Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
241
CentOS-WebPanel Bugs / Re: [CRITICAL] Multiple CWP Servers Infected – Arbitrary PHP Code Execution via Publ
« on: September 01, 2025, 07:38:53 PM »
You can Google the fix, it's a standard PHP Injection Attack due to an insure PHP configuration.
It also only affects people still using the EOL CentOS 7 OS.
But I think someone posted the fix here in one of the threads as well.
It also only affects people still using the EOL CentOS 7 OS.
But I think someone posted the fix here in one of the threads as well.
242
CentOS-WebPanel Bugs / Re: Unable to open userpanel
« on: September 01, 2025, 04:06:19 PM »
Sounds like a .htacess file that has redirection messed up somewhere.
Or a WP firewall plugin has taken over (I hate AIOS for doing that, if you're not careful)
By Default CWP Redirect domain.com/webmail to RoundCube.
Or a WP firewall plugin has taken over (I hate AIOS for doing that, if you're not careful)
By Default CWP Redirect domain.com/webmail to RoundCube.
243
Mod_Security / Re: OWASP CRS v4.15.0 Just Release
« on: September 01, 2025, 04:03:51 PM »
You should have any customized .conf for OWASP in one of their respected folders, so there is a very low change of them being overwritten:
Quote
/usr/local/apache/modsecurity-rules/custom-rules/startup/*.conf
/usr/local/apache/modsecurity-rules/custom-rules/before/*.conf
/usr/local/apache/modsecurity-rules/custom-rules/after/*.conf
244
CentOS-WebPanel Bugs / Re: Reseller customer disk space problem.
« on: September 01, 2025, 03:59:52 PM »
You have to have XFS Enabled space to control the storage space size in CWP.
This is noted in the Docs & FAQ. If not, then it won't work.
What distro are you running CWP on?
Do you have XFS Enabled??
What does:
This is noted in the Docs & FAQ. If not, then it won't work.
What distro are you running CWP on?
Do you have XFS Enabled??
What does:
Code: [Select]
lsblk -fshow?
245
CentOS 9 Problems / Re: EL9 recent update casusing boot issue
« on: September 01, 2025, 03:55:36 PM »
CentOS 9 Stream is a beta OS to RHEL.
Just like Fedora is the alpha version OS to RHEL.
Both are good for developers that need the very latest versions of untested software.
This is where you question should be posted, in the RHEL Developers Group.
You should expect problems as such. And is why it should NOT be used for Productions servers.
There is no reason even to use CentOS Stream anymore unless you plan on using the full RHEL.
AlmaLinux 8 or 9 should be used.
Or you can expect weird problems.
Just like Fedora is the alpha version OS to RHEL.
Both are good for developers that need the very latest versions of untested software.
This is where you question should be posted, in the RHEL Developers Group.
You should expect problems as such. And is why it should NOT be used for Productions servers.
There is no reason even to use CentOS Stream anymore unless you plan on using the full RHEL.
AlmaLinux 8 or 9 should be used.
Or you can expect weird problems.
246
CSF Firewall / Re: Tweaked CSF update instructions for CWP path
« on: August 31, 2025, 03:56:45 AM »
Only function changes where the auto update servers have been removed. Since they no longer exist.
Only way to auto update is to setup your own mirror, or manually from Github.
Since we already have a public mirror network setup for ELRepo, we are going to add Configserver.
Ref. : https://starburstservices.com/downloads/mirrors-list/
We use to have AlmaLinux & MariaDB mirrored at these locations also, but the data usage got to large, and we had to drop them. :'(
MariaDB is still mirror in England, have to update the list.
mariadb.gb.ssimn.org
Just need a couple days to get things setup, and I'll post an update.
Current CWP is sending out an error about the CSF update, saying in the email to root:
Only way to auto update is to setup your own mirror, or manually from Github.
Since we already have a public mirror network setup for ELRepo, we are going to add Configserver.
