Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
271
CSF Firewall / Re: How to add *.domain.com to CSF Firewall
« on: August 15, 2025, 04:46:21 PM »
@cyberspace
Do you have an way to do the same for csf.allow?
Include /etc/csf/csf.hetrixtools.allow?
HetrixTool has kinda a messy way at: https://docs.hetrixtools.com/how-to-whitelist-our-uptime-monitoring-nodes-in-csf/
So they do have a updated IP list at https://hetrixtools.com/resources/uptime-monitor-ips.txt
Do you have an way to do the same for csf.allow?
Include /etc/csf/csf.hetrixtools.allow?
HetrixTool has kinda a messy way at: https://docs.hetrixtools.com/how-to-whitelist-our-uptime-monitoring-nodes-in-csf/
So they do have a updated IP list at https://hetrixtools.com/resources/uptime-monitor-ips.txt
272
Updates / Re: How to update phpMyAdmin to latest version without breaking CWP?
« on: August 15, 2025, 04:40:33 PM »
@cyberspace
Looks like it worked on AL 9.6 with CWP 0.9.81210
Had to login with the MySQL password CWP displays at the end of installation:
But at the bottom it has:
Looks like it worked on AL 9.6 with CWP 0.9.81210
Had to login with the MySQL password CWP displays at the end of installation:
But at the bottom it has:
Quote
The phpMyAdmin configuration storage is not completely configured, some extended features have been deactivated. Find out why.
Or alternately go to 'Operations' tab of any database to set it up there.
273
CentOS-WebPanel GUI / Re: Web Gui does not work correctly after server updates.
« on: August 14, 2025, 06:33:22 PM »
They need to get rid of that 'Yum Manager'
With AlmaLinux 8 & 9, you want update from the CLI with:
Sounds like your cwpsrv is corrupted somehow.
But the client login screen and menus are working?
You'll probably want to open a single paid support ticket directly with CWP.
With AlmaLinux 8 & 9, you want update from the CLI with:
Code: [Select]
dnf updateorCode: [Select]
dnf --refresh updateSounds like your cwpsrv is corrupted somehow.
But the client login screen and menus are working?
You'll probably want to open a single paid support ticket directly with CWP.
274
Information / Re: Security Warning for CWP Users (CWPpro version: 0.9.8.1210)
« on: August 14, 2025, 12:56:02 PM »
This was caused by a PHP Injection Attack.
That means you need to check and make sure your PHP settings, and it has the correct security settings in php.ini
Also ModSecurity negates these types of attacks, IF you have the latest firewall rules.
Google "secure php installation", there are several good guides out there.
That means you need to check and make sure your PHP settings, and it has the correct security settings in php.ini
Also ModSecurity negates these types of attacks, IF you have the latest firewall rules.
Google "secure php installation", there are several good guides out there.
275
Apache / Re: Issues with image displaying
« on: August 14, 2025, 12:40:42 AM »
Or post a screenshot.
What OS are you running?
What OS are you running?
276
SSL / Problem with renewed SSL certificate and Email
« on: August 13, 2025, 09:15:36 AM »
CWP 0.9.8.1210 on AlmaLinux 9.6
So when CWP automatically renews the SSL certificate with Let's Encrypt, lately the mail portion isn't working, even thought it shows a valid certificate.
HTTPS still works fine.
But if I go into WebServer Settings -> SSL Certificates, and hit the blue button to 'Renew Now' then the mail clients connect without any invalid SSL certificate.
Again, it's only happening on Renewals.
I like @Netino little CLI script to do what the GUI does above.
But I need to figure out this problem/bug, it's not good when clients calls and says their email isn't working due to this problem.
So when CWP automatically renews the SSL certificate with Let's Encrypt, lately the mail portion isn't working, even thought it shows a valid certificate.
HTTPS still works fine.
But if I go into WebServer Settings -> SSL Certificates, and hit the blue button to 'Renew Now' then the mail clients connect without any invalid SSL certificate.
Again, it's only happening on Renewals.
I like @Netino little CLI script to do what the GUI does above.
But I need to figure out this problem/bug, it's not good when clients calls and says their email isn't working due to this problem.
277
SSL / Re: Probelm with renewing SSL certs
« on: August 13, 2025, 09:10:43 AM »
@Netino
Is there a way to renew all the certificates at once, and not one at a time using your script?
Is there a way to renew all the certificates at once, and not one at a time using your script?
278
CSF Firewall / Re: How to add *.domain.com to CSF Firewall
« on: August 13, 2025, 05:49:59 AM »You can add FQDN hostnames to /etc/csf/csf.dyndns
Then restart the firewall.
@overseer
I thought that csf.dyndns whitelisted domain names?
Kinda like how csf.ignore will ignore IP's and not send any notifications.
279
CSF Firewall / Re: How to add *.domain.com to CSF Firewall
« on: August 13, 2025, 05:42:55 AM »
Best way to stop that damn crawler and other like it is via ModSecurity.
I use a custom rule that block out that site, along wit 124 other like it.
