Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
1
Updates / Re: CWP version 1.3 and 1.4 issues
« on: July 30, 2026, 12:23:10 PM »
i am also having the same issues.
firewall gui doesnt want to load when clicking on the home page in de admin panel on firewall button on top . it loads but i need to scroll down the page skipping a whole screen that stays black and then i see totale screwd up a firwall gui page.
clicking in the menu on config firewall script does work but loads their gui version.
mod security not want to load and keeps turning circles
i also have an issue with using compress in the file manager.
when i use tar or tar.gz or tar.bz2 compression, it doesn't compress.
zip files made in the gui are 50% smaller then the tar ones. i tested this with help of googleAI and did tests showing that when issuing the tar.* function in the gui.... the flags to compress as tar.gz or tar or tar.bz2 are missing.
i scripted a command line that logs what the command is being given when using the tar in the filemanager gui,
root 1185351 0.0 0.0 12000 2688 ? S 23:18 0:00 sh -c cd '/home/domein/manual_backup'; ionice -c 3 nice -n +19 tar -cvf 'name.tar.gz' 'public_html'
as you see the flag to compress a tar.gz is missing i tried all of them and none is giving the right flag
the flags are like this
.tar (archive no compression): cvf
.tar.gz (gzip compression): czvf
.tar.bz2 (bzip2 compression): cjvf
when i use de cli with tar it makes compression like 15% smaller then the zip ones made with the gui so tar is working fine. its the cwp command that isnt functioning well.
also have an issue in the php fpm selector
for example when i want to install 7.4, i can select that. when i want to change the options it opens the option screen but the option never show, not the normal one neither the ini file option. it keeps loading
and even i don't want to change the options and just use the basic installation i cant click the save and build option as the the mouse shows the circle with the stroke through it 🚫 as im not allowed to click it
cront tab for users doesn't want to load either circle keeps loading
the new yum manager does not work. it loads the frame work, it just doesn't load the packages or history or updates
the sysstat SAR page does not want to load. it loads the framework but doesn't show results
under security menu item, firewall manager doesn't want to load says module v2 not exists, list ip table rules keeps loading, mod security not work as stated earlier, security center not want to load,
so far all the things that used to work before but are not now anymore.
Operating System: AlmaLinux 8.10 (Cerulean Leopard)
CPE OS Name: cpe:/o:almalinux:almalinux:8::baseos
Kernel: Linux 4.18.0-553.148.1.el8_10.x86_64
Architecture: x86-64
cwp version 1.4
firewall gui doesnt want to load when clicking on the home page in de admin panel on firewall button on top . it loads but i need to scroll down the page skipping a whole screen that stays black and then i see totale screwd up a firwall gui page.
clicking in the menu on config firewall script does work but loads their gui version.
mod security not want to load and keeps turning circles
i also have an issue with using compress in the file manager.
when i use tar or tar.gz or tar.bz2 compression, it doesn't compress.
zip files made in the gui are 50% smaller then the tar ones. i tested this with help of googleAI and did tests showing that when issuing the tar.* function in the gui.... the flags to compress as tar.gz or tar or tar.bz2 are missing.
i scripted a command line that logs what the command is being given when using the tar in the filemanager gui,
root 1185351 0.0 0.0 12000 2688 ? S 23:18 0:00 sh -c cd '/home/domein/manual_backup'; ionice -c 3 nice -n +19 tar -cvf 'name.tar.gz' 'public_html'
as you see the flag to compress a tar.gz is missing i tried all of them and none is giving the right flag
the flags are like this
.tar (archive no compression): cvf
.tar.gz (gzip compression): czvf
.tar.bz2 (bzip2 compression): cjvf
when i use de cli with tar it makes compression like 15% smaller then the zip ones made with the gui so tar is working fine. its the cwp command that isnt functioning well.
also have an issue in the php fpm selector
for example when i want to install 7.4, i can select that. when i want to change the options it opens the option screen but the option never show, not the normal one neither the ini file option. it keeps loading
and even i don't want to change the options and just use the basic installation i cant click the save and build option as the the mouse shows the circle with the stroke through it 🚫 as im not allowed to click it
cront tab for users doesn't want to load either circle keeps loading
the new yum manager does not work. it loads the frame work, it just doesn't load the packages or history or updates
the sysstat SAR page does not want to load. it loads the framework but doesn't show results
under security menu item, firewall manager doesn't want to load says module v2 not exists, list ip table rules keeps loading, mod security not work as stated earlier, security center not want to load,
so far all the things that used to work before but are not now anymore.
