Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
16
CSF Firewall / Re: SSH being constantly probed
« on: September 13, 2020, 09:28:24 AM »
Not getting alerts doesn't say SSH is not being attacked constantly.
On the contrary, I want to be aware of such, but am wondering if there's anything i can do to stop it.
On the contrary, I want to be aware of such, but am wondering if there's anything i can do to stop it.
17
CSF Firewall / Re: SSH being constantly probed
« on: September 13, 2020, 06:11:59 AM »Be sure to use IPset and maintain a fairly large blocklist - I usually have 800, in addition to csf.blocklists, country blocklists and AWS blocked.I've installed and configured IPset 48 hours ago and still getting lots of notifications.
18
Apache / Re: Error 520 Web server is returning an unknown error
« on: September 12, 2020, 05:52:37 PM »
Happened to me too. I've opened a thread here but eventually found the fix by myself. Maybe it's the same with your.
http://forum.centos-webpanel.com/index.php?topic=9527.0
http://forum.centos-webpanel.com/index.php?topic=9527.0
19
MySQL / Re: Why do I have 6 users for each DB?
« on: September 10, 2020, 06:53:09 AM »Yes. You can use the users other than [localhost] since others are not needed.Did you get a reply?
This happens when you import cPanel account to CWP. I have sent the ticket to CWP support for the same issue and hoping a response from them.
20
Suggestions / Re: Two-Factor Authentication (2FA) - Google Authenticator for CWP and CWP PRO !
« on: September 10, 2020, 06:45:23 AM »This will be very soon in the user panel and admin!How soon is this very soon from February?
21
SSL / Re: iOS devices can't access SSL sites
« on: September 10, 2020, 06:32:37 AM »
Ok, I've fixed it.[/size]It seems I've installed HTTP/2 both in Nginx and Apache. Removing it from Apache - fixed the issue.Actually, I've emptied the http2.conf file and recompiled Apache.[/color]
22
Varnish / Re: Update Varnish v5.2.1 to the latest Varnish v6.3.1 for CWP and CWP PRO !
« on: September 10, 2020, 05:25:15 AM »Varnish 6.4 is already incorporated in centos 8: https://forum.mysterydata.com/topic/48/cwp-and-centos-8/8But CWP is still using CentOS7, right?
23
CSF Firewall / Re: SSH being constantly probed
« on: September 10, 2020, 05:23:36 AM »
By official CSF GUI, do you refer to this screenshot?
https://pasteboard.co/Jqo5qgf.png
As to blocking it completely - then I wouldn't be able to login to FTP and SSH with my keys...
As to IPset, never heard of it. I'll check.
https://pasteboard.co/Jqo5qgf.png
As to blocking it completely - then I wouldn't be able to login to FTP and SSH with my keys...
As to IPset, never heard of it. I'll check.
24
CentOS-WebPanel GUI / Re: Error 520 from Cloudflare
« on: September 09, 2020, 05:27:58 PM »
Ok, I've fixed it.
It seems I've installed HTTP/2 both in Nginx and Apache. Removing it from Apache - fixed the issue.
Actually, I've emptied the http2.conf file and recompiled Apache.
It seems I've installed HTTP/2 both in Nginx and Apache. Removing it from Apache - fixed the issue.
Actually, I've emptied the http2.conf file and recompiled Apache.
25
CSF Firewall / SSH being constantly probed
« on: September 09, 2020, 05:26:25 PM »
For the last 2 weeks, someone (apparently some bot automatically running) is trying to log into SSH with different ports, IPs and usernames.
Apart from the annoying emails every 5 minutes telling me an IP was blocked - is there anything I can do to block this guy?
I've reduced the wrong tries to get blocked to 2 and the period increased to 120 minutes.
Anything else you might advise?
Apart from the annoying emails every 5 minutes telling me an IP was blocked - is there anything I can do to block this guy?
I've reduced the wrong tries to get blocked to 2 and the period increased to 120 minutes.
Anything else you might advise?
26
CentOS-WebPanel GUI / Re: Error 520 from Cloudflare
« on: September 08, 2020, 02:22:00 PM »Check your CSF setting with respect to Cloudflare. IF you have the official CSF GUI installed then it is much more obvious where to find this.Nothing seems to be wrong with CSF.
27
SSL / iOS devices can't access SSL sites
« on: September 08, 2020, 01:49:58 PM »
Well, this was a hard one...
Generally all the hosted sites on my CWP server are going through CloudFlare.
A few days ago I've tried to check something in one of the sites, hence grayed out the CloudFlare cloud, meaning the user is reaching the site directly. Then it seemed that iOS devices (I've tried iPhones and iPad) can't reach the site at all, getting a ERR_FAILED (This site can't be reached).
Ok... I've tried the same for other sites - all with the same symptoms - iOS can't reach the site.
I've suspected there's something with the SSL, so I've deleted the SSL and launched the site using HTTP - and it worked!
