This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
31
Apache / I did not find them in /usr/local/apache/conf/httpd.conf
« on: July 28, 2018, 06:22:04 AM »
Hello
How can I change these fields in apache?
Timeout 300
KeepAlive On
MaxKeepAliveRequests 100
KeepAliveTimeout 15
MinSpareServers 5
MaxSpareServers 10
StartServers 5
MaxClients 150
MaxRequestsPerChild 0
I did not find them in /usr/local/apache/conf/httpd.conf
How can I change these fields in apache?
Timeout 300
KeepAlive On
MaxKeepAliveRequests 100
KeepAliveTimeout 15
MinSpareServers 5
MaxSpareServers 10
StartServers 5
MaxClients 150
MaxRequestsPerChild 0
I did not find them in /usr/local/apache/conf/httpd.conf
32
CentOS-WebPanel GUI / I do not have acces to SSH, CWP and my site is down. What can I do?
« on: July 26, 2018, 10:49:56 PM »
Hi
I used the rules from this link
https://javapipe.com/ddos/blog/iptables-ddos-protection/
for Iptables but now I do not have acces to SSH, CWP and my site is down. What can I do?
I used the rules from this link
https://javapipe.com/ddos/blog/iptables-ddos-protection/
for Iptables but now I do not have acces to SSH, CWP and my site is down. What can I do?
33
CentOS-WebPanel GUI / Another app is currently holding the xtables lock
« on: July 26, 2018, 07:18:15 PM »Hello
I wanted to config IPtable.
I set the rule in /etc/sysctl.conf
I added this rule too iptables -t mangle -A PREROUTING -m conntrack --ctstate INVALID -j DROP
As was said in :
https://javapipe.com/ddos/blog/iptables-ddos-protection/
I did this too:
iptables -P INPUT DROP
iptables -P FORWARD DROP
but now when I want to login to CWP it takes a about 3 minutes to let me in/
I think the problem is with the rule:
I want to detelet it but it says :
Another app is currently holding the xtables lock. Perhaps you want to use the -w option?
I think it doesnot stop.
When I use #service iptables stop
The output is:
Redirecting to /bin/systemctl stop iptables.service
Does it means Iptables has stoped?
After that I can not enter the CWP quicker.
I think Iptables was not installed. I used yum and installed it. maybe it caused the problem..
How can I solve it
Thanks
34
iptables / I do not have /etc/sysconfig/iptables file.
« on: July 26, 2018, 03:04:21 PM »
Hello
I want to config /etc/sysconfig/iptables filebut it doesnot exist. Does it mean IPtable is not active?
Thanks
I want to config /etc/sysconfig/iptables filebut it doesnot exist. Does it mean IPtable is not active?
Thanks
35
iptables / How can I config IPTABLES for DDOS aatacks?
« on: July 26, 2018, 10:29:37 AM »
Hello
Here
https://javapipe.com/ddos/blog/iptables-ddos-protection/
it says to put this code :
in your /etc/sysctl.conf file and apply the settings with sysctl -p.
I go to /etc/sysctl.conf it says:
"Vendors settings live in /usr/lib/sysctl.d/.
# To override a whole file, create a new file with the same in
# /etc/sysctl.d/ and put new settings there. To override
# only specific settings, add a file with a lexically later
# name in /etc/sysctl.d/ and put new settings there.
#
# For more information, see sysctl.conf(5) and sysctl.d(5)."
What can I do?
Can I add the code to /etc/sysctl.conf directly or have to breate a new file ?
What does " apply the settings with sysctl -p" mean?
