Sponsor:

Server and Web Integrator
Link:
Kloxo-MR logo
6.5.0 or 7.0.0
Click for "How to install"
Donation/Sponsorship:
Kloxo-MR is open-source.
Donate and or Sponsorship always welcome.
Click to:
Click Here
Please login or register. 2024-04-27, 11:31:26

Author Topic: Question about "Kloxo installations compromised"  (Read 10745 times)

0 Members and 1 Guest are viewing this topic.

Offline cmdman

  • Senior Member
  • *
  • Posts: 298
  • Karma: +1/-0
    • View Profile
Re: Question about "Kloxo installations compromised"
« Reply #15 on: 2014-01-29, 11:54:09 »
i know m8..

they should know abt this.. this is because of killll open source and they wanted us to buy shit cpanel or some shit..

ok i followed your instruction to channge port from 7777 to like 3004 i got some error..

Quote
Starting kloxo-phpcgi:                                     [  OK  ]
Stopping kloxo-hiawatha:                                   [FAILED]
Starting kloxo-hiawatha: Syntax error in hiawatha.conf on line 38.
                                                           [FAILED]



Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: Question about "Kloxo installations compromised"
« Reply #16 on: 2014-01-29, 11:59:20 »
Try 'yum clean all; yum update; sh /script/cleanup'. This command to make sure using latest version and then running cleanup.
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline cmdman

  • Senior Member
  • *
  • Posts: 298
  • Karma: +1/-0
    • View Profile
Re: Question about "Kloxo installations compromised"
« Reply #17 on: 2014-01-29, 12:09:09 »
yes i install my dedi server 5 days back hope it has latest one..

Quote
[root@mail script]# sh sysinfo

A. Kloxo-MR: 6.5.0.f-2014011001

B. OS: CentOS release 6.5 (Final) x86_64

C. Apps:
   1. MySQL: mysql-5.5.34-1.el6.x86_64
   2. PHP: php53u-5.3.28-1.ius.el6.x86_64
   3. Httpd: httpd-2.2.26-1.el6.x86_64
   4. Lighttpd: --uninstalled--
   5. Nginx: --uninstalled--
   6. Qmail: qmail-toaster-1.03-1.3.35.mr.el6.x86_64
      - with: courier-imap-toaster-4.1.2-1.3.14.mr.el6.x86_64
   7. Dns: bind-9.9.4-1.P2.el6.x86_64

D. Php-type (for Httpd/proxy): mod_php_ruid2

E. Memory:
                total       used       free     shared    buffers     cached
   Mem:          6144       1719       4424          0          0        268
   -/+ buffers/cache:       1451       4692
   Swap:            0          0          0

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: Question about "Kloxo installations compromised"
« Reply #18 on: 2014-01-29, 12:30:56 »
Latest version are 6.5.0.f-2014012802 and 6.5.1.a-2014012901
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline evrynet

  • Valuable Member
  • *
  • Posts: 65
  • Karma: +1/-0
    • View Profile
Re: Question about "Kloxo installations compromised"
« Reply #19 on: 2014-01-29, 12:34:36 »
So if we have a Kloxo installation we can easily upgrade to Kloxo MR (without format the server and install Kloxo MR from scratch) by installing Kloxo MR final release as per https://github.com/mustafaramadhan/kloxo/blob/dev/how-to-install.txt B2 Final release?

Will it upgrade everything to Kloxo MR? Anything else needs to be done?

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: Question about "Kloxo installations compromised"
« Reply #20 on: 2014-01-29, 12:38:19 »
So if we have a Kloxo installation we can easily upgrade to Kloxo MR (without format the server and install Kloxo MR from scratch) by installing Kloxo MR final release as per https://github.com/mustafaramadhan/kloxo/blob/dev/how-to-install.txt B2 Final release?

Will it upgrade everything to Kloxo MR? Anything else needs to be done?

Just follow B.2.