Operating System: AlmaLinux 8.10 (Cerulean Leopard)
CPE OS Name: cpe:/o:almalinux:almalinux:8::baseos
Kernel: Linux 4.18.0-553.148.1.el8_10.x86_64
Architecture: x86-64
cwp version 1.4
2
Suggestions / Re: So here we are at EOL's
« on: August 06, 2024, 08:04:43 PM »
I have mem limit set 3096 already and I have added php-fpm and redis paths in pignore and I am still getting them. <<<
I have been reading about that memory_limit. it is the limit that every connection / user gets. if you you have a server with just 4 gb of memory your system can handle only 40 connections or users before it goes out of memory.
I have been reading about that memory_limit. it is the limit that every connection / user gets. if you you have a server with just 4 gb of memory your system can handle only 40 connections or users before it goes out of memory.
3
SSL / Re: sslcerty.com no longer working. Domain is for sale
« on: August 05, 2024, 02:00:03 PM »
No, didnt even realised it is seen as a bug.
go for it claim it for your own. i dont care
go for it claim it for your own. i dont care
4
SSL / sslcerty.com no longer working. Domain is for sale
« on: August 04, 2024, 11:22:46 PM »
In SSL Certificate module you have the option to test if your SSL Certs are working well.
There are 4 test buttons there.
Testbutton 4 is linked to sslcerty.com . i just found out this domain is no longer being hosted and working. when looking up on isdown . com it says the domain is parked or for sale.
So maybe the programmers can take the button away or replace it with a link to another test site ?
There are 4 test buttons there.
Testbutton 4 is linked to sslcerty.com . i just found out this domain is no longer being hosted and working. when looking up on isdown . com it says the domain is parked or for sale.
So maybe the programmers can take the button away or replace it with a link to another test site ?
5
Scripts / Re: Faild Install last Version Netdata in CWP (Control Web Pannel) Centos 7
« on: July 11, 2024, 12:25:43 AM »
HI LPJon.
Sorry for the late response, been hectic past week.
1. Are you using the "vault.centos.org" repos since CentOS 8 Stream is EOL as of May this year.
- Yes cwp was automatic updated
2. Do you have issues with installing a few packages from the CentOS 9 Stream Repo? (Not available anywhere else)
- No issues with other software installations
3. Can you snapshot your server before trying to install with this. I'm hoping you have it running in a Virtual Machine.
- Its on a bare metal machine. I do make images from it so i can go back if needed.
4. If you are not using the "vault" repo...what repo are you using?
- all the repo's that cwp changed during their updates. i have to open all the repo's 1 by 1 to see. but the main ones are set to vault.
I have used your script, and it is working flawless. thank you for that. It took some time to install, even i do have a pretty fast machine.. but then it works as i remember from before. I seen a few times error during the install and things that could not be found. but in the end its working on CWP stream.
I do know centos 8 stream is eol but i dont know what to do yet. if its possible to do an online inline upgrade or if i have to do a complete new setup with 9.
Anyways netdata is working awesome. thank you so much for this.
Best regards,
Mike
Sorry for the late response, been hectic past week.
1. Are you using the "vault.centos.org" repos since CentOS 8 Stream is EOL as of May this year.
- Yes cwp was automatic updated
2. Do you have issues with installing a few packages from the CentOS 9 Stream Repo? (Not available anywhere else)
- No issues with other software installations
3. Can you snapshot your server before trying to install with this. I'm hoping you have it running in a Virtual Machine.
- Its on a bare metal machine. I do make images from it so i can go back if needed.
4. If you are not using the "vault" repo...what repo are you using?
- all the repo's that cwp changed during their updates. i have to open all the repo's 1 by 1 to see. but the main ones are set to vault.
I have used your script, and it is working flawless. thank you for that. It took some time to install, even i do have a pretty fast machine.. but then it works as i remember from before. I seen a few times error during the install and things that could not be found. but in the end its working on CWP stream.