Thanks
Here
https://javapipe.com/ddos/blog/iptables-ddos-protection/
it says to put this code :
Code: [Select]
kernel.printk = 4 4 1 7
kernel.panic = 10
kernel.sysrq = 0
kernel.shmmax = 4294967296
kernel.shmall = 4194304
kernel.core_uses_pid = 1
kernel.msgmnb = 65536
kernel.msgmax = 65536
vm.swappiness = 20
vm.dirty_ratio = 80
vm.dirty_background_ratio = 5
fs.file-max = 2097152
net.core.netdev_max_backlog = 262144
net.core.rmem_default = 31457280
net.core.rmem_max = 67108864
net.core.wmem_default = 31457280
net.core.wmem_max = 67108864
net.core.somaxconn = 65535
net.core.optmem_max = 25165824
net.ipv4.neigh.default.gc_thresh1 = 4096
net.ipv4.neigh.default.gc_thresh2 = 8192
net.ipv4.neigh.default.gc_thresh3 = 16384
net.ipv4.neigh.default.gc_interval = 5
net.ipv4.neigh.default.gc_stale_time = 120
net.netfilter.nf_conntrack_max = 10000000
net.netfilter.nf_conntrack_tcp_loose = 0
net.netfilter.nf_conntrack_tcp_timeout_established = 1800
net.netfilter.nf_conntrack_tcp_timeout_close = 10
net.netfilter.nf_conntrack_tcp_timeout_close_wait = 10
net.netfilter.nf_conntrack_tcp_timeout_fin_wait = 20
net.netfilter.nf_conntrack_tcp_timeout_last_ack = 20
net.netfilter.nf_conntrack_tcp_timeout_syn_recv = 20
net.netfilter.nf_conntrack_tcp_timeout_syn_sent = 20
net.netfilter.nf_conntrack_tcp_timeout_time_wait = 10
net.ipv4.tcp_slow_start_after_idle = 0
net.ipv4.ip_local_port_range = 1024 65000
net.ipv4.ip_no_pmtu_disc = 1
net.ipv4.route.flush = 1
net.ipv4.route.max_size = 8048576
net.ipv4.icmp_echo_ignore_broadcasts = 1
net.ipv4.icmp_ignore_bogus_error_responses = 1
net.ipv4.tcp_congestion_control = htcp
net.ipv4.tcp_mem = 65536 131072 262144
net.ipv4.udp_mem = 65536 131072 262144
net.ipv4.tcp_rmem = 4096 87380 33554432
net.ipv4.udp_rmem_min = 16384
net.ipv4.tcp_wmem = 4096 87380 33554432
net.ipv4.udp_wmem_min = 16384
net.ipv4.tcp_max_tw_buckets = 1440000
net.ipv4.tcp_tw_recycle = 0
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_max_orphans = 400000
net.ipv4.tcp_window_scaling = 1
net.ipv4.tcp_rfc1337 = 1
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_synack_retries = 1
net.ipv4.tcp_syn_retries = 2
net.ipv4.tcp_max_syn_backlog = 16384
net.ipv4.tcp_timestamps = 1
net.ipv4.tcp_sack = 1
net.ipv4.tcp_fack = 1
net.ipv4.tcp_ecn = 2
net.ipv4.tcp_fin_timeout = 10
net.ipv4.tcp_keepalive_time = 600
net.ipv4.tcp_keepalive_intvl = 60
net.ipv4.tcp_keepalive_probes = 10
net.ipv4.tcp_no_metrics_save = 1
net.ipv4.ip_forward = 0
net.ipv4.conf.all.accept_redirects = 0
net.ipv4.conf.all.send_redirects = 0
net.ipv4.conf.all.accept_source_route = 0
net.ipv4.conf.all.rp_filter = 1
in your /etc/sysctl.conf file and apply the settings with sysctl -p.
I go to /etc/sysctl.conf it says:
"Vendors settings live in /usr/lib/sysctl.d/.
# To override a whole file, create a new file with the same in
# /etc/sysctl.d/ and put new settings there. To override
# only specific settings, add a file with a lexically later
# name in /etc/sysctl.d/ and put new settings there.
#
# For more information, see sysctl.conf(5) and sysctl.d(5)."
What can I do?
Can I add the code to /etc/sysctl.conf directly or have to breate a new file ?
What does " apply the settings with sysctl -p" mean?
Thanks
36
CentOS-WebPanel Bugs / Why SSH port doesnot change?
« on: July 24, 2018, 03:53:28 PM »Hi
I changed SSH port 2 days ago in config file /etc/ssh/sshd_config and in CSF firewall and restartd SSH and CSF Firewall many times but I receive a warning about it always:
"WARNING: Security vulnerability! Your server is using default SSH Port 22, to make your server more secure change SSH port in config file /etc/ssh/sshd_config and in CSF firewall !
After changes are done don't forget to restart SSH and CSF Firewall. "
Thanks for your help
37
SSL / What should I do to have SSL on Wordpress with Nginx+ Apache+Varnish webserver?
« on: July 23, 2018, 05:59:25 PM »
Hello
My server is nginx+Varnish+Apache. If I want to have SSL on my wordpress site do I have to use this code:
in .httaccess file?
I do that and get "500 Internal Server Error"
Thanks
My server is nginx+Varnish+Apache. If I want to have SSL on my wordpress site do I have to use this code:
Code: [Select]
server {
listen 80;
server_name example.com www.example.com;
return 301 https://plugin.salamzaban.com$request_uri;
}
in .httaccess file?
I do that and get "500 Internal Server Error"
Thanks

38
Nginx / Wich webserver is the best?
« on: July 23, 2018, 05:31:00 PM »Hello
For a newbie what's the best web server to use and can set SSL, mitigate DDOS attacks and cluster it with another servers?
Hproxy+Apache
Varnish+Nginx+Apache
or?
Thanks
39
SSL / SSL depends on Wenserver?
« on: July 23, 2018, 04:07:25 PM »
Hello
Thanks for your attention
When we change our webserver we have to change the SSL settings?
I want to have SSL on Wordpress. It's OK with Apache but when I install Apache+Nginx+Varnish it does not work correctly.
Thanks for your attention
When we change our webserver we have to change the SSL settings?
I want to have SSL on Wordpress. It's OK with Apache but when I install Apache+Nginx+Varnish it does not work correctly.
40
Updates / What does "yum reinstall cwpsrv cwpphp" do?