Sometimes, update not running well but don't worry. We will have you.
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline cmdman

  • Senior Member
  • *
  • Posts: 298
  • Karma: +1/-0
    • View Profile
Re: Question about "Kloxo installations compromised"
« Reply #21 on: 2014-01-29, 12:55:29 »
so i have this version  (Kloxo-MR: 6.5.0.f-2014011001 ) so you want me to update to (Latest version are 6.5.0.f-2014012802 and 6.5.1.a-2014012901)


which one  is stable to update, if i am not updating now still iam safe from with my present one that bug abt compromised as iam out my country.

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: Question about "Kloxo installations compromised"
« Reply #22 on: 2014-01-29, 13:01:04 »
Bugfixes since 2014011001:
- fix select-all in dns/mysql list
- fix docroot
- update skeleton.zip
- fix fastcgi (add ide-timeout)
- fix clearcache
- make update script as the same as cleanup
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline bluearrow

  • Junior Member
  • *
  • Posts: 29
  • Karma: +0/-0
    • View Profile
Re: Question about "Kloxo installations compromised"
« Reply #23 on: 2014-01-29, 13:12:20 »
Yes. Tell your provider you are running Kloxo-MR, not the original Kloxo. I talked about this with one of my vps providers and they said they are fine with Kloxo-MR.

Better do the port change and also decrease the failed login attempt number. which might help.

Offline evrynet

  • Valuable Member
  • *
  • Posts: 65
  • Karma: +1/-0
    • View Profile
Re: Question about "Kloxo installations compromised"
« Reply #24 on: 2014-01-29, 14:03:35 »
@MRatWork

One more question. When we upgrade from Kloxo to Kloxo MR do we need to run that bakcup-patch script too?

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: Question about "Kloxo installations compromised"
« Reply #25 on: 2014-01-29, 14:19:08 »
@MRatWork

One more question. When we upgrade from Kloxo to Kloxo MR do we need to run that bakcup-patch script too?

No. Backup-patch only need if you want backup your data. Better always backup before update.
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline zidit

  • Junior Member
  • *
  • Posts: 14
  • Karma: +0/-0
    • View Profile
Re: Question about "Kloxo installations compromised"
« Reply #26 on: 2014-01-29, 21:03:18 »
I can upgrade to kloxo-MR successfully but have problem with each domain. When access to each domain, it only return default page of main domain (That is used for nameserver)

I go to /home/apache/conf/domains and see conf file there are missing

Quote
NameVirtualHost myip:80
NameVirtualHost myip:443


## webmail for 'eachdomain.com' handled by ../defaults/webmail.conf

and virtualhost all in *

Quote
## web for 'lowendbench.com'
<VirtualHost *:80>

How can I fix this in bulk?

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: Question about "Kloxo installations compromised"
« Reply #27 on: 2014-01-29, 21:11:05 »
If you found service error, try this tricks. Switch dns and web server to other and then switch back. The same ways for php-branch and php-type.

To make sure, after previous steps, run 'sh /script/fix-all; sh /script/restart-all'. Inform here if you found error/warning/alert in fix-all and restart-all steps.

Content '<VirtualHost *:80>' is normal in Kloxo-MR and this approach better then Kloxo approach.
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline zidit

  • Junior Member
  • *
  • Posts: 14
  • Karma: +0/-0
    • View Profile
Re: Question about "Kloxo installations compromised"
« Reply #28 on: 2014-01-29, 21:16:19 »
If you found service error, try this tricks. Switch dns and web server to other and then switch back. The same ways for php-branch and php-type.

To make sure, after previous steps, run 'sh /script/fix-all; sh /script/restart-all'. Inform here if you found error/warning/alert in fix-all and restart-all steps.

Content '<VirtualHost *:80>' is normal in Kloxo-MR and this approach better then Kloxo approach.

Am I understand correctly?

So each domain conf file only missing this part?

Quote
NameVirtualHost myip:80
NameVirtualHost myip:443

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: Question about "Kloxo installations compromised"
« Reply #29 on: 2014-01-29, 21:22:39 »
Information of 'NameVirtualHost' not in every domain conf in inside 1 file in /home/apache/conf/defaults.
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

 


Top 10 Social Networking:    Facebook    Twitter    LinkedIn    Pinterest    Google Plus    Tumblr    Instagram    VK    Flickr    Vine

Page created in 0.082 seconds with 19 queries.

web stats analysis