Topics

16

SSL / Why SSl is using certificate of another subdomain!!!

« on: December 15, 2018, 05:14:34 AM »

Hello


Thanks for your attention.

I have created a new subdomain, word.website.com, but when I want to use, it it says:

"Your connection is not private
This server could not prove that it is word.website.com; its security certificate is from www.blog.website.com. This may be caused by a misconfiguration or an attacker intercepting your connection."


And when I use Cloudflare it says Error 526: Invalid SSL certificate

Or at the first try word.website.com; redirceted to www.blog.website.com


What's the problem?

Thanks

17

Updates / CWP 0.9.8.746-My site is down.

« on: December 07, 2018, 08:16:51 PM »

Hello
After Yum update the site does not come up. The CWP seems to be working.

Yum updated me from CWP version: 0 .9.8.744 to  0.9.8.746

Thanks

18

Apache / Where is vHosts?

« on: December 07, 2018, 10:34:22 AM »

Hello

In new version how and where can I Rebuild Virtual Hosts when I want to use Nginx?

I can not find it in search or other parts.


Thanks

19

MySQL / Does it mean the database is not created?

« on: December 02, 2018, 05:50:14 PM »

I want to install a Wordpress website.
I create a new database and user  in mysql_manager but the Worpress do not accept it.

The new database is not added to the PhpMysql and list of MySQL databases and users is empty.

Does it mean the database is not created?

Thanks

20

CSF Firewall / Suspicious File Alert /tmp/config.tmp.phbUZD

« on: November 03, 2018, 10:50:30 AM »

Hello
I recive this Suspicious File Alert:

File:   /tmp/config.tmp.phbUZD
Reason: Script, file extension
Owner:  salamzab:salamzab (1003:1003)
Action: No action taken

What should I do?

Thanks

21

MySQL / How can I fix "character-set-server=utf8 collation-server=utf8_general_ci"?

« on: August 10, 2018, 07:27:54 PM »

Hello

How can I fix tjos error?


 \xd8\xae\xd8\xb7\xd8\xa7\xdb\x8c Illegal mix of collations (latin1_swedish_ci,IMPLICIT) and (utf8mb4_unicode_ci,COERCIBLE) for operation '=' \xd8\xaf\xd8\xb1 \xd9\xbe\xd8\xa7\xdb\x8c\xda\xaf\xd8\xa7\xd9\x87\xe2\x80\x8c\xd8\xaf\xd8\xa7\xd8\xaf\xd9\x87 \xd9\x88\xd8\xb1\xd8\xaf\xd9\xbe\xd8\xb1\xd8\xb3 \xd8\xa8\xd8\xb1\xd8\xa7\xdb\x8c \xd8\xaf\xd8\xb3\xd8\xaa\xd9\x88\xd8\xb1 SELECT COUNT(*) FROM `wp_410_links` WHERE `gone_key` = 'https://learning.salamzaban.com/\xd8\xa7\xd9\x84\xd9\x81\xd8\xa8\xd8\xa7\xdb\x8c-\xd8\xa7\xd9\x86\xda\xaf\xd9\x84\xdb\x8c\xd8\xb3\xdb\x8c/' \xd8\xb3\xd8\xa7\xd8\xae\xd8\xaa\xd9\x87 \xd8\xb4\xd8\xaf\xd9\x87 \xd8\xaa\xd9\x88\xd8\xb3\xd8\xb7 require('wp-blog-header.php'), require_once('wp-includes/template-loader.php'), do_action('template_redirect'), WP_Hook->do_action, WP_Hook->apply_filters, WP_410->check_for_410, WP_410->add_link



Thanks

22

MySQL / Keep getting "PHP Warning: Error while sending QUERY packet"

« on: August 10, 2018, 01:10:11 PM »

Hello

I but keep getting " Cannot modify header information - headers already sent in functions.php" or "PHP Warning: Error while sending QUERY packet"

I changed the srver.cnf this way:
[mysqld]
max_allowed_packet = 1024M

and even reupload the functions.php file of the wordpress but no result.

How can solve it?

Thanks

23

PHP / Where can I change max_allowed_packet?

