Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
1
CentOS 9 Problems / Re: EL9 recent update casusing boot issue
« on: March 29, 2026, 07:56:37 AM »Thanks for all suggestion. But i found the solution.
after debugging i found that it is cased by memory. as its on VM. i update the start memory size to 2GB and the problem was resolved.
Thanks again. hope it might help someone.
Just curious how much RAM it had?
I've run AlmaLinux 8 on a server with 512MB before.
2
MySQL / Re: Allow Remote Access to MariaDB Database
« on: March 27, 2026, 11:51:44 PM »
GO use ANY other control panel, including freeware and COMMERCIAL WILL have MariaDB/MySQL on port 3306 locked down to localhost only.
We are back to basic cyber security 101.
And back to you stating it's "common place", which it is not.
If it was all the control panels would have it open, which again they do not due to security.
Yes, more advanced users who want to run clusters or load balancing would.
And would be running proxies directing traffic to workers, who in turn would connect to the database server via a private network in the background.
You also really would not be running a control panel at that point, and just a raw OS.
If you aren't running dnf update to keep your servers updated and secure, that is one job of a sys admin and/or a cyber security person.
That is not a waste of time.
Or you can even automate it, which could be a system script that could be run locally or via ansible.
You can't argue your way is correct and "common place", when all the control panels defaults say and do the opposite...
There is no right or wrong way.
Just the default and custom application of what you are doing with the server(s).
We are back to basic cyber security 101.
And back to you stating it's "common place", which it is not.
If it was all the control panels would have it open, which again they do not due to security.
Yes, more advanced users who want to run clusters or load balancing would.
And would be running proxies directing traffic to workers, who in turn would connect to the database server via a private network in the background.
You also really would not be running a control panel at that point, and just a raw OS.
If you aren't running dnf update to keep your servers updated and secure, that is one job of a sys admin and/or a cyber security person.
That is not a waste of time.
Or you can even automate it, which could be a system script that could be run locally or via ansible.
You can't argue your way is correct and "common place", when all the control panels defaults say and do the opposite...
There is no right or wrong way.
Just the default and custom application of what you are doing with the server(s).
3
MySQL / Re: Allow Remote Access to MariaDB Database
« on: March 26, 2026, 07:05:32 PM »
@Andrew C
CWP's last release was on 2026-03-18 for patches & bug fixes.
Before that it was on 2026-02-18 & 2026-02-02.
They release patches about as often as other control panels.
But what's nice with CWP, the apps update their own versions, this helps keep CWP secure, as CWP only has to worry about 4 ports for the CWP interface.
Only one that really has to be done manually is Roundcube.
And with MariaDB, I was looking at your line "It is common practice to remote connect to MariaDB with advanced admin tools to manage the database."
From what I have seen, it is not common to remote connect to MariaDB.
Most users use scripts that are located on the same server.
Opening port 3306, is opening a security hole on the server, as it it is opening any port.
See, I see you use, 'common practice' and the 'advanced admin tools' in the same sentence.
Those 2 don't really go together, as only a small rare portion would ever use 'advanced admin tools'.
It's not even common for users to ever use phpMyAdmin.
Usually at that point they would open a support ticket.
CWP's last release was on 2026-03-18 for patches & bug fixes.
Before that it was on 2026-02-18 & 2026-02-02.
They release patches about as often as other control panels.
But what's nice with CWP, the apps update their own versions, this helps keep CWP secure, as CWP only has to worry about 4 ports for the CWP interface.
Only one that really has to be done manually is Roundcube.
And with MariaDB, I was looking at your line "It is common practice to remote connect to MariaDB with advanced admin tools to manage the database."
From what I have seen, it is not common to remote connect to MariaDB.
Most users use scripts that are located on the same server.
Opening port 3306, is opening a security hole on the server, as it it is opening any port.
See, I see you use, 'common practice' and the 'advanced admin tools' in the same sentence.
Those 2 don't really go together, as only a small rare portion would ever use 'advanced admin tools'.
It's not even common for users to ever use phpMyAdmin.
Usually at that point they would open a support ticket.
4
Information / Re: Modernizing CWP: Drop EOL, Support AL9, AL10 & Rocky
« on: March 26, 2026, 06:40:20 PM »I switched to KeyHelp panel because I no longer trust CWP. It works very stably.
Looks like they took the open source HestiaCP and just did some name changes, and made a 'Pro' version for 9€
Even only works on Ubuntu and Debian.
5
MySQL / Re: Allow Remote Access to MariaDB Database
« on: March 25, 2026, 09:57:56 PM »
In one sentence you say database access Should Be Public, but then you say you restrict access.
All control panels limit database access to only localhost be default, not just CWP. That is basic cyber security 101.
CWP has nothing to do with MariaDB. 2 different developers.
