Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
16
CSF Firewall / Re: My firewall is off and i can't turn it on
« on: July 26, 2020, 06:29:18 PM »
Thanks for the reply cynique
I did already have the testing set to zero and firewalld was also disabled.
I have since fixed this but never actually gotten to the real reason for the problem. From what I could see the issue stems from country ip blocking, but in the end I was forced to reinstall CSF and reboot the server as forcing the services to restart wouldn't work.
I did already have the testing set to zero and firewalld was also disabled.
I have since fixed this but never actually gotten to the real reason for the problem. From what I could see the issue stems from country ip blocking, but in the end I was forced to reinstall CSF and reboot the server as forcing the services to restart wouldn't work.
17
CSF Firewall / My firewall is off and i can't turn it on
« on: July 24, 2020, 07:18:55 PM »
Hi guys,
I noticed that my firewall was off and so I tried to turn it on but it wouldn't. I then tried to restart the services and still it is off and then I tried to force the restart of services and still it is set to off.
I did get a message saying
I have (although I really didn't want to) rebooted the server and still the firewall is off.
Any help with this is much appreciated.
I noticed that my firewall was off and so I tried to turn it on but it wouldn't. I then tried to restart the services and still it is off and then I tried to force the restart of services and still it is set to off.
I did get a message saying
Quote
[root@server ~]# csf -eand that is a bit puzzling as the firewall is actually off.
csf and lfd are not disabled!
I have (although I really didn't want to) rebooted the server and still the firewall is off.
Any help with this is much appreciated.
18
CentOS 7 Problems / Re: Excessive resource usage
« on: June 26, 2020, 06:07:04 PM »
although I agree that best practice is to build a server without a GUI, I have reasons for it. The server also runs a CCTV backup system and hence Gnome. It was installed as part of the Centos install and not the add on version.
Re-installing the server seems very severe way of dealing with Gnome. That almost borders on the Microsoft advice.
Re-installing the server seems very severe way of dealing with Gnome. That almost borders on the Microsoft advice.
19
CentOS 7 Problems / Excessive resource usage
« on: June 26, 2020, 11:02:01 AM »
I'm getting emails about excessive resource usage and there are a couple of accounts that are problematic.
I've increases the timeout from 1800 to 15000 but still get the email warnings.
I don't want to stop the warnings as that isn't a good idea, but I do need help in understanding how to deal with this account that is using up resources.
The culprit is Gnome desktop and I have tried to stop the service and restart the firewall, but the errors still come.
Here's an email:
Time: Thu Jun 25 22:59:25 2020 +0100
Account: gdm
Resource: Process Time
Exceeded: 362636 > 15000 (seconds)
Executable: /usr/libexec/gsd-sharing
Command Line: /usr/libexec/gsd-sharing
PID: 3085 (Parent PID:2814)
Killed: No
At the moment I'm getting about 900 emails a day
The other account that is as bad is:
Time: Thu Jun 25 22:59:25 2020 +0100
Account: avahi
Resource: Process Time
Exceeded: 362653 > 15000 (seconds)
Executable: /usr/sbin/avahi-daemon
Command Line: avahi-daemon: running [srv1.local]
PID: 1002 (Parent PID:1002)
Killed: No
Anyone know where I should be looking to bring these accounts back in line and stop the excessive resource usage please
I've increases the timeout from 1800 to 15000 but still get the email warnings.
I don't want to stop the warnings as that isn't a good idea, but I do need help in understanding how to deal with this account that is using up resources.
The culprit is Gnome desktop and I have tried to stop the service and restart the firewall, but the errors still come.
Here's an email:
Time: Thu Jun 25 22:59:25 2020 +0100
Account: gdm
Resource: Process Time
Exceeded: 362636 > 15000 (seconds)
Executable: /usr/libexec/gsd-sharing
Command Line: /usr/libexec/gsd-sharing
PID: 3085 (Parent PID:2814)
Killed: No
At the moment I'm getting about 900 emails a day
The other account that is as bad is:
Time: Thu Jun 25 22:59:25 2020 +0100
Account: avahi
Resource: Process Time
Exceeded: 362653 > 15000 (seconds)
Executable: /usr/sbin/avahi-daemon
Command Line: avahi-daemon: running [srv1.local]
PID: 1002 (Parent PID:1002)
Killed: No
Anyone know where I should be looking to bring these accounts back in line and stop the excessive resource usage please
20
CentOS 7 Problems / Re: Memory and Cache usage high
« on: June 21, 2020, 06:03:11 PM »
**UPDATE**
Found several instance of Netdata running on the server (funny as I've never installed Netdata). I have since uninstalled it and forced a reboot of the server and all seems fine again. Ram now running at 6% cache at 9% as expected.
Has anyone else had this happen to them?
Found several instance of Netdata running on the server (funny as I've never installed Netdata). I have since uninstalled it and forced a reboot of the server and all seems fine again. Ram now running at 6% cache at 9% as expected.
Has anyone else had this happen to them?
21
CentOS 7 Problems / Memory and Cache usage high
« on: June 21, 2020, 02:04:03 PM »
I've notice a sudden increase in RAM and CACHE usage that doesn't seem to be easing. I'm running CWP pro and this is on a Dell Power edge with 48gb DDR3 ram and dual Intel Xeon X5675 @ 3.07GHz
Apart from expected services I'm running:
SPF
DKIM
MOD Security
Nomit
Should I be concerned at this usage?
Apart from expected services I'm running:
SPF
DKIM
MOD Security
Nomit
Should I be concerned at this usage?
22
E-Mail / Re: email spam
« on: June 18, 2020, 08:36:11 PM »
Solved ish!