I do know centos 8 stream is eol but i dont know what to do yet. if its possible to do an online inline upgrade or if i have to do a complete new setup with 9.
Anyways netdata is working awesome. thank you so much for this.
Best regards,
Mike
6
Scripts / Re: Faild Install last Version Netdata in CWP (Control Web Pannel) Centos 7
« on: July 04, 2024, 05:26:20 PM »
Hi LP Jon,
Thanks for the clarification. I didn't knew that during copy and paste, scripts were being screwed up.
I downloaded your file and uploaded it to my server. i executed it... through the web gui and the cli,
but the results the same. this time it installs but gives a lot of errors at the end and there for its not working.
i have an install log with the errors . https://gofile.io/d/PenG4t
hope you can find out what is going wrong.
Regards,
Mike
Thanks for the clarification. I didn't knew that during copy and paste, scripts were being screwed up.
I downloaded your file and uploaded it to my server. i executed it... through the web gui and the cli,
but the results the same. this time it installs but gives a lot of errors at the end and there for its not working.
i have an install log with the errors . https://gofile.io/d/PenG4t
hope you can find out what is going wrong.
Regards,
Mike
7
Scripts / Re: Faild Install last Version Netdata in CWP (Control Web Pannel) Centos 7
« on: June 26, 2024, 11:45:28 PM »
Hi LPjon,
I have replaced the code in the script on my server with the code you offered there on git hub. select all, copy , select all on my scipt and paste and save
Then i rund the the installer as suggested from the webgui. it doesnt work i check the box that i confirm, bla bla, press install and the page returns right away with the box again unchecked.
When i use the cli and go to the scrips folder, doing
So any idea what goes wrong ? server is uptodate, still on centos 8 stream, using apache 2.4.58, have more then sufficient RAM available.
Hope to hear soon from you,
Regards,
Mike
I have replaced the code in the script on my server with the code you offered there on git hub. select all, copy , select all on my scipt and paste and save
Then i rund the the installer as suggested from the webgui. it doesnt work i check the box that i confirm, bla bla, press install and the page returns right away with the box again unchecked.
When i use the cli and go to the scrips folder, doing
Code: [Select]
sh install_netdata it gives me errors backCode: [Select]
sh install_netdata
install_netdata: line 3: $'\r': command not found
install_netdata: line 6: $'\r': command not found
install_netdata: line 9: $'\r': command not found
install_netdata: line 17: $'\r': command not found
install_netdata: line 18: syntax error near unexpected token `$'{\r''
'nstall_netdata: line 18: `function getsystemnodeversion {
So any idea what goes wrong ? server is uptodate, still on centos 8 stream, using apache 2.4.58, have more then sufficient RAM available.
Hope to hear soon from you,
Regards,
Mike
8
CSF Firewall / Security Alert: Potential SSH Backdoor Via Liblzma
« on: March 30, 2024, 01:37:49 PM »
Are we affected too ?
https://hackaday.com/2024/03/29/security-alert-potential-ssh-backdoor-via-liblzma/
https://www.redhat.com/en/blog/urgent-security-alert-fedora-41-and-rawhide-users
What is xz?
xz is a general purpose data compression format present in nearly every Linux distribution, both community projects and commercial product distributions. Essentially, it helps compress (and then decompress) large file formats into smaller, more manageable sizes for sharing via file transfers.
In breaking news that dropped just after our weekly security column went live, a backdoor has been discovered in the xz package,
that could potentially compromise SSH logins on Linux systems. The most detailed analysis so far seems to be by [Andres Freund] on the oss-security list.
The xz release tarballs from 5.6.0 in late February and 5.6.1 on March 9th both contain malicious code. A pair of compressed files in the repository contain the majority of the malicious patch, disguised as test files. In practice, this means that looking at the repository doesn’t reveal anything amiss, but downloading the release tarballs gives you the compromised code.
This was discovered because SSH logins on a Debian sid were taking longer, with more CPU cycles than expected. And interestingly, Valgrind was throwing unexpected errors when running on the liblzma library. That last bit was first discovered on February 24th, immediately after the 5.6.0 release. The xz-utils package failed its tests on Gentoo builds.
https://hackaday.com/2024/03/29/security-alert-potential-ssh-backdoor-via-liblzma/
https://www.redhat.com/en/blog/urgent-security-alert-fedora-41-and-rawhide-users
What is xz?
xz is a general purpose data compression format present in nearly every Linux distribution, both community projects and commercial product distributions. Essentially, it helps compress (and then decompress) large file formats into smaller, more manageable sizes for sharing via file transfers.
