Recent Posts
31
How to / Re: Installing ARC on ALMA 8/9
« Last post by overseer on June 27, 2025, 01:31:29 PM »You can follow Netino's guide for rspamd -- it works on Alma 8 and will get you ARC headers.
32
Mod_Security / Re: OWASP CRS v4.15.0 Just Release
« Last post by overseer on June 27, 2025, 01:30:19 PM »It used to be the better option, but Comodo is in an identity crisis and hasn't updated its definitions since Jan 2024, so it is now effectively dead. Best to go with the OWASP-old which is current. Follow Starburst's guide to update to Mod Security 2.9.8 and then get the latest 4.15 OWASP definitions.
33
Installation / Re: Which os to choose?
« Last post by overseer on June 27, 2025, 01:27:53 PM »You do want MariaDB 10.11.13 (an LTS version), not the crusty EOL 10.5 installed by default.
https://www.alphagnu.com/topic/23-upgrade-mariadb-1011-in-cwp-centos-7-centos-8-stream-almalinux-78-rockylinux-78/#comment-25
Good to hear the login.defs is getting handled by default now, otherwise you would not be able to log in to CWP.
https://www.alphagnu.com/topic/23-upgrade-mariadb-1011-in-cwp-centos-7-centos-8-stream-almalinux-78-rockylinux-78/#comment-25
Good to hear the login.defs is getting handled by default now, otherwise you would not be able to log in to CWP.
34
Installation / Re: I don't receive a single message from root..??
« Last post by venty on June 27, 2025, 10:19:53 AM »Hi,
for me :
mydestination = $myhostname = name.hostname.com
where name.hostname.com is replaced with my ...
and no record smtp_helo_name = $myhostname
and as far as I can tell and test, DKIM works with localhost...
BR
Venty
and in fail main.cf no record: "smtp_helo_name"
35
CentOS-WebPanel GUI / Varnish Conf
« Last post by anandmys on June 27, 2025, 09:53:37 AM »When I go to cwp - admin - select webservers
Nginx & Varnish & Apache ([Varnish Conf]) option
On clicking "Varnish Conf" link, I see the message
Should I do anything to fix this or is this okay?
Nginx & Varnish & Apache ([Varnish Conf]) option
On clicking "Varnish Conf" link, I see the message
Quote
Varnish NOT installed or conf file /etc/varnish/varnish.params does not exist
On CentOS 8 you can edit file: /usr/lib/systemd/system/varnish.service
Should I do anything to fix this or is this okay?
36
Installation / Re: Which os to choose?
« Last post by its_me_rbk on June 27, 2025, 09:40:05 AM »The default MySQL version I got in EL9 is
mysql Ver 15.1 Distrib 10.5.27-MariaDB, for Linux (x86_64) using EditLine wrapper .
Should I keep this or update it to 10.11.13-MariaDB as @Martins-phpbb said?
And the line SHA_CRYPT_MAX_ROUNDS 5000 was already commented when I installed cwp.
mysql Ver 15.1 Distrib 10.5.27-MariaDB, for Linux (x86_64) using EditLine wrapper .
Should I keep this or update it to 10.11.13-MariaDB as @Martins-phpbb said?
And the line SHA_CRYPT_MAX_ROUNDS 5000 was already commented when I installed cwp.
37
Installation / Re: I don't receive a single message from root..??
« Last post by venty on June 27, 2025, 07:18:29 AM »Hi,
for me :
mydestination = $myhostname = name.hostname.com
where name.hostname.com is replaced with my ...
and no record smtp_helo_name = $myhostname
and as far as I can tell and test, DKIM works with localhost...
BR
Venty
for me :
mydestination = $myhostname = name.hostname.com
where name.hostname.com is replaced with my ...
and no record smtp_helo_name = $myhostname
and as far as I can tell and test, DKIM works with localhost...
BR
Venty
38
Mod_Security / Re: OWASP CRS v4.15.0 Just Release
« Last post by anandmys on June 27, 2025, 07:05:52 AM »I am using Comodo WAF as CWP alerts "We recommend using Comodo WAF rules as they are much simpler and easier for beginners."
Can you please highlight the difference and which option is better?
Can you please highlight the difference and which option is better?
39
Mod_Security / Re: OWASP CRS v4.15.0 Just Release
« Last post by venty on June 27, 2025, 07:00:27 AM »Did you follow the initial link at the top of the article and update ModSecurity to 2.9.8?
https://starburst.help/control-web-panel-cwp/modsecurity-running-with-control-web-panel/update-modsecurity-2-9-8-running-cwp-and-apache-on-almalinux-8-9/
From your screen shot, it looks like you stopped somewhere before Step 8.
In your owasp.conf, you want it to have those only those 3 lines listed:
Include /usr/local/apache/modsecurity-rules/owasp-crs/coreruleset-4.12.0/crs-setup.conf
Include /usr/local/apache/modsecurity-rules/owasp-crs/coreruleset-4.12.0/rules/*.conf
Include /usr/local/apache/modsecurity-rules/custom-rules/global_disabled_rules.conf
I can login and do this real quick if you want.
Hi,
To perform the update to 2.9.8, but after installation of mod security and updating to 2.9.8, everything is OK, I have the entry "ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/) configured.", but I also have the entry "ModSecurity: Status engine is currently disabled, enable it by set SecStatusEngine to On."... To perform the update to 2.9.8, but after installation of mod security and updating to 2.9.8, everything is OK, I have the entry "ModSecurity for Apache/2.9.8 (http://www.modsecurity.org/) configured.", but I also have the entry "ModSecurity: Status engine is currently disabled, enable it by set SecStatusEngine to On."... What should I do..?
And then perform all the steps, not only up to step 8, please see:
https://prnt.sc/KeSRfdW2nphb
https://prnt.sc/eXDRn9GCDBlx
https://prnt.sc/FN0twkI-TC-A
https://prnt.sc/dyXLr7rwtqK7
https://prnt.sc/-9TIbLitg9ie
I'm sure you'll do it quickly, but let me struggle, someone figure it out, please ...
BR
Venty
40
How to / Installing ARC on ALMA 8/9
« Last post by 6Sense on June 27, 2025, 03:37:50 AM »Hi everyone,
Just wondering if anyone is brave enough to post a how to set up the new ARC authentication for email on ALMA 8/9 CWP servers. I'd love to get it sorted early on.
Smiles @Starburst
Just wondering if anyone is brave enough to post a how to set up the new ARC authentication for email on ALMA 8/9 CWP servers. I'd love to get it sorted early on.
Smiles @Starburst
