Messages

1

Kloxo-MR Technical Helps / Re: how to secure kloxo-mr?

« on: 2015-11-04, 20:18:47 »

Thanks a lot
How to make kloxo more secure ?
Please suggest me anything to prevent him from hacking the new server if you have time .
Kind Regards

2

Kloxo-MR Technical Helps / Re: how to secure kloxo-mr?

« on: 2015-11-04, 17:50:15 »

A. Kloxo-MR: 7.0.0.b-2015103001
   - Web: hiawatha-9.15.0-f.6.mr.el6.x86_64
   - PHP: php54s-5.4.45-1.ius.el6 (cgi mode)
B. Plateform:
   - OS: CentOS release 6.7 (Final) x86_64
   - Hostname: server.w.com
C. Services:
   1. MySQL: MariaDB-server-10.0.22-1.el6.x86_64
   2. PHP:
      - Branch: php54-cli-5.4.45-1.ius.el6.x86_64
      - Multiple:
        * php52m-5.2.17-102.mr.el6
        * php53m-5.3.29-1.ius.el6
        * php54m-5.4.45-1.ius.el6
        * php55m-5.5.30-1.ius.el6
        * php56m-5.6.14-1.ius.el6
      - Used: php54m
   3. Httpd: httpd-2.2.31-1.mr.el6.x86_64
      - PHP Type: php-fpm_event
   4. Lighttpd: --uninstalled--
   5. Hiawatha: --unused--
   6. Nginx: --uninstalled--
   7. Cache: --uninstalled--
   8. Dns: bind-9.9.7-1.mr.el6.x86_64
   9. Qmail: qmail-toaster-1.03-1.3.55.mr.el6.x86_64
      - with: courier-imap-toaster-4.1.2-1.3.18.mr.el6.x86_64
D. Memory:
                total       used       free     shared    buffers     cached
   Mem:           1024        426         598          8          0        265
   -/+ buffers/cache:        160        351
   Swap:          1024         88        936
E. Disk Space:
   Filesystem      Size  Used Avail Use% Mounted on
   /dev/simfs      100G  2.1G   98G   3% /

3

Kloxo-MR Technical Helps / Re: how to secure kloxo-mr?

« on: 2015-11-04, 17:07:51 »

could you please tell me how to disable perl on kloxo the right way?
Thanks a lot for helping me all the time you're so kind

4

Kloxo-MR Technical Helps / Re: how to secure kloxo-mr?

« on: 2015-11-04, 16:25:22 »

how to disable the custom php.ini files created by the client?
I want to force the server to use the php.in default file only.
I set disabled_functions and they can enable it by adding a custom php.ini file

5

Kloxo-MR Technical Helps / how to secure kloxo-mr?

« on: 2015-11-04, 16:18:55 »

Hello
Today all of my wensites hosted on the kloxo-mr server got hacked !
The hacker uploaded a shell on a website and then he got access to all folders inside /home/ !
Could you please help me securing my kloxo installation?
I am currently re installing kloxo on a new server then I'll move all websites to it.
Thanks in advance

6

Kloxo-MR Technical Helps / Re: problem while opening ports

« on: 2015-11-04, 13:20:10 »

I don't have this file !
[root@s2 sysconfig]# cat  /etc/sysconfig/iptables
cat: /etc/sysconfig/iptables: No such file or directory

I found /etc/sysconfig/iptables-config only


[root@s2 ~]# cd  /etc/sysconfig/
[root@s2 sysconfig]# ls
authconfig    httpd.rpmsave    netconsole       rawdevices     snmptrapd.options  varnish
cbq           i18n             network          readonly-root  spamassassin       webalizer
console       init             network-scripts  rhn            spawn-fcgi         xinetd
crond         iptables-config  networking       run-parts      syslog
custom.httpd  lm_sensors       php-fpm          samba          sysstat
httpd         mkinitrd         pm-action        saslauthd      sysstat.ioconf
httpd.rpmnew  modules          prelink          snmpd.options  udev-stw

7

Kloxo-MR Technical Helps / problem while opening ports

« on: 2015-11-04, 04:11:27 »