In breaking news that dropped just after our weekly security column went live, a backdoor has been discovered in the xz package,
that could potentially compromise SSH logins on Linux systems. The most detailed analysis so far seems to be by [Andres Freund] on the oss-security list.
The xz release tarballs from 5.6.0 in late February and 5.6.1 on March 9th both contain malicious code. A pair of compressed files in the repository contain the majority of the malicious patch, disguised as test files. In practice, this means that looking at the repository doesn’t reveal anything amiss, but downloading the release tarballs gives you the compromised code.
This was discovered because SSH logins on a Debian sid were taking longer, with more CPU cycles than expected. And interestingly, Valgrind was throwing unexpected errors when running on the liblzma library. That last bit was first discovered on February 24th, immediately after the 5.6.0 release. The xz-utils package failed its tests on Gentoo builds.
9
CentOS 8 Problems / Re: PHP Switcher ERROR
« on: March 20, 2024, 11:38:37 PM »
i do not know Alma Linux. I am a total linux noob any ways. I used centos because a friend of me used it for some servers we used back in the time and i learned some over the years. but it keeps changing and drives me crazy, just when i finally memorised procedures and commands.. they gone and replaced again with just a little different syntax.
So i guess im going to set upa alma linux vm and see how that goes.
Im not running production, i just use for my own websites and website creation and such, so i simply reinstall my baremetal server when Alma runs better.
Lets see.
So i guess im going to set upa alma linux vm and see how that goes.
Im not running production, i just use for my own websites and website creation and such, so i simply reinstall my baremetal server when Alma runs better.
Lets see.
10
CentOS 8 Problems / Re: PHP Switcher ERROR
« on: March 20, 2024, 11:15:45 PM »
I am having the same problem.
centos 8 stream latest cpw version,
a fresh updated vm system that runs nothing and is only being used to test and try out.
-- Set runtime path of "/usr/local/bin/ziptool" to ""
Failed to Download PHP version 8.2.17!
that is the mssage i get. the firewall is empty / no blocks so that cant be the issue.
whats happening ?
centos 8 stream latest cpw version,
a fresh updated vm system that runs nothing and is only being used to test and try out.
-- Set runtime path of "/usr/local/bin/ziptool" to ""
Failed to Download PHP version 8.2.17!
that is the mssage i get. the firewall is empty / no blocks so that cant be the issue.
whats happening ?
11
CSF Firewall / Nearly 11 million SSH servers vulnerable to new Terrapin attacks
« on: February 23, 2024, 02:14:56 PM »
https://www.bleepingcomputer.com/news/security/nearly-11-million-ssh-servers-vulnerable-to-new-terrapin-attacks/
Almost 11 million internet-exposed SSH servers are vulnerable to the Terrapin attack that threatens the integrity of some SSH connections.
The Terrapin attack targets the SSH protocol, affecting both clients and servers, and was developed by academic researchers from Ruhr University Bochum in Germany.
It manipulates sequence numbers during the handshake process to compromise the integrity of the SSH channel, particularly when specific encryption modes like ChaCha20-Poly1305 or CBC with Encrypt-then-MAC are used.
An attacker could thus downgrade the public key algorithms for user authentication and disable defenses against keystroke timing attacks in OpenSSH 9.5.
A notable requirement for the Terrapin attack is the need for attackers to be in an adversary-in-the-middle (AitM) position to intercept and modify the handshake exchange.
It is worth noting that threat actors often compromise networks of interest and wait for the right moment to progress their attack.
A recent report by security threat monitoring platform Shadowserver warns that there are nearly 11 million SSH servers on the public web - identified by unique IP addresses, that are vulnerable to Terrapin attacks.
Another issue that i am not sure about how much it affects our CWP servers. Also another thing to look at byt our " Einsteins "
Almost 11 million internet-exposed SSH servers are vulnerable to the Terrapin attack that threatens the integrity of some SSH connections.
The Terrapin attack targets the SSH protocol, affecting both clients and servers, and was developed by academic researchers from Ruhr University Bochum in Germany.
