Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
121
Postfix / Can't connect to smtp (postfix) via SSL from sites on the VPS
« on: April 09, 2019, 05:09:16 PM »
Hi,
I'm using a VPS on Hetzner, and am trying to force wordpress using SMTP to send emails.
Of course I've created a mail address and it's working fine with non secure connection (port 25). I can even connect to the smtp via SSL from outside the server (tested with 3rd part test sites), but when configuring Wordpress with plugins like WP Mail SMTP I'm getting an error.
I just don't want to reveal my domain, so I've change my hostname to hostname.domain.com and domain to domain.com. I've also hide the full IP.
The problem that I believe I'm facing is that the site is presented as hostname.domain.com.domain.com.domain.com? Why is that happening?
Here's the log:
And here's the log when I'm trying to send an email from a 3rd party site to my gmail via the same smtp account:
Would appreciate any help!
I'm using a VPS on Hetzner, and am trying to force wordpress using SMTP to send emails.
Of course I've created a mail address and it's working fine with non secure connection (port 25). I can even connect to the smtp via SSL from outside the server (tested with 3rd part test sites), but when configuring Wordpress with plugins like WP Mail SMTP I'm getting an error.
I just don't want to reveal my domain, so I've change my hostname to hostname.domain.com and domain to domain.com. I've also hide the full IP.
The problem that I believe I'm facing is that the site is presented as hostname.domain.com.domain.com.domain.com? Why is that happening?
Here's the log:
Quote
Apr 9 19:59:10 cwp postfix/smtpd[5488]: connect from hostname.domain.com.domain.com.domain.com[xxx.69.16.xxx]
Apr 9 19:59:10 cwp postfix/smtpd[5488]: SSL_accept error from hostname.domain.com.domain.com.domain.com[xxx.69.16.xxx]: 0
Apr 9 19:59:10 cwp postfix/smtpd[5488]: warning: TLS library problem: 5488:error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca:s3_pkt.c:1493:SSL alert number 48:
Apr 9 19:59:10 cwp postfix/smtpd[5488]: lost connection after CONNECT from hostname.domain.com.domain.com.domain.com[xxx.69.16.xxx]
Apr 9 19:59:10 cwp postfix/smtpd[5488]: disconnect from hostname.domain.com.domain.com.domain.com[xxx.69.16.xxx]
And here's the log when I'm trying to send an email from a 3rd party site to my gmail via the same smtp account:
Quote
Apr 9 20:21:16 cwp postfix/smtpd[9061]: connect from ec2-54-184-121-130.us-west-2.compute.amazonaws.com[54.184.121.130]
Apr 9 20:21:16 cwp postfix/smtpd[9061]: Anonymous TLS connection established from ec2-54-184-121-130.us-west-2.compute.amazonaws.com[54.184.121.130]: TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)
Apr 9 20:21:17 cwp postfix/smtpd[9061]: 68997211CD: client=ec2-54-184-121-130.us-west-2.compute.amazonaws.com[54.184.121.130], sasl_method=PLAIN, sasl_username=wordpress@domain.com
Apr 9 20:21:18 cwp postfix/cleanup[9068]: 68997211CD: message-id=<RNC99NZP77U4.P9KBG3TRCYL33@WIN-AUIR3RRGP88>
Apr 9 20:21:18 cwp postfix/qmgr[700]: 68997211CD: from=<wordpress@domain.com>, size=594, nrcpt=1 (queue active)
Apr 9 20:21:18 cwp postfix/smtpd[9061]: disconnect from ec2-54-184-121-130.us-west-2.compute.amazonaws.com[54.184.121.130]
Apr 9 20:21:18 cwp postfix/smtp[9070]: 68997211CD: to=<myaccount@gmail.com>, relay=gmail-smtp-in.l.google.com[2a00:1450:400c:c0c::1b]:25, delay=1.2, delays=0.63/0.02/0.16/0.35, dsn=2.0.0, status=sent (250 2.0.0 OK 1554830478 q9si21374230wrm.250 - gsmtp)
Would appreciate any help!
122
CentOS-WebPanel Bugs / Re: Wordpress installation issue
« on: April 07, 2019, 09:10:29 PM »
And I actually paid for the pro version.
Don't really know what I got for these 10 bucks...
Don't really know what I got for these 10 bucks...
123
Migration from other control panels / Re: cPanel Migration and restore Error
« on: March 04, 2019, 06:04:15 AM »I have the same problem! Did you find a solution to this problem??Have you changed the file name to cpmove-{username}.tar.gz?
124
CSF Firewall / lfd on {HOSTNAME}: Suspicious process running under user {USERNAME}
« on: February 15, 2019, 06:55:27 AM »I've got the following mail from the firewall. Any idea what it means? I didn't see anything odd and the site is loading.
[/size]I've replaced the username with {USERNAME}.[/color]
[/size][/color]
[/size][/color]
[/size]Subjetct: lfd on {HOSTNAME}: Suspicious process running under user {USERNAME}[/color]
[/size]Time: Thu Feb 14 22:38:21 2019 +0200[/color][/size]PID: 25646 (Parent PID:3086)Account: {USERNAME}Uptime: 67 seconds
Executable:
/opt/alt/php-fpm56/usr/sbin/php-fpm
Command Line (often faked in exploits):
php-fpm: pool {USERNAME}
Network connections by the process (if any):
tcp: 127.0.0.1:42342 -> 127.0.0.1:3306
Files open by the process (if any):
/tmp/.ZendSem.Od78F8 (deleted)
/dev/urandom
/home/{USERNAME}/public_html/wp-content/wflogs/ips.php
/home/{USERNAME}/public_html/wp-content/wflogs/config.php
/home/{USERNAME}/public_html/wp-content/wflogs/attack-data.php
/home/{USERNAME}/public_html/wp-content/wflogs/config-synced.php
/home/{USERNAME}/public_html/wp-content/wflogs/config-livewaf.php
/home/{USERNAME}/public_html/wp-content/wflogs/config-transient.php
/home/{USERNAME}/public_html/wp-content/wflogs/GeoLite2-Country.mmdb
/etc/pki/nssdb/cert9.db
/etc/pki/nssdb/key4.db[/size]
125
Information / Re: I want to change the PHP version of only single domain
« on: February 09, 2019, 06:32:20 PM »Please just let me know if I am wrong, but I am afraid that PHP for only one domain could work only with the Php-CGI version, not Php-FPM.Yes. I manage different PHP version using PHP-FPM.
