Messages

16

Information / Has centos-webpanel.com been hacked ?

« on: May 14, 2018, 11:47:51 AM »

I looked at the Centos Webpanel home page today and it looks like it has been hacked / spoofed. Is this the case ?

Or has the project just been abandoned by the developers? I hope not, because I really like this panel.

17

Information / What is the script that CWP uses to rotate the postfix mail log ?

« on: April 24, 2018, 02:20:28 PM »

I note that the Postfix mail log is 'rotated' on an intermittent basis - the file var/log/maillog is renamed to include a date based suffix and a new file var/log/maillog is created, but I want to be able to do this more frequently.

A Google search revealed that

Code: [Select]

# logrotate -f /etc/logrotate.d/syslog will reset the maillog (plus others), but I've found that the maillog is renamed maillog.1 and then deleted.

Does anyone know what script CWP uses to rotate the log ?

18

Mod_Security / Re: Status engine is currently disabled ?

« on: April 02, 2018, 05:05:32 PM »

I know this is an old thread, but I saw this error today (Status Engine is Currently Disabled) and found this post while searching for a solution. So I thought I'd share my findings with anyone else who has the same 'error'.

It seems that it is OK for the Status Engine to be disabled because all it does is provide feedback to the ModSecurity team.

See here : https://www.trustwave.com/Resources/SpiderLabs-Blog/Introducing-ModSecurity-Status-Reporting/

Hope someone finds it useful.

19

CentOS-WebPanel Bugs / Re: CPU 100% clamd

« on: April 01, 2018, 02:31:06 PM »

I have had this problem a couple of times now. It seems to occur following a Yum Update.

The first time petrosvels solution worked for me:

# systemctl stop clamd.service
# rm -f /var/run/clamd.amavisd/clamd.sock
# systemctl start clamd.service

The problem is in the error message from the postfix log (var/log/maillog) - ERROR: LOCAL: Socket file /var/run/clamd.amavisd/clamd.sock is in use by another process. Deleting the file clamd.sock is what is required to fix the problem.

The above didn't fix the problem straight away on the most recent occasion, so what I did was:

• From the CWP Dashboard - stop ClamAV
• stop AMaViS (A Mail Virus Scanner)
• Waited until USER amavis no longer appeared in the Top 5 Processes list and the 1 minute load average dropped back to normal levels (below 0.1 in my case). This is probably not necessary, but I did it anyway to be absolutely sure amavis/clamd were not running.
• Open Filemanager and browse to the folder /var/run/clamd.amavisd. Delete the file clamd.sock. It was an empty file (0 bytes)
• From the CWP Dashboard Start AMaViS
• Start ClamAV

If that does not fix the problem, check the postfix log for other possible causes:

# tail -100 var/log/maillog | grep clamd

20

Installation / Re: I have two SECURITY WARNING....

« on: February 11, 2018, 06:01:28 PM »

Are there any disadvantages to hiding all processes if not owned by the user ?

I ask from a position of total ignorance on this subject and the point of view of the server administrator who is managing a number of clients websites

21

Backup / Re: Cron Job Backup

« on: February 01, 2018, 07:07:17 AM »

Try:

0 0 * * 0 /bin/bash /usr/local/cwpsrv/htdocs/resources/scripts/user_backup asklepiy

22

Installation / Re: Upgrade to pro and updates/upgrades/changes

« on: February 01, 2018, 06:35:12 AM »

I had to rebuild my server from 'scratch' recently. Provided the licence is still current, CWP Pro will automatically re-install when the automatic update script runs (I'm not sure how frequent this is, but I don't think it's daily).

If you don't want to wait you can always open a PuTTY or Terminal session and call:

/bin/bash /scripts/update_cwp

That should update to CWPPro straight away.

23

Installation / Re: Upgrade to CWPPro

« on: February 01, 2018, 06:28:22 AM »

I know this is a few weeks old now an the OP will have decided to 'take the plunge' or not by now, but in case it helps anyone else - once you've purchased the licence (make sure you enter the correct IP address when you order), open a PuTTY console to your server and enter:

/bin/bash /scripts/update_cwp

I found that it updated to CWPPro straight away.

24

Updates / Re: Reinstalling CWP Pro after Server Reinstall

« on: January 30, 2018, 08:21:01 AM »

UPDATE: After checking my account, it seems I actually paid for CWP Pro to be installed on a different IP Address to the one I'm currently using.

