Messages

31

Installation / Re: Which os to choose?

« on: June 26, 2025, 02:42:50 PM »

For EL9, this is an immediate must do:

We are working on resolving this issue, a quick fix is ​​to go to this file

Code: [Select]

nano /etc/login.defs


and comment out the following line

Code: [Select]

SHA_CRYPT_MAX_ROUNDS 5000


to

Code: [Select]

#SHA_CRYPT_MAX_ROUNDS 5000

After this you can change the user's password from the cwp administration panel and you will be able to login.

[/quote]

32

Installation / Re: Which os to choose?

« on: June 26, 2025, 10:47:52 AM »

But if you don't need CWP Migration nor PHP 5.6 legacy, then you could start with Alma 9, which would give you the longest window -- almost 7 years without having to worry about upgrades:
https://endoflife.date/almalinux

33

Installation / Re: Which os to choose?

« on: June 25, 2025, 11:53:06 PM »

I would (and do) start with AlmaLinux 8 -- fully supported, best experience -- no real caveats or gotchas. Then there is a clear path forward to upgrade to AlmaLinux 9 at any point in your 4 year window, as long as the security update phase is appropriate for your use case. (It is for mine!) CWP's EL9 support it in a workable beta state at this point and the bugs should be ironed out by the time you need to upgrade -- probably likewise into the security update phase of AlmaLinux 9!

34

Installation / Re: I don't receive a single message from root..??

« on: June 25, 2025, 02:38:00 PM »

Postfix?

35

E-Mail / Re: Postfix, SpamAssassin, or something else

« on: June 25, 2025, 01:16:15 PM »

Forgeries. You should lock down Postfix more to prevent this kind of backscatter. And block Malaysia if you have no need for traffic from there.
https://www.awsmonster.com/how-to-secure-postfixdovecot-on-cwp

If you wanted to block ALL of LeaseWeb, you could add their netblocks to your blocklists, but you might block legitimate traffic:
https://ipinfo.io/AS7203

36

CentOS 7 Problems / Re: Unable to Access CWP Panel : 500 Error

« on: June 25, 2025, 01:05:45 PM »

You need to update your CWP version. Older files that are IonCube encoded will expire and throw these kinds of errors.

Code: [Select]

yum -y update
yum clean all
yum check-update
yum update
sh /scripts/update_cwp

37

CentOS 7 Problems / Re: Aborted connection 155 to db on Postfix Mail Server

« on: June 24, 2025, 09:42:31 PM »

Have you run a MySQL Tuner on your server so it could recommend settings for you?
https://github.com/major/MySQLTuner-perl

38

DKIM / Re: How to change DKIM Selector

« on: June 24, 2025, 05:27:30 PM »

DKIM just pairs a generated key with a DNS TXT record, so you can set up more flexibility behind the scenes of CWP using OpenDKIM's genkey tool:
http://www.opendkim.org/opendkim-genkey.8.html

39

E-Mail / Re: Postfix, SpamAssassin, or something else

« on: June 24, 2025, 05:25:07 PM »

All 3 from LeaseWeb in the Netherlands. Consider reporting to their abuse@ address with the full headers. Also block those offending IPs, but it's 3 for 3 different messages, so likely there is a larger pool of source addresses used in this campaign.

40

E-Mail / Re: Postfix, SpamAssassin, or something else

« on: June 24, 2025, 10:55:36 AM »

Do you need to support mail from Serbia? Do you need to support Romanian e-mail traffic? Madagascar? You can block any/all of these at the CSF level, or by an RBL within Postfix's config:

Code: [Select]

reject_rbl_client rs.country.spameatingmonkey.net,
reject_rbl_client mg.country.spameatingmonkey.net,You can also block full TLDs if you so choose (/ etc /postfix/reject_domains):

Code: [Select]

# Rejecting whole TLDs
/\.pro$/        REJECT
/\.cam$/        REJECT
/\.top$/        REJECT
/\.work$/ REJECT
/\.click$/ REJECT
/\.link$/ REJECT
/\.diet$/ REJECT
/\.party$/ REJECT
/\.zip$/        REJECT
/\.date$/ REJECT
/\.club$/ REJECT
/\.rest$/ REJECT
/\.casa$/ REJECT
/\.bar$/        REJECT
/\.sbs$/        REJECT
/\.xyz$/        REJECT
/\.bio$/        REJECT
/\.best$/ REJECT

41

Other / Re: RBL's down

« on: June 24, 2025, 10:46:00 AM »

Gmail really clamped down a few months back -- I see denials from one domain, consistently. Have you enabled ARC headers?

42

CSF Firewall / Re: CSF analyzer

« on: June 24, 2025, 01:23:35 AM »

CSF... are the scf references a mistake instead of csf?
Out of curiosity, why shell code instead of python or perl?

43

Other / Re: RBL's down

« on: June 24, 2025, 01:21:09 AM »

Not seeing a mass outage here...
https://multirbl.valli.org/

PS I haven't used Barracuda since they did the whole E-mail Reg whitelist protection racket:
https://community.spiceworks.com/t/emailreg-org-a-scam-shame-on-you-barracuda/116005

44

Installation / Re: I don't receive a single message from root..??

« on: June 23, 2025, 08:12:39 PM »

Why don't you just set the destination e-mail under CWP Settings > Edit Settings?

45

Apache / Re: Apache auto turn off on AlmaLinux 9.x

« on: June 19, 2025, 07:06:47 PM »

CentOS is now a beta-quality OS. Fedora is alpha-class, CentOS is the beta, RHEL is the release-quality. AlmaLinux has taken the place of CentOS as the stable, server-quality release for an EL-compatible (formerly clone) OS. You will have the best success with AlmaLinux as the foundation for a server.

Does your Vultr VPS have 4GB of memory? I've frequently seen VPS plans have too low of memory and I would say 4GB is bare minimum. 8GB would be a lot more comfortable headroom on a VPS server.