Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - ring_c

Pages: [1] 2 3 ... 7
1

I've got the following mail from the firewall. Any idea what it means? I didn't see anything odd and the site is loading.
[/size]I've replaced the username with {USERNAME}.[/color]
[/size][/color]


[/size][/color]
[/size]Subjetct: lfd on {HOSTNAME}: Suspicious process running under user {USERNAME}[/color]
[/size]Time:    Thu Feb 14 22:38:21 2019 +0200[/color][/size]PID:     25646 (Parent PID:3086)Account: {USERNAME}Uptime:  67 seconds


Executable:

/opt/alt/php-fpm56/usr/sbin/php-fpm


Command Line (often faked in exploits):

php-fpm: pool {USERNAME}


Network connections by the process (if any):

tcp: 127.0.0.1:42342 -> 127.0.0.1:3306


Files open by the process (if any):

/tmp/.ZendSem.Od78F8 (deleted)
/dev/urandom
/home/{USERNAME}/public_html/wp-content/wflogs/ips.php
/home/{USERNAME}/public_html/wp-content/wflogs/config.php
/home/{USERNAME}/public_html/wp-content/wflogs/attack-data.php
/home/{USERNAME}/public_html/wp-content/wflogs/config-synced.php
/home/{USERNAME}/public_html/wp-content/wflogs/config-livewaf.php
/home/{USERNAME}/public_html/wp-content/wflogs/config-transient.php
/home/{USERNAME}/public_html/wp-content/wflogs/GeoLite2-Country.mmdb
/etc/pki/nssdb/cert9.db
/etc/pki/nssdb/key4.db
[/size]

2
Informations / Re: I want to change the PHP version of only single domain
« on: February 09, 2019, 06:32:20 PM »
Please just let me know if I am wrong, but I am afraid that PHP for only one domain could work only with the Php-CGI version, not Php-FPM.
Has anyone managed to use Php-FPM per domain, and / or along with the feature of choosing versions per directory .. ??

Regards,
Netino
Yes. I manage different PHP version using PHP-FPM.

3
Apache / Re: Large domlogs files
« on: February 09, 2019, 06:30:10 PM »
Create it with the following content:

Code: [Select]
/usr/local/apache/domlogs/*.log {
    rotate 52
    weekly
    missingok
    notifempty
    sharedscripts
    delaycompress
    postrotate
   /bin/kill -HUP `cat /usr/local/apache/logs/httpd.pid 2>/dev/null` 2> /dev/null || true
    endscript
}
Thanks, I've created the file.

4
CentOS 7 Problems / Re: high disk space consumption
« on: February 09, 2019, 06:23:59 PM »
Can I ask how you got to this GUI display with CWP?
on the dashboard homepage (disk details)
Thanks! I wasn't aware...

5
Apache / Re: Large domlogs files
« on: February 07, 2019, 12:40:04 PM »
logrotate is installed. I've checked, but I don't have the file apache under /etc/logrotate.d/
How can I create it?

6
CentOS 7 Problems / Re: high disk space consumption
« on: February 07, 2019, 06:56:14 AM »

Can I ask how you got to this GUI display with CWP?

7
Postfix / Re: Wordpress and Postfix Mail Server Problem
« on: February 07, 2019, 06:43:58 AM »
I edited the file. but the same problem continues. SMTP settings; http://prntscr.com/mho46z
This might mean the issue is not with the firewall (though I had the exact same issue not long ago).
I suggest you disable the firewall and test again. If it works - it IS the firewall and you're doing something wrong.
If it doesn't work, we'll have to continue guess.
Don't forget to enable the firewall back again.


By the way, do you have mod_sec activated? I've disabled it. Too many false positive cases.

8
Apache / Re: Large domlogs files
« on: February 07, 2019, 06:35:45 AM »
Wow...!!!
If you don't have logrotate installed, you will have disk space problems briefly!
Logs in the server consume too much disk space.
I do have the folder logrotate.d as you've mentioned, but not the specific file you've mentioned.
Doesn't that mean logrotate is installed already? Is there a way to make sure without trying to install it?

9
Postfix / Re: Wordpress and Postfix Mail Server Problem
« on: February 06, 2019, 03:20:26 PM »
You have to allow outgoing traffic to ports 25, 465, 587 and in the case of Mandrill 2525 as will. You should actually be fine enabling only the one you will connect to. So:
Code: [Select]
sudo vim /etc/csf/csf.confadd 25,2525,465,587 to TCP_OUT, and to TCP6_OUT if you use IPv6.
[/color]You might also need to remove that ports from SMTP_PORTS if you have SMTP_BLOCK enabled (if it is set to 1).

10
Have you changed the file name to cpmove-{username}.tar.gz?

11
PHP / Re: Can't use personal php.ini
« on: February 06, 2019, 01:33:01 PM »
For the sake of future searchers, I've found the answer for that issue. You can see it here:
http://forum.centos-webpanel.com/php/changes-in-php-ini-won't-work!/msg21430/#msg21430

12
PHP / Re: Changes in PHP.INI won't work!
« on: February 06, 2019, 01:31:41 PM »
Well, I think I got it all figured out.
While I was expecting the changes to take effect immediately, it seems there's a cache defined in user_ini.cache_ttl (300 in my case) in seconds.


After a change I made in the file, I had to leave the computer for a few minutes. After I got back, I saw the change took place. That's when I figured out there must be a cache issue and found this setting.


So, I think the wiki (http://wiki.centos-webpanel.com/php-ini-per-folder) has to be updated with the following:
A. Newer versions of CWP are now using .user.ini instead of php.ini (by the way, Wordfence is using .user.ini as well).
B. You'll have to wait the amount of seconds mentioned in user_ini.cache_ttl for the change to take effect.
[/size]
[/size]Thank you all.

13
Apache / Re: Large domlogs files
« on: February 06, 2019, 11:46:43 AM »
In file '/etc/logrotate.d/apache' change the line:
Thanks for your reply but I have no such file under /etc/logrotate.d/...
Should I create one?

14
PHP / Changes in PHP.INI won't work!
« on: February 05, 2019, 08:16:55 AM »
Hi,


I'm using CWP PRO 0.9.8.763 and my server is configured to use NGINX+APACHE+VARNISH+PHP-FPM, and I was trying to increase upload_max_size for a user. I've tried the following:
1. Adding a php.ini file - didn't work.
2. Editing php.ini within the user's CWP panel - didn't work.
3. Deleting php.ini caused the panel to create a default php.ini, yet - didn't work.
4. I've found an answer here that since 0.9.8.742 we should use .user.ini instead of php.ini - didn't work.
5. Putting this .user.ini in wp-admin folder - didn't work.
6. Putting php.ini in wp-admin folder - didn't work.
7. Another answer here said something about a trailing slash after localhost - but mine didn't have this slash.


So... why do we have to guess? Why for instance the definitions for php.ini the user sets in his panel won't work. Even the definitions under PHP Settings -> PHP Simple Editor in the main CWP panel won't change anything.


I'm really puzzled where I can change this php settings either globally or per user (preferably per user).

15
Mod_Security / Hugh log files!
« on: February 02, 2019, 10:01:00 PM »
I just found that my mod security log file was 4GB large!!!
Is there a way to limit this log?

Pages: [1] 2 3 ... 7