Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
346
How to / Re: Installing ARC on ALMA 8/9
« on: June 28, 2025, 01:11:20 AM »
I just looked at a test email from our domain name to a google account, and it has ARC headers. 
FOIA - I'll see your header, and raise you a Sharpie...
And I'm not using rspamd or OpenARC
FOIA - I'll see your header, and raise you a Sharpie...
And I'm not using rspamd or OpenARC
347
Installation / Re: Which os to choose?
« on: June 27, 2025, 03:17:02 PM »Here is alma 9 instructions https://www.alphagnu.com/topic/22-install-mariadb-1011-in-centos-stream-9-almalinux-9-rockylinux-9 not alma 8.
Those instructions as they mention, is to do the Initial installation of MariaDB on a clean EL9 server.
Upgrading it from a previous version is a little different, as you can see the extra steps you have to complete.
Especially with CWP.
348
Installation / Re: Which os to choose?
« on: June 27, 2025, 02:32:29 PM »
Upgrading MariaDB has a few quirks to do on AL9 vs AL8, mostly when reinstall it.
See:
https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/upgrade-mariadb-10-x-to-10-11-with-cwp-on-almalinux-9/
See:
https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/upgrade-mariadb-10-x-to-10-11-with-cwp-on-almalinux-9/
349
How to / Re: Installing ARC on ALMA 8/9
« on: June 27, 2025, 02:26:19 PM »
That thread can be found at: https://forum.centos-webpanel.com/how-to/(howto)-install-rspamd/
350
Mod_Security / Re: OWASP CRS v4.15.0 Just Release
« on: June 26, 2025, 09:14:33 PM »
Did you follow the initial link at the top of the article and update ModSecurity to 2.9.8?
https://starburst.help/control-web-panel-cwp/modsecurity-running-with-control-web-panel/update-modsecurity-2-9-8-running-cwp-and-apache-on-almalinux-8-9/
From your screen shot, it looks like you stopped somewhere before Step 8.
In your owasp.conf, you want it to have those only those 3 lines listed:
Include /usr/local/apache/modsecurity-rules/owasp-crs/coreruleset-4.12.0/crs-setup.conf
Include /usr/local/apache/modsecurity-rules/owasp-crs/coreruleset-4.12.0/rules/*.conf
Include /usr/local/apache/modsecurity-rules/custom-rules/global_disabled_rules.conf
I can login and do this real quick if you want.
https://starburst.help/control-web-panel-cwp/modsecurity-running-with-control-web-panel/update-modsecurity-2-9-8-running-cwp-and-apache-on-almalinux-8-9/
From your screen shot, it looks like you stopped somewhere before Step 8.
In your owasp.conf, you want it to have those only those 3 lines listed:
Include /usr/local/apache/modsecurity-rules/owasp-crs/coreruleset-4.12.0/crs-setup.conf
Include /usr/local/apache/modsecurity-rules/owasp-crs/coreruleset-4.12.0/rules/*.conf
Include /usr/local/apache/modsecurity-rules/custom-rules/global_disabled_rules.conf
I can login and do this real quick if you want.
351
Installation / Re: I don't receive a single message from root..??
« on: June 26, 2025, 08:46:45 PM »
If you system has a problem with localhost, you force it with 127.0.0.1
It's says, "If you are having problem with Step 4, change the ending to:"
I'll update that to say REPLACE the 4 lines in Step4 with.
milter_protocol = 6, is the default. So where it's there or not doesn't matter, it's just to make sure.
non_smtpd_milters = $smtpd_milters, just redirects it to look at $smtpd_milters, or to be safe you can specify that line again. Just like milter_protocol.
--
I looked at Postfix.
CWP put the line in main.cf under #network settings, when it builds/re-builds the mail server.
Checked all of our servers, and it says "mydestination = $myhostname = name.hostname.com'
Not sure why CWP does that, as it's redundant, and just replaces $myhostname on that line.
While the line smtp_helo_name = $myhostname, I had entered manually.
@overseer, what does your servers look like for that line?
It's says, "If you are having problem with Step 4, change the ending to:"
I'll update that to say REPLACE the 4 lines in Step4 with.
milter_protocol = 6, is the default. So where it's there or not doesn't matter, it's just to make sure.
non_smtpd_milters = $smtpd_milters, just redirects it to look at $smtpd_milters, or to be safe you can specify that line again. Just like milter_protocol.
