Kloxo mail issue

[WISTFUL]

Yes!
But no issue on receive emails... except that sometime bellow error appeared on all of them:

Code: [Select]

Internal Server Error

The server encountered an internal error or misconfiguration and was unable to complete your request.

Please contact the server administrator, [no address given] and inform them of the time the error occurred, and anything you might have done that may have caused the error.

More information about this error may be available in the server error log.
Apache/2.2.23 (CentOS) Server at webmail.xxxxx.xxx Port 80

[WISTFUL]

One email received! I think it was via horde:

Code: [Select]

123

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program. Received: from xxx.xxx.xxx.xxx ([xxx.xxx.xxx.xxx]) by webmail.xxxxx.xxx (Horde Framework) with HTTP; Thu, 21 Feb 2013 07:52:34 +0000

[WISTFUL]

And one empty email via Roundcube:

User-Agent: Roundcube Webmail/RCMAIL_VERSION

[MRatWork]

It's maybe wrong config of bogofilter/spamdyke/spamassasin make send and receive have a problem. Try disable spam filter.

[WISTFUL]

I've always had bellow setting:

Domains > Domain Home (domain.ltd) > Spam Status > Enable Spam Filter = 0

spamdyke = 0 (but with this bug)
default spam filter: spamassasin

[MRatWork]

Try also 'yum remove spamassassin, yum remove spamdyke, yum remove bogofilter'.

[WISTFUL]

Did not help...

# yum remove spamassassin

Code: [Select]

0 packages excluded due to repository protections
Package(s) spamassassin available, but not installed.
No Packages marked for removal# yum remove spamdyke

Code: [Select]

Downloading Packages:
Running rpm_check_debug
Running Transaction Test
Transaction Test Succeeded
Running Transaction
  Erasing    : spamdyke-utils-4.3.1-2.mr.el6.x86_64                                                                                                              1/2
  Erasing    : spamdyke-4.3.1-2.mr.el6.x86_64                                                                                                                    2/2
warning: /etc/spamdyke.conf saved as /etc/spamdyke.conf.rpmsave
  Verifying  : spamdyke-utils-4.3.1-2.mr.el6.x86_64                                                                                                              1/2
  Verifying  : spamdyke-4.3.1-2.mr.el6.x86_64                                                                                                                    2/2

Removed:
  spamdyke.x86_64 0:4.3.1-2.mr.el6

Dependency Removed:
  spamdyke-utils.x86_64 0:4.3.1-2.mr.el6

Complete!# yum remove bogofilter

Code: [Select]

0 packages excluded due to repository protections
Package(s) bogofilter available, but not installed.
No Packages marked for removal

[MRatWork]

Maybe need restart xinetd after remove.

[WISTFUL]

Still same issue ...

[WISTFUL]

How Can I change receiver email for Rootkit Hunter?

It's default values is:

From: root@localhost.domain.ltd

And always reject by failure notice:
<root@localhost.domain.ltd>:
Sorry, I couldn't find any host named localhost.domain.ltd. (#5.1.2)

[MRatWork]

How Can I change receiver email for Rootkit Hunter?

It's default values is:

From: root@localhost.domain.ltd

And always reject by failure notice:
<root@localhost.domain.ltd>:
Sorry, I couldn't find any host named localhost.domain.ltd. (#5.1.2)

It's not from RKHunter but possible you didn't set 'FQDN Hostname' on Kloxo-MR panel. It's why sender as 'localhost.domain.ltd' (with assumsion you not modified above domain name).

[WISTFUL]

Yes, I found email issue when sending from mail client (like thunderbird). It's ok from webmail.

I can not send any email from webmail too. (e.g. on AfterLogic appeared : "Can't send message.")

Is it possible that below code on ELS (Easy Linux Security script) is creating the problem?

Code: [Select]

## Chmod dangerous files only to root
dochmodfiles() {
echo
echo "This feature can chmod dangerous files only to root"
proceedfunc
if [ "${PROCEEDASK}" = "y" ]; then
if [ -f /usr/bin/rcp ]; then
chmod 750 /usr/bin/rcp
echo "Chmoded /usr/bin/rcp to 750."
fi
if [ -f /usr/bin/wget ]; then
chmod 750 /usr/bin/wget
echo "Chmoded /usr/bin/wget to 750."
fi
if [ -f /usr/bin/lynx ]; then
chmod 750 /usr/bin/lynx
echo "Chmoded /usr/bin/lynx to 750."
fi
if [ -f /usr/bin/links ]; then
chmod 750 /usr/bin/links
echo "Chmoded /usr/bin/links to 750."
fi
if [ -f /usr/bin/scp ]; then
chmod 750 /usr/bin/scp
echo "Chmoded /usr/bin/scp to 750."
fi
if [ -d /etc/httpd/proxy ]; then
chmod 000 /etc/httpd/proxy/
echo "Chmoded /etc/httpd/proxy/ to 000."
fi
if [ -d /var/spool/samba ]; then
chmod 000 /var/spool/samba/
echo "Chmoded /var/spool/samba/ to 000."
fi
if [ -d /var/mail/vbox ]; then
chmod 000 /var/mail/vbox/
echo "Chmoded /var/mail/vbox/ to 000."
fi
echo "All files chmoded"
else
echo "Not chmoding dangerous files to root."
fi
}


[WISTFUL]

How Can I change receiver email for Rootkit Hunter?

It's default values is:

From: root@localhost.domain.ltd

And always reject by failure notice:
<root@localhost.domain.ltd>:
Sorry, I couldn't find any host named localhost.domain.ltd. (#5.1.2)

It's not from RKHunter but possible you didn't set 'FQDN Hostname' on Kloxo-MR panel. It's why sender as 'localhost.domain.ltd' (with assumsion you not modified above domain name).

I set 'FQDN Hostname' but still failure notice received.

I Edit /etc/sysconfig/rkhunter and change "localhost" to "domain.ltd" and issue solved!