Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - overseer

Pages: [1] 2 3 ... 60
1
CSF Firewall / Re: Suspicious File Alert
« on: April 18, 2024, 10:47:05 PM »
My systems have "core.py" as included in both versions of python:
Code: [Select]
/usr/lib/python2.7/site-packages/di/core.py
/usr/lib/python2.7/site-packages/pyudev/core.py
/usr/lib/python3.6/site-packages/pip/_vendor/certifi/core.py
/usr/lib/python3.6/site-packages/pip/_vendor/idna/core.py
/usr/lib64/python2.7/distutils/core.py
/usr/lib64/python3.6/distutils/core.py
I don't have anything like your salt directory under /tmp. Do you see any processes running that create those tmp files?

2
CSF Firewall / Re: Suspicious File Alert
« on: April 18, 2024, 05:54:00 PM »
Are you running Python 2.7 or 3.6 on that system? Do you actually make use of it for any web facing apps, or just PHP?

3
Pretty good for an AI bot!

4
Suggestions / Re: How secure is CentOS Web Panel?
« on: April 18, 2024, 01:37:40 AM »
If you're using an EOL older version of PHP, also consider adding PHP Defender / Sunffleupagus to your security hardening:
https://wiki.centos-webpanel.com/php-defender-snuffleupagus

This is a good in-depth fine tuning guide after the basic CWP install:
https://www.awsmonster.com/cwp-installation-and-configuration_12


5
CWP doesn't fully support IPv6 yet, so remove your config that is failing.

6
relevant Apache logs and journal entries at the time of restart would be helpful...

7
How to / Re: Upgrade PhpMyAdmin
« on: April 17, 2024, 01:40:33 PM »
I can't test the default configuration, because I run CWP on an alternate port. Userland phpMyAdmin forwards to port 2087 which I don't support and block via CSF.

8
IP Manager is beta-quality currently. Use nmtui in a shell to add/manage IPs:
https://forum.centos-webpanel.com/index.php?topic=9791.msg46672#msg46672

9
Suggestions / Re: How secure is CentOS Web Panel?
« on: April 17, 2024, 01:00:12 AM »
You sound like a good candidate for CWP then! I am a cPanel refugee as well. I have a fair bit of admin experience (20+ years) running mail servers, FTP servers, then cPanel & Webmin managed servers, SSH, etc. I find CWP an invaluable tool, mostly for my end users to have a user panel but also makes my job a bit easier. It's as secure as you want to make it -- decent out of the box, but can (and should be) hardened beyond the default state.

https://www.inmotionhosting.com/support/edu/control-web-panel/how-secure-is-control-web-panel/

10
How to / Re: Upgrade PhpMyAdmin
« on: April 17, 2024, 12:55:00 AM »
If root pw = mysql root pw it auto-logins just fine under CWP Admin. Or save credentials with your web browser...

11
Information / Re: DNSSEC
« on: April 16, 2024, 05:45:34 PM »
https://www.cloudflare.com/dns/dnssec/how-dnssec-works/

Did your registrar not communicate? I use Cloudflare

12
SSL / Re: Should I put bookmarks
« on: April 15, 2024, 09:32:51 PM »
I suppose you mean checkmarks? I support all the DNS service records on my server (mail, webmail, ftp) -- although for sure I would say "cpanel" is elective and only makes sense if you have cpanel-migrated records or want to call your control panel "cpanel" -- which I avoid so there is no confusion with that product. I'm trying to wean all my clients off the control panel=cPanel mind set.

13
Client area.is on port :2083 (as with cPanel) and is run by CWP -- Apache & php 7, along with SQL DB (MariaDB).

14
PHP / Re: PDlib Installation on CWP
« on: April 15, 2024, 12:51:41 AM »
Did you mean for your reply to go to the other new thread (re: nameservers)?

15
CentOS 7 Problems / Re: Google indexing link to CWP
« on: April 13, 2024, 10:53:07 PM »
Do you have appropriate robots.txt in all your site roots? I know in the long ago past, I had a private site that got indexed by Google, even though nothing links to it. My suspicion was that someone who used the site used the Google toolbar to browse to it. I asked Google to take down the listing and put up a proper robots.txt file and they complied right away. Nowadays it's probably Chrome phoning home to the Big G, so your secrets are hardly safe anymore.

Pages: [1] 2 3 ... 60