Recreating the SSL (using the built in Let's Encrypt mechanism) and access the site through HTTPS caused the same error again.
Can any one check this issue with one of his sites?
Do anyone has any clue where the problem can be?
I'm hopeless... already sitting on this for 2 days and no solution!
PS: I'm using CWP Pro.
Generally all the hosted sites on my CWP server are going through CloudFlare.
A few days ago I've tried to check something in one of the sites, hence grayed out the CloudFlare cloud, meaning the user is reaching the site directly. Then it seemed that iOS devices (I've tried iPhones and iPad) can't reach the site at all, getting a ERR_FAILED (This site can't be reached).
Ok... I've tried the same for other sites - all with the same symptoms - iOS can't reach the site.
I've suspected there's something with the SSL, so I've deleted the SSL and launched the site using HTTP - and it worked!
Recreating the SSL (using the built in Let's Encrypt mechanism) and access the site through HTTPS caused the same error again.
Can any one check this issue with one of his sites?
Do anyone has any clue where the problem can be?
I'm hopeless... already sitting on this for 2 days and no solution!
PS: I'm using CWP Pro.
28
CentOS-WebPanel GUI / Error 520 from Cloudflare
« on: September 07, 2020, 02:38:44 PM »
Ok, first I hope I'm in the right forum to post this.
For the last days I'm getting complaints from my customer hosting their site on my server that they're getting Error 520 from Cloudflare when loading their site, but refreshing the page loads the site normally.
So at start I thought they were imaging these. But when more clients complained, I went into one of them and simply clicking links. And after 20-30 clicks I got a 520 error myself.
Here's a screenshot of the error: https://pasteboard.co/JpZsAZG.png
So I've tried lowering PHP versions, rebuilding the webservers, looking at the logs (couldn't find something relevant) and more... but it didn't help. Yesterday I rebooted the server and I could swear the issue was gone.
But just a few minutes again a client complained about this again. I've went to the site an encountered it myself.
By the way, yesterday before rebooting I've simply paused the use of CF for those complaining customers (coloring the cloud Gray instead of Orange) and it seemed to have fixed the issue. BUT! Then we've found out that iOS based devices got a can't load site permanently, so that wasn't a good solution either.
Trying to search some information, I've found on CF's forums the following solution:
Any idea if that might be the solution for CWP too and how to do it? If not, any idea what might be wrong with my CWP?
FYI, my system information is (taken from CWP Pro dashboard):
Hosted on: Hetzner
CPU Model: AMD EPYC Processor (with IBPB)
CPU Details: 4 Core (2495 MHz)
Distro Name: CentOS Linux release 7.8.2003 (Core) [updated all updates]
Kernel Version: 3.10.0-1127.19.1.el7.x86_64
Platform: x86_64
CWPpro version: 0.9.8.1006
Apache version: Apache/2.4.39
PHP version: 7.3.18
MySQL version: 10.1.46-MariaDB
For the last days I'm getting complaints from my customer hosting their site on my server that they're getting Error 520 from Cloudflare when loading their site, but refreshing the page loads the site normally.
So at start I thought they were imaging these. But when more clients complained, I went into one of them and simply clicking links. And after 20-30 clicks I got a 520 error myself.
Here's a screenshot of the error: https://pasteboard.co/JpZsAZG.png
So I've tried lowering PHP versions, rebuilding the webservers, looking at the logs (couldn't find something relevant) and more... but it didn't help. Yesterday I rebooted the server and I could swear the issue was gone.
But just a few minutes again a client complained about this again. I've went to the site an encountered it myself.
By the way, yesterday before rebooting I've simply paused the use of CF for those complaining customers (coloring the cloud Gray instead of Orange) and it seemed to have fixed the issue. BUT! Then we've found out that iOS based devices got a can't load site permanently, so that wasn't a good solution either.
Trying to search some information, I've found on CF's forums the following solution:
Quote
My host had to whitelist cloudflares IP address range in order for everything to work, after they did this everything functioned normally
Any idea if that might be the solution for CWP too and how to do it? If not, any idea what might be wrong with my CWP?
FYI, my system information is (taken from CWP Pro dashboard):
Hosted on: Hetzner
CPU Model: AMD EPYC Processor (with IBPB)
CPU Details: 4 Core (2495 MHz)
Distro Name: CentOS Linux release 7.8.2003 (Core) [updated all updates]
Kernel Version: 3.10.0-1127.19.1.el7.x86_64
Platform: x86_64
CWPpro version: 0.9.8.1006
Apache version: Apache/2.4.39
PHP version: 7.3.18
MySQL version: 10.1.46-MariaDB
29
Varnish / Re: Update Varnish v5.2.1 to the latest Varnish v6.3.1 for CWP and CWP PRO !
« on: July 10, 2020, 04:09:53 AM »
Would also appreciate to see an update to Varnish version.
30
Apache / Re: Why brotli is not integrated in default apache build?
« on: July 08, 2020, 11:02:37 AM »
Use cloudflare and you can activate it there.
