Messages

1

CentOS 7 Problems / Re: phpMyAdmin 502 Bad Gateway cwpsrv

« on: June 01, 2019, 03:56:59 PM »

same issue. phpMyAdmin not working from webpanel (port 2083). 502 Bad gateway. url loaded:

https://[server URL]:2031/pma/

how to fix?

(also disk usage for user from web panel not showing (says 0 usage).

2

CentOS 7 Problems / Netdata endless torrent of warning emails

« on: April 30, 2019, 04:37:15 PM »

Following recent CWP updates, netdata service was installed. Since then, I've been getting an endless torrent of warning messages about just about every other service plus RAM usage on my server. Messages suggest the server is constantly over loaded. But I run a couple of small, low traffic wordpress sites on a Linode, with 2GB RAM and plenty of disk space remaining so I'm thinking it really shouldn't be suffering from a lack of resources.. So then what's going on here? I'm running CWPpro version: 0.9.8.807 on Centos 7

Has CWP messed up the server or Netdata configuration? Why am I suddenly faced with this problem?

Example netdata messages:

system.swapio
CHART
30min ram swapped out = 31.9% of RAM
the amount of memory swapped in the last 30 minutes, as a percentage of the system RAM
ALARM
swap
FAMILY
CRITICAL
SEVERITY
Fri Apr 26 03:25:47 BST 2019
TIME
$this > (($status == $CRITICAL) ? (20) : (30))
EVALUATED EXPRESSION
[ $this = 31.8681956 ] [ $status = 1 ] [ $CRITICAL = 4 ]
EXPRESSION VARIABLES
The host has 1 WARNING and 2 CRITICAL alarm(s) raised.

ipv4.udperrors
CHART
ipv4 udperrors last collected secs = 00:00:08 ago
number of seconds since the last successful data collection
ALARM
udp
FAMILY
WARNING
SEVERITY
Thu Apr 25 17:00:09 BST 2019
TIME
$this > (($status >= $WARNING) ? ($update_every) : ( 5 * $update_every))
EVALUATED EXPRESSION
[ $this = 8 ] [ $status = 1 ] [ $WARNING = 3 ] [ ${update_every} = 1 ]
EXPRESSION VARIABLES
The host has 10 WARNING and 0 CRITICAL alarm(s) raised.

apache_local.requests
CHART
apache last collected secs (was warning for 10 seconds)
number of seconds since the last successful data collection
ALARM
requests
FAMILY
Recovered from WARNING
SEVERITY
Thu Apr 25 17:00:19 BST 2019
(was warning for 10 seconds)
TIME
$this > (($status >= $WARNING) ? ($update_every) : ( 5 * $update_every))
EVALUATED EXPRESSION
[ $this = 0 ] [ $status = 1 ] [ $WARNING = 3 ] [ ${update_every} = 1 ]
EXPRESSION VARIABLES
The host has 3 WARNING and 0 CRITICAL alarm(s) raised.

Attaching here some screen shots of netdata graphs from my server. httpd, python.d.plugin, email and sql are showing the highest usage or trigger events. But maybe that's the result of Netdata itself running? My server is configured with Spamhause blacklist check, CSF firewall, Maldet and RKhunter scanners and various other security measures. All checked today and no security breaches found and no entries on any blacklists. So.. again, 1 core, 2GB Ram server running a few low traffic (visits per month in the hundreds) wordpress sites. Why would the server be at all taxed? What's going on here? Any tips would be appreciated.

https://drive.google.com/file/d/1kBvfCXmfnfBIB7PxKWD_0WhBk998-Yki/view?usp=sharing
https://drive.google.com/file/d/1js5pbHcT7nIkVepWa8gq9WKHeC8cqe30/view?usp=sharing
https://drive.google.com/file/d/1nC6_rSrH_WIDv4SnOOMttCajVyB9721F/view?usp=sharing
https://drive.google.com/file/d/1IlRoKsxUuFyFu7YRtbZSs3cSI_cnUKve/view?usp=sharing

3

E-Mail / Re: TLS encryption for each domains hosted with CWP

« on: September 28, 2018, 01:27:37 AM »

here's the solution: http://forum.centos-webpanel.com/dovecot/(correction-proposal)-dovecot-ssl-incomplete-chain/

4

Dovecot / Re: [Correction Proposal] dovecot SSL: Incomplete certificate chain

« on: September 28, 2018, 01:26:47 AM »

thanks, fixed the issue with using pop3 through gmail! need that intermediate cert in the bundle.

5

E-Mail / Re: TLS encryption for each domains hosted with CWP

« on: September 26, 2018, 04:01:55 AM »

following up, I checked /etc/dovecot/dovecot.conf and ran openssl s_client -connect [my server hostname]:pop3s in a terminal
and it looks like the Let's Encrypt cert is actually being used.. which is good. But still gmail complains about being unable to establish a secure connection to POP3, port 995. It has no trouble connecting securely to 465 SMTP though. The further details in the error message from google were "Server returned error: "SSL error: No path found from the leaf certificate to any root. Maybe an intermediate certificate is missing?"

So I've currently no idea how to fix that.. Any clues would be appreciated!

6

E-Mail / Re: TLS encryption for each domains hosted with CWP

« on: September 26, 2018, 03:31:23 AM »

similar issue here. mx records checkout, delerability score good, Let's Encrypt install for server hostname, but gmail complains about not being able to establish a secure connection to pop3 over SSL (port 995)..
how can I ensure the SSL cert is properly installed for port 995 and will remain updated when Let's Encrypt renews the cert?
Thanks,
Joe

7

SSL / Re: Replace self signed CWP SSL cert on server hostname with letīs encrypt ssl cert

« on: September 25, 2018, 12:50:10 AM »

Followed http://wiki.centos-webpanel.com/hostname-ssl-with-letsencrypt
which generated a cert for my server hostname,
but the cert got installed in one of my user accounts which has a website with the server domain, i.e. the server hostname is 'server.domain.com' and the main domain of a user account is 'domain.com'. Is that a bad thing to do? (Only I use the server and user accounts). In any case, how can I put the cert for the server in the right place so I can login to CWP, server.domain.com:2031, without a warning and using the autoSSL cert?
Thanks

8

E-Mail / Re: Email server security.

« on: September 25, 2018, 12:19:46 AM »

Does anyone know how to implement the Spamhaus recommendations of wrapping the SMTP daemon and blocking direct-to-MX sending? https://www.spamhaus.org/news/article/718/stop-spammers-from-exploiting-your-webserver
Is this something CWP can help set up?