Has anyone managed to use Php-FPM per domain, and / or along with the feature of choosing versions per directory .. ??
Regards,
Netino
126
Apache / Re: Large domlogs files
« on: February 09, 2019, 06:30:10 PM »Create it with the following content:Thanks, I've created the file.Code: [Select]/usr/local/apache/domlogs/*.log {
rotate 52
weekly
missingok
notifempty
sharedscripts
delaycompress
postrotate
/bin/kill -HUP `cat /usr/local/apache/logs/httpd.pid 2>/dev/null` 2> /dev/null || true
endscript
}
127
CentOS 7 Problems / Re: high disk space consumption
« on: February 09, 2019, 06:23:59 PM »Thanks! I wasn't aware...Can I ask how you got to this GUI display with CWP?on the dashboard homepage (disk details)
128
Apache / Re: Large domlogs files
« on: February 07, 2019, 12:40:04 PM »
logrotate is installed. I've checked, but I don't have the file apache under /etc/logrotate.d/
How can I create it?
How can I create it?
129
CentOS 7 Problems / Re: high disk space consumption
« on: February 07, 2019, 06:56:14 AM »Can I ask how you got to this GUI display with CWP?
130
Postfix / Re: Wordpress and Postfix Mail Server Problem
« on: February 07, 2019, 06:43:58 AM »I edited the file. but the same problem continues. SMTP settings; http://prntscr.com/mho46zThis might mean the issue is not with the firewall (though I had the exact same issue not long ago).
I suggest you disable the firewall and test again. If it works - it IS the firewall and you're doing something wrong.
If it doesn't work, we'll have to continue guess.
Don't forget to enable the firewall back again.
By the way, do you have mod_sec activated? I've disabled it. Too many false positive cases.
131
Apache / Re: Large domlogs files
« on: February 07, 2019, 06:35:45 AM »Wow...!!!I do have the folder logrotate.d as you've mentioned, but not the specific file you've mentioned.
If you don't have logrotate installed, you will have disk space problems briefly!
Logs in the server consume too much disk space.
Doesn't that mean logrotate is installed already? Is there a way to make sure without trying to install it?
132
Postfix / Re: Wordpress and Postfix Mail Server Problem
« on: February 06, 2019, 03:20:26 PM »
You have to allow outgoing traffic to ports 25, 465, 587 and in the case of Mandrill 2525 as will. You should actually be fine enabling only the one you will connect to. So:
[/color]You might also need to remove that ports from SMTP_PORTS if you have SMTP_BLOCK enabled (if it is set to 1).
Code: [Select]
sudo vim /etc/csf/csf.confadd 25,2525,465,587 to TCP_OUT, and to TCP6_OUT if you use IPv6.[/color]You might also need to remove that ports from SMTP_PORTS if you have SMTP_BLOCK enabled (if it is set to 1).
133
Migration from other control panels / Re: cPanel Migration and restore Error
« on: February 06, 2019, 03:14:50 PM »
Have you changed the file name to cpmove-{username}.tar.gz?
134
PHP / Re: Can't use personal php.ini
« on: February 06, 2019, 01:33:01 PM »
For the sake of future searchers, I've found the answer for that issue. You can see it here:
http://forum.centos-webpanel.com/php/changes-in-php-ini-won't-work!/msg21430/#msg21430
http://forum.centos-webpanel.com/php/changes-in-php-ini-won't-work!/msg21430/#msg21430
135
PHP / Re: Changes in PHP.INI won't work!
« on: February 06, 2019, 01:31:41 PM »
Well, I think I got it all figured out.
While I was expecting the changes to take effect immediately, it seems there's a cache defined in user_ini.cache_ttl (300 in my case) in seconds.
After a change I made in the file, I had to leave the computer for a few minutes. After I got back, I saw the change took place. That's when I figured out there must be a cache issue and found this setting.
So, I think the wiki (http://wiki.centos-webpanel.com/php-ini-per-folder) has to be updated with the following:
A. Newer versions of CWP are now using .user.ini instead of php.ini (by the way, Wordfence is using .user.ini as well).
B. You'll have to wait the amount of seconds mentioned in user_ini.cache_ttl for the change to take effect.
[/size]
[/size]Thank you all.
While I was expecting the changes to take effect immediately, it seems there's a cache defined in user_ini.cache_ttl (300 in my case) in seconds.
After a change I made in the file, I had to leave the computer for a few minutes. After I got back, I saw the change took place. That's when I figured out there must be a cache issue and found this setting.
So, I think the wiki (http://wiki.centos-webpanel.com/php-ini-per-folder) has to be updated with the following:
A. Newer versions of CWP are now using .user.ini instead of php.ini (by the way, Wordfence is using .user.ini as well).
B. You'll have to wait the amount of seconds mentioned in user_ini.cache_ttl for the change to take effect.
[/size]
[/size]Thank you all.
