Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - overseer

Pages: 1 ... 83 84 [85] 86 87 ... 91
1261
DNS / Re: DigitalOcean DNS or CWP7 DNS?
« on: January 29, 2023, 06:51:41 AM »
/etc/resolv.conf

But if you're using NetworkManager, you may want to go in and edit your NM config via nmtui and it will generate it for you.

1262
Information / Re: Install or download older version of CWP?
« on: January 29, 2023, 06:45:15 AM »
That's just to download the old version via cURL. I suppose if you want to stop updates, you could set the CWP update server(s) as 0.0.0.0 in the /etc/hosts file.

1263
Turn off the CSF/LDF firewall temporarily and see if that works.

If not, you may have a 301 redirect rule in your virtual host config file (either Apache or Nginx) that redirects traffic from http to https. Disable that rule temporarily (comment out or remove it) and restart the web server.

1264
You should be able to remove this code from the relevant virtual host config file:
Code: [Select]
  ProxyPassReverse / http://127.0.0.1:2095/

                RewriteRule ^/roundcube$ /roundcube/ [R]
                ProxyPass /roundcube/ https://127.0.0.1:2031/roundcube/
                ProxyPassReverse /roundcube https://127.0.0.1:2031/roundcube/

                RewriteRule ^/pma$ /pma/ [R]
                ProxyPass /pma/ https://127.0.0.1:2031/pma/
                ProxyPassReverse /pma https://127.0.0.1:2031/pma/
               
                ProxyPass / https://127.0.0.1:2083/
                ProxyPassReverse / https://127.0.0.1:2083/
This wouldn't stop them from accessing the server IP address with those ports, however:
https://111.111.111.111/pma
https://111.111.111.111:2031/pma
https://111.111.111.111:2083
http://111.111.111.111:2095
https://111.111.111.111:2096


1265
You could encode php scripts in IonCube; that's what CWP does!

1266
Information / Re: Install or download older version of CWP?
« on: January 27, 2023, 12:39:26 AM »
If you insist ;)
Code: [Select]
curl -O http://static.cdn-cwp.com/files/cwp/el7/cwp-el7-0.9.8.1146.zip

1267
Information / Re: Install or download older version of CWP?
« on: January 26, 2023, 12:37:58 AM »
Not recommended, as 0.9.8.11.47 and previous contained a 9.8 severity exploit potential.

1268
CSF Firewall / Re: How to Prevent CWP BruteForce?
« on: January 26, 2023, 12:36:10 AM »
Right, I do that too in CSF. I simply follow the guidance of looking up the top 10 hacking country sources and apply those as the CC_DENY list, minus any countries that may be clients or browser visitors on the server. I just wanted to avoid "naming names" here so as not to offend anyone on the forum who may happen to reside in those countries ;)

1269
DOS filenames look lengthy by comparison -- 8 characters AND a three character extension! Wowzer!

1270
MySQL / Re: mysql create/list problem
« on: January 24, 2023, 02:02:49 AM »
admin panel or user panel?

1271
CSF Firewall / Re: How to Prevent CWP BruteForce?
« on: January 23, 2023, 06:42:59 PM »
3. How to change the control panel ports: 2083, 2087, 2030, 2031 to something different? Thanks :)
I too am a cPanel migrant as of a few years back; now I am all-in on CWP (apart from 2 servers that are purpose-built and have Webmin for a web panel). You can definitely do away with port 2087, as that is just there to "ape" WHM's port choice. I would also also suggest doing away with port 2030, as vanilla http connections should always be upgraded to https versions where possible. Simply eliminating 2087 and 2030 in the firewall rules will suffice to end some attacks. I run with just 2083 & 2031 active.

1272
CentOS 7 Problems / Re: CWP Apache domlogs cover 50% of my disk
« on: January 23, 2023, 06:32:18 PM »
It shouldn't; it's a new file you create in the /etc/logrotate.d directory which is a CentOS system directory.
CWP has an interface for creating/managing logrotate jobs under File Management > Logrotate Manager.

1273
CentOS 6 Problems / Re: How to disable apache error_log in cwp?
« on: January 23, 2023, 04:42:45 AM »
did you think about fixing the errors instead disable the log?
This is sage advice!
But you can always truncate your error_log to zero bytes:
Code: [Select]
truncate -s0 /wherever/logs/error_logThen consider implementing logrotate so as to keep say 4 weekly (compressed) log files that are turned over and won't grow into huge, out-of-control sizes.

1274
FTP / Re: Change home directory for anonymous login
« on: January 23, 2023, 12:55:21 AM »
I started with ProFTPd, did a quick dabble with WS-FTP then pretty quickly jumped ship over to pure-ftpd. Lean, mean FTP in its purest form -- secure but lots of features. So I was glad to see it included with CWP as a bullet point, but as states I don't use FTP anymore (and have FTP running on an alternate port on only one server -- the better to avoid script kiddie scans).

1275
I can confirm that on all 3 of my CWP servers, the monthly directories are empty. (I have daily and weekly entries aplenty.) So that would imply it is a default configuration that needs to be changed. I haven't looked into it, because it's not something of critical importance to me nor the end users on the server.

Pages: 1 ... 83 84 [85] 86 87 ... 91