Thanks for the great link. It proved very useful as it highlighted the error I made with DKIM. Although I had installed SPF and DKIM I hadn't placed a default domain key in the dns zone. Now I know that this is don automatically by CWP, but if you are using the DNS Manager it wont be in your dns unless you add it.
Next issue was the spam. I actually found 155 malware viruses in the home/temp file of a domain I was hosting for a third party. I've since deleted the contains of the temp folder and so far no more spam.
Oh and I went through the backups of the daily, weekly and monthly to remove the contains of the temp folder in those backups.
Thanks for the great link. It proved very useful as it highlighted the error I made with DKIM. Although I had installed SPF and DKIM I hadn't placed a default domain key in the dns zone. Now I know that this is don automatically by CWP, but if you are using the DNS Manager it wont be in your dns unless you add it.
Next issue was the spam. I actually found 155 malware viruses in the home/temp file of a domain I was hosting for a third party. I've since deleted the contains of the temp folder and so far no more spam.
Oh and I went through the backups of the daily, weekly and monthly to remove the contains of the temp folder in those backups.
24
E-Mail / email spam
« on: June 18, 2020, 01:12:32 PM »
OK, I'm completely lost on how to track down spam that I have across multiple domains hosted on a single server.
I think I must have misconfigured my email server somehow, but am lost as to how.
The dns checks that I've done all say that the email server is running fine, but here are my issues.
1 when sending emails from any domain I get a warning from the email client that the email I'm sending has the host name
2 spam email isn't being marked as spam and even though I manually mark domain as spam, they still come through
I've run quite a few malware scans and haven't found any infections, but recently a non delivery email was sent back to me and the header was a fake email address from my own host server.
I've checked and I have no open relay, the server is configured not to allow null mail.
I'm running CWP Pro on Centos 7 with all updates. I have spf and dkim and antispam installed and running.
Can anyone suggest where I can begin or what I need to do to check that I've properly configured the mail server please.
I think I must have misconfigured my email server somehow, but am lost as to how.
The dns checks that I've done all say that the email server is running fine, but here are my issues.
1 when sending emails from any domain I get a warning from the email client that the email I'm sending has the host name
2 spam email isn't being marked as spam and even though I manually mark domain as spam, they still come through
I've run quite a few malware scans and haven't found any infections, but recently a non delivery email was sent back to me and the header was a fake email address from my own host server.
I've checked and I have no open relay, the server is configured not to allow null mail.
I'm running CWP Pro on Centos 7 with all updates. I have spf and dkim and antispam installed and running.
Can anyone suggest where I can begin or what I need to do to check that I've properly configured the mail server please.
25
SSL / Re: Trusted but invalid how can it be both
« on: May 10, 2020, 05:28:50 PM »
Umm... tried that and it didn't work. However, the script mentioned
So I'm guessing I'm out of licensing because I've tried too often
Quote
Le_LinkOrder
Le_LinkOrderFinalize
Create new order error. LeOrderFinalize not found. {
"type": "urn:itself:params:acme:error:relateLimited",
"Detail": "Error creating new order :: too many certificates already issued for exact set of domains: srv1.shoppenzance.co.uk: see https://letsencrypt.org/docs/rate-limits/
So I'm guessing I'm out of licensing because I've tried too often
26
SSL / Re: Trusted but invalid how can it be both
« on: May 10, 2020, 04:59:15 PM »
I have tried to save the host (with the same name whilst all options are ticked) but I still get invalid certificates. I also restarted CWP services, but no difference.
I agree that the DNS service I'm using isn't the best and may look in to changing that as well.
I agree that the DNS service I'm using isn't the best and may look in to changing that as well.
27
SSL / Trusted but invalid how can it be both
« on: May 10, 2020, 03:53:10 PM »
I've installed a combo SSL license through CWP Autossl and it says that all services are licensed (Ftp, Cpanel, Webmail and so on) I've also checked using the test buttons 1 through to 4 and as far as I can see the certificates are all fine. I've entered "A" records for the host name, ptr records and hostname resolve with dns, yet every browser I've tried says that the certificates for the host is invalid. the host is srv1.shoppenzance.co.uk
Clearly I must have done something wrong... Has anyone got any ideas that might help please?
Clearly I must have done something wrong... Has anyone got any ideas that might help please?
28
Installation / Paid configuration
« on: April 30, 2020, 10:00:33 PM »
Although I have two accounts of CWP pro on two servers. I'm about to set up portal for several small businesses in our area. I'm doing this for them in the hope that when the time comes (after the shutdown) they can use the online presence to re-build their business.
That said I need the CWP configured to the most secure and best practice it can possible be.
Is their a paid service that can do this?
I can't take risks with other peoples chances and need this done correctly.
That said I need the CWP configured to the most secure and best practice it can possible be.
Is their a paid service that can do this?
I can't take risks with other peoples chances and need this done correctly.
29
Other / Hardware firewall
« on: April 30, 2020, 09:52:40 PM »
I've decided to upgrade a few things and wondered what are your thoughts on hardware firewalls. Do I need one Does the firewall in CWPpro protect the operating system as well.
I have fibre connection to the server and at present use a Fritzbox 3940 as a router. I'm thinking to upgrade the fritzbox with something that has better security, but since I've just paid out a load on IT kit, I don't have a lot of money left. What would you recommend (if I need it at all) a router for this job please?
I have fibre connection to the server and at present use a Fritzbox 3940 as a router. I'm thinking to upgrade the fritzbox with something that has better security, but since I've just paid out a load on IT kit, I don't have a lot of money left. What would you recommend (if I need it at all) a router for this job please?