If you are running ModSecurity along with the OWASP Ruleset on the directory structure I posted, send me a PM with your email, and I can send you the .conf & .txt file to put in the /after/ directory.
I use a custom rule that block out that site, along wit 124 other like it.
If you are running ModSecurity along with the OWASP Ruleset on the directory structure I posted, send me a PM with your email, and I can send you the .conf & .txt file to put in the /after/ directory.
280
DKIM / Re: DKIM is marked yellow "INVALID"...
« on: August 12, 2025, 05:49:17 PM »
Please advise the following:
What distro are you running CWP on?
Public or NAT?
Is the domain name pointing to that server? Or is pointing elsewhere?
Here is a good DKIM Tester: https://dmarcian.com/dkim-inspector/
Without the domain name, it's kinda hard to tell you where the problem may be.
You can PM it if you wouldl ike, and I can run some tests as well.
What distro are you running CWP on?
Public or NAT?
Is the domain name pointing to that server? Or is pointing elsewhere?
Here is a good DKIM Tester: https://dmarcian.com/dkim-inspector/
Without the domain name, it's kinda hard to tell you where the problem may be.
You can PM it if you wouldl ike, and I can run some tests as well.
281
Updates / Re: Apache Update Script 404 Error Starburst KB
« on: August 12, 2025, 05:33:30 PM »
I apologize about that.
Just fixed it.
Rearranged the download section while I was added additional directories.
What is it showing for the Apache version inside of CWP, in the bottom left box, along with MariaDB, etc?
You should have also gotten a notification in the inbox.
The script is also self-destructing, so nothing should be left in /src
Server version should never show (AlmaLinux), unless you installed the AL Apache over CWP's Apache via dnf.
So it looks like you might have 2 version of Apache installed.
httpd -v doesn't work outside of /usr/local/apache/bin/
Just fixed it.
Rearranged the download section while I was added additional directories.
What is it showing for the Apache version inside of CWP, in the bottom left box, along with MariaDB, etc?
You should have also gotten a notification in the inbox.
The script is also self-destructing, so nothing should be left in /src
Server version should never show (AlmaLinux), unless you installed the AL Apache over CWP's Apache via dnf.
So it looks like you might have 2 version of Apache installed.
httpd -v doesn't work outside of /usr/local/apache/bin/
282
MySQL / Re: Mariadb 10.5.x Support has Expired - How to Upgrade Manually ?
« on: August 09, 2025, 02:02:36 AM »
Interesting how 11.8 LTS ends before 11.4 LTS does.
But that's also when they implemented their 'Enterprise' paid support.
What I noticed in testing 11.4, it was running in compatibility mode because of some of the commands coming from CWP to MariaDB.
I think I mentioned that in another thread long ago, that CWP will have to update the coding, but then could to be backwards compatible to prior MariaDB versions.
But they have until the end of Q2 2029 to figure that one out.
But that's also when they implemented their 'Enterprise' paid support.
What I noticed in testing 11.4, it was running in compatibility mode because of some of the commands coming from CWP to MariaDB.
I think I mentioned that in another thread long ago, that CWP will have to update the coding, but then could to be backwards compatible to prior MariaDB versions.
But they have until the end of Q2 2029 to figure that one out.
283
MySQL / Re: Mariadb 10.5.x Support has Expired - How to Upgrade Manually ?
« on: August 08, 2025, 09:39:34 AM »
MariaDB 10.11 is a LTS version
MariaDB after 11.4 changed some commands, and hasn't been tested with CWP yet.
Here's how to upgrade it manually.
Make sure to follow every step, or it will fail.
https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/upgrade-mariadb-10-x-to-10-11-with-cwp-on-almalinux-9/
MariaDB after 11.4 changed some commands, and hasn't been tested with CWP yet.
Here's how to upgrade it manually.
Make sure to follow every step, or it will fail.
https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/upgrade-mariadb-10-x-to-10-11-with-cwp-on-almalinux-9/
284
E-Mail / Re: Roundcube - Connection Error - Sending a particular email
« on: August 08, 2025, 09:35:47 AM »
Check the ModSecurity log file for that domain, and it should show which rule was being triggered.
285
PHP / Re: When will PHP 8.4 be released in CWP?
« on: August 08, 2025, 06:49:46 AM »
@cyberspace
Could use some help, if you have time.
Got PHP 8.4 mostly working, but on AL9 with CWP 0.9.8.1210, when I try to install imap from pecl, I keep getting:
Could use some help, if you have time.
Got PHP 8.4 mostly working, but on AL9 with CWP 0.9.8.1210, when I try to install imap from pecl, I keep getting:
Quote
# pecl install imap
pecl/imap requires PHP (version >= 8.3.0), installed version is 8.0.30
No valid packages found
install failed
Quote
# php -v
PHP 8.4.11 (cli) (built: Aug 7 2025 02:36:15) (NTS)
Copyright (c) The PHP Group
Zend Engine v4.4.11, Copyright (c) Zend Technologies
with the ionCube PHP Loader v14.4.1, Copyright (c) 2002-2025, by ionCube Ltd.