It manipulates sequence numbers during the handshake process to compromise the integrity of the SSH channel, particularly when specific encryption modes like ChaCha20-Poly1305 or CBC with Encrypt-then-MAC are used.
An attacker could thus downgrade the public key algorithms for user authentication and disable defenses against keystroke timing attacks in OpenSSH 9.5.
A notable requirement for the Terrapin attack is the need for attackers to be in an adversary-in-the-middle (AitM) position to intercept and modify the handshake exchange.
It is worth noting that threat actors often compromise networks of interest and wait for the right moment to progress their attack.
A recent report by security threat monitoring platform Shadowserver warns that there are nearly 11 million SSH servers on the public web - identified by unique IP addresses, that are vulnerable to Terrapin attacks.
Another issue that i am not sure about how much it affects our CWP servers. Also another thing to look at byt our " Einsteins "
12
DNS / DNS Server Vulnerability: Single DNS Packet can Bring Down the System
« on: February 23, 2024, 02:08:29 PM »
https://gbhackers.com/critical-dnssec-flaw/
A new flaw has been discovered in DNSSEC, which, when exploited by threat actors, could result in the unavailability of technologies such as web browsing, email, and instant messaging. This new class of attacks has been termed “KeyTrap” by researchers.
Moreover, a threat actor could completely disable large parts of the worldwide internet. KeyTrap attacks affect not only DNS but also the applications using it. The “KeyTrap” class of attacks has been assigned with CVE-2023-50387, and the severity is yet to be categorized. As of December 2023, 31.47% of the web clients used DNSSEC-validating DNS resolvers worldwide.
Im am not sure in how much our DNS server in the CWP servers are affected by this.. but maybe something for the " Einsteins " amongst us to look at.
A new flaw has been discovered in DNSSEC, which, when exploited by threat actors, could result in the unavailability of technologies such as web browsing, email, and instant messaging. This new class of attacks has been termed “KeyTrap” by researchers.
Moreover, a threat actor could completely disable large parts of the worldwide internet. KeyTrap attacks affect not only DNS but also the applications using it. The “KeyTrap” class of attacks has been assigned with CVE-2023-50387, and the severity is yet to be categorized. As of December 2023, 31.47% of the web clients used DNSSEC-validating DNS resolvers worldwide.
Im am not sure in how much our DNS server in the CWP servers are affected by this.. but maybe something for the " Einsteins " amongst us to look at.
13
PHP / Re: php-fpm83 not installing well / working
« on: February 03, 2024, 08:15:30 PM »
well i have no clue what or how you did it....
but on my clean fresh installed cwp with no additional programs installed i tried to install the 8.3.1 php from the version switcher....
but no luck
first i turned the options off like mbstrings, as by default thats turned on. ioncube was already off. i turned on sourcegardian and upload progress, but it kept hang on both. after few times the fresh vm put back i tried to install it without any options... then it hanged on sodium, thats turned on by deault too, so i turned that off too.
then only had memcached on, that one went ok but it kept hang on php
see code.
i left it hang there for 2 hours but still no go.
maybe better remove the button 8.3.1 untill it function as a normal WORKING install because this makes no sensen
but on my clean fresh installed cwp with no additional programs installed i tried to install the 8.3.1 php from the version switcher....
but no luck
first i turned the options off like mbstrings, as by default thats turned on. ioncube was already off. i turned on sourcegardian and upload progress, but it kept hang on both. after few times the fresh vm put back i tried to install it without any options... then it hanged on sodium, thats turned on by deault too, so i turned that off too.
then only had memcached on, that one went ok but it kept hang on php
see code.
Code: [Select]
Installed:
memcached-1.5.22-2.el8.x86_64
Complete!
