Topics

31

Apache / I did not find them in /usr/local/apache/conf/httpd.conf

« on: July 28, 2018, 06:22:04 AM »

Hello

How can I change these fields in apache?


Timeout 300
KeepAlive On
MaxKeepAliveRequests 100
KeepAliveTimeout 15
MinSpareServers 5
MaxSpareServers 10
StartServers 5
MaxClients 150
MaxRequestsPerChild 0


I did not find them in /usr/local/apache/conf/httpd.conf

32

CentOS-WebPanel GUI / I do not have acces to SSH, CWP and my site is down. What can I do?

« on: July 26, 2018, 10:49:56 PM »

Hi

I used the rules from this link

https://javapipe.com/ddos/blog/iptables-ddos-protection/

 for Iptables but now I do not have acces to SSH, CWP and my site is down. What can I do?

33

CentOS-WebPanel GUI / Another app is currently holding the xtables lock

« on: July 26, 2018, 07:18:15 PM »

Hello

I wanted to config IPtable.
I set the rule in /etc/sysctl.conf
I added this rule too iptables -t mangle -A PREROUTING -m conntrack --ctstate INVALID -j DROP


As was said in :
https://javapipe.com/ddos/blog/iptables-ddos-protection/


I did this too:


iptables -P INPUT DROP
iptables -P FORWARD DROP

but now when I want to login to CWP it takes a about 3 minutes to let me in/
I think the problem is with the rule:
I want to detelet it but it says :

Another app is currently holding the xtables lock. Perhaps you want to use the -w option?

I think it doesnot stop.
When I use #service iptables stop
The output is:
Redirecting to /bin/systemctl stop iptables.service

Does it means Iptables has stoped?
After that I can not enter the CWP quicker.
I think Iptables was not installed. I used yum and installed it. maybe it caused the problem..


How can I solve it

Thanks

34

iptables / I do not have /etc/sysconfig/iptables file.

« on: July 26, 2018, 03:04:21 PM »

Hello

I want to config /etc/sysconfig/iptables filebut it doesnot exist. Does it mean IPtable is not active?


Thanks

35

iptables / How can I config IPTABLES for DDOS aatacks?

« on: July 26, 2018, 10:29:37 AM »

Hello
Here
https://javapipe.com/ddos/blog/iptables-ddos-protection/
it says to put this code :

Code: [Select]

kernel.printk = 4 4 1 7
kernel.panic = 10
kernel.sysrq = 0
kernel.shmmax = 4294967296
kernel.shmall = 4194304
kernel.core_uses_pid = 1
kernel.msgmnb = 65536
kernel.msgmax = 65536
vm.swappiness = 20
vm.dirty_ratio = 80
vm.dirty_background_ratio = 5
fs.file-max = 2097152
net.core.netdev_max_backlog = 262144
net.core.rmem_default = 31457280
net.core.rmem_max = 67108864
net.core.wmem_default = 31457280
net.core.wmem_max = 67108864
net.core.somaxconn = 65535
net.core.optmem_max = 25165824
net.ipv4.neigh.default.gc_thresh1 = 4096
net.ipv4.neigh.default.gc_thresh2 = 8192
net.ipv4.neigh.default.gc_thresh3 = 16384
net.ipv4.neigh.default.gc_interval = 5
net.ipv4.neigh.default.gc_stale_time = 120
net.netfilter.nf_conntrack_max = 10000000
net.netfilter.nf_conntrack_tcp_loose = 0
net.netfilter.nf_conntrack_tcp_timeout_established = 1800
net.netfilter.nf_conntrack_tcp_timeout_close = 10
net.netfilter.nf_conntrack_tcp_timeout_close_wait = 10
net.netfilter.nf_conntrack_tcp_timeout_fin_wait = 20
net.netfilter.nf_conntrack_tcp_timeout_last_ack = 20
net.netfilter.nf_conntrack_tcp_timeout_syn_recv = 20
net.netfilter.nf_conntrack_tcp_timeout_syn_sent = 20
net.netfilter.nf_conntrack_tcp_timeout_time_wait = 10
net.ipv4.tcp_slow_start_after_idle = 0
net.ipv4.ip_local_port_range = 1024 65000
net.ipv4.ip_no_pmtu_disc = 1
net.ipv4.route.flush = 1
net.ipv4.route.max_size = 8048576
net.ipv4.icmp_echo_ignore_broadcasts = 1
net.ipv4.icmp_ignore_bogus_error_responses = 1
net.ipv4.tcp_congestion_control = htcp
net.ipv4.tcp_mem = 65536 131072 262144
net.ipv4.udp_mem = 65536 131072 262144
net.ipv4.tcp_rmem = 4096 87380 33554432
net.ipv4.udp_rmem_min = 16384
net.ipv4.tcp_wmem = 4096 87380 33554432
net.ipv4.udp_wmem_min = 16384
net.ipv4.tcp_max_tw_buckets = 1440000
net.ipv4.tcp_tw_recycle = 0
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_max_orphans = 400000
net.ipv4.tcp_window_scaling = 1
net.ipv4.tcp_rfc1337 = 1
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_synack_retries = 1
net.ipv4.tcp_syn_retries = 2
net.ipv4.tcp_max_syn_backlog = 16384
net.ipv4.tcp_timestamps = 1
net.ipv4.tcp_sack = 1
net.ipv4.tcp_fack = 1
net.ipv4.tcp_ecn = 2
net.ipv4.tcp_fin_timeout = 10
net.ipv4.tcp_keepalive_time = 600
net.ipv4.tcp_keepalive_intvl = 60
net.ipv4.tcp_keepalive_probes = 10
net.ipv4.tcp_no_metrics_save = 1
net.ipv4.ip_forward = 0
net.ipv4.conf.all.accept_redirects = 0
net.ipv4.conf.all.send_redirects = 0
net.ipv4.conf.all.accept_source_route = 0
net.ipv4.conf.all.rp_filter = 1








in your /etc/sysctl.conf file and apply the settings with sysctl -p.