« on: July 23, 2018, 09:29:02 AM »
Hello
Thanks for your attention
I culdn't enter my CWP panel and used this command:
After that the capacity of my hard increased about 2 Gigs.
What does this command do exactly?
When can I use it?
Can it be dangerous?
Why I have about 2 gig files now?
Thanks
Thanks for your attention
I culdn't enter my CWP panel and used this command:
Code: [Select]
yum reinstall cwpsrv cwpphp
After that the capacity of my hard increased about 2 Gigs.
What does this command do exactly?
When can I use it?
Can it be dangerous?
Why I have about 2 gig files now?
Thanks
41
CSF Firewall / (Unknown) blocked with too many connections
« on: July 21, 2018, 02:56:56 PM »
Hello
Sometimes I recive an email with this subject and my own IPv6 that shows
Connections: 209
Blocked: Temporary Block for 43200 seconds [CT_LIMIT]
And a long list of Connections like this:
tcp6: 0:0:0:0:My own IPv6 :45334 -> 0:0:0:0:0My own IPv6 :8181 (TIME_WAIT)
What's the reason?
Thanks
Sometimes I recive an email with this subject and my own IPv6 that shows
Connections: 209
Blocked: Temporary Block for 43200 seconds [CT_LIMIT]
And a long list of Connections like this:
tcp6: 0:0:0:0:My own IPv6 :45334 -> 0:0:0:0:0My own IPv6 :8181 (TIME_WAIT)
What's the reason?
Thanks
42
Installation / In a fresh installation of the CWP I see /dev/sda1 is 3.7G .
« on: July 21, 2018, 02:16:04 PM »
Hello
In a fresh installation of the CWP I see /dev/sda1 is 3.7G .
Can I remove it safely?
Thanks
In a fresh installation of the CWP I see /dev/sda1 is 3.7G .
Can I remove it safely?
Thanks
43
Mod_Security / Is this a dos attack?
« on: July 20, 2018, 11:31:14 AM »
Hello
Can you please take a look at this access log?

They request some pages that doesn't exist on my site at the same time with my own IP (54.36.158.33) and the site get database error.
What's the problem?
How can I prevent it?
Thanks
Can you please take a look at this access log?

They request some pages that doesn't exist on my site at the same time with my own IP (54.36.158.33) and the site get database error.
What's the problem?
How can I prevent it?
Thanks
44
Migration from other control panels / CWP to CWP account migration doesnot transfer anything.
« on: July 20, 2018, 05:12:34 AM »
Hello
I have installed a new CWP. Do I have to do anything more from what was said on this link?:
http://wiki.centos-webpanel.com/cwp-to-cwp-account-migration
(Because the destination CWP is a fresh installation and I just did the things that was told in above link for CWP to CWP account migration)
When on the source server I go to "Account Transfer Server (CWP -> CWP)" and check the connnection it shows everything is correct and I start to transfer and wait for some hours each time and it shows "Transfer in progress ...!" but nothing is added to destination server.
Here is the log of /var/log/cwp/account_transfer.log
http://wiki.centos-webpanel.com/cwp-to-cwp-account-migration
2018-07-19 21:28:06 Verifying...!
2018-07-19 21:28:06 Initial process my accounts
2018-07-20 04:23:05 Verifying...!
2018-07-20 04:23:05 Initial process my accounts
2018-07-20 04:28:42 Verifying...!
2018-07-20 04:28:42 Initial process my accounts
2018-07-20 04:34:48 Verifying...!
2018-07-20 04:34:48 Initial process my accounts
The file size and its backup is 8.4 Gig.
Thanks
I have installed a new CWP. Do I have to do anything more from what was said on this link?:
http://wiki.centos-webpanel.com/cwp-to-cwp-account-migration
(Because the destination CWP is a fresh installation and I just did the things that was told in above link for CWP to CWP account migration)
When on the source server I go to "Account Transfer Server (CWP -> CWP)" and check the connnection it shows everything is correct and I start to transfer and wait for some hours each time and it shows "Transfer in progress ...!" but nothing is added to destination server.
Here is the log of /var/log/cwp/account_transfer.log
http://wiki.centos-webpanel.com/cwp-to-cwp-account-migration
2018-07-19 21:28:06 Verifying...!
2018-07-19 21:28:06 Initial process my accounts
2018-07-20 04:23:05 Verifying...!
2018-07-20 04:23:05 Initial process my accounts
2018-07-20 04:28:42 Verifying...!
2018-07-20 04:28:42 Initial process my accounts
2018-07-20 04:34:48 Verifying...!
2018-07-20 04:34:48 Initial process my accounts
The file size and its backup is 8.4 Gig.
Thanks
45
CentOS-WebPanel Bugs / We can not use @#$%^&*()! signs in the password of CWP?
« on: July 18, 2018, 09:50:34 AM »
Hello
We can not use @#$%^&*()! signs in the password of CWP?
When I use them them password doesn't work.
Thanks
We can not use @#$%^&*()! signs in the password of CWP?
When I use them them password doesn't work.
Thanks