Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
316
CSF Firewall / Re: CSF & Modsec
« on: July 21, 2025, 10:47:51 PM »
Yes, otherwise CWP seems to get confused.
317
CentOS-WebPanel Bugs / Re: Cannot Delete File
« on: July 19, 2025, 04:18:03 AM »
Ditto to what @overseer posted.
On our AL9 servers, there is no error.php in usr/local/cwpsrv/htdocs/admin/admin
1 other thing you can try is goto User Accounts -> Fix Permissions -> Select User (nobody), click on all 3 boxes, and then the blue bar 'Fix Selected Issues'
On our AL9 servers, there is no error.php in usr/local/cwpsrv/htdocs/admin/admin
1 other thing you can try is goto User Accounts -> Fix Permissions -> Select User (nobody), click on all 3 boxes, and then the blue bar 'Fix Selected Issues'
318
CSF Firewall / Re: CSF & Modsec
« on: July 15, 2025, 01:29:08 PM »
Well right from the 1st screenshot it was started wrong to update ModSec & install the latest OWASP CRS ruleset.
CWP's 'OWASP Latest' is an old outdated version, and not the 'latest'
Uninstall ModSec & start over with 'OWASP old' selected.
Follow the guides at:
https://starburst.help/control-web-panel-cwp/modsecurity-running-with-control-web-panel/update-modsecurity-to-2-9-11-running-cwp-and-apache-on-almalinux-8-9/
https://starburst.help/control-web-panel-cwp/modsecurity-running-with-control-web-panel/update-to-owasp-crs-ruleset-running-cwp-and-apache-on-almalinux-8-9/
You can change 4.11.0 to 4.16.0
https://starburst.help/control-web-panel-cwp/modsecurity-running-with-control-web-panel/no-lfd-notifications-and-or-csf-not-blocking-ips-after-upgrading-to-owasp-latest-with-cwp-on-almalinux-8-9/
CWP's 'OWASP Latest' is an old outdated version, and not the 'latest'
Uninstall ModSec & start over with 'OWASP old' selected.
Follow the guides at:
https://starburst.help/control-web-panel-cwp/modsecurity-running-with-control-web-panel/update-modsecurity-to-2-9-11-running-cwp-and-apache-on-almalinux-8-9/
https://starburst.help/control-web-panel-cwp/modsecurity-running-with-control-web-panel/update-to-owasp-crs-ruleset-running-cwp-and-apache-on-almalinux-8-9/
You can change 4.11.0 to 4.16.0
https://starburst.help/control-web-panel-cwp/modsecurity-running-with-control-web-panel/no-lfd-notifications-and-or-csf-not-blocking-ips-after-upgrading-to-owasp-latest-with-cwp-on-almalinux-8-9/
319
Suggestions / Re: :):):) Comodo WAF rules update required :):):)
« on: July 14, 2025, 01:37:03 PM »
That line shouldn't be missing, it part of the default install for CSF/LFD.
It's default setting is usually MODSEC = "5"
It's default setting is usually MODSEC = "5"
320
Mod_Security / Re: OWASP CRS v4.15.0 Just Release
« on: July 14, 2025, 01:35:04 PM »
You can do it anyway you like your system setup.
As long as ModSecurity reads the .conf
As long as ModSecurity reads the .conf
321
Mod_Security / Re: WordPress or WooCommerce, have a conflict with the OWASP CRS v4.16.0
« on: July 14, 2025, 01:33:28 PM »
Look in the logs, and it will show you what rule blocked it.
In you global_disabled_rules.conf, you should have these:
In you global_disabled_rules.conf, you should have these:
Code: [Select]
## Removed rules for CWP ##
SecRuleRemoveById 960017
SecRuleRemoveById 960015
SecRuleRemoveById 960009
#######################################################
## Removed Rules for WordPress and phpMyAdmin ##
#######################################################
## Removed rules for Wordpress ##
SecRuleRemoveById 981242
SecRuleRemoveById 981246
SecRuleRemoveById 981243
SecRuleRemoveById 959073
SecRuleRemoveById 958030
# Needed for WordPress Cloudflare Plugin
SecRuleRemoveById 911100
## Removed rules for webftp_simple ##
SecRuleRemoveById 950922
SecRuleRemoveById 981000
SecRuleRemoveById 950109
## Removed rules for phpMyAdmin ##
SecRuleRemoveById 981205
SecRuleRemoveById 970901
SecRuleRemoveById 960904
SecRuleRemoveById 960915
SecRuleRemoveById 981318
SecRuleRemoveById 981320
SecRuleRemoveById 981240
323
PHP / Re: FYI - ionCube Release new loaders 13.3.0
« on: July 08, 2025, 11:03:25 PM »
The current version of the ionCube Loaders is current at 14.4.1.
And yes, it's better to be safe than sorry.