I go to /etc/sysctl.conf  it says:
"Vendors settings live in /usr/lib/sysctl.d/.
# To override a whole file, create a new file with the same in
# /etc/sysctl.d/ and put new settings there. To override
# only specific settings, add a file with a lexically later
# name in /etc/sysctl.d/ and put new settings there.
#
# For more information, see sysctl.conf(5) and sysctl.d(5)."

What can I do?
Can I add the code to /etc/sysctl.conf  directly or have to breate a new file ?
What does " apply the settings with sysctl -p" mean?


Thanks

36

CentOS-WebPanel Bugs / Why SSH port doesnot change?

« on: July 24, 2018, 03:53:28 PM »

Hi

I changed  SSH port 2 days ago in config file /etc/ssh/sshd_config and in CSF firewall and restartd SSH and CSF Firewall many times but I receive a warning about it always:
 

"WARNING: Security vulnerability! Your server is using default SSH Port 22, to make your server more secure change SSH port in config file /etc/ssh/sshd_config and in CSF firewall !
After changes are done don't forget to restart SSH and CSF Firewall. "


Thanks for your help

37

SSL / What should I do to have SSL on Wordpress with Nginx+ Apache+Varnish webserver?

« on: July 23, 2018, 05:59:25 PM »

Hello

My server is nginx+Varnish+Apache. If I want to have SSL on my wordpress site do I have to use this code:
 

Code: [Select]


 server {
listen 80;
server_name example.com www.example.com;
return 301 https://plugin.salamzaban.com$request_uri;
}


in .httaccess file?

I do that and get "500 Internal Server Error"

 
Thanks

38

Nginx / Wich webserver is the best?

« on: July 23, 2018, 05:31:00 PM »

Hello

For a newbie what's the best web server to use and can set SSL, mitigate DDOS attacks and cluster it with another servers?

Hproxy+Apache
Varnish+Nginx+Apache
or?


Thanks

39

SSL / SSL depends on Wenserver?

« on: July 23, 2018, 04:07:25 PM »

Hello

Thanks for your attention

When we change our webserver we have to change the SSL settings?

I want to have SSL on Wordpress. It's OK with Apache but when I install Apache+Nginx+Varnish it does not work correctly.





 

40

Updates / What does "yum reinstall cwpsrv cwpphp" do?

« on: July 23, 2018, 09:29:02 AM »

Hello

Thanks for your attention
I culdn't enter my CWP panel and used this command:

Code: [Select]

yum reinstall cwpsrv cwpphp
After that the capacity of my hard increased about 2 Gigs.
What does this command do exactly?
When can I use it?
Can it be dangerous?
Why I have about 2 gig files now?


Thanks

41

CSF Firewall / (Unknown) blocked with too many connections

« on: July 21, 2018, 02:56:56 PM »

Hello

Sometimes I recive an email with this subject and my own IPv6 that shows

Connections: 209
Blocked:     Temporary Block for 43200 seconds [CT_LIMIT]


And a long list of Connections like this:


tcp6: 0:0:0:0:My own IPv6 :45334 -> 0:0:0:0:0My own IPv6 :8181 (TIME_WAIT)



What's the reason?

Thanks

42

Installation / In a fresh installation of the CWP I see /dev/sda1 is 3.7G .

« on: July 21, 2018, 02:16:04 PM »

Hello

In a fresh installation of the CWP I see /dev/sda1 is 3.7G .
Can I remove it safely?


Thanks

43

Mod_Security / Is this a dos attack?

« on: July 20, 2018, 11:31:14 AM »

Hello 

Can you please take a look at this access log?
 
 
They request some pages that doesn't exist on my site at the same time with my own IP (54.36.158.33) and the site get database error.

What's the problem?
How can I prevent it?

Thanks

44

Migration from other control panels / CWP to CWP account migration doesnot transfer anything.

« on: July 20, 2018, 05:12:34 AM »

Hello

I have installed a new CWP. Do I have to do anything more from what was said on this link?:

http://wiki.centos-webpanel.com/cwp-to-cwp-account-migration

(Because the destination CWP is a fresh installation and I just did the things that was told in above link for CWP to CWP account migration)

When on the source server I go to "Account Transfer Server (CWP -> CWP)" and check the connnection it shows everything is correct and I start to transfer and wait for some hours each time and it shows "Transfer in progress ...!" but nothing is added to destination server.

Here is the log of /var/log/cwp/account_transfer.log

http://wiki.centos-webpanel.com/cwp-to-cwp-account-migration

2018-07-19 21:28:06 Verifying...!
2018-07-19 21:28:06 Initial process my accounts
2018-07-20 04:23:05 Verifying...!
2018-07-20 04:23:05 Initial process my accounts
2018-07-20 04:28:42 Verifying...!
2018-07-20 04:28:42 Initial process my accounts
2018-07-20 04:34:48 Verifying...!
2018-07-20 04:34:48 Initial process my accounts


The file size and its backup is 8.4 Gig.


Thanks

45

CentOS-WebPanel Bugs / We can not use @#$%^&*()! signs in the password of CWP?

« on: July 18, 2018, 09:50:34 AM »

Hello
We can not use @#$%^&*()! signs in the password of CWP?
When I use them them password doesn't work.

Thanks