Messages

1

Information / Re: Ebury trojan on all of my CWP servers

« on: March 23, 2023, 08:24:59 AM »

I found trojan on all servers. I went to Security/Security Center/Malware Scan and then selected Custom scan from / (root) folder. It took a while but Trojan was found. Other things was also found in emails but it's normal Unix.Dropper.Ebury-9906999-0
 was found in usr/lib64/libkeystats.so. I have no idea how it got there. All of my server have different password generated at random.org (for example dr3Zd^VQnyy2q^w3). SSH port is not default.

2

Information / Ebury trojan on all of my CWP servers

« on: March 22, 2023, 06:09:11 PM »

Hello,

Today I was informed by our national domain registry that couple of my ip addresses are doing some malicious activities. Also they suspected that it is "Ebury Linux SSH rootkit/backdoor trojan".

And really after malware scan of all my servers (5 servers), everyone was having this trojan. Any hint on how can those trojans get in to the system, and how to prevent future problems?

3

DNS / Re: DNS manager GUI not working

« on: September 20, 2022, 08:34:10 AM »

Also, by looking at Apache error log i see:

PHP Fatal error:  <br>The encoded file <b>/home/slave/public_html/index.php</b> has expired. in Unknown on line 0

Any idea?

4

DNS / DNS manager GUI not working

« on: September 20, 2022, 07:55:58 AM »

Hi,

Yesterday I noticed that DNS manager GUI on my Slave DNS Server is not working. It was working last time I was checking, but it was long time ago. When I try to access it I got following error:

This page isn’t working
dns1.*****.net is currently unable to handle this request.
HTTP ERROR 500

Any idea what could be wrong?

5

CentOS-WebPanel Bugs / Mailbox usage bug?

« on: June 21, 2021, 08:07:58 PM »

Hello,

Mailbox account usage is showing 10x more used space than in reality in admin panel. In user panel that same mail account is showing normal usage.

Any idea? Bug?

6

Installation / Re: Disk space allocation

« on: July 14, 2020, 05:34:22 PM »

Thanks.

Mails are located in /var/vmail/...

So i assume that command would be:

Code: [Select]

mv /var/vmail /home/
ln -s /home/vmail /var/vmail
I will snap VM and in the case anything goes wrong I will revert it.

Should I stop mail services during MV?

7

Installation / Re: Disk space allocation

« on: July 14, 2020, 11:49:51 AM »

I'm fast learner Partition is done during installation of Centos. Automatic partitioning did it this way. Is there a chance to change it somehow?

8

Installation / Disk space allocation

« on: July 14, 2020, 09:22:22 AM »

Hi,

I have created VM with 500GB disk. Plan for this server is to host huge amount of emails. I have discovered that current disk allocation is:
root - 50GB
swap - 4GB
home - 445GB

Since emails are not located in home folder I have an issue that root folder is not big enough.

What did I do wrong?

9

E-Mail / Re: Use my own domain as imap server instead of server domain

« on: June 20, 2020, 07:49:55 AM »

Fixed. Rebuild Mail Server did the trick...

10

E-Mail / Re: Use users domain as imap server instead of server domain

« on: June 19, 2020, 08:51:57 PM »

Oh, I just discovered that checking SSL cert on port 443 is working OK, and check on port 993 is reporting back main servers CN. So is that some configuration in mail server?

11

E-Mail / Use my own domain as imap server instead of server domain

« on: June 19, 2020, 08:43:20 PM »

Hello,

I want to use my own domain address for ssl/tls imap and smtp instead of servers address.

Example:

My domain is test.net, mail server is mail.test.net and Let's encrypt is generated with all Admin services (mail,webmail,...)
Server is server01.testing.net. Firefox is complaining that CN in certificate is server01.testing.net and not mail.test.net.

I hope that someone understand what I want to achieve

Thanks...