Messages

481

Information / Re: goaccess geo ip location

« on: March 12, 2025, 09:58:07 PM »

Just a quick FYI, AL9 installs goaccess 1.9.3-2 via EPEL.

482

MySQL / Re: mariadb error during update

« on: March 11, 2025, 01:24:29 PM »

OK, will be updating the KB.

Use this link:
wget --no-cache http://dl.starburst.help/CWP/cwp-el8-20250215.sh

483

MySQL / Re: mariadb error during update

« on: March 11, 2025, 01:07:39 PM »

Frak.
You are seeing Cloudflare because of hackers trying to do DDoS attacks.

Need a few.

But let me know if @overseer option works.

484

Information / Re: goaccess geo ip location

« on: March 11, 2025, 12:53:13 PM »

Seems you just need to download the maxmind database file and specify the correct path to it.

Check the section "GeoIP Options" of the file:
/etc/goaccess/goaccess.conf
on your server/vps.

I already knew that.  I was asking if there was an easy way.

No, it has to be done manually.

485

Information / Re: SSL too long

« on: March 11, 2025, 12:51:28 PM »

Trying turning off your local machines AV, and then open your browser and try.

486

MySQL / Re: mariadb error during update

« on: March 10, 2025, 01:19:55 PM »

Try this:
https://starburst.help/common-issues/updated-cwp-installer-script-for-almalinux-8-with-mariadb-10-6/

Then after the installation, upgrade to 10.11

487

CSF Firewall / Re: Firewall does not get enabled in CentOS8 install of CWP

« on: March 09, 2025, 07:15:33 AM »

What does line 21 and 26 say in /etc/csf/csf.conf?

CentOS 8 EOL happened long ago.
It's dead.

You want to run either AlmaLinux 8 or 9 for CWP.

488

MySQL / Re: mariadb error during update

« on: March 09, 2025, 07:11:20 AM »

It looks like MariaDB has dropped Red Hat Enterprise Linux 7 support.
And from the look, since you are running 10.3.39, you are running a now unsupported OS.

If you select it, then try to load the different MariaDB versions, it gives an error "An error occured. The mirrors could not be loaded."
https://mariadb.org/download/?t=repo-config&d=Red+Hat+Enterprise+Linux+7

@megaster55 If you are still running CentOS 7, which it looks like you are, you need to upgrade to AlmaLinux 8.

CentOS 7 is past EOL.

489

Suggestions / Re: php 8.4

« on: March 05, 2025, 01:32:13 PM »

You can build PHP 8.4 manually until it gets added to the menu.

490

DKIM / Re: How to implement 2048 bit DKIM keys on CWP servers.

« on: March 05, 2025, 01:26:38 PM »

Or I just do it manually.

You can user the DKIM Generator at:
https://dmarcly.com/tools/dkim-record-generator

And then update the files at /etc/opendkim/userkeys/

491

DKIM / Re: How to implement 2048 bit DKIM keys on CWP servers.

« on: March 05, 2025, 12:55:31 PM »

opendkim-genkey is a perl script. You can open the file /usr/sbin/opendkim-genkey using the text editor like vi, ee, etc and change the value of "bits":

Code: [Select]

my $bits = 1024;
to

Code: [Select]

my $bits = 2048;
right under "Set up defaults".

It will generate 2048bits keys by default.

Please note you do such changed on your own risk.

492

CSF Firewall / Re: Unable to retrieve blocklist MAXMIND - Unable to download: Not Found

« on: February 28, 2025, 12:05:10 AM »

CSF will still query Maxmind for GeoLocation.

AbuseIPDB is:
https://www.abuseipdb.com/csf

493

Suggestions / Re: Default notifications

« on: February 28, 2025, 12:02:59 AM »

??

I don't receive any emails about secure kernels, etc.

Maybe something new they started?

494

CentOS 9 Problems / Re: apache wont restart after enabling mod_security.

« on: February 27, 2025, 09:34:11 AM »

That's not a valid config for ModSecurity.
One is generated automatically and installed when you install ModSecurity, so not sure how that happened.

If you are using the old Comodo the main configuration should look like (/usr/local/apache/conf.d/mod_security.conf)

Code: [Select]

LoadFile /usr/lib64/libxml2.so
LoadFile /usr/lib64/liblua-5.4.so

<IfModule !unique_id_module>
LoadModule unique_id_module modules/mod_unique_id.so
</IfModule>

<IfModule !mod_security2.c>
LoadModule security2_module  modules/mod_security2.so
</IfModule>

<IfModule mod_security2.c>
    <IfModule mod_ruid2.c>
        SecAuditLogStorageDir /usr/local/apache/logs/modsec_audit
        SecAuditLogType Concurrent
    </IfModule>
    <IfModule itk.c>
        SecAuditLogStorageDir /usr/local/apache/logs/modsec_audit
        SecAuditLogType Concurrent
    </IfModule>

           
              SecRuleEngine On
              SecAuditEngine RelevantOnly
    SecAuditLog /usr/local/apache/logs/modsec_audit.log
    SecDebugLog /usr/local/apache/logs/modsec_debug.log
    SecAuditLogType Serial
    SecDebugLogLevel 0
    SecRequestBodyAccess On
    SecDataDir /tmp
    SecTmpDir /tmp
    SecUploadDir /tmp
    SecCollectionTimeout 600
    SecPcreMatchLimit 1250000
    SecPcreMatchLimitRecursion 1250000
              Include "/usr/local/apache/modsecurity-cwaf/cwaf.conf"
</IfModule>
From your input, it looks like you are trying to load the site config files from the WebServers Configuration Editor.

495

CSF Firewall / Re: Unable to retrieve blocklist MAXMIND - Unable to download: Not Found

« on: February 27, 2025, 09:27:20 AM »

It looks like Maxmind made their blocklist paid now.
When you goto the URL in the list nothing comes up.

But there are plenty of other good blocklists in the config file, as well as you can add others like AbuseIPDB, etc.