February 24, 2026, 01:53:51 PM »

Forum downtime actually feels self-inflicted because of 503 gateway errors. Nginx could be updated & tuned better and for sure php-fpm starvation is the root of the problem -- PHP on a PHP-heavy forum needs greater resources, caching, increased timeouts, etc. But for sure CF turnstile would be a great addition for DDoS protection.

105

Other / Re: Goodbye CWP — I’m done for good

« on: February 22, 2026, 01:25:19 PM »

I don't understand the point of these "suicide note" posts. Fine, make a choice, do it.