Configuring for:
PHP Api Version: 20131106
Zend Module Api No: 20131226
Zend Extension Api No: 220131226
checking for grep that handles long lines and -e... /usr/bin/grep
checking for egrep... /usr/bin/grep -E
checking for a sed that does not truncate output... /usr/bin/sed
checking for cc... cc
checking whether the C compiler works... yes
checking for C compiler default output file name... a.out
checking for suffix of executables...
checking whether we are cross compiling... no
checking for suffix of object files... o
checking whether we are using the GNU C compiler... yes
checking whether cc accepts -g... yes
checking for cc option to accept ISO C89... none needed
checking how to run the C preprocessor... cc -E
checking for icc... no
checking for suncc... no
checking whether cc understands -c and -o together... yes
checking for system library directory... lib
checking if compiler supports -R... no
checking if compiler supports -Wl,-rpath,... yes
checking build system type... x86_64-unknown-linux-gnu
checking host system type... x86_64-unknown-linux-gnu
checking target system type... x86_64-unknown-linux-gnu
checking for PHP prefix... /usr/local
checking for PHP includes... -I/usr/local/include/php -I/usr/local/include/php/main -I/usr/local/include/php/TSRM -I/usr/local/include/php/Zend -I/usr/local/include/php/ext -I/usr/local/include/php/ext/date/lib
checking for PHP extension directory... /usr/local/lib/php/extensions/no-debug-non-zts-20131226
checking for PHP installed headers prefix... /usr/local/include/php
checking if debug is enabled... no
checking if zts is enabled... no
checking for re2c... no
checking for gawk... gawk
checking whether to enable memcache support... yes, shared
checking whether to enable memcache session handler support... yes
checking for the location of ZLIB... no
checking for the location of zlib... /usr
checking PHP version...
i left it hang there for 2 hours but still no go.
maybe better remove the button 8.3.1 untill it function as a normal WORKING install because this makes no sensen
14
DNS / New addresses for b.root-servers.net per 2023-05-16
« on: February 02, 2024, 08:52:16 PM »
https://b.root-servers.org/news/2023/05/16/new-addresses.html
New addresses for b.root-servers.net
2023-05-16
USC/ISI is renumbering both its IPv4 and IPv6 addresses for b.root-servers.net on 2023-11-27. Our new IPv4 address will be 170.247.170.2 and our new IPv6 address will be 2801:1b8:10::b. USC/ISI will continue to support root service over our current IPv4 and IPv6 addresses for at least one year (until 2024-11-27) in order to provide a stable transition period while new root hints files are distributed in software and operating system packages.
We are renumbering to increase the resilience of the Root Servers System by further diversifying the number of Regional Internet Registries (RIRs) that have allocated IP addresses to Root Server Operators. Our addresses will be the first in the Root Server System to have been allocated by LACNIC and our routes will be verifiable through LACNIC’s Resource Public Key Infrastructure (RPKI) Trust Anchor Location (TAL). We thank LACNIC for helping make this renumbering possible, and ARIN for supporting our prior addressing assignments.
Update on 2023-05-30: LACNIC posted a separate announcement about this renumbering.
The named.root or named.ca file in our centos distrubutions were made in 2018. They not have been Updated since.
New addresses for b.root-servers.net
2023-05-16
USC/ISI is renumbering both its IPv4 and IPv6 addresses for b.root-servers.net on 2023-11-27. Our new IPv4 address will be 170.247.170.2 and our new IPv6 address will be 2801:1b8:10::b. USC/ISI will continue to support root service over our current IPv4 and IPv6 addresses for at least one year (until 2024-11-27) in order to provide a stable transition period while new root hints files are distributed in software and operating system packages.
We are renumbering to increase the resilience of the Root Servers System by further diversifying the number of Regional Internet Registries (RIRs) that have allocated IP addresses to Root Server Operators. Our addresses will be the first in the Root Server System to have been allocated by LACNIC and our routes will be verifiable through LACNIC’s Resource Public Key Infrastructure (RPKI) Trust Anchor Location (TAL). We thank LACNIC for helping make this renumbering possible, and ARIN for supporting our prior addressing assignments.
Update on 2023-05-30: LACNIC posted a separate announcement about this renumbering.
The named.root or named.ca file in our centos distrubutions were made in 2018. They not have been Updated since.
15
PHP / Re: php-fpm83 not installing well / working
« on: February 02, 2024, 08:50:34 PM »
Great, thanks Sandeep and Starbust.
I did setup a vm cwp server. going to test it first there. easy to get a clean cwp setup everyt time that way, so i can be sure it its just not in my production server .
And no, i dont need those 2 options.
I did setup a vm cwp server. going to test it first there. easy to get a clean cwp setup everyt time that way, so i can be sure it its just not in my production server .
And no, i dont need those 2 options.