Ref. : https://starburstservices.com/downloads/mirrors-list/
We use to have AlmaLinux & MariaDB mirrored at these locations also, but the data usage got to large, and we had to drop them. :'(
MariaDB is still mirror in England, have to update the list.
mariadb.gb.ssimn.org
Just need a couple days to get things setup, and I'll post an update.
Current CWP is sending out an error about the CSF update, saying in the email to root:
Quote
From: (Cron Daemon) root@domainname
To: root @domainname
Subject: Cron <root@server> /usr/sbin/csf -u
Oops: Unable to download: No Host option provided
247
CSF Firewall / Tweaked CSF update instructions for CWP path
« on: August 30, 2025, 05:40:15 PM »
This is a tweaked update article for CWP paths.
The Original post by the creator had 1 generic path, that wasn't correct for CWP.
Let me know if anyone has any suggestions.
https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/csf-firewall-gplv3-release-tweaked-for-cwp/
The Original post by the creator had 1 generic path, that wasn't correct for CWP.
Let me know if anyone has any suggestions.
https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/csf-firewall-gplv3-release-tweaked-for-cwp/
248
CentOS-WebPanel Bugs / Re: Unable to open userpanel
« on: August 30, 2025, 05:07:15 PM »
Please advise the following:
What distro are you running CWP on?
Public or NAT?
--
Also did the fix from https://forum.centos-webpanel.com/centos-webpanel-bugs/fix-user-panel-login-is-not-working/
Not work?
What distro are you running CWP on?
Public or NAT?
--
Also did the fix from https://forum.centos-webpanel.com/centos-webpanel-bugs/fix-user-panel-login-is-not-working/
Not work?
250
PHP / Re: Anti-Change Log
« on: August 29, 2025, 07:49:34 PM »Ipv6 module would be nice too, it's been coming soon in the change log for a long time now.
Well that's my Christmas list
You can manually add IPv6 to the vhcost config.
After the IPv4, just add [IPv6]:80 and to the https [IPv6]:443
251
PHP / Re: Anti-Change Log
« on: August 28, 2025, 05:00:18 PM »
Well PHP.net has done it again, more new versions.
Not Support by CWP:
PHP 8.4 -> 8.4.12
Supported by CWP, but now Several version behind:
PHP 8.3 -> 8.3.25 (Last version in CWP 8.3.21)
Any update @Igor S. or @Sandeep
Not Support by CWP:
PHP 8.4 -> 8.4.12
Supported by CWP, but now Several version behind:
PHP 8.3 -> 8.3.25 (Last version in CWP 8.3.21)
Any update @Igor S. or @Sandeep
252
Updates / Re: Roundcube vulnerability
« on: August 27, 2025, 11:26:30 PM »
You shouldn't have to.
253
SSL / Re: AutoSSL Renewal Issues
« on: August 27, 2025, 11:26:39 AM »
Been seeing it intermittently with mail.
After renewal, mail clients like Outlook/Thunderbird are reporting an invalid SSL.
Manually delete & reissue the certificate (WebServer Settings -> SSL Certificates) and then everything is fine.
After renewal, mail clients like Outlook/Thunderbird are reporting an invalid SSL.
Manually delete & reissue the certificate (WebServer Settings -> SSL Certificates) and then everything is fine.
254
Updates / Re: Roundcube vulnerability
« on: August 27, 2025, 12:03:05 AM »Hi,
For CentOS Stream 8 what is the correct way to update?
Thanks,
Geo
Alpha OS'es aren't recommended for Production use.
You should switch over to AlmaLinux 8.
255
Installation / Re: AL 9 server not upgrading to CWP Pro
« on: August 27, 2025, 12:00:19 AM »
Is 192.119.111.125 the Public Base IP for the server?
If so, that is the IP you want to use in the control panel for the license.
IF you have a different Public IP as the base, then that one needs to be used.
If so, that is the IP you want to use in the control panel for the license.
IF you have a different Public IP as the base, then that one needs to be used.