If you have the MariaDB.repo setup, then any updates & security patches will be applied.
All control panels limit database access to only localhost be default, not just CWP. That is basic cyber security 101.
CWP has nothing to do with MariaDB. 2 different developers.
If you have the MariaDB.repo setup, then any updates & security patches will be applied.
6
Information / Re: Past Due Changelogs
« on: March 19, 2026, 07:44:34 PM »Yes its great news that change logs are being published once again. Long may it continue.
However you need to analyse the dates of the updates which I assume are accurate.
In 2023 there were regular monthly updates, sometimes two per month.
In 2024 there were only two updates.
In 2025 there were only two updates.
And in 2026 we have the first update.
What happened to regular monthly updates to fix and enhance CWP especially on AlmaLinux 9.x and 10.x ? Please discontinue support on EOL operating systems and focus on the new.
Thanks
I agree, they need to drop support for the Past EOL CentOS 7.
Once they do that, the limitations for AL9 and hopefully AL10 will be gone.
Including getting rid of PHP 7.4/8.0 as the base version cwpsrv uses.
I understand the problem with PHP 8.4, since that org (PHP) removed several packages and now you have to use PECL to install them.
7
CSF Firewall / Re: Cannot enable Firewall
« on: March 17, 2026, 10:53:10 PM »
Please advise the following:
What distro are you running CWP on?
New or Existing installation?
What csf version? [csf -v]
What distro are you running CWP on?
New or Existing installation?
What csf version? [csf -v]
8
Updates / Re: Roundcube vulnerability
« on: March 08, 2026, 12:16:17 PM »And i did, as many others. But that doesn't mean i don't follow the project...
Following is one thing.
But all you seem to do is post misinformation and troll posts of actual users trying to get help with your hate of CWP...
Thank for finally admitting publicly your just a troll.
9
Updates / Re: Roundcube vulnerability
« on: March 05, 2026, 07:13:30 PM »
You can update to the latest 1.5 LTS version, which is 1.5.13
That takes care of the issue.
That takes care of the issue.
10
CSF Firewall / Re: CSF Auto Update Re-Enabled v14.24 and v15.00
« on: March 01, 2026, 02:51:31 AM »11
CSF Firewall / Re: CSF Auto Update Re-Enabled v14.24 and v15.00
« on: February 24, 2026, 09:50:52 PM »
No the mirrors is no longer active as there are different upgrades available.
We have been working with Aetherinox fork.
You can see how to upgrade to this fork at:
https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/aetherinox-csf-firewall-update-to-v15-09/
In addition to our public KB, we have also setup support forums at: https://sysadmin.help
We have been working with Aetherinox fork.
You can see how to upgrade to this fork at:
https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/aetherinox-csf-firewall-update-to-v15-09/
In addition to our public KB, we have also setup support forums at: https://sysadmin.help
12
Other / Re: Goodbye CWP — I’m done for good
« on: February 22, 2026, 06:36:26 PM »I don't understand the point of these "suicide note" posts. Fine, make a choice, do it.
Because haters are gonna hate.
You look at the post history, and that's all they have posted since post 1.
Bashing CWP in one way or another, and all saying it's a 'dead project'.
13
PHP Selector / Re: Support for PHP 8.4
« on: February 18, 2026, 07:18:00 PM »Your be better posting it here https://www.alphagnu.com as cwp spends more time down than up.True. The forums here where down for 3 days, again.
sysadmin.help is live now also.
And SSL works
14
DNS / Re: Problem connecting to CWP server on Cloudflare
« on: February 18, 2026, 07:15:52 PM »
CWP doesn't talk to Cloudflare.
So any changes on your CWP server won't affect Cloudflare, and vs versa.
So any changes on your CWP server won't affect Cloudflare, and vs versa.
15
Other / Re: Goodbye CWP — I’m done for good
« on: February 18, 2026, 07:10:18 PM »Completely agree with Jaspreet Singh.
This project seems to be dead, as we have not received any updates since Nov 2024, and there is no support on the forum either.
Some time ago, I contacted the CWP team, and they said they were working, but they blocked me then. There are a few members who are running the forum by just saying "CWP Team is working, CWP is not dead, blah blah, etc.." and a few of them are sharing their article users, but the actual CWP team doesn't bother looking at the forum.
It's time to move on
Project is NOT DEAD. Not sure why you keep posting that line...
CWP pushed an update today (2026-02-18) 0.9.8.1222.
And before that 0.9.8.1221 was pushed on 2026-02-02
It's personal preference if you want to stop using CWP and 'move on'
I've tested other panels, and they all have CVEs and can not be kept updated as easily as CWP can be.
Some don't even have the features CWP has, and cost $$$ more.
Can CWP do better with some things, yes.