Hello,
I wish you're fine
I tried to open a new port in the firewall but not working,
I'm using  this firewall script http://oldwiki.lxcenter.org/How+to+secure+your+Kloxo+with+IPTABLES
So, I did the following :
Edited the firewall scipt and added this lines :
# 2087
iptables -t filter -A OUTPUT -p tcp --dport 2087 -j ACCEPT
iptables -t filter -A INPUT -p tcp --dport 2087 -j ACCEPT
echo - 2087 : [OK]
then restarted the firewall ...
[root@s2 ~]# /etc/init.d/firewall  restart
the port still closed !
So, I Tried :
iptables -t filter -A OUTPUT -p tcp --dport 2087 -j ACCEPT
iptables -t filter -A OUTPUT -p udp --dport 2087 -j ACCEPT
iptables -t filter -A INPUT -p tcp --dport 2087 -j ACCEPT
iptables -t filter -A INPUT -p udp --dport 2087 -j ACCEPT
Still the same !
And
iptables -A INPUT -p tcp --dport 2087 -m state --state NEW,ESTABLISHED -j ACCEPT
iptables -A INPUT -p udp --dport 2087 -m state --state NEW,ESTABLISHED -j ACCEPT
iptables -A INPUT -p tcp --dport 2087 -m state --state NEW,ESTABLISHED -j ACCEPT
iptables -A INPUT -p udp --dport 2087 -m state --state NEW,ESTABLISHED -j ACCEPT

With no luck at all !

[root@s2 ~]# netstat -ntul
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address               Foreign Address             State
tcp        0      0 0.0.0.0:21                  0.0.0.0:*                   LISTEN
tcp        0      0 0.0.0.0:2014                0.0.0.0:*                   LISTEN
tcp        0      0 127.0.0.1:7776              0.0.0.0:*                   LISTEN
tcp        0      0 0.0.0.0:7779                0.0.0.0:*                   LISTEN
tcp        0      0 0.0.0.0:2020                0.0.0.0:*                   LISTEN
tcp        0      0 0.0.0.0:2021                0.0.0.0:*                   LISTEN
tcp        0      0 :::3306                     :::*                        LISTEN
tcp        0      0 :::587                      :::*                        LISTEN
tcp        0      0 :::110                      :::*                        LISTEN
tcp        0      0 :::143                      :::*                        LISTEN
tcp        0      0 :::80                       :::*                        LISTEN
tcp        0      0 :::465                      :::*                        LISTEN
tcp        0      0 :::25                       :::*                        LISTEN
tcp        0      0 :::443                      :::*                        LISTEN
tcp        0      0 :::2014                     :::*                        LISTEN
tcp        0      0 :::993                      :::*                        LISTEN
tcp        0      0 :::995                      :::*                        LISTEN
[root@s2 ~]#
How to open a port?
Thanks in advance.

8

Kloxo-MR Technical Helps / Re: cant receive emails on a specific domain

« on: 2015-10-30, 20:34:36 »

No, can't receive any mail at all for this new client but all other clients can receive and send without problem

9

Kloxo-MR Technical Helps / Re: cant receive emails on a specific domain

« on: 2015-10-30, 19:08:50 »

dmarc and SPF enabled but still not receiving emails

sh /script/fixmail
sh /script/restart-mail

and problem not solved

Thanks a lot for the fast reply

EDIT :
Can't even receive mails from websites hosted on same server.
and all other domains on the server can send and receive without problem.

10

Kloxo-MR Technical Helps / cant receive emails on a specific domain

« on: 2015-10-30, 17:31:51 »

Hello
MR,
I added a new client with a new domain but can't receive emails only for his domain,
Mail works fine for all other clients
Thanks in advance.

11

Kloxo-MR Technical Helps / Re: Kloxo-MR 7 client account domains not working

« on: 2015-10-30, 17:24:40 »

use "nsd" in switch program it solve the problem

12

Kloxo-MR Technical Helps / Re: whmcs kloxo problem

« on: 2015-10-16, 17:06:20 »

Mustafa
It works
Thanks a ton <3

13

Kloxo-MR Technical Helps / Re: whmcs kloxo problem

« on: 2015-10-16, 16:53:54 »

I will try now
Thanks a lot

14

Kloxo-MR Technical Helps / Re: About WHMCS!

« on: 2015-10-16, 15:32:15 »

Yes it's possible. Kloxo used to be named LXAdmin, therefore when configuring WHMCS just set it to use LXAdmin.
http://docs.whmcs.com/Lxadmin

15

Kloxo-MR Technical Helps / Re: error while adding a new domain to a slave server

« on: 2015-10-16, 13:41:38 »

I'll try it
Thanks