--
I looked at Postfix.
CWP put the line in main.cf under #network settings, when it builds/re-builds the mail server.
Checked all of our servers, and it says "mydestination = $myhostname = name.hostname.com'
Not sure why CWP does that, as it's redundant, and just replaces $myhostname on that line.
While the line smtp_helo_name = $myhostname, I had entered manually.
@overseer, what does your servers look like for that line?
352
Installation / Re: I don't receive a single message from root..??
« on: June 25, 2025, 09:17:17 PM »
Glad you got it working.
I received the CLI tests and so did mail-tester.com
But that is odd, only things that where added to main.cf where:
UNDER (# rules restrictions):
smtp_helo_name = $myhostname
Step 4 of https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/dkim-not-working-on-almalinux-9-with-cwp/
Was also added to the bottom:
milter_default_action = accept
milter_protocol = 6
smtpd_milters = inet:localhost:8891
non_smtpd_milters = inet:localhost:8891
Those are the same as our servers.
I received the CLI tests and so did mail-tester.com
But that is odd, only things that where added to main.cf where:
UNDER (# rules restrictions):
smtp_helo_name = $myhostname
Step 4 of https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/dkim-not-working-on-almalinux-9-with-cwp/
Was also added to the bottom:
milter_default_action = accept
milter_protocol = 6
smtpd_milters = inet:localhost:8891
non_smtpd_milters = inet:localhost:8891
Those are the same as our servers.
353
CSF Firewall / Re: CSF would not block custom port for SSH
« on: June 25, 2025, 09:11:07 PM »
Make sure you updated your TCP_IN in csf.conf to remove 22, and add the custom port you are using.
354
Installation / Re: Which os to choose?
« on: June 25, 2025, 09:09:36 PM »
CWP recommends AlmaLinux 8.x, problem with that is it's in it's 'Security Support" phase until May 2029.
AlmaLinux 9.x works fine with CWP, as long as you don't need PHP lower than 7.4.x and/or don't need the migration tool (that's still buggy)
AlmaLinux 9.x works fine with CWP, as long as you don't need PHP lower than 7.4.x and/or don't need the migration tool (that's still buggy)
355
Installation / Re: I don't receive a single message from root..??
« on: June 24, 2025, 02:08:58 PM »
Check some of your DNS entries for the new server, and also your SPAM folder at Gmail.
356
Other / Re: RBL's down
« on: June 24, 2025, 02:07:35 PM »
Looks like OpenDKIM already supports ARC.
This is how we have been configuring Postfix.
https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/dkim-not-working-on-almalinux-9-with-cwp/
This is how we have been configuring Postfix.
https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/dkim-not-working-on-almalinux-9-with-cwp/
357
Other / Re: RBL's down
« on: June 24, 2025, 02:00:51 PM »
Enabled OpenDKIM as a milter for outgoing.
First I'm hearing about OpenARC for Incoming.
First I'm hearing about OpenARC for Incoming.
358
CSF Firewall / Re: CSF analyzer
« on: June 24, 2025, 01:45:00 AM »
Those are options in the csf.conf file.
Everyone has different tunes for their servers.
There are more efficient script out there directly from the RBL's like AbuseIPDB.
We finally got knocked out of 8th place.
https://submit.spamhaus.org/leaderboards/ip/
Everyone has different tunes for their servers.
There are more efficient script out there directly from the RBL's like AbuseIPDB.
We finally got knocked out of 8th place.
https://submit.spamhaus.org/leaderboards/ip/
359
Installation / Re: I don't receive a single message from root..??
« on: June 24, 2025, 01:38:30 AM »
Something weird is afoot...
CLI email from our server to our internal email isn't working either.
CLI email from our server to our internal email isn't working either.
360
Other / Re: RBL's down
« on: June 24, 2025, 01:28:47 AM »
Odd that's where I was seeing the problem @ multirbl.valli.org/lookup/
I'm seeing a weird problem, all emails going thru SMTP2Go aren't being received.
I can send from one of our domain accounts to Gmail and it's received at Gmail, but another isn't.
Both on the same server.
I'm seeing a weird problem, all emails going thru SMTP2Go aren't being received.
I can send from one of our domain accounts to Gmail and it's received at Gmail, but another isn't.
Both on the same server.