« on: August 09, 2018, 08:42:34 PM »

Hello

When I check /etc/my.cnf - and search for the "max_allowed_packet" line I do not find it.

I get these errors and think if I change the  "max_allowed_packet"  would be solved.

 PHP Warning: Error while sending QUERY packet. PID=16515 in ****** on line 1924, referer:
End of script output before headers: index.php,

How can I fix that?

Thanks

24

Apache / How can I install mod_cloudflare?

« on: July 29, 2018, 11:00:32 PM »

Hello

 I used this code for it but my apache went down. (I fixed it)/ What's the correct way? Thanks

Code: [Select]

Option 3: Manual Installation: RedHat / CentOS / CloudLinux

mod_cloudflare has a few software dependencies that need to be installed first:

# yum install libtool httpd-devel
Next, you should download the mod_cloudflare source to your server:

# wget https://raw.githubusercontent.com/cloudflare/mod_cloudflare/master/mod_cloudflare.c
Finally, install the module. Depending on your system, the command to run might be apxs or apxs2. So, run one of the below two commands. If you get a 'Command not found' when running one, try the other:

# apxs -a -i -c mod_cloudflare.c
# apxs2 -a -i -c mod_cloudflare.c

25

Suggestions / Logging Real Visitor IP Addresses of the Cloudflare

« on: July 29, 2018, 10:04:31 PM »

Hello


-Please add this feature to the next version of the CWP.
- Another suggestion is to make the address of the folders in file manager to be copyable. for example when I go to home/ bla/ bla

I can not copy the address and I have to type it. 

Thanks

26

Apache / I did not find them in /usr/local/apache/conf/httpd.conf

« on: July 28, 2018, 06:22:04 AM »

Hello

How can I change these fields in apache?


Timeout 300
KeepAlive On
MaxKeepAliveRequests 100
KeepAliveTimeout 15
MinSpareServers 5
MaxSpareServers 10
StartServers 5
MaxClients 150
MaxRequestsPerChild 0


I did not find them in /usr/local/apache/conf/httpd.conf

27

CentOS-WebPanel GUI / I do not have acces to SSH, CWP and my site is down. What can I do?

« on: July 26, 2018, 10:49:56 PM »

Hi

I used the rules from this link

https://javapipe.com/ddos/blog/iptables-ddos-protection/

 for Iptables but now I do not have acces to SSH, CWP and my site is down. What can I do?

28

CentOS-WebPanel GUI / Another app is currently holding the xtables lock

« on: July 26, 2018, 07:18:15 PM »

Hello

I wanted to config IPtable.
I set the rule in /etc/sysctl.conf
I added this rule too iptables -t mangle -A PREROUTING -m conntrack --ctstate INVALID -j DROP


As was said in :
https://javapipe.com/ddos/blog/iptables-ddos-protection/


I did this too:


iptables -P INPUT DROP
iptables -P FORWARD DROP

but now when I want to login to CWP it takes a about 3 minutes to let me in/
I think the problem is with the rule:
I want to detelet it but it says :

Another app is currently holding the xtables lock. Perhaps you want to use the -w option?

I think it doesnot stop.
When I use #service iptables stop
The output is:
Redirecting to /bin/systemctl stop iptables.service

Does it means Iptables has stoped?
After that I can not enter the CWP quicker.
I think Iptables was not installed. I used yum and installed it. maybe it caused the problem..


How can I solve it

Thanks

29

iptables / I do not have /etc/sysconfig/iptables file.

« on: July 26, 2018, 03:04:21 PM »

Hello

I want to config /etc/sysconfig/iptables filebut it doesnot exist. Does it mean IPtable is not active?


Thanks

30

iptables / How can I config IPTABLES for DDOS aatacks?