And yes, it's better to be safe than sorry.
324
Mod_Security / ModSecurity updated to 2.9.11
« on: July 08, 2025, 11:01:47 PM »
If you already have updated your ModSecurity from the stock 2.9.1, to e.g. 2.9.8, this article will show you how to update to 2.9.11.
And if you want, there is also a script you can download & run.
https://starburst.help/control-web-panel-cwp/modsecurity-running-with-control-web-panel/update-modsecurity-to-2-9-11-running-cwp-and-apache-on-almalinux-8-9/
And if you want, there is also a script you can download & run.
https://starburst.help/control-web-panel-cwp/modsecurity-running-with-control-web-panel/update-modsecurity-to-2-9-11-running-cwp-and-apache-on-almalinux-8-9/
325
PHP / New updated on 03 Jul 2025
« on: July 07, 2025, 03:32:13 PM »
Well PHP versions:
8.1.33
8.2.29
8.3.23
8.4.10
8.5.0 Alpha 1
All just got released on 2025-07-03
ionCube has drivers for PHP 8.4.x
But now CWP is 2 versions behind with 8.1, 8.2, 8.3
And no support for 8.4
Any news @studio4host?
Thanks
8.1.33
8.2.29
8.3.23
8.4.10
8.5.0 Alpha 1
All just got released on 2025-07-03
ionCube has drivers for PHP 8.4.x
But now CWP is 2 versions behind with 8.1, 8.2, 8.3
And no support for 8.4
Any news @studio4host?
Thanks
326
Apache / Re: WARNING! You are not running CWP Apache
« on: July 07, 2025, 03:26:54 PM »
Not sure how, but it looks like you installed the AL version of Apache.
Follow what @studio4host posted, and that should restore everything.
And just a note, when reading how-to's on other sites that are not for CWP, remember it might not work with/or corrupt CWP.
Which is why making a snapshot or backup that you can restore is great.
Follow what @studio4host posted, and that should restore everything.
And just a note, when reading how-to's on other sites that are not for CWP, remember it might not work with/or corrupt CWP.
Which is why making a snapshot or backup that you can restore is great.
327
PHP / Re: PHP Warning: PHP Startup: Unable to load dynamic library 'intl'
« on: July 05, 2025, 02:15:36 PM »
Yup, and for EL9 it is:
Package libicu-67.1-9.el9.x86_64 is already installed.
Package libicu-devel-67.1-9.el9.x86_64 is already installed.
It's weird it's only 1 this server, which doesn't matter to much, it doesn't have clients on it. It's a mirror.
Package libicu-67.1-9.el9.x86_64 is already installed.
Package libicu-devel-67.1-9.el9.x86_64 is already installed.
It's weird it's only 1 this server, which doesn't matter to much, it doesn't have clients on it. It's a mirror.
328
Mod_Security / Re: OWASP CRS v4.15.0 Just Release
« on: July 04, 2025, 06:23:07 AM »
Yes, when you installed Mod_Security under CWP before the modifications, there would have been a file in there called global_disabled_rules.conf.
Just copy that over to /modsecurity-rules/custom-rules/before/
Just copy that over to /modsecurity-rules/custom-rules/before/
329
CSF Firewall / Re: Possible fix to why CSF/LFD isn't installing.
« on: July 02, 2025, 06:19:16 PM »Can't find perl-Sys-Hostname in the repo...
And I always add whowatch as an indispensable add-on to any system I give out shell access to (which is rare, but does happen).
It's there, not sure if it's in the AL or EPEL repos though.
That's why I install EPEL & ELRepo at the beginning, and after do an update.
Then install:
Code: [Select]
dnf install nano wget ipset ebtables iptables ipset-service uuid uuid-devel libuuid-devel m4 pcre pcre-devel zlib-devel perl-DBD-MySQL perl-IPC-Cmd perl-Pod-Html perl-Sys-Hostname perl-libwww-perl.noarch perl-LWP-Protocol-https.noarch perl-GDGraph libtool ImageMagick ImageMagick-devel s-nail htop sysstat python3-perf nmap net-tools make quota cockpit* rsyslog-logrotate fastfetch
330
Other / Re: Support not enable my service
« on: July 02, 2025, 04:06:04 AM »
I don't work for CWP, but are a reseller. And usually try to help out.
You bought 30 licenses?
Or you bought 1 license?
Only way to reach CWP Actual is via ticket system.
Agreed, never had any problems with PayPal, Crypto is quirky sometimes with verifications and delays.
Let me know in a PM, and I can see if I can help.
You bought 30 licenses?
Or you bought 1 license?
Only way to reach CWP Actual is via ticket system.
Agreed, never had any problems with PayPal, Crypto is quirky sometimes with verifications and delays.
Let me know in a PM, and I can see if I can help.