As the year had nearly expired, I cancelled that subscription and took out a new one with the correct ip address. Running the bash script 'update_cwp' installed CWP Pro immediately.

25

Updates / Reinstalling CWP Pro after Server Reinstall

« on: January 27, 2018, 03:39:09 PM »

My Centos Server crashed yesterday and I finally got it running again today after having to reinstall everything from scratch.

The IP addresses are the same as before, but CWP has not automatically updated to the Pro version (which I paid for previously). Is it simply a case of waiting for it to self update or do I need to take some action (eg run a bash script / contact support etc) ?

Any advice gratefully received.

Thanks

26

DNS / Best Practise For Multiple IP Addresses ?

« on: November 15, 2017, 03:19:22 PM »

I have a VPS based on Centos 7 with Centos Web Panel. There are 4 IP addresses:

xx.xx.xx2.188
xx.xx.xx3.188
xx.xx.xx4.188
xx.xx.xx4.189

My server is installed on xx2.188 and I have set the shared IP as xx2.188

I have set ns1.server as xx4.188 and ns2.server as xx4.189

I have a number of client accounts set up on the panel spread over xx2.188, xx3.188 and xx4.188

And everything was going well. . .

Until I started messing around with the server and DNS nameserver zones. Having recently recovered access to the websites and email (a whole day wasted !), I wondered if I should change to the following:

• Leave main server address as xx.xxx.xx2.188
• Leave Nameservers as they are xx.xxx.xx4.188 / xx4.189
• Set Shared IP to xx.xxx.xx3.188
• Put all user accounts on IP address xx.xxx.xx3.188

What is best practise here ?
And what is the relevance of the Shared IP address if I can still access domains that are on other IP Addresses ?

Any enlightenment would be very much appreciated.

Kind regards

JC

27

SSL / Re: CAN'T GET SSL TO WORK.. TRIED EVERYTHING!

« on: September 03, 2017, 07:12:24 AM »

Does the web page display or do you get a browser page saying 'Your Connection Is Not Private / Secure' ?

What is the actual warning message that you get ?

If you see the correct web page view the page source (from the right click popup menu) and do a search for 'http:'. It's possible that the page is loading non ssl elements (eg css, javascript, images). If so, then you must load these from an https:// source.

It's Ok to have outbound links to http://

I hope this helps.

KInd regards

28

SSL / SSL Problem with CWP Client (as opposed to Admin)

« on: September 02, 2017, 05:35:37 PM »

I'm using Centos 7.3.1611 with CWPpro 0.9.8.353.

I'm new to SSL Certificates, so please be gentle with me !

• I've renamed my Hostname and I can access CWP on port 2031 without any problem (https://hostname.domain.com:2031)
• Used Auto SSL to generate SSL certificate for a few domains (CWP accounts). SSL seems to be working well on the domain websites - The word 'Secure' appears in the browser address bar
• But when I try to login to the client CWP using port 2031 (https://domain.com:2031), I get NET::ERR_CERT_COMMON_NAME_INVALID

It seems that the system is checking the server hostname certificate rather than the specific domain name certificate.

I've searched in the Apache config file and the Include Conf files for references to port 2031 and not found anything so I'm stuck.

Is there a workaround so that I can access the domain level web panel using SSL (surely if I can access domain.com:2030 then it's possible to enable domain.com:2031) ?

Any pointers in the right direction would be very much appreciated.

29

SSL / Re: Missing info.....

« on: April 21, 2017, 05:12:55 PM »

Plus 1.

It's not very clear - It says Not in use any more . . .

. . . but the option is still there to install it (which suggests it is still in use).

Has Letsencrypt been superceded by the updated SSL Cert Manager ?

30

CentOS-WebPanel GUI / How to Customise CSS in Web Panel

« on: April 20, 2017, 04:37:31 PM »

I have found the file custom.css in /usr/local/cwpsrv/htdocs/admin/design/css/ and when I use vi to edit the file, right at the top, I am invited to:

/* ------------------Put your custom code here--------------------*/

Except I can't save the file as it is read only.

All I want to do is reduce the size of the orange font in the 'Spark Stats' area.

Are we really not allowed to change the look of CWP or is this an oversight by the development team ?

Is there a 'fix' or 'workaround' ?