« on: July 26, 2018, 10:29:37 AM »

Hello
Here
https://javapipe.com/ddos/blog/iptables-ddos-protection/
it says to put this code :

Code: [Select]

kernel.printk = 4 4 1 7
kernel.panic = 10
kernel.sysrq = 0
kernel.shmmax = 4294967296
kernel.shmall = 4194304
kernel.core_uses_pid = 1
kernel.msgmnb = 65536
kernel.msgmax = 65536
vm.swappiness = 20
vm.dirty_ratio = 80
vm.dirty_background_ratio = 5
fs.file-max = 2097152
net.core.netdev_max_backlog = 262144
net.core.rmem_default = 31457280
net.core.rmem_max = 67108864
net.core.wmem_default = 31457280
net.core.wmem_max = 67108864
net.core.somaxconn = 65535
net.core.optmem_max = 25165824
net.ipv4.neigh.default.gc_thresh1 = 4096
net.ipv4.neigh.default.gc_thresh2 = 8192
net.ipv4.neigh.default.gc_thresh3 = 16384
net.ipv4.neigh.default.gc_interval = 5
net.ipv4.neigh.default.gc_stale_time = 120
net.netfilter.nf_conntrack_max = 10000000
net.netfilter.nf_conntrack_tcp_loose = 0
net.netfilter.nf_conntrack_tcp_timeout_established = 1800
net.netfilter.nf_conntrack_tcp_timeout_close = 10
net.netfilter.nf_conntrack_tcp_timeout_close_wait = 10
net.netfilter.nf_conntrack_tcp_timeout_fin_wait = 20
net.netfilter.nf_conntrack_tcp_timeout_last_ack = 20
net.netfilter.nf_conntrack_tcp_timeout_syn_recv = 20
net.netfilter.nf_conntrack_tcp_timeout_syn_sent = 20
net.netfilter.nf_conntrack_tcp_timeout_time_wait = 10
net.ipv4.tcp_slow_start_after_idle = 0
net.ipv4.ip_local_port_range = 1024 65000
net.ipv4.ip_no_pmtu_disc = 1
net.ipv4.route.flush = 1
net.ipv4.route.max_size = 8048576
net.ipv4.icmp_echo_ignore_broadcasts = 1
net.ipv4.icmp_ignore_bogus_error_responses = 1
net.ipv4.tcp_congestion_control = htcp
net.ipv4.tcp_mem = 65536 131072 262144
net.ipv4.udp_mem = 65536 131072 262144
net.ipv4.tcp_rmem = 4096 87380 33554432
net.ipv4.udp_rmem_min = 16384
net.ipv4.tcp_wmem = 4096 87380 33554432
net.ipv4.udp_wmem_min = 16384
net.ipv4.tcp_max_tw_buckets = 1440000
net.ipv4.tcp_tw_recycle = 0
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_max_orphans = 400000
net.ipv4.tcp_window_scaling = 1
net.ipv4.tcp_rfc1337 = 1
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_synack_retries = 1
net.ipv4.tcp_syn_retries = 2
net.ipv4.tcp_max_syn_backlog = 16384
net.ipv4.tcp_timestamps = 1
net.ipv4.tcp_sack = 1
net.ipv4.tcp_fack = 1
net.ipv4.tcp_ecn = 2
net.ipv4.tcp_fin_timeout = 10
net.ipv4.tcp_keepalive_time = 600
net.ipv4.tcp_keepalive_intvl = 60
net.ipv4.tcp_keepalive_probes = 10
net.ipv4.tcp_no_metrics_save = 1
net.ipv4.ip_forward = 0
net.ipv4.conf.all.accept_redirects = 0
net.ipv4.conf.all.send_redirects = 0
net.ipv4.conf.all.accept_source_route = 0
net.ipv4.conf.all.rp_filter = 1








in your /etc/sysctl.conf file and apply the settings with sysctl -p.

I go to /etc/sysctl.conf  it says:
"Vendors settings live in /usr/lib/sysctl.d/.
# To override a whole file, create a new file with the same in
# /etc/sysctl.d/ and put new settings there. To override
# only specific settings, add a file with a lexically later
# name in /etc/sysctl.d/ and put new settings there.
#
# For more information, see sysctl.conf(5) and sysctl.d(5)."

What can I do?
Can I add the code to /etc/sysctl.conf  directly or have to breate a new file ?
What does " apply the settings with sysctl -p" mean